last executing test programs: 58.743524798s ago: executing program 2 (id=4669): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/139, 0x8b}], 0x1, &(0x7f0000000300)=""/26, 0x1a}, 0x10041) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="fa382ef602f34acc0e67aa78794d73ab896a5c81caeddfff1be740d9b75e8527818df66f30f3089be84ac55eb4d9532801037f95df35b1a98aa765cb7987054749ed780cd70a75376c542838a1677c33cc", 0x51}], 0x1}, 0x1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x41000, 0x1000, &(0x7f0000474000/0x1000)=nil}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$uinput_user_dev(r5, &(0x7f0000000600)={'syz1\x00', {0x6, 0x1, 0x1, 0x7}, 0x33, [0x73de, 0x7ff, 0x7, 0xa4, 0x7, 0x1000800, 0xffffffff, 0x6ae, 0x6, 0x8, 0x6, 0x0, 0x7, 0x7, 0x8000, 0x9, 0x5, 0xf05, 0x8, 0x7c33, 0x7, 0xdea, 0xc358, 0x3b4, 0x957, 0x7, 0x1, 0x1, 0xfffffffb, 0x3, 0x6b, 0x4, 0x7ff, 0x7, 0x9, 0x3ff, 0x6, 0x8, 0x10, 0x3, 0xe08c, 0x7, 0x5, 0x10001, 0x2, 0x2, 0x3, 0x3a26, 0x0, 0xd, 0x9, 0x0, 0x61e, 0x9, 0x25d, 0x3, 0x3, 0x3, 0x40, 0xfffffff7, 0x625, 0xa, 0x527, 0x6], [0x3, 0x1, 0x1, 0x6, 0xb83, 0x5, 0x1ff, 0xe, 0x3, 0x7, 0x4, 0x3, 0x3, 0x5, 0x3, 0x58b, 0x2, 0x0, 0x8, 0x80000006, 0x0, 0xd5b3, 0xfffffff0, 0x1, 0x9, 0x53, 0x9, 0x1, 0x0, 0x0, 0x800, 0x0, 0x5bd, 0x4, 0x1, 0x10001, 0x4, 0x561, 0xfe0, 0x5, 0x3, 0x400, 0x7, 0x714f, 0x1000, 0x4, 0x2, 0x1, 0x31, 0x4, 0x491, 0x2, 0x400, 0x9, 0x6, 0x8001, 0x3, 0xffffffff, 0x1, 0x0, 0x10001, 0x4, 0x1, 0xc], [0x2, 0x2, 0x3, 0x8, 0x6, 0x146, 0x6, 0x8, 0x8, 0xffffffff, 0xea, 0x5, 0x40, 0x2, 0x10000, 0x8000, 0x0, 0xa, 0x9c05, 0x100, 0x0, 0x0, 0x5, 0x6, 0x80000001, 0x8, 0x7, 0x0, 0x4, 0x80000001, 0x2, 0x4, 0x1, 0x7, 0x2b1, 0x8, 0x3c6, 0xf, 0x6, 0x0, 0x7f, 0x79cd, 0x1, 0x5, 0x7, 0xfffffffd, 0x1, 0x10000, 0x3, 0x9, 0x4, 0xfffffff8, 0x5, 0x3fb, 0xa69, 0x3, 0x9, 0x80, 0x9, 0x4, 0x17, 0x10000, 0x101, 0x7], [0xcb8, 0x1, 0x800, 0x5042eaa1, 0x9, 0x2, 0xea0000, 0xe, 0x0, 0x8a96, 0x10000000, 0x80000001, 0x1ff, 0x7, 0x9aa, 0x9, 0x0, 0xc, 0x101, 0x78, 0x3, 0x8c, 0x4, 0x4, 0x3, 0x9, 0x8001, 0x3, 0x3, 0x1, 0x100, 0x767, 0x400, 0x4, 0x4, 0x8, 0x40, 0x4, 0x7, 0x0, 0x80, 0x0, 0xaa, 0x1, 0x0, 0xcd, 0xe, 0x0, 0x8ae, 0x9, 0x8000, 0x9, 0x1ff, 0x9, 0x2f3d, 0x3, 0x7, 0x2, 0xffff, 0xe80000, 0x90, 0x4, 0x4, 0xfffffff1]}, 0x45c) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xffff}}}]}, 0x38}}, 0x4008096) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x12, r7, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) ftruncate(r7, 0x800) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000005600000227bd7000fbdbdf2507000000", @ANYRES32=r6, @ANYBLOB="5f70615f866a89f4b6"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="393cfa719f836f8209f6fa630b6e4a1fbb15bbb975c3767c6ba20727807ae7aec2785cb6593e352351c35ea0391d9d070c832ff381e580ff0b6974de21aaae47eddd2e5b4d535a8546b664a8452f36b78904bcb88d8555e887e59e2291fd3dfa6df447f83cea2e96fc7e71803d77126b3a6fb4af7d3c6c4816a7386cf9136c98e4cb52179b21b0b20c4c41478f1a2b"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0xa}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904800002ff"], 0x0) ioctl$F2FS_IOC_RESIZE_FS(r8, 0x4008f510, &(0x7f0000000000)=0x80) 55.60170934s ago: executing program 2 (id=4675): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x7800, 0x80, 0x3, 0x816182b, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x68, 0x1, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@end, @end]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000140)={0x568, r0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_SOPASS={0x66, 0x3, "598308bf3d99f346b98f1743be30a7d7bbaa35c55a21982091e6038c7d9f7876ed3bd6834e6f79178863d1970707a9b463b0c9c3a4dbed418933e011a770eabae1aa490e7e1d123e3c6985b9a94969fbefae9a3562bb85373643e8d2035e34b6a66e"}, @ETHTOOL_A_WOL_SOPASS={0xd9, 0x3, "a83755c9280172793bd98e17725ed8f197100ffa767c25330520e567e521872d6374ccf30570b37f7cf89e6f7a272988ef28314add0f2cb27656af29fe3c4a7ded0fa402bd2cc15c8d9bb929c47d7bb2ffc0dbeb611001817804838e4e6529f5079c1018abff361a7cf7726e660f00820ed5c134438a413fc33fc9370293886ce023296363cfc2affcc46c4edba40e3c442af1b89a2e262c8cf74cb8441a484ecd0f6cbde6b56846e376d0fd9a088bb4ac65b97f127786a5a4532033bc6d830a3016fbebea9250786e11ec01fafe61a8e92fa9e87a"}, @ETHTOOL_A_WOL_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_WOL_MODES={0x3a0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xdb^\xf2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x68, 0x4, "2a1db5a7ac83134badc244bca0c22e4272bc444341ac76e8d23a34746197299be2170819efe40c85246e610f2e214d13c9225aa542c8530cb8f4e7e674d07c59169158bd158cbadf63ba11d88b2a05466a8b8ec6c78a0115d3220fb43c20348d1a1bbe31"}, @ETHTOOL_A_BITSET_VALUE={0xa5, 0x4, "98f5d20638b50c54a6daa4324e3d21277639068d856a217d374a06fd2b5b15c2db00c2d167be1f34e8e6d4c74bca09d7f86e3680331f0a4f42156ed0ba5f6ba30ead58bddcac84538bf6c446040b79c9d42953e0663f4f22470169459004a10b67f38cd26666aab0ed708f233a31a36336428b399c9b4b4eea8625155906ca87ac24ff1665940719eeaa7f308f334ad597a9733c3fdf1ac9bf43cfd5d4382fe0d9"}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$&&!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '.(T^\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x8c, 0x5, "7212dd1dc0c682694903b60e1c3220436481401fce610b9c4cea3f28909e6fa9a524d47945dd5b4132541131c202731d46a7a58fa8b7bb7be89b792b2d57dd395dff8d8028f3605b4e1bec85f99bf844127d24ac08315484e5db13e5bc84c6170486059ebafbe92db4069cc173bbe1eb4ddc702dac032e25fb8a898ba77870f9944bfec685a2c02f"}, @ETHTOOL_A_BITSET_BITS={0xec, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\x05/])\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '{.\x02&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '@\'\\+!-[F{&^)^)+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x27}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff0001}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xda}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x3c, 0x4, "f5c52d76ab91afbad461084ffc926645297a2662dea9f8c75fe16ec1be4a59116b5b8f5235026677f332f1797b485c9f7064b05a8cdd263b"}]}]}, 0x568}}, 0x488d5) r3 = socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket$l2tp(0x2, 0x2, 0x73) sendmsg(r3, &(0x7f0000003940)={&(0x7f0000000740)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x3, 0x3, 0x2, 0x3, {0xa, 0x4e21, 0x8, @empty, 0x8a}}}, 0x80, &(0x7f00000027c0)=[{&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="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", 0x1000}], 0x2, &(0x7f0000002800)=[{0x1010, 0x11, 0x9, "fd2fcc844b99f1305597cb4cd5199dbc8c02f9fc92f6db6dd253ee6efeb32f385d39133538600af3bafc1caf7865231ac8e66e28c1b4ac472b223f8b12d4b21079bcd89630ddc1ad52811d882b2c0768ff4df9afbbebd4df8c09c9862e304fd6816aebb95382df75375a7d2c2baae563209f6158e5a095e53aa8d88e9eca72a1ac8ee7b07660bec8042fbf36dbc25b6c32e552bb1f1247e443380c9e9412d8868d33084049409b2922ce18d46df0858fc10ab82993052dab5d6d72c34d77ad35593d43a170d01a7220163ab52c05ea1d7f9b9ff17a1b9af600324c028dabfe5ea2d9d473ae6622297483a0388042f18a787af759fcf97c3cc407d35d43d8053dbb3279b309133b6797c4cc9b096321c0e468e2c25636d80827b0d6fd3a3854b37e59b64e89ae5985fd6b57f474d325e1c9d25e173994556f562eea2a0a4d1cbbb9a00b420f90fc2a3a970397d552d7ed2b4ed24c2e5bcadb346d685fb47e5bf5fa08a32b5ebc212249bcd63ce6e9be39809c606419f3d0daf392e66bf3b33b6277f4fffd27446fcbca9808ba9ea3290560432fc9c335078e6a2acd5e66f406ac842f53c55181653434b63eb248f91a6711c0ef2d60f52fe413b8e9cd7ddab3e1773dde19eb27bf0035589f902a1a1c6398f945ca054f127a44a96cc10f7c0b27daf921026e14657e78fe42ecc00440b3bdea115d8c1b451bd5fc3ec383456a76d3e5aae5f8265eb46e40ad488092c4ba1a6a2c117e01bacc4315f004bc58a8bd0095e4efc939505d2463a0ef970bb90f5fa4d0c55db83602b6a37bc560943adef8181137cd232129c63aca458e5669854fa5bfecd9d50fe53f351ad587018fd41df7d31de61f8c2073ffb93e78523be7f7f3053522392af376372ad5f016221b7394d199c423e68bd710425ed116ce0349e51cc1b2d48c9bed09231b8f50b3a3c138da60a784e3591088b3f98a6e5c06f97ede0fb12661f13efd3c6de298d09bd1fc7942af406b673e90e41578623ed381d895c3ba800dfaa90ee73e5a9dbcc9f17faabb2bc31817a904df47846be93e0d2db54115b5f9a8b6849cd7fe998acde7c52a5a9e274568eaeed1abb309d52b818c0f3dea25d1bb22e104fbc02ec71ef85d0c9de29974dbe37dcb1d09a6762858a0865f0b632f509071652d9b966a5ce934187f2b80e1aa8556dbfc07521eb358f0720d304a60e5319a980e1d939424b7c859c8ff153da6aa0bd02339a9c1743cffb92954bf28b3d049fdf476cd05b941ae418ee47bbe275fcd2c9ea916f7ebedd1ab0a2e19923dbac13b4cacedd288a454282b51aefec633f1a1f96d663ddff2948508bc716017c778e76778e663570e9caa3dccd248aaad153a2256a0d2503832619236801b5ffa25fcd7c9b4c4b5c780d5bc082a4bd792b2c985e183a21c0d21486df1325283427762463b8b176e6d60f306c27aea2d5ff536e5d119009b8dd6f28b50ce0b5820d4bb4e8666eb4c685fa5fa65aa260713c1712e16dd925f183d2711edf513b884503fda9915cd51227aa3f57370e1a74fd35e2631db492746fa91a49a719cb7a6c4195f4271c9f29902d56a348efecf25dee219a0e24eae8fe3dad7cabae180bc9b108d7ce166c20920ef8262a41c4d17703894ff30dd645e12739f471a7e75cbdb938c32e3f4f004ff09792e4f4359788407c9a31573212e6341020160943efc4dc728fafd3a5ad6c5b16b284892d31781b660b9b3ce5b4a13d2cc77f6c6bee1d8ea2a3879bb45e40acb25b61d0bf26f3c84cdee98b80d9be442879195c538e1b6cd58d595276454e782eff2d48c620bf571edb5989111ec4c70a42c236c282a9b62187ea1b4d2980718a2cbbb354ae905ea34b1c43a6c24fd23607b72a4d016faffcbcbd2a684dfc2f952d5050cbdbd6497c4468253da7ed7bbb9aa6c19972cecaa5dc0bca930ed71552fcce0da87a6786fcd69179d4a7ea93fc090064a21b029daa2486801460c9b81bc703e95c5fe87b81a33f209bf63907ffae692f5adbf7d9dd42a6a8dc79876919f2029c404cca6d89adf51974ce1770d3ac38f3474f31093245d37392aea872b40173e073f49cc7100d1bc71775a90ee052a51fc621c15752d2ebe6c10098ca2b648361d268c0e7693403064a9178f14f93f495bc6b4ab8830bbc0205c62c4109336905bf82a82b03bbe137419f8d9f03e6152ec54dbf35de9d319efa0ae968a3d7775cd1a3d65beb9b850f1ec04f99a4f23e71a2f6fe5ddb3e8757a02edfaba2b8ac64a3782df7fe14f6eeeb3a62730ea8527894f341fabd34f5ef0c13b71de7d34949a788c62d27b76c1583606e0fca5fdd839fb5c61c6f633546305a924a3a56bb70d5ee22257f07fdac8198333ad6eb184f71a153e62522f01432c3a0685f36bc73a44801da3cfaf7392d4c22a1b2c11bce16bc8e6061a0ba844304fb6e241c8c25e5a53d5293307abe6c90ec55ef6fbf9bec3da5a5aede2387e7b97491351aa479f13d255a9755d0b23ca227d2cead1c6abe8011f9ba977342069a82008434983a2d34abc742b452ee24ebfa3c611f4cace5845f1abaa39f96e4bdeaa451887f32504d59153169da1743ab4806301333d34aff2288ff7327495d5f6cf1f506d2fda8a6bf3b3cb4ba08315e62f814cc04fff2ced5037557677d2429b281722bf12899544a50c606ce170dd0eac150ba1a0bdc414ef7b501d2a93f03e1f83c86033222200469677bb6ec18803cd841f170f872358e2ee23c2255fa7dc7c868273be41b47fad02a8d582dbc203f5bf2f60845f66312b7a648b58a47f45175ae80cec4487e338b36f31a9f2c2d98f77724713e30f832d78719b08f1f2648f82cf3490bebc4b93748de0ecf8e10c1744f9e39ff55e907029d3dfead3bc41b31d4c1496ca778fdaba7afb0e8101e0b55accd37df796e3dee1d2637f58cdd5ebe4de4ffb091825b7f27d67aa70c8dcccb0706a835642194bbf81d509b17ec65637ac375163c0bd69bbd027961dac650bc95f9ac8f58e35f4236f8c6cfce6daf6c3b8dc1c482aae9d8bf668eb90cb1c8b677974ac666488a18fe07a5c811e7498e98c806ebafb29d2a834a00e1797ead86fa6b07a629208defa7eed3570af82bef80fe661460a02d8c43e92b1d905cf0c670ca9fd0d76d42a815207c6441733e173f3c4fafdecc903a7f125e48fab6042bc57c046e8a0e9aa2ee7c495ae9ce67d34e22a5471c631db1ef74c6322752511fd33532cabd4faade5a38e231832e8910bafc11ee4757b3440d94771be95e75ddf2f09f501935e96f4c622403fd1b8c2f7238e32d74b6b0d11e87d4948679234e1dfd80dbfe4727fa5d4b5e6260812ef1e5ab809972998c3c01c8df9d4d4fcf3410973e23a65e0581333054800c6cd6e4f12e23d9b404baa1f699d6ebabc89a107b782aa748e1b5a48c4efd7376e7561a4ee6d9ab13cf6dbb82c81ef97359fd8991ccab41dad23b9cadaa836e40e670a29dcd68a04ce85bba9461e714b57df040ab95fe58d345a3a2e3ab565f4742ee72e271e3392521ce18bed3377a352c349ec149481bf12db4453c41bb9d5cdcbe40b1d8be269e9e67f22e955851db2696b9c4cf2b178caa81fffe01dab0afef2ac9371f295e12a81fd56ba266ae51c28a7c16c34208415a1f699cc31ecf104ac4145ec1b4d7de5cb1105266f1402186030353e3672415b78e37facf16f3bacf61403167097c90b78e60c85c1aec8321f57e902faad67279ac2969f0760b616871a3f559f3e5ac93f9bd20f418649e07c273a2290dad37f1e2c7c83e8f63b90a76e7f56b38cc399450ed7af6f60a0133b25d20f71c3ddca87b55d8e36336e5d8cd784d16d2d75da16df89f171c6e34a1a316ac3a5cb193ac2a92b35b21b57254da2bce6d6a7103cd2e6309626453010009560a3d385981bf3abc1054ab49518eaacd56d834f7de9e58478f3d23351bfa53a8bbb98ed7471c7e0fd101ec534a070627b82ad39bc7ba26d5d9192f7b1da0a5ab83d6eff0bb555034f5d816a8119fe9c9b8666320c4d1848e7beb0c19752466999053303ed6690f9f8c9bc1eb0e99695125f93a838733696dbcb1013e561bef34857431c6bc4b85d8a9ba9d9e0b0c42b06aa20de23e35cda9bde11c6f69d736749484ba0d1b85f3461f54f805802a3734bc95568253f8c2f15f9cc305ecec4894e576473713519eae38d959668b30259808a1808ed768d47d2eb880a076a50cde0f7b4a79356332a128e39728db0b869434d00400c64e4e213c8a46cd7e0c6555a3f914b362c971bab206e5db3a672a584ce3e84c18ef7acd843f5e1ea35f084c99f21a0fca0a3af5e212ab741b9cace1761459dbcfa2d70261c816a1c14a47a1bdb683b6d17b6d0a812f6866be0c13981d67001512796e1f183d424bc4462ebb02f072644e8926c0c0378858e6236518724e79cecd3e6b2e34d4fdad01a5532e105110c72e1923577f9771b11d70d52643bed2447edc10f18b0058ff5095885973acaa5f4c4d9f5a6cdca02cba3deb8536595c8869cca655bd00a5299b832d9b1823b96c39e230bdc066907dd54e3c8a0beef2d7ee91c256fa43b5dc8880aec5c7a377f30873824e7da4c3e208f8490237f350e71d2f106395415835209d8f38cd427d4c02a906065fbbfdffd7e4f46ab0dcb54e57b3a6ecb1b800e71eecc44b4f5911c4f4944543b0e77633f760c745537cd977b13802ca1d0e80d015cea3492bc2d5ed77fa458a6d937d88f6ab76161f282797840fee667ce5727976c7521dd555c081c45d358e73b386a3da6f13858337e8510296c0b60df36ca45349cc20c1f125c0eb4b4e4c20113847a407cd0b58f3ece87144ef0c709f029f51c32c58fd23bf8d99cf0116d9a1a87a8f4a5f30bfe6dd7f30c0cc0b4578e6254110c78bd8669832f1696c32f17efba3b2f4e4539452a7409fa35ffd7ed1a4e689c472c20e3db5af23747a6c1197e1b0e8cb310967c585a628d61d403f8a142dc94f6ced96e2007c7d10753fb88d56d86f67c23bce23d4d134d5aa55a312c1daec1089d9e0f803d8afe651dfb61b1e8c174484ccfccfe7f92dd911740c3197fcd9043ec6c09df61edaf3d92bbda4275bdb9c62d8193fd39c3bc61b7214a460fb955bf11a0f23db8a50f5ca907d52c0bce0a11f9f01bda1d9613f2ab9cdc1d229f2d2abbd87ad47b25b3d9ca2d8a9678830f03b42452bdce573b24db00446b30981fbb97ab1ecaace53de5f602be905c09b656b39cffd48d20707ee19442bfd7cb0bdf55231324b1bf857819c32ddd1dc48b63939ca523565615c979117ef2bfd490622f4a4a519c569c30acf84f082c2675eeac670d072248b4466057c6a8732466124b4b61214c1e3c8208a2cefa6ce5bb4c4a346e36a6a39236622405db6e26b8cf2ea5f87800eb375937acc3390a72918aa85c8d3dff26a624d5c136bf7a71cb60a4c6064c2f06cb0178f18c023a0e5220666ba1185033dfb577e6d15e957f96ad5202a967bd64541cc7b3e12a438d089b6b1f6c472334df7d27c587e49dfa9a4fc6ef82382966db682eba133f5c98aca180f2a6114f8ea5e07a9b169798d46d44967051b1944dfb94cbb4381cfb9a4f811c8a2e9742ece3244dc55ae628c87fd83309f807f0d2f4c9651dccadfc7dbd433789a19834da2b91d8f8faf72252614d70b3ae02310a0bf98c7b24026c00516018be8818d9b0a48cf7b6e878fe48583b7d7fa206e1be39c5b4fa714d5168ca5a1d49b83814592bfc375f31304f7ef23309d19df266bd3955657913c0169e74"}, {0x40, 0x107, 0x8, "24c611a1a6b9bdab8c38e730366e4de5ee3f52cd0724dcf6211f61afbc67a0047093cedfce0521f9d58ca8e0213b33b1"}, {0x50, 0x10d, 0x5, "f67b0abefa76f9dfffd90596a6397aa0a9d1219afc79887770a51142e71e93ee01cb06f7f2a8f1d4920cecdc980e89d107ffffcc389b55de8c55529a9bc529"}, {0x78, 0x29, 0x5e55, "210fc7e73c51488d2b22f165b432da78c84fe3169e04c5a065413aef4c29a8781cb25e1dbee8b4f6bf638f737a32561571c2707c596d2fe6fad0e7559b8cbce90c378834fe17969b8fb5464481b59e0cd77d532f27523c1a5af6ba48195d47207d"}], 0x1118}, 0x20000) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000003980), 0x40000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000003a40)={'ip6_vti0\x00', &(0x7f00000039c0)={'syztnl1\x00', r1, 0x2f, 0x6c, 0x9, 0x3, 0xa8, @dev={0xfe, 0x80, '\x00', 0x1d}, @mcast2, 0x7800, 0x10, 0x6, 0xec}}) bind$packet(r5, &(0x7f0000003a80)={0x11, 0x1c, r6, 0x1, 0x48}, 0x14) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003b00), r5) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000003bc0)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003b80)={&(0x7f0000003b40)={0x28, r7, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x401, 0x7b}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x5}]}, 0x28}}, 0x48000) sendto(r3, &(0x7f0000003c00)="3be361e99b6e0d018dd215d08443021b1ba23827a3b6c6d7a07ea91fcaa245232cab3dba5b5fa1562852397eb126fe5375132e8be7d8d3e6071962d16c9f1d68ab228317f82a3b905213e5c7bf751869aa31ca16f9e91b418e37b9e09058c5abe876cf7303bb7da5cd2421f25a72f086c7be176b78f2c8da9b659d30cf303b03e995196d4bd4902b283aca3baee8d53fc62a5efe0214f9064d6808cd858fdb6e370de17803d3dda68006189059814376126644dbac980006a66822dd660c36adc3e46f46971a426c8527402137280cb51949f8ca24aca0a2369f34574c5214746c", 0xe1, 0x4000000, &(0x7f0000003d00)=@in6={0xa, 0x4e21, 0x5, @local, 0x3}, 0x80) execve(&(0x7f0000003d80)='./file0\x00', &(0x7f0000003e80)={[&(0x7f0000003dc0)='\'\x00', &(0x7f0000003e00)='[\x00', &(0x7f0000003e40)='\x00']}, &(0x7f0000003f40)={[&(0x7f0000003ec0)='%\\\\{\x00', &(0x7f0000003f00)='$&&!\x00']}) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1800000, 0x2010, r5, 0x100000000) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003fc0), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000004000)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f0000004240)={&(0x7f0000003f80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004200)={&(0x7f0000004040)={0x18c, r8, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) cachestat(r4, &(0x7f0000004280)={0x2, 0x5c24}, &(0x7f00000042c0), 0x0) r10 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000004300)={r5, 0x0, 0x1000}) ioctl$EXT4_IOC_GETSTATE(r10, 0x40046629, &(0x7f0000004340)) shutdown(r3, 0x0) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000004380), 0x400001, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r11, 0x84, 0x20, &(0x7f00000043c0)=0x1, 0x4) r12 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000004400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x0, 0x7f, "", [{{0x9, 0x4, 0x0, 0xaa, 0x1, 0x7, 0x1, 0x2, 0xa, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x3, 0xc, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x80, 0xa, 0x1}}]}}}]}}]}}, &(0x7f00000045c0)={0xa, &(0x7f0000004440)={0xa, 0x6, 0x200, 0xf1, 0x9, 0x9, 0x20}, 0x30, &(0x7f0000004480)={0x5, 0xf, 0x30, 0x2, [@ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x2, 0x0, 0x0, [0x30, 0xff00ff, 0xc000, 0xffc000, 0x3f00, 0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x4, 0x8, 0x9}]}, 0x1, [{0xcb, &(0x7f00000044c0)=@string={0xcb, 0x3, "4a4a6ff15374d101a0213c11b4a809c4256c2f53225955337411b0368d82e90281fe4e88ef1b37605830620bd17b9db48599baf67e356c7ed603732048c474a61c204bb73079a6239ff6dd74d32a45466d019cf02c68fd5143106f6bcf750102066383256028a0084cb86837f274f9c8138d22de06b0e70278c91c5c04535bd49c718f8a84f7512c5b957b7655f4d7a195f84008b5651c7638bf97135474cf1ce0431e1c6731c9e3204b78ed6cc02cb3335f5b92edb65c5d074c389364c2c51d58b3736f96d2a28534"}}]}) syz_usb_control_io$printer(r12, &(0x7f00000047c0)={0x14, &(0x7f0000004600)={0x0, 0x31, 0xc0, {0xc0, 0x5, "104417efc75be5d7b8eb31b29b07b0253d75a274ba4fc02ec8fead2470e6b9cdfd0e073aa496bd234b3d93ccc76101af1a272eedf9277fab8e7cdbc547b209eaeb1d4e440d90a1178c33057f865157c506d8681980a48d6a0939ccba8ce8322190b93e00c71a6f96680a24e105ea8c7da5f3761434c2de654eee1ddc8de99bf7b1ce4fd82e9d3f541678a306c4d3244c4e5520946ea3a16f96676445b3538fbf4d217b3d37573475457b97b629a76277df775ec74c637c37926f74e93994"}}, &(0x7f0000004700)={0x0, 0x3, 0x98, @string={0x98, 0x3, "fb5cb9b0275450fb3db253f24569c3955a08d93c5799a11c0fe98d315b1644ba1df1d379e83c957c4c4386663ed8994ee88e4c2e50feab0507efb1bd36e82c23d21ae3137b4cb5f2fa301fd3e968c488ed6844314517f3cdd578c8fdd42c07c64b1c6ac48b8ab604752bb094711dbdecf8a0de9c3562c2a70e01d16a05029e0b0a99fd8bd980e670e08469166cc91623ebc30a18498d"}}}, &(0x7f0000004ac0)={0x34, &(0x7f0000004800)={0x40, 0x14, 0xec, "73fb0d304ef81993d62998fa4ca3e97ce8131d732fc02d8138f81cd9809e5e7e31d0b8c3c01e7caf25adac59d713fd9acc92776fced67ad6845bdad03e22166cf22a5fb19fc49de4b59a91c8be30c3d1112af47be8158c2d1a82bfa4eb05e36dae34670b1598892f717f9fee6c99695e56a054bc4d4c81c3c25d14dec598616c5c62b8c241255ca1f6694d8a3d82307ff657eeed7d7fc50da2c2422cf52384ffdbb8d5f6fc3262842c348cdd04c46812231c31b2d26932efb6e63edd93a4ceab624dad48bcb0f5c341ea40ed347a7e7bc557784113617c78e828d6e082095053510ccb35642d42d82bf17a81"}, &(0x7f0000004900)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000004940)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000004980)={0x20, 0x0, 0xb4, {0xb2, "46a8e2d135bed6d4da3cbdb9da4e9ac3408f893cfaba54bfdfd361d337a035f03aa79f3450b140f7212f3052204bc77ac6de2ac04c948907d0869910cbfb9de5a39eb259c67dee5428d29b8a3343e9bfc6a3d7fb642b6c2cadd0064554d0c8864b32687a35195cedff19aabf7635b820c7c2d2fd2284e7a3812526234defc69a36a8b36c18f7c21220a50f10b33572343b03dbf2ca1c07f478eb61438bc9c875da64f43bd386a3a6262784823aa1f3428601"}}, &(0x7f0000004a40)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000004a80)={0x20, 0x0, 0x1, 0x2}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000004c00)={&(0x7f0000004b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004bc0)={&(0x7f0000004b40)={0x4c, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xa00000}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfef}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4040) setxattr$incfs_metadata(&(0x7f0000004c40)='./file0\x00', &(0x7f0000004c80), &(0x7f0000004cc0)="ff507aeca33747b13c33b81b3a9fe42cb32486c083fa9f3fa174b103344686ee65d9896f3711c798f6d4179ef9938bc0e2a36452a7d3d37c2503c435033b2adbe6cd3de9a400eae1f25788a02e2d3aa469e1a5d92d86f20b49f98b46ec8fe9b7bb9b30d440aa442626a6d7af35359e7a3de26a6438edf0e0c67942bfd4", 0x7d, 0x0) recvmsg$can_j1939(r5, &(0x7f00000073c0)={&(0x7f0000004d40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000072c0)=[{&(0x7f0000004dc0)=""/144, 0x90}, {&(0x7f0000004e80)=""/108, 0x6c}, {&(0x7f0000004f00)=""/165, 0xa5}, {&(0x7f0000004fc0)=""/4096, 0x1000}, {&(0x7f0000005fc0)=""/116, 0x74}, {&(0x7f0000006040)=""/138, 0x8a}, {&(0x7f0000006100)=""/237, 0xed}, {&(0x7f0000006200)=""/78, 0x4e}, {&(0x7f0000006280)=""/55, 0x37}, {&(0x7f00000062c0)=""/4096, 0x1000}], 0xa, &(0x7f0000007380)=""/12, 0xc}, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000007400)) 54.542484099s ago: executing program 2 (id=4685): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_setup(0x42e6, &(0x7f0000000040)={0x0, 0x36a4, 0x10, 0x0, 0xd4, 0x0, r0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000280)={0x0, 0x8000, 0x1, [0x20000000000, 0xfd6, 0x2, 0x2, 0x6], [0x1ff, 0x2, 0x1, 0x6, 0x40, 0x7, 0x1, 0x5, 0x4, 0x9, 0x80000001, 0x1, 0x8000000000000000, 0x6, 0x8, 0x100, 0xfffffffffffffc00, 0x3ff, 0x200, 0x8, 0xeec, 0x5, 0x8000000000000000, 0x7fffffffffffffff, 0x100, 0x8000000000000001, 0x2, 0x10000, 0x13, 0x8, 0xfffffffffffff112, 0x4, 0x9, 0x4, 0x10000, 0x3, 0xc6, 0x9da4, 0x0, 0x10, 0x8, 0x2, 0x4, 0x2, 0x161d, 0x70e, 0x9, 0x8, 0x4, 0x79, 0xc23, 0x5, 0x7fffffff, 0x8, 0xfffffffffffffff4, 0x4, 0x6, 0x9f0, 0x69, 0x3, 0x2, 0x6, 0x10001, 0x3, 0x7, 0x1fe0, 0x6, 0x4ab4, 0x1, 0x6, 0xc, 0x2, 0x9, 0xffffffffffffffff, 0x3, 0x1, 0x6, 0x4f7, 0x2, 0x70, 0x36, 0x1, 0x0, 0x2, 0x0, 0x8, 0x2, 0x5, 0x3, 0x7, 0x0, 0x1794, 0x2, 0x1, 0x1, 0x12200000000, 0x200, 0x7, 0x1, 0x27, 0x4, 0x7fffffffffffffff, 0x7, 0x98, 0x8, 0x85e, 0x1, 0x178, 0x9, 0x9, 0x0, 0x3, 0x4, 0xd, 0x200, 0x2, 0x80, 0xc25a, 0xd77a, 0xd, 0x50b]}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000006c0)={0x4, 0x2, {0x7, @struct={0x9, 0x1}, 0x0, 0x71, 0xfffffffffffffff8, 0x5, 0x9, 0xc, 0x273, @usage=0x9, 0x532, 0x1, [0x9, 0x9, 0x7fffffffffffffff, 0x4, 0xf, 0x7]}, {0xffff, @usage=0x7, 0x0, 0x3b46, 0x9, 0xe022, 0x9, 0x4, 0x401, @struct={0x5, 0x42c}, 0x5d, 0x8, [0x0, 0xa, 0x40, 0x69, 0x1, 0x2]}, {0x2, @usage=0xffffffffffff0000, r2, 0x81, 0x401, 0x2, 0xf53d, 0x40000000000, 0xae, @usage=0x7, 0x9, 0x1, [0x6, 0x8000000000000001, 0x8, 0x2, 0x4, 0x2]}, {0x8, 0x7fffffffffffffff, 0x6}}) preadv2(r0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) io_uring_setup(0x42e6, &(0x7f0000000040)={0x0, 0x36a4, 0x10, 0x0, 0xd4, 0x0, r0}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000280)={0x0, 0x8000, 0x1, [0x20000000000, 0xfd6, 0x2, 0x2, 0x6], [0x1ff, 0x2, 0x1, 0x6, 0x40, 0x7, 0x1, 0x5, 0x4, 0x9, 0x80000001, 0x1, 0x8000000000000000, 0x6, 0x8, 0x100, 0xfffffffffffffc00, 0x3ff, 0x200, 0x8, 0xeec, 0x5, 0x8000000000000000, 0x7fffffffffffffff, 0x100, 0x8000000000000001, 0x2, 0x10000, 0x13, 0x8, 0xfffffffffffff112, 0x4, 0x9, 0x4, 0x10000, 0x3, 0xc6, 0x9da4, 0x0, 0x10, 0x8, 0x2, 0x4, 0x2, 0x161d, 0x70e, 0x9, 0x8, 0x4, 0x79, 0xc23, 0x5, 0x7fffffff, 0x8, 0xfffffffffffffff4, 0x4, 0x6, 0x9f0, 0x69, 0x3, 0x2, 0x6, 0x10001, 0x3, 0x7, 0x1fe0, 0x6, 0x4ab4, 0x1, 0x6, 0xc, 0x2, 0x9, 0xffffffffffffffff, 0x3, 0x1, 0x6, 0x4f7, 0x2, 0x70, 0x36, 0x1, 0x0, 0x2, 0x0, 0x8, 0x2, 0x5, 0x3, 0x7, 0x0, 0x1794, 0x2, 0x1, 0x1, 0x12200000000, 0x200, 0x7, 0x1, 0x27, 0x4, 0x7fffffffffffffff, 0x7, 0x98, 0x8, 0x85e, 0x1, 0x178, 0x9, 0x9, 0x0, 0x3, 0x4, 0xd, 0x200, 0x2, 0x80, 0xc25a, 0xd77a, 0xd, 0x50b]}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000006c0)={0x4, 0x2, {0x7, @struct={0x9, 0x1}, 0x0, 0x71, 0xfffffffffffffff8, 0x5, 0x9, 0xc, 0x273, @usage=0x9, 0x532, 0x1, [0x9, 0x9, 0x7fffffffffffffff, 0x4, 0xf, 0x7]}, {0xffff, @usage=0x7, 0x0, 0x3b46, 0x9, 0xe022, 0x9, 0x4, 0x401, @struct={0x5, 0x42c}, 0x5d, 0x8, [0x0, 0xa, 0x40, 0x69, 0x1, 0x2]}, {0x2, @usage=0xffffffffffff0000, r2, 0x81, 0x401, 0x2, 0xf53d, 0x40000000000, 0xae, @usage=0x7, 0x9, 0x1, [0x6, 0x8000000000000001, 0x8, 0x2, 0x4, 0x2]}, {0x8, 0x7fffffffffffffff, 0x6}}) (async) preadv2(r0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) (async) 54.409620871s ago: executing program 1 (id=4686): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) fdatasync(r1) 54.367617613s ago: executing program 2 (id=4687): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d507df08c410448200dc01020301090212000100000000090400000003"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r1, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) ftruncate(r1, 0x3) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000044c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000004380)=ANY=[@ANYBLOB="200180"], 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x53}, [@ldst={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x2, 0x128) getpid() openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) io_setup(0x9, &(0x7f0000001d00)=0x0) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8, r2, 0x0, 0x0, 0x7, 0x0, 0x2}]) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582", @ANYRES16, @ANYRESDEC, @ANYRESDEC], 0x0) 53.914171494s ago: executing program 1 (id=4688): r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0xfffffffe}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r2}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x68, &(0x7f0000000200)}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r5 = socket$netlink(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) readv(r4, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close_range(r4, r4, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) close_range(r6, r6, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x7577e0b0a29503f9) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f", 0xb4}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/92, 0x5c}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f00000000c0)=""/49, 0x31}], 0x3}, 0x0) 53.676233212s ago: executing program 4 (id=4689): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x4c0c4}, 0x8044) 53.668436611s ago: executing program 1 (id=4690): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff", 0x9}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/92, 0x5c}], 0x1}, 0x0) 53.553019836s ago: executing program 1 (id=4691): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="6c28000040000701f6ffffff00000000017c0000040042800c00018006000600800a0000482802803d281480a5030b"], 0x286c}, 0x1, 0x0, 0x0, 0x48815}, 0x400c000) (fail_nth: 4) 53.542217701s ago: executing program 4 (id=4692): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000180)={0x8, 0x0, [{0x293, 0x0, 0x7}, {0x23a, 0x0, 0x1}, {0x365, 0x0, 0x80000001}, {0x96b, 0x0, 0x9000000}, {0xaf3, 0x0, 0x9}, {0x80d, 0x0, 0x2}, {0x276, 0x0, 0x8}, {0x2e5, 0x0, 0xffff}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000280)={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfc, 0x1, 0x0, @remote, @broadcast}, @redirect={0x8, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x5, 0x4, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, @local, @remote}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000020601019e560000000000000000000505000100070000000900020073797a31000000001400078008000600ffffffff08001340000000020500050002000000050004000000000013000300686173683a6e65742c6966616365"], 0x60}}, 0x4000820) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54e74) write$P9_RREADLINK(r4, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) r5 = socket(0x5, 0x5, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) close(r7) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, 0x0, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg$unix(r5, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0), 0x1}}], 0x2, 0x40002000, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 52.906362323s ago: executing program 1 (id=4694): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000100)=0x1) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRES32=r0], 0x30}], 0x1, 0x4) recvmsg$kcm(r5, &(0x7f0000000980)={&(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000600)=""/196, 0xc4}, {&(0x7f0000000700)=""/76, 0x4c}, {&(0x7f0000000780)=""/13, 0xd}, {&(0x7f00000007c0)=""/47, 0x2f}, {&(0x7f0000000800)=""/71, 0x47}], 0x5, &(0x7f0000000900)=""/92, 0x5c}, 0x40000043) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000300030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x420, 0x0, 0x330, 0x260, 0x190, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0xff000000, 0xffffff00], [], 0x0, 0x886}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d2903a4e"}]}}, 0x0}, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_connect$uac2(0x0, 0x12a, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x644, 0x8020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x118, 0x3, 0x1, 0x3, 0x10, 0x1, {0x8, 0xb, 0x2, 0x2, 0x1, 0xf6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0x1, 0x3a, 0x2}, [@extension_unit={0x9, 0x24, 0x9, 0x3, 0x0, 0xc5, "ac44"}, @multiply_unit={0x7, 0x24, 0xc, 0x7, 0x6, 0xf, 0x1}, @input_terminal={0x10, 0x24, 0x2, 0x5, 0x302, 0x3, 0x1, 0xff, 0x9, 0x81, 0x8}, @sample_rate={0x11, 0x24, 0xd, 0x3, 0x3, 0x6, [0x2, 0x2, 0x2, 0x1, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2f, 0x7, 0x4, 0x40}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x6, 0x3, 0xec, 0x1, "0f8a"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xd, 0x4, 0x6, 0x0, "9f919c9b"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7, 0x100, 0x5, "9d0f44a109"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x4, 0x5, 0x6, "", '$'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0xd9, 0x3, 0x0, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0x2, 0x2, {0x8, 0x25, 0x1, 0x2, 0x3, 0x2, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x0, 0x8e, 0xf4, "ebf67ed278994b"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3, 0x4, 0x6, 0x5, "dd819a"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xd1, 0x200, 0x0, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5dd, 0x1000, 0x4, 0x7}, @as_header={0x10, 0x24, 0x1, 0xda, 0xc, 0x0, 0x0, 0x6, 0x41, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xf2, 0x1, 0xd, {0x8, 0x25, 0x1, 0x0, 0xc, 0x42, 0x8}}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000003c0)={0xffffffffffffffe7, 0x6, 0x200, 0x5, 0x6, 0x80, 0x8, 0xfe}, 0x5, &(0x7f0000000400)={0x5, 0xf, 0x5}, 0x3, [{0x1a, &(0x7f0000000440)=@string={0x1a, 0x3, "1bee668e8fe21e18fc2a7c5ad7f500000100ff7f00000000"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x3c74}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x814}}]}) ioctl$I2C_RDWR(r9, 0x707, &(0x7f00000004c0)={&(0x7f0000000480)=[{0x5a79, 0x200, 0x0, 0x0}, {0x5, 0x200, 0x0, 0x0}], 0x2}) 949.706162ms ago: executing program 2 (id=4698): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030000007f1be3f7b713000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400030404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27ffffefc7695ea53ed1ea00961e74384097a801be484a66bfd00dc9f33ad21b262647ad37081043a80cbaf8ec4607b91ba9fa266c0f587690a00bfee5866a83442cbefc5c40c91b9bb67fee3b444eaf319e9311233d7180426b9192ac5a2f57591fad2938ade16e5870e6b10fcd36982b3043e18073af0e8ac61b123f96341df40eb9d69c838ae4f533d7f3a2fe2848da29b9937d68515de402307e0dad1ef4cd866b08a4d83c4", 0x12e}], 0x1}, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) r2 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x8) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000001440)={0x400, {0x432d, 0x10, 0x6, 0x80, 0x7}}) r5 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000f80)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYRES16=r0, @ANYBLOB="6c89a58ebf688d2ba70c554321be65734d7226fecf71edbed658acad574d7895420c1fc44ca052509128fac64737766a15af35360c4ed3ed984fae68057db614d56cc0d8132883087eaa42a17d9b0fa11b5c4c12e6ef791531aec7e92c2bafdb23508960d5998ba611ddb8d5ba1b704e06d9192572cc0c547703915e33f532bad4", @ANYBLOB="588a6a7d19c91aee6852101b6758faf49e4d6b63b716076b02315db089f6070b6c14a299e8a9a0e0d3b1bc6edc2d8dbc1252102eeb8a773900102510ad89116deeb51520488787d9bb77f5ad63d4b3e4364050b6d7947e2dc9d37f91b2600c8b51e635c6b11566d21e6c1d6d3212f3f8e7d98553fc6fe142216ac4a67c464de74c597b92677df96f94e2251512ffa01ccd0a8c8873ba932c62535fdbab51406c359ec759439926f63cdd22ca5733503e98f49158f613cf"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000380)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000500)={0x0, 0x9, 0x1}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000900)={r6, 0xfffffffffffffffa, 0x7, 0x1}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f0000001480)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000014c0)="02042700ea0e0300000000001eafbcf706e105000000000000001104ee1606d4b8bf4a7a8bda305775c43824cee8440000caac1dbd936d2343e6fb53845ce40d792fd1e4d198470b09594f1ea3300b8fabb76508c899ecf242c02646d47773edbb48e6dc4cc40641637c7ea87b22b7f42505e85d180b8cd3e8e3a414b61031c2da3fa4e54bada44f4f1cc93a214820e3a3a16625c1af03fe8a51b51a4a889be3", 0xa0}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000280)="1006000000000000ee8de7932b326f8a310f65ae439862807a1589836c734d2341f74276871bf8465fc0583fdc0b8a34bb550ef977b001d46df69747826840d196606f75ef1cbe3bed88eb2291b63c95dbb54b10e45adfc5c5d7758e1b", 0x5d}, {&(0x7f0000000480)="df3b46a133000000000000000000000000f1c81c6c11d7481a7db10c98c13aab46d748ad9220643b21529b7794db2bada57127cc43f578a88146a322ddbf202e806e3021395404b70768e90e1431acb438e35f73a89ad465b85f7668696ff41596c91b7b400ef7f0796a401696dbec", 0x6f}, {&(0x7f00000005c0)="b72abab9439ca41f5cf14d6435575ba774ee5f5c23ff2f5176f5773d08a15668ec280cfe4ea416cf769dbf978a8191bbe006e0da50029176c0f24e3ff4d3e895a2afbf52cef2fe1ca31edd842b126ec4be67e6e3624b9ddf806fc146c645ec1d37fe7e3b025c156d5d520104b53f7fb2af436201cfd5dca170edea5a190e4786bfaac544b60f514d7ef420526c467f14790dcfa5ab915d7dbcdf2765bbcad014c991f8b829c79f53586de79f0b987ad796f9de4a6e53136a07a39ab1f5a2ce30aded70a9b72d1beff7e8b6405fd6331e5635ee71e809be2d58f412dcd7b2e856d692dbfed19045ff13244acce351b6e450395568063569c71ea80a04f83fbe6ad1d0862fb97f816576c4844da65d751ee1fdc522ae1158670de297cdb2117bc0adc1486e016a6bcc922a162fce6a9ecc8c42b0c44c566004eda037864e5f339bbb0998cdaf2b8e49ae003659bc033668f7c8e550197ed95c420461254ba1883dbd9403672d579cee85c37f103ee9a350a768286017158784baeb063c8c684b91b022b0db2238b679092a1f6909f0cd9228500e088f5cc7bac4c0dc56e80fedac93554aec79715ce02e8bf3fcbd70382f619bfe3dcf06890d8542022ee58bdfb075d319c9fc8474cadc8de5c3dd3f682d3f68324d0af7a727064053ad84c94643eef190783c616467628f84620044c084b80e3e57bfcdf293c9c36b4474a52398b35e49e2ad4a4ac090bffc5cd27d3c69b4ae5f841d5b0766ccd36d25eb58d8f01621a05744b79ede39019ab9d7a1946353d8f3b7f833ce1a102a8c97a9e3f32138ffafd305448f2518ccdb7eef594a890eaeaff3f876f742fec22669a97085ed93b18228ecbe9e354e8f69967ca749fd2b1cf026665ca912e3fc0188b294519078b46676052de4fe22798290bd1e232c9791fc01ddb4ae776b5769143df2867042e8a3ddfa8e786bd8a244076956d4ab137939ad381650dd4fefd2b942a98d6f2edfd7019ae473e7608647b86d643e8ff3d7d4e89ed826e4b8c6e8fed224c528d805ade85c5b45261b2692c0f403dec050bd973b0999df214689f4402dd1598a16b0c7671e5e204a00b06376ddee7cb99292a8b835c0b451642b71f2ffa1aeea56255817b2384bfe4f8213ccfc1f762f250592896102e5f6d34cdd726bc0f86af52fd7c4483d32e23e5af770e960c7445b8e67b6086f0cadcd22d0d4bdadc31b5a94dd687379dc6e078210ccc71f8e67eb58d330394425ab17e55d1ca8f868f6bf738af291d2293c3dfa2ccff25061ded22878b3cc6532d19e5a00d1f0f1b9de35305fac2c6cfd5d77a2b02618735b7d392738bd5cd3eabb7039c790a9f193913f16e06605d405d6a0cf0011a2e5f935d8563fef1722692dd266c3d320b9f5eeb2a4b2f72155522f0ed72ff1efa0b6ee78e70d3d45241609e7f87d7bcfe1af71159baa11ad667a0ead3986b2b06500ba2615ee966ea86ca68d02de4802bd9ef18dac5ba53ca98b90df49ef4e3268ceee538973620e5a60513ea330989642626420b67dceebc569478657aedeb62c45b079348796923ad1fba5a99e6b150cf97ba2a570150053309c6dca7fa352fa1678c9b919fbc47ae0a84175a7fc25a00fa5888cb017e8d8225fadb29e34bd3c5bbccfb22a83255fec3967c991d5b3e6719ade82fb7ef85c8a4b9e7ad8ef2a3a7bc78de424572224affb1f9e0c5a969e61ee2ebb4f247bfa09384bdad04438f2efbfae303d47c3afe7e8d3a157b2a6f37572ea3ecc441dfb208ba755f781f144e58d80aea590abcfccbe8678ec6de47511f9d61cc408cbbe90eeab2cffe6d1a48dc3eb4e48e228fd43cafd7ff2c85c3ed52e99fe16887be28fcd2cd4ba4cac414c92c96294fa7d628e4356c748c173f790a7f30071d0bd53817c78d163249c7402b222b8f28668cae7afd17b97dbaf10b75b61409ca6f5b285d1ab09207c5a91c68b0d4b5da6d6b5a495c8debd7f4400e56d9e22d1cc330f782f2b5441a31b9ccf35aa1a151219cdcff5ab8b240af5b5a751eca67773c057412a935e3a7a367b2bcd28463904ee040a586d6f4f969cee56d55b6b4d97d1fe93b67e2f6bd47925054c4702ec8969a1a6211ea8f6783ca0e8ae333922ce19eceb24e2ff714a0208d2489a62f299aa50cdbfe5a826e872ab231bbddf5bd2fca92d4460379e05e13ff34a200fd921dcb67a002873bda8d86536cddaccb54eb72dd4e399fe9195ad5574ad85d9ed2eaae4106234f0a8db05a230ff377b59b54fd0919d1b86b938622ae6098f003db7f4d45d6874f54c33064ce6184dccc99fece2d994e9572d4840b0cbdd704fd70b4f625912d48a512339f883533768f09a4f614583dfb72defe713ee38f61184df279461b7d35becd8e67d01f0ec27e901d88215554d5a69db373a662085733d09ad9153e7d432c94f872ff7cd72995b3a581ea17722ed13a191b366208f75661112b1a7d42c252c907488ca8dd8f819d4618b0053d4bcddb3b5975cb8615ebc472e052552ee74d5253174a2b0cb96e1eaf6349b6c39be975123ee72b0ffe1367df7aba54de26c9135a3422d21067034551be5efc5daf8b8f59bc725e4fd171378fd9f16a785f1b0378823c85eec521e0b2aca70b7b72b719a20eb2fb0addc0b05851c8e181607f49dad7323bc255309097584c2099574db1ed7940fd16796aef19d30acd714dc1f898716df64db87d852eddf2f86e78fd7fd64868b4cb6cc626efcdea49c4a2779a0e777bbe23968e14233a810d9883680894de93023a8deae51ccbf32e6d1e53618ebee95c761221a33bc3263fff0f5ae23e14dba0418cf3f31effcb36956e06c57a17620044260419a208ae1d2296ec9472d44be74a8ed0a33a23181acdef8c7d2695ce9485ed8d17d9f6f30b9b128ee0ba15c42cbf6059bcfef008c09db8855343f79c3ce1c4d79077c8a62237d4e400a5aa88e7424f2f99df6c2070d6ed071f4968376581e20e52d64e9c4f8a6f73bb33f5b6b62c1deecc85bf789565fde14e4454306ed8f09af08afb360ee4fb40dd5dca0be43ccff75e5c0ef85ea7c521cb4840d61e99e1ce4661e721446d5a571cddffbc3643ec9b58237fd416376906bdca09485c2c80f82b23e8e7bbf22035fdbcacd804ae3771fd616901184ced46987d533017eef717e9b34a5531c3efe2d77c9b6cb0617382d69951545378a4118e71c64a1f16d096a8f933580922083d0536b90ae1715c63f682e8241b42e1646b0c52e34aa9c91efe2b6b787ce0747d4ff0dd07d6ebc9ce27e0ef35705eb7b78763a9829b464523ff3ed9078aff6ee29e6e7a59a5243825e8bb9235f8e49a9dfb5932536666c3dc75b29e515dbca4c84268cf23cd7b6da6814328a3cb26d7b1d6c28e20b36f9a2c9e2fcf663c314f72f37d2b8f405cfc686a6b35400435be0eab01709c2c4b3005491cbb0b560e33547b77ba9f25f01b194e20534199a3786ddfaf0a75aafb65cd4df4da7b5f98fe72a8bc7d045339fd41508cecca791c717a10d4fed8aa69eec80955bd899a6f8aaf3411be40568149e631ccbe17c68f85e87b58da81ba78def8b1a48c49b2dc7613f7d6ea8b158bed077666d37d1caba9a23b7cb2772e780f70872113e5bcaebaf9f9499f651dc894be3bba1e99d58b33d60c0eda397df91d7cf9fb072f247fa9a9f59c4f59c4284a3832ff0a1f9ce8f6346cb5c08a9dcb2851c7f169af688fc13f00cf9519ade547671698caaa3f4d4921fee83753b9ab0875707836343eddb5b87bec86aae023c9571b8e389ff3f4c692b6fb19686105249ce033116777d919ceb4559a67ee6b6ad9d4b53d2be24315429de3bf201107fe7dff9cbc92dbf9173391d555b0a1b8ea3252fd7d7fd15d8a3cc70cecdbdd43c4edcc4bb2fbbf646d5ec7dad0d3156a513d14184e0c316f8155e774f7dcea485f904828edf28510d692b66b1500c5a704371c2188a2812bd323de012f36a79674082b5f5e9f7f4ce1a75ed854b71555e9fcd1f0322c22a9e543674c79a74404e08e61860f505dc56e1b52977b9a9af18be4064b5f6aa7c891382bbbe65e70a4cee33176570341a525fb6b25c0b20bfa3f2ee4a01584f259f43c3b63a2dfc376f435827211379ab3ca8912cbe01e4f837920666fbda682f6954d1c156f21e12547b885f485c38f62e765013144be8ca92b1d4872790a5c02671517f6a8f0ceb247e08c64268ad8970b57bb6d077c9b8ebe7fb1183087c9a3baee06100609204be588621253b9b120c08db9f28c2d38c9bc3f59018bb7216d73186048770d1e556faa49df23a40a64b40cdda2041dccf5619db09b7a7795fd7eb631c0e0bffc3b64422bf6acd84b7fae8bd05b057260a4d7c4851829c7bbf0b6f27c5db0ff10f42df3528f79dc9bbd591965259cd0389deb124b1fadc5dfd3ade9742d29261379ea3d98929512371dec991f0636fbda5dac355a04e363beeb4751781d9cef3a0b6ac6500895d223ad43ed75cac8b0a868253fffa10bf6c2de99c687fd056e075cf0632b6d8ed2263ca08ad95b6f335a3b6d8ab7801422ac8597441ac1bbe289b50af31eb221d19a2d3177d4ad1056d616295e89471e65d811b8fa4fe2c0c12793f43ef7e75c7f657f6c26ca9cbae63ce99301069ab257ae77c38778d35afd326d569c626a68f3904b2c376dfaa05568892f346f86fb05e71fb751e09cd22525cb63512a7d2e4670bd31109b87818278e66dc73fa9667e35c5bc6588cd36d2b62592a4103803d93c194f8edd5d20c6597231321b909bbb3c1d13408e5cf27728883e333b391222e6b6665454892dfedd17a1066f1145163e1a31ba9a3e3cee925e55d794b89462a0a092a639ccd4a24514083cb68224c87c18f0bb39ff721cc598e686b5fef169bc30f9ec6df397905f8340f6ae7ad826aac774cc46bfb9dfe8192e9ef10e8355d7c2810269eb73c7ecb8d3ffa33437142b8e596cdb778cd3cdda5bbbd09a8ea919929adbc63ff1004490c45a9ea59def65fabc884c39beac1b74a218f59c5e31ba85dcc4b8bd81d7a66d8aaf0edb64b505f760442e16fb7f07a069aba88601c3ace27762cef8196da3d44b14796b04e7fa3", 0xe18}], 0x5, 0x0, 0xffffffffffffff67}, 0x40094) syz_usb_control_io$uac1(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001600)={{r8}, &(0x7f0000001580), &(0x7f00000015c0)=r8}, 0x20) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) sendmsg$BATADV_CMD_GET_HARDIF(r8, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB="24000000a3e4a2c68051f17181219bbb790a3d532ba4d4ad91ef31223ed250c4b99222aaaadcd80bef53e2db71e70ce56ee0af67c819ead1f2748ea406b9b22ba592b6d65f69e9aaafa99944e392e7896224cf2da49372347b9820a064301935724adf979bef5104ab3b98a9a809729fa0ecd2cc212aae44c73ada8f19a1d93cf56c5c5065b3e7d84c7afcf7a8e0e1dafe624666721dfbdf65", @ANYRES16=r9, @ANYBLOB="02002abd7000fddbdf250500000008003c000900000008002c00ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x48000) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r11 = syz_open_dev$I2C(&(0x7f0000000180), 0x5, 0xf0402) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r12, &(0x7f0000000f40)={0x6, 0x118, 0xfa00, {{0x9, 0x8, "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", 0x0, 0x7, 0x8, 0x5, 0x2, 0x3, 0x8}}}, 0x120) writev(r11, &(0x7f00000002c0)=[{&(0x7f0000000080)="0394566765bd9a37721926defc525f7749ee42029bb7", 0x16}], 0x1) syz_usb_control_io$printer(r1, 0x0, 0x0) 941.29421ms ago: executing program 3 (id=4701): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff", 0x9}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) 941.17025ms ago: executing program 3 (id=4702): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x4c0c4}, 0x8044) 936.758297ms ago: executing program 3 (id=4703): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) recvmmsg(r2, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000002d40)=[{0x0}], 0x1}, 0x9}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x11c}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, 0x0, 0xb) execve(0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r4 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) setsockopt$packet_int(r4, 0x107, 0x3, 0x0, 0x0) syz_io_uring_setup(0x30a1, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x32c}, 0x0, 0x0, &(0x7f0000000000)) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000023c0)=""/4096, &(0x7f00000033c0)=0x1000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042800c00018006000600800a0000140002800d00148004000d0004000d"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 933.92103ms ago: executing program 1 (id=4705): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000900010000000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r5], 0x84}}, 0x20008040) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r7 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x50, 0xd, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000900010000000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r4], 0x84}}, 0x20008040) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r6 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x80) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000005f40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002280)="c478", 0x2}], 0x1}}, {{&(0x7f0000002780)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000002e80)=[{&(0x7f00000027c0)='I%', 0x2}], 0x1}}, {{&(0x7f0000002c80)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000000240)="e70d83", 0x3}], 0x1}}], 0x3, 0x4050000) (async, rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) (rerun: 32) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000003c0)={r2}, 0x8) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r2, 0x7}, 0x8) (rerun: 32) 826.062114ms ago: executing program 3 (id=4711): ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000340)={0x385d, 0x1, "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"}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080ffffff000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c000800"], 0x178}}, 0x0) 678.315438ms ago: executing program 3 (id=4712): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000094000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000005c0004801400030076657468315f6d6163767461700000000800014000000005140003"], 0x130}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb00180000000000000038c9e700380000000b0000000e00fdc5d4f2000a040000001000000004000006040000000000000029000000060000000002000009000000bebb00000100000000800000005f306f3061b3bbcde707"], &(0x7f0000000580)=""/98, 0x5b, 0x62, 0x0, 0x7, 0x10000, @value=r4}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback=0x27, r5, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback=0x27, r5, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_emit_ethernet(0xa7, &(0x7f0000000640)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa170800924500009900000000fd019078ac1e0001ac5814aa03009078032400004f0000000000000003010000ac14144dd098be3df5dbdc080000000ce256b28c4cdfb7fd41feed7f142d456249bd7a266fbeb2e83688e94fc97250e278b32d72b255c5d4635fe6dfae8d294c696752c7abaf9cb582cbcff2172260a065fd81ade941e81542ef76c8d1d1336d57d25fd13d10a83d063b56300660e0e618bb83749eee2d1b9e76523428e68676e509c35095ab1b02d947ce1e43955e844083a4cbcf48cdb898eed6830e1876735f61edc079e873dd12c3cdb3557b769c6ea5ad14126350ae7c04e3f584"], 0x0) (async) syz_emit_ethernet(0xa7, &(0x7f0000000640)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa170800924500009900000000fd019078ac1e0001ac5814aa03009078032400004f0000000000000003010000ac14144dd098be3df5dbdc080000000ce256b28c4cdfb7fd41feed7f142d456249bd7a266fbeb2e83688e94fc97250e278b32d72b255c5d4635fe6dfae8d294c696752c7abaf9cb582cbcff2172260a065fd81ade941e81542ef76c8d1d1336d57d25fd13d10a83d063b56300660e0e618bb83749eee2d1b9e76523428e68676e509c35095ab1b02d947ce1e43955e844083a4cbcf48cdb898eed6830e1876735f61edc079e873dd12c3cdb3557b769c6ea5ad14126350ae7c04e3f584"], 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socket$packet(0x11, 0x2, 0x300) (async) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000001c0)={0x2, 0x3}, 0x4) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f00000014c0)={0x2, 0x7, @status={[0x0, 0xf, 0xa, 0xfffffffffffffffb, 0xead, 0x4]}, [0xd, 0xff, 0x0, 0x7, 0x8, 0x56, 0x7fff, 0x2, 0x7, 0x81, 0x64, 0xfffffffffffffff9, 0x2, 0x1, 0x100000001, 0x80, 0x92a, 0x4, 0x9, 0x5, 0xa, 0x29ff, 0x2, 0x8000000000000001, 0xa, 0x1, 0x8000000000000000, 0x7, 0x9, 0x7, 0x7, 0x8, 0x1, 0x1, 0x4, 0x9, 0x2, 0x0, 0x2, 0x3, 0xe64, 0xd, 0x2, 0x4d0faf45, 0x2, 0x8000000000000000, 0xffffffff, 0x5, 0x8000000000000000, 0x271, 0x1, 0x423, 0x5fa, 0x1949, 0x5, 0x4, 0x2, 0x9e, 0xaa4, 0xe0, 0x4, 0x6, 0xffffffff, 0xb5a7]}) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f00000014c0)={0x2, 0x7, @status={[0x0, 0xf, 0xa, 0xfffffffffffffffb, 0xead, 0x4]}, [0xd, 0xff, 0x0, 0x7, 0x8, 0x56, 0x7fff, 0x2, 0x7, 0x81, 0x64, 0xfffffffffffffff9, 0x2, 0x1, 0x100000001, 0x80, 0x92a, 0x4, 0x9, 0x5, 0xa, 0x29ff, 0x2, 0x8000000000000001, 0xa, 0x1, 0x8000000000000000, 0x7, 0x9, 0x7, 0x7, 0x8, 0x1, 0x1, 0x4, 0x9, 0x2, 0x0, 0x2, 0x3, 0xe64, 0xd, 0x2, 0x4d0faf45, 0x2, 0x8000000000000000, 0xffffffff, 0x5, 0x8000000000000000, 0x271, 0x1, 0x423, 0x5fa, 0x1949, 0x5, 0x4, 0x2, 0x9e, 0xaa4, 0xe0, 0x4, 0x6, 0xffffffff, 0xb5a7]}) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x37, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880089064803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x2, r9, 0x1, 0x0, 0x6, @random="c75d50b0f101"}, 0x14) (async) sendto$packet(r8, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880089064803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x2, r9, 0x1, 0x0, 0x6, @random="c75d50b0f101"}, 0x14) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064d0, &(0x7f0000000140)={0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2129001}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf257300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099007f00000002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000001340)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) 678.173797ms ago: executing program 4 (id=4713): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff", 0x9}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) 641.566213ms ago: executing program 4 (id=4714): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) recvmmsg(r2, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000002d40)=[{0x0}], 0x1}, 0x9}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x11c}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, 0x0, 0xb) execve(0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r4 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) setsockopt$packet_int(r4, 0x107, 0x3, 0x0, 0x0) syz_io_uring_setup(0x30a1, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x32c}, 0x0, 0x0, &(0x7f0000000000)) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000023c0)=""/4096, &(0x7f00000033c0)=0x1000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042800c00018006000600800a0000140002800d00148004000d0004000d"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 628.892863ms ago: executing program 0 (id=4715): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x4c0c4}, 0x8044) 600.119954ms ago: executing program 0 (id=4716): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000001dc0)={0x0, 0x77, 0x90000}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) write$apparmor_exec(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="65786563020000"], 0x7) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000001dc0)={0x0, 0x77, 0x90000}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) write$apparmor_exec(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="65786563020000"], 0x7) (async) 425.88891ms ago: executing program 0 (id=4717): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = epoll_create1(0x80000) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x20000014}) r4 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x5, 0x800) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0xb}}, './file0\x00'}) openat$kvm(0x0, &(0x7f0000000140), 0x52c41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@enable_nested={0x12c, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x2}], 0x30}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x470f}]}) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x9, 0x400007c2, 0x1, 0x810003, 0x0, 0x400600cc4, 0x5, 0x462e00000000000, 0x7fffffff, 0x801, 0x0, 0x2, 0x1, 0x9, 0x1008d], 0xdddd1000, 0x391181}) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0x1, 0xa16a, 0x4, 0x6, 0x0, 0x3, 0xffffffff}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000200), 0x20) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x3) ioctl$KVM_GET_MSRS_cpu(r11, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x29f, 0x0, 0x1000000020000000}]}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000300)={0xb000001c}) ioctl$FBIOBLANK(r5, 0x4611, 0x2) r12 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r12, &(0x7f0000000180), 0x0, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x2519cfd163e73271, &(0x7f0000001700)=[{&(0x7f0000000340)=""/104, 0x68}, {&(0x7f00000003c0)=""/98, 0x62}, {&(0x7f0000000040)=""/54, 0x2b}, {&(0x7f0000000600)=""/4095}, {&(0x7f0000001600)=""/236}], 0x3}, 0x101) 82.652426ms ago: executing program 0 (id=4718): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async, rerun: 32) mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 32) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (async, rerun: 32) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000110c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}}, {{&(0x7f0000000200), 0x6e, &(0x7f0000001f40)=[{&(0x7f0000000340)=""/219, 0xdb}, {&(0x7f00000004c0)=""/1, 0x1}, {&(0x7f0000000600)=""/163, 0xa3}, {&(0x7f00000006c0)=""/74, 0x4a}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/240, 0xf0}, {&(0x7f0000001e40)=""/59, 0x3b}, {&(0x7f0000001e80)=""/172, 0xac}], 0x8, &(0x7f0000001fc0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000006200)=@abs, 0x6e, &(0x7f0000008700)=[{&(0x7f0000008340)=""/255, 0xff}, {&(0x7f0000008440)=""/76, 0x4c}, {&(0x7f00000084c0)=""/237, 0xed}, {&(0x7f00000085c0)=""/158, 0x9e}, {&(0x7f0000008680)=""/52, 0x34}, {&(0x7f00000086c0)=""/60, 0x3c}], 0x6, &(0x7f0000008780)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f00000087c0)=@abs, 0x6e, &(0x7f0000008900)=[{&(0x7f0000008840)=""/170, 0xaa}], 0x1, &(0x7f0000008940)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000009dc0)=[{&(0x7f00000089c0)=""/186, 0xba}, {&(0x7f0000008a80)=""/24, 0x18}, {&(0x7f0000008ac0)=""/178, 0xb2}, {&(0x7f0000008b80)=""/4096, 0x1000}, {&(0x7f0000009b80)=""/154, 0x9a}, {&(0x7f0000009c40)=""/92, 0x5c}, {&(0x7f0000009cc0)=""/152, 0x98}, {&(0x7f0000009d80)=""/37, 0x25}], 0x8, &(0x7f0000009e40)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}}, {{&(0x7f0000009f80)=@abs, 0x6e, &(0x7f000000b000)=[{&(0x7f000000a000)=""/4096, 0x1000}], 0x1, &(0x7f000000b040)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f000000b0c0), 0x6e, &(0x7f000000b4c0)=[{&(0x7f000000b140)=""/61, 0x3d}, {&(0x7f000000b180)=""/192, 0xc0}, {&(0x7f000000b240)=""/47, 0x2f}, {&(0x7f000000b280)=""/119, 0x77}, {&(0x7f000000b300)=""/212, 0xd4}, {&(0x7f000000b400)=""/173, 0xad}], 0x6, &(0x7f000000b540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f000000b680)=@abs, 0x6e, &(0x7f000000ca40)=[{&(0x7f000000b700)}, {&(0x7f000000b740)=""/135, 0x87}, {&(0x7f000000b800)=""/108, 0x6c}, {&(0x7f000000b880)=""/189, 0xbd}, {&(0x7f000000b940)=""/16, 0x10}, {&(0x7f000000b980)=""/157, 0x9d}, {&(0x7f000000ba40)=""/4096, 0x1000}], 0x7}}, {{&(0x7f000000cac0)=@abs, 0x6e, &(0x7f0000010ec0)=[{&(0x7f000000cb40)=""/4096, 0x1000}, {&(0x7f000000db40)=""/246, 0xf6}, {&(0x7f000000dc40)=""/4096, 0x1000}, {&(0x7f000000ec40)=""/193, 0xc1}, {&(0x7f0000011300)=""/4105, 0x1009}, {&(0x7f000000fd40)=""/32, 0x20}, {&(0x7f000000fd80)=""/4096, 0x1000}, {&(0x7f0000010d80)=""/134, 0x86}, {&(0x7f0000010e40)=""/114, 0x72}], 0x9, &(0x7f0000010f80)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}], 0x9, 0x2, &(0x7f0000000480)) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) (async, rerun: 32) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r1) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000000, 0x4010, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) (async) syz_usb_connect(0x3, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=4719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4009080}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xa0}}, 0x40000) kernel console output (not intermixed with test programs): p0 maxpacket: 32 [ 948.887829][T18490] usb 1-1: unable to get BOS descriptor or descriptor too short [ 948.898920][T18490] usb 1-1: config 16 has an invalid interface number: 119 but max is 0 [ 948.907953][T18490] usb 1-1: config 16 has no interface number 0 [ 948.915106][T18490] usb 1-1: config 16 interface 119 has no altsetting 0 [ 948.922415][ T30] audit: type=1326 audit(1776883953.270:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21036 comm="syz.2.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f424119c819 code=0x7ffc0000 [ 948.931566][T18490] usb 1-1: New USB device found, idVendor=12d1, idProduct=1c23, bcdDevice=2b.c7 [ 948.955385][T18490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.986596][T18490] usb 1-1: Product: syz [ 949.004094][T18490] usb 1-1: Manufacturer: syz [ 949.015820][T18490] usb 1-1: SerialNumber: syz [ 949.233461][T21064] netlink: 'syz.2.4235': attribute type 1 has an invalid length. [ 949.299800][T18490] rndis_host 1-1:16.119: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 949.314782][T18490] option 1-1:16.119: GSM modem (1-port) converter detected [ 949.358724][T18490] usb 1-1: USB disconnect, device number 58 [ 949.362738][T21064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.375158][T18490] option 1-1:16.119: device disconnected [ 949.605226][T21077] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4239'. [ 950.107960][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.140595][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.162629][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.185065][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.286835][ T5926] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 950.446727][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 950.465255][ T5926] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 950.497998][ T5926] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 950.533467][ T5926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 950.560374][ T5926] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 950.580262][T21101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.597797][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.611478][T21101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.631371][ T5926] usb 4-1: Product: syz [ 950.640603][ T5926] usb 4-1: Manufacturer: syz [ 950.654953][ T5926] usb 4-1: SerialNumber: syz [ 950.680996][ T5926] usb 4-1: config 0 descriptor?? [ 950.791860][ C1] sd 0:0:1:0: [sda] tag#5339 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 950.802340][ C1] sd 0:0:1:0: [sda] tag#5339 CDB: Read(6) 08 00 00 00 00 00 [ 950.816843][T15711] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 951.121131][ T5926] gs_usb 4-1:0.0: Configuring for 159 interfaces [ 951.287670][ T5909] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 951.459204][ T5909] usb 1-1: Using ep0 maxpacket: 32 [ 951.488861][T15711] usb 5-1: device descriptor read/64, error -71 [ 951.519246][ T5909] usb 1-1: config 1 interface 0 altsetting 151 bulk endpoint 0x1 has invalid maxpacket 1023 [ 951.546630][ T5926] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 951.562039][ T5909] usb 1-1: config 1 interface 0 has no altsetting 0 [ 951.562484][ T5926] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 951.580998][ T5926] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 951.608876][ T5909] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 951.614941][ T5926] usb 4-1: USB disconnect, device number 63 [ 951.634292][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.665255][ T5909] usb 1-1: Manufacturer: ﰓꢱ⹡Ḷ㛍쫝铳೏ꬨꈌ᪇寫荨얣뷅蕢꠷쵐ꦩ䀨䧛ꆴත⪢䖝螙ບ酒Ⱎ⺽絟ܰ轀䘎骄蛩ꆼ鄚컬솛ᗰ [ 951.713042][ T5909] usb 1-1: SerialNumber: 鎓榼詏탻ʾ໩崾橲姛瓈뀞笌悪襵ᛤゝ⫝짥쀌鉚謓↲﫳ϖ꛵䴵▼챬뒪줠⩝許껲뽒胬畤牿虂塙쁜隧ܡ뱞ﲔ㛣൜鷖㢷Ă斛鍪隯䂺腾鸍ፄꚨꂐ䡁㝛⒘簶瑯༲ꐟ쎁₏쨤훮盽풮㐓矬ⴷÑ鰩힓⼖࿊삸ꕲ璸ꊽ㚸禥䗤䶈ỼȀ䂞ℚⴇ켗莢⟿뿱聁ﭖ檬Ꙛ凒펬엒ᵾ쟳㏄ [ 951.768260][T15711] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 951.768421][T21122] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 951.956782][T15711] usb 5-1: Using ep0 maxpacket: 8 [ 951.963474][T15711] usb 5-1: config 15 has an invalid descriptor of length 103, skipping remainder of the config [ 951.974431][T15711] usb 5-1: config 15 has 1 interface, different from the descriptor's value: 2 [ 951.986052][T15711] usb 5-1: config 15 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10609, setting to 64 [ 952.016291][T15711] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 952.027042][ T7270] usb 38-1: device descriptor read/8, error -110 [ 952.041252][T15711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.057427][T21122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.069631][T21122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.093876][ T5909] usb 1-1: USB disconnect, device number 59 [ 952.380661][T15711] usb 5-1: string descriptor 0 read error: -71 [ 952.410729][T15711] hub 5-1:15.0: bad descriptor, ignoring hub [ 952.431741][T15711] hub 5-1:15.0: probe with driver hub failed with error -5 [ 952.449773][ T7270] usb usb38-port1: attempt power cycle [ 952.463740][T15711] cdc_wdm 5-1:15.0: skipping garbage [ 952.485183][T15711] cdc_wdm 5-1:15.0: skipping garbage [ 952.519372][T15711] cdc_wdm 5-1:15.0: probe with driver cdc_wdm failed with error -22 [ 953.016453][T15711] usb 5-1: reset high-speed USB device number 127 using dummy_hcd [ 953.078085][ T7270] usb usb38-port1: unable to enumerate USB device [ 953.538197][T21161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4261'. [ 953.567459][ T7270] usb 5-1: USB disconnect, device number 127 [ 953.733904][T21164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4263'. [ 953.733913][T21165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 954.483419][T21191] input: syz1 as /devices/virtual/input/input107 [ 954.525484][T21191] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 954.970366][T15711] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 955.175127][T21204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.206848][T21204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.225477][T15711] usb 4-1: not running at top speed; connect to a high speed hub [ 955.269926][T15711] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 955.318207][T15711] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 955.352231][T15711] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 955.410784][T15711] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 955.422459][T15711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.432999][T15711] usb 4-1: Product: ȇ볅픘졑ܵ껨㏝픗⹰惸缌❒㇚웁ᵟ䙔䱰ꄳ㷑ખ残᝷렟駈덫協搥⓷ჴ녝푴晦▴臉ɸ䕚傇綷噂࣓奣푑硸⠈ꈧ⸭핸㴤҄㢳ꂐ닝ತ圧랅嘝ጭ뽾﷊럝უ⥉䲏鎷洖䧣聂ꠦ퀶唶ᦁ䊬㿦勸掽ᗏ㶤☡魩ﯰ㭊ާ틨뷀ါ㪶֦넘쮋 [ 955.664520][T15711] usb 4-1: Manufacturer: 蛰༳䵒㾸竝┾噴㦐落岟̽츓௥쇅黏艎䎈漹虸ꗻ⪙㈃榫틶Ӏ喼釧䩸ͥ㘓⮋㭷㋛旸烼䵄⭌泌峒㟖⋒⭤젤舯饚챿⢨으肦弔썗ꀏ핌팃㜲䘒뛜㤦嚹㶵혳⚁맧풧䕧ꨒ菻乁殞즽쾨⼫⬩懴ꙩ께拼霕ﱓ헬ㅥ！섷栕쳕鈒ᕣ輹徆㹳ᓉ쬨镇䀙帊엛錫ᐠ [ 955.815565][T15711] usb 4-1: SerialNumber: syz [ 955.838989][T21200] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 956.047430][ T5959] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 956.059167][T15711] cdc_ncm 4-1:1.0: bind() failure [ 956.081635][T15711] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 956.096363][T15711] cdc_ncm 4-1:1.1: bind() failure [ 956.116456][T15711] usb 4-1: USB disconnect, device number 64 [ 956.197869][ T5959] usb 5-1: Using ep0 maxpacket: 32 [ 956.204889][ T5959] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 956.213602][ T5959] usb 5-1: config 0 has no interface number 0 [ 956.219852][ T5959] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 956.229716][ T5959] usb 5-1: config 0 interface 89 has no altsetting 0 [ 956.238973][ T5959] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 956.249028][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.258054][ T5959] usb 5-1: Product: syz [ 956.262364][ T5959] usb 5-1: Manufacturer: syz [ 956.267307][ T7270] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 956.274912][ T5959] usb 5-1: SerialNumber: syz [ 956.282854][ T5959] usb 5-1: config 0 descriptor?? [ 956.293226][ T5959] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 956.302779][ T5959] em28xx 5-1:0.89: Video interface 89 found: [ 956.426982][ T7270] usb 2-1: Using ep0 maxpacket: 16 [ 956.437381][ T7270] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 956.456778][ T7270] usb 2-1: config 0 has no interface number 0 [ 956.469514][ T7270] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 956.490890][ T7270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.510851][ T7270] usb 2-1: Product: syz [ 956.518640][ T7270] usb 2-1: Manufacturer: syz [ 956.525690][ T7270] usb 2-1: SerialNumber: syz [ 956.540496][ T7270] usb 2-1: config 0 descriptor?? [ 956.563446][ T7270] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 956.608463][ T5959] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 956.672806][T21231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4284'. [ 956.691650][ T5959] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 956.705502][ T5959] em28xx 5-1:0.89: board has no eeprom [ 956.777314][ T5959] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 956.777344][ T5959] em28xx 5-1:0.89: analog set to bulk mode. [ 956.778585][T15711] em28xx 5-1:0.89: Registering V4L2 extension [ 956.810853][ T5959] usb 5-1: USB disconnect, device number 2 [ 956.811914][ T5959] em28xx 5-1:0.89: Disconnecting em28xx [ 956.892150][T21241] netlink: 'syz.1.4279': attribute type 30 has an invalid length. [ 956.901642][T21245] binder: 21236:21245 ioctl 4018620d 0 returned -22 [ 956.942819][T15711] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 956.942835][T15711] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 956.942843][T15711] em28xx 5-1:0.89: No AC97 audio processor [ 956.964021][T15711] usb 5-1: Decoder not found [ 956.964066][T15711] em28xx 5-1:0.89: failed to create media graph [ 956.964089][T15711] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 957.006632][T15711] em28xx 5-1:0.89: Registering snapshot button... [ 957.022576][T15711] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input108 [ 957.044496][T15711] em28xx 5-1:0.89: Remote control support is not available for this card. [ 957.044593][ T5959] em28xx 5-1:0.89: Closing input extension [ 957.044636][ T5959] em28xx 5-1:0.89: Deregistering snapshot button [ 957.107179][ T7270] gspca_spca1528: reg_w err -110 [ 957.127300][ T7270] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 957.179927][ T5909] usb 2-1: USB disconnect, device number 56 [ 957.335137][ T5959] em28xx 5-1:0.89: Freeing device [ 957.461012][T21255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.461885][T21255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.580102][T21256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.580339][T21256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.646766][ T5959] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 957.725308][T21261] lo: entered allmulticast mode [ 957.747202][T21261] tunl0: entered allmulticast mode [ 957.771738][T21261] gre0: entered allmulticast mode [ 957.783410][T21265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4292'. [ 957.792923][ T5959] usb 5-1: device descriptor read/64, error -71 [ 957.823256][T21261] gretap0: entered allmulticast mode [ 957.840034][T21261] erspan0: entered allmulticast mode [ 957.855286][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 957.855303][ T30] audit: type=1804 audit(1776883962.840:3394): pid=21267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4293" name="/newroot/270/file1" dev="tmpfs" ino=1420 res=1 errno=0 [ 957.864627][T21261] ip_vti0: entered allmulticast mode [ 957.921142][T21261] ip6_vti0: entered allmulticast mode [ 957.942141][T21261] sit0: entered allmulticast mode [ 957.971056][T21261] ip6tnl0: entered allmulticast mode [ 957.988184][T21261] ip6gre0: entered allmulticast mode [ 958.009167][T21261] syz_tun: entered allmulticast mode [ 958.032824][T21261] ip6gretap0: entered allmulticast mode [ 958.052382][T21261] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.057039][ T5959] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 958.059979][T21261] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.109438][T21261] bridge0: entered allmulticast mode [ 958.141275][T21261] vcan0: entered allmulticast mode [ 958.156855][T21261] bond0: entered allmulticast mode [ 958.163269][T21261] bond_slave_0: entered allmulticast mode [ 958.165186][T21277] Failed to get privilege flags for destination (handle=0x2:0x400) [ 958.176527][T21261] bond_slave_1: entered allmulticast mode [ 958.195969][T21261] team0: entered allmulticast mode [ 958.206860][ T5959] usb 5-1: device descriptor read/64, error -71 [ 958.224894][T21261] team_slave_0: entered allmulticast mode [ 958.243470][T21261] team_slave_1: entered allmulticast mode [ 958.257972][T21261] dummy0: entered allmulticast mode [ 958.266009][T21261] nlmon0: entered allmulticast mode [ 958.275369][T21261] caif0: entered allmulticast mode [ 958.281104][T21261] batadv0: entered allmulticast mode [ 958.290544][T21261] vxcan0: entered allmulticast mode [ 958.299782][T21261] vxcan1: entered allmulticast mode [ 958.306140][T21261] veth0: entered allmulticast mode [ 958.319553][T21261] veth1: entered allmulticast mode [ 958.330037][T21261] wg0: entered allmulticast mode [ 958.337217][ T5959] usb usb5-port1: attempt power cycle [ 958.343496][T21261] wg1: entered allmulticast mode [ 958.354891][T21261] wg2: entered allmulticast mode [ 958.363052][T21261] veth0_to_bridge: entered allmulticast mode [ 958.371734][T21288] netlink: 'syz.1.4298': attribute type 1 has an invalid length. [ 958.374379][T21261] veth1_to_bridge: entered allmulticast mode [ 958.390002][T21261] veth0_to_bond: entered allmulticast mode [ 958.399741][T21261] veth1_to_bond: entered allmulticast mode [ 958.409257][T21261] veth0_to_team: entered allmulticast mode [ 958.417929][T21261] veth1_to_team: entered allmulticast mode [ 958.426308][T21261] veth0_to_batadv: entered allmulticast mode [ 958.438036][T21261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 958.445473][T21261] batadv_slave_0: entered allmulticast mode [ 958.454677][T21261] veth1_to_batadv: entered allmulticast mode [ 958.463034][T21261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 958.471004][T21261] batadv_slave_1: entered allmulticast mode [ 958.479448][T21261] xfrm0: entered allmulticast mode [ 958.488458][T21261] veth0_to_hsr: entered allmulticast mode [ 958.498920][T21261] hsr_slave_0: entered allmulticast mode [ 958.507779][T21261] veth1_to_hsr: entered allmulticast mode [ 958.516000][T21261] hsr_slave_1: entered allmulticast mode [ 958.524683][T21261] hsr0: entered allmulticast mode [ 958.533115][T21261] veth1_virt_wifi: entered allmulticast mode [ 958.542684][T21290] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4298'. [ 958.544865][T21261] veth0_virt_wifi: entered allmulticast mode [ 958.559757][T21261] virt_wifi0: entered allmulticast mode [ 958.565526][T21261] veth1_vlan: entered allmulticast mode [ 958.572931][T21261] veth0_vlan: entered allmulticast mode [ 958.584152][T21261] vlan0: entered allmulticast mode [ 958.590897][T21261] vlan1: entered allmulticast mode [ 958.597915][T21261] macvlan0: entered allmulticast mode [ 958.605419][T21261] macvlan1: entered allmulticast mode [ 958.612554][T21261] ipvlan0: entered allmulticast mode [ 958.619263][T21261] ipvlan1: entered allmulticast mode [ 958.624821][T21261] veth1_macvtap: entered allmulticast mode [ 958.632625][T21261] veth0_macvtap: entered allmulticast mode [ 958.641088][T21261] macvtap0: entered allmulticast mode [ 958.650616][T21261] macsec0: entered allmulticast mode [ 958.658969][T21261] geneve0: entered allmulticast mode [ 958.665915][T21261] geneve1: entered allmulticast mode [ 958.673408][T21261] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 958.676850][ T5959] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 958.689006][T21261] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 958.705177][T21261] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 958.708338][ T5959] usb 5-1: device descriptor read/8, error -71 [ 958.719862][T21261] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 958.731897][T21261] mac80211_hwsim hwsim31 wlan0: entered allmulticast mode [ 958.742284][T21261] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode [ 958.751808][T21261] veth2: entered allmulticast mode [ 958.758101][T21261] veth3: entered allmulticast mode [ 958.763418][T21261] veth4: entered allmulticast mode [ 958.771667][T21261] veth5: entered allmulticast mode [ 958.777051][T21261] ip6tnl1: left promiscuous mode [ 958.782065][T21261] veth6: entered allmulticast mode [ 958.787629][T21261] veth7: entered allmulticast mode [ 958.792851][T21261] sit1: entered allmulticast mode [ 958.798042][T21261] vlan2: left promiscuous mode [ 958.802848][T21261] bridge0: left promiscuous mode [ 958.808566][T21261] vlan2: entered allmulticast mode [ 958.814150][T21261] bond1: entered allmulticast mode [ 958.820376][T21261] bond2: entered allmulticast mode [ 958.825514][T21261] geneve2: entered allmulticast mode [ 958.833433][T21261] vxlan0: entered allmulticast mode [ 958.839029][T21261] bridge1: left promiscuous mode [ 958.843972][T21261] bridge1: entered allmulticast mode [ 958.850805][T21261] syztnl0: entered allmulticast mode [ 958.856492][T21261] bond3: entered allmulticast mode [ 958.861662][T21261] gretap1: entered allmulticast mode [ 958.955944][T21288] 8021q: adding VLAN 0 to HW filter on device bond8 [ 958.958324][ T5959] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 958.983020][T21289] vlan0: entered allmulticast mode [ 959.007967][T21289] bond8: entered allmulticast mode [ 959.015332][ T9432] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.038525][ T5959] usb 5-1: device descriptor read/8, error -71 [ 959.053841][ T9432] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.079607][ T9432] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.103322][ T9432] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.157993][ T5959] usb usb5-port1: unable to enumerate USB device [ 959.993099][T21365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.017444][T21365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.043764][ T30] audit: type=1326 audit(1776883965.030:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21363 comm="syz.4.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c79c819 code=0x7ffc0000 [ 960.044231][T21365] netlink: 'syz.4.4306': attribute type 2 has an invalid length. [ 960.099251][T21365] netlink: 'syz.4.4306': attribute type 11 has an invalid length. [ 960.109929][T21365] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4306'. [ 960.121590][ T30] audit: type=1326 audit(1776883965.030:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21363 comm="syz.4.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c79c819 code=0x7ffc0000 [ 960.159330][ T30] audit: type=1326 audit(1776883965.030:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21363 comm="syz.4.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c79c819 code=0x7ffc0000 [ 960.223930][ T30] audit: type=1326 audit(1776883965.030:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21363 comm="syz.4.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c79c819 code=0x7ffc0000 [ 960.252999][ T30] audit: type=1326 audit(1776883965.030:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21363 comm="syz.4.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7ff57c79c819 code=0x7ffc0000 [ 960.284447][ T30] audit: type=1326 audit(1776883965.030:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21363 comm="syz.4.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c79c819 code=0x7ffc0000 [ 960.308025][ T30] audit: type=1326 audit(1776883965.030:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21363 comm="syz.4.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c79c819 code=0x7ffc0000 [ 960.332043][ T30] audit: type=1326 audit(1776883965.030:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21363 comm="syz.4.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7ff57c79c819 code=0x7ffc0000 [ 960.355198][T15711] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 960.406867][ T30] audit: type=1326 audit(1776883965.030:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21363 comm="syz.4.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c79c819 code=0x7ffc0000 [ 961.227089][T15711] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 961.324813][T21411] FAULT_INJECTION: forcing a failure. [ 961.324813][T21411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 961.368453][T21411] CPU: 0 UID: 0 PID: 21411 Comm: syz.3.4314 Tainted: G L syzkaller #0 PREEMPT(full) [ 961.368492][T21411] Tainted: [L]=SOFTLOCKUP [ 961.368496][T21411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 961.368504][T21411] Call Trace: [ 961.368509][T21411] [ 961.368514][T21411] dump_stack_lvl+0xe8/0x150 [ 961.368536][T21411] should_fail_ex+0x412/0x560 [ 961.368555][T21411] _copy_from_user+0x2d/0xb0 [ 961.368567][T21411] kstrtouint_from_user+0xd6/0x180 [ 961.368584][T21411] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 961.368607][T21411] proc_fail_nth_write+0x8e/0x210 [ 961.368619][T21411] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 961.368633][T21411] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 961.368645][T21411] vfs_write+0x29a/0xb90 [ 961.368663][T21411] ? __pfx_vfs_write+0x10/0x10 [ 961.368675][T21411] ? __fget_files+0x2a/0x420 [ 961.368689][T21411] ? __fget_files+0x3a0/0x420 [ 961.368698][T21411] ? __fget_files+0x2a/0x420 [ 961.368712][T21411] ksys_write+0x150/0x270 [ 961.368726][T21411] ? __pfx_ksys_write+0x10/0x10 [ 961.368742][T21411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.368753][T21411] do_syscall_64+0x15f/0xf80 [ 961.368767][T21411] ? trace_irq_disable+0x3b/0x140 [ 961.368780][T21411] ? clear_bhb_loop+0x40/0x90 [ 961.368793][T21411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.368803][T21411] RIP: 0033:0x7f7eaf75d04e [ 961.368814][T21411] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 961.368822][T21411] RSP: 002b:00007f7eb06b9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 961.368834][T21411] RAX: ffffffffffffffda RBX: 00007f7eb06ba6c0 RCX: 00007f7eaf75d04e [ 961.368841][T21411] RDX: 0000000000000001 RSI: 00007f7eb06ba0a0 RDI: 0000000000000005 [ 961.368848][T21411] RBP: 00007f7eb06ba090 R08: 0000000000000000 R09: 0000000000000000 [ 961.368854][T21411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 961.368860][T21411] R13: 00007f7eafa16038 R14: 00007f7eafa15fa0 R15: 00007f7eafb3fa48 [ 961.368876][T21411] [ 961.629133][T15711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.640084][T15711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 961.650297][T15711] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 961.659417][T15711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.681903][T15711] usb 5-1: config 0 descriptor?? [ 961.727811][T21424] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4316'. [ 961.893113][T15711] hid_parser_main: 27 callbacks suppressed [ 961.893136][T15711] cm6533_jd 0003:0D8C:0022.003C: unknown main item tag 0x0 [ 961.916353][T15711] cm6533_jd 0003:0D8C:0022.003C: unknown main item tag 0x0 [ 961.958191][T15711] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.003C/input/input109 [ 962.066844][ T7273] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 962.068142][T15711] cm6533_jd 0003:0D8C:0022.003C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 962.175821][ T5902] usb 5-1: USB disconnect, device number 8 [ 962.267103][T21455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 962.277632][ T7273] usb 4-1: Using ep0 maxpacket: 8 [ 962.296080][ T7273] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 962.300758][T21446] fido_id[21446]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 962.360951][ T7273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.381024][ T7273] usb 4-1: Product: syz [ 962.386403][ T7273] usb 4-1: Manufacturer: syz [ 962.394005][ T7273] usb 4-1: SerialNumber: syz [ 963.917504][T21488] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 963.926408][T21488] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 963.934884][T21488] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 963.941558][T21488] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 963.950437][T21488] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 964.196797][ T5902] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 964.326837][ T5902] usb 5-1: device descriptor read/64, error -71 [ 964.401351][T21510] syzkaller0: entered promiscuous mode [ 964.407198][T21510] syzkaller0: entered allmulticast mode [ 964.419029][T21510] tipc: Enabled bearer , priority 0 [ 964.431430][T21510] tipc: Resetting bearer [ 964.441624][T21509] tipc: Resetting bearer [ 964.466171][T21509] tipc: Disabling bearer [ 964.566819][ T5902] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 964.583235][T21517] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4332'. [ 964.595453][T21517] syzkaller0: entered promiscuous mode [ 964.601013][T21517] syzkaller0: entered allmulticast mode [ 964.708364][ T5902] usb 5-1: device descriptor read/64, error -71 [ 964.837720][ T5902] usb usb5-port1: attempt power cycle [ 964.865284][ T7273] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 964.893178][ T7273] usb 4-1: clock source 0 is not valid, cannot use [ 964.922306][ T7273] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 964.945132][ T7273] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 964.959666][ T7273] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 964.989609][ T7273] usb 4-1: clock source 0 is not valid, cannot use [ 965.010783][ T7273] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 965.041785][ T7273] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 965.147162][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 965.197242][ T5902] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 965.238865][ T5902] usb 5-1: device descriptor read/8, error -71 [ 965.321095][ T7273] usb 4-1: USB disconnect, device number 65 [ 965.496871][ T5902] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 965.538149][ T5902] usb 5-1: device descriptor read/8, error -71 [ 965.551438][ T6948] udevd[6948]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 965.687137][ T5902] usb usb5-port1: unable to enumerate USB device [ 965.837081][ T7273] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 965.957587][T20020] Bluetooth: hci5: command 0x0c1a tx timeout [ 965.957617][T15181] Bluetooth: hci0: command 0x0c1a tx timeout [ 965.963719][ T5850] Bluetooth: hci3: command 0x0c1a tx timeout [ 965.997110][ T7273] usb 4-1: Using ep0 maxpacket: 8 [ 966.013050][ T7273] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 966.031145][ T5850] Bluetooth: hci4: command 0x0c1a tx timeout [ 966.053427][ T7273] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 966.077912][ T7273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.114070][ T7273] usb 4-1: Product: syz [ 966.127416][ T7273] usb 4-1: Manufacturer: syz [ 966.140625][ T7273] usb 4-1: SerialNumber: syz [ 966.163079][ T7273] usb 4-1: config 0 descriptor?? [ 966.200070][ T7273] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 966.220672][ T7273] usb 4-1: setting power ON [ 966.225759][ T7273] dvb-usb: bulk message failed: -22 (2/0) [ 966.243013][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 966.243029][ T30] audit: type=1326 audit(1776883971.230:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21586 comm="syz.2.4342" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f4241196597 code=0x0 [ 966.333133][ T7273] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 966.362630][ T7273] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 966.384076][ T7273] usb 4-1: media controller created [ 966.409332][T21533] dvb-usb: bulk message failed: -22 (3/0) [ 966.454491][ T30] audit: type=1804 audit(1776883971.440:3423): pid=21533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4335" name="/newroot/195/file1" dev="tmpfs" ino=1037 res=1 errno=0 [ 966.477542][ T7273] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 966.582357][ T7273] usb 4-1: selecting invalid altsetting 6 [ 966.624042][ T7273] usb 4-1: digital interface selection failed (-22) [ 966.648091][ T7273] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 966.660509][T21629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4344'. [ 966.672524][ T7273] usb 4-1: setting power OFF [ 966.680889][ T7273] dvb-usb: bulk message failed: -22 (2/0) [ 966.694583][ T7273] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 966.713580][ T7273] (NULL device *): no alternate interface [ 966.829332][ T7273] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 966.909712][ T7273] usb 4-1: USB disconnect, device number 66 [ 966.967045][ T5909] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 966.996820][ T5902] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 967.128532][ T5909] usb 5-1: unable to get BOS descriptor or descriptor too short [ 967.153907][ T5909] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 967.164220][ T5902] usb 2-1: too many configurations: 206, using maximum allowed: 8 [ 967.180943][ T5909] usb 5-1: can't read configurations, error -22 [ 967.189293][ T5902] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 967.198267][ T5902] usb 2-1: can't read configurations, error -61 [ 967.327851][ T5902] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 967.335740][ T5909] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 967.382533][T21665] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4348'. [ 967.507901][ T5902] usb 2-1: too many configurations: 206, using maximum allowed: 8 [ 967.520359][ T5909] usb 5-1: unable to get BOS descriptor or descriptor too short [ 967.528807][ T5902] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 967.539169][ T5902] usb 2-1: can't read configurations, error -61 [ 967.540403][ T5909] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 967.556451][ T5902] usb usb2-port1: attempt power cycle [ 967.563519][ T5909] usb 5-1: can't read configurations, error -22 [ 967.573782][ T5909] usb usb5-port1: attempt power cycle [ 967.692509][T21678] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4352'. [ 967.721392][T21678] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.728842][T21678] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.750232][T21678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4352'. [ 967.779708][T21679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4352'. [ 967.865536][T21679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 967.874195][T15711] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 967.893417][T21679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.908077][ T5902] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 967.926799][ T5909] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 967.938414][ T5902] usb 2-1: too many configurations: 206, using maximum allowed: 8 [ 967.950374][ T5902] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 967.959514][ T5909] usb 5-1: unable to get BOS descriptor or descriptor too short [ 967.970465][ T5902] usb 2-1: can't read configurations, error -61 [ 967.972706][ T5909] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 967.972728][ T5909] usb 5-1: can't read configurations, error -22 [ 968.058984][T15711] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 968.069886][T15711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 968.086733][T15711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 968.096557][T15711] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 968.097665][ T5902] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 968.109823][T15711] usb 4-1: New USB device found, idVendor=056a, idProduct=0131, bcdDevice= 0.00 [ 968.119115][ T5909] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 968.127555][T15711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.155303][T15711] usb 4-1: config 0 descriptor?? [ 968.179360][ T5909] usb 5-1: unable to get BOS descriptor or descriptor too short [ 968.189157][ T5902] usb 2-1: too many configurations: 206, using maximum allowed: 8 [ 968.198738][ T5909] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 968.207210][ T5909] usb 5-1: can't read configurations, error -22 [ 968.213923][ T5902] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 968.221617][ T5902] usb 2-1: can't read configurations, error -61 [ 968.228756][ T5909] usb usb5-port1: unable to enumerate USB device [ 968.235393][ T5902] usb usb2-port1: unable to enumerate USB device [ 968.575448][T15711] wacom 0003:056A:0131.003D: Unknown device_type for 'HID 056a:0131'. Ignoring. [ 968.653072][T21706] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4358'. [ 968.782066][T21673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.803304][T21673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.822457][T15711] usb 4-1: USB disconnect, device number 67 [ 969.371220][T21718] input: syz1 as /devices/virtual/input/input113 [ 969.881974][T21740] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4363'. [ 969.940601][T21744] fuse: Unknown parameter '' [ 969.954192][T21740] bond9: Unable to set peer notification delay as MII monitoring is disabled [ 970.006209][T21740] bond9 (unregistering): Released all slaves [ 970.316800][T15711] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 970.492782][T21819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4366'. [ 970.540534][T15711] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 970.551026][T15711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.559317][T15711] usb 5-1: Product: syz [ 970.563949][T15711] usb 5-1: Manufacturer: syz [ 970.569027][T15711] usb 5-1: SerialNumber: syz [ 970.580116][T15711] usb 5-1: config 0 descriptor?? [ 970.614376][T15711] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 970.644431][T15711] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 970.660168][T15711] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 970.672219][T15711] usb 5-1: media controller created [ 970.696374][T15711] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 970.796246][T15711] DVB: Unable to find symbol mt352_attach() [ 970.861048][T15711] DVB: Unable to find symbol nxt6000_attach() [ 970.868034][T15711] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 970.882138][T15711] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input114 [ 970.901258][T15711] dvb-usb: schedule remote query interval to 1000 msecs. [ 970.908637][T15711] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 970.919303][T15711] dvb-usb: bulk message failed: -22 (7/0) [ 970.926172][T15711] dvb-usb: bulk message failed: -22 (7/0) [ 970.997751][T21848] binder: 21841:21848 ioctl c0306201 0 returned -14 [ 971.493612][T21863] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 971.539049][ T5909] IPVS: starting estimator thread 0... [ 971.646771][T21866] IPVS: using max 30 ests per chain, 72000 per kthread [ 971.739191][T21794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.776442][T21794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.911941][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 971.923188][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 971.930283][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 971.938529][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 971.947306][ T5959] dvb-usb: bulk message failed: -22 (7/0) [ 971.961926][T21848] syz.3.4370 (21848): drop_caches: 2 [ 972.017926][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.035356][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.046319][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.058969][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.074679][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.082616][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.090291][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.118641][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.131637][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.139479][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.149803][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.166924][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.173956][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.181474][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.189808][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.226902][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.239161][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.274553][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.288568][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.296924][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.332654][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.347073][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.356783][ T5902] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 972.369626][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.377025][ T5959] dvb-usb: error while querying for an remote control event. [ 972.384573][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.436846][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.444247][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.451199][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.458139][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.466573][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.475196][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.485767][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.527891][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.548047][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 972.557175][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.564115][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.574339][ T5902] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 972.574389][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.589969][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.596943][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.605325][ T5902] usb 2-1: config 0 has no interface number 0 [ 972.605428][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.619362][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.628555][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.637139][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.638659][ T5902] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 972.653365][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.681833][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.681897][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.707051][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.714064][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.716290][ T5902] usb 2-1: Product: syz [ 972.721013][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.721098][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.739993][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.747828][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.757973][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.764882][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.771196][ T5902] usb 2-1: Manufacturer: syz [ 972.771855][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.793700][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.793711][ T5902] usb 2-1: SerialNumber: syz [ 972.807033][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.808080][ T5902] usb 2-1: config 0 descriptor?? [ 972.821331][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.831270][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.839322][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.859587][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.868759][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.879158][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 972.887415][ T5850] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 973.162605][T21903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.182558][T21903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.192575][T21903] netlink: 'syz.2.4381': attribute type 15 has an invalid length. [ 973.260441][ T5902] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 973.271593][ T5902] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 973.361111][T21915] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 973.367673][T21915] syzkaller1: linktype set to 7 [ 973.766933][T21922] kvm: user requested TSC rate below hardware speed [ 973.947137][ T5959] dvb-usb: bulk message failed: -22 (7/0) [ 973.959991][ T5959] dvb-usb: error while querying for an remote control event. [ 974.094902][T21879] netlink: 'syz.1.4375': attribute type 13 has an invalid length. [ 974.115821][T21879] netlink: 'syz.1.4375': attribute type 17 has an invalid length. [ 974.131224][ T5909] usb 5-1: USB disconnect, device number 17 [ 974.357445][ T5909] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 974.547381][T21879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.573518][T21879] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.610877][T21879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 974.673920][ T5902] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 974.719405][ T5902] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 974.805266][ T5902] usb 2-1: USB disconnect, device number 61 [ 974.969902][T21971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 975.266007][T21983] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4392'. [ 975.308396][T21988] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4393'. [ 975.815856][T22009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 976.096907][T15711] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 976.226902][T15711] usb 2-1: device descriptor read/64, error -71 [ 976.486786][T15711] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 976.626777][T15711] usb 2-1: device descriptor read/64, error -71 [ 976.747407][T15711] usb usb2-port1: attempt power cycle [ 977.072878][T22053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.087064][T15711] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 977.095196][T22053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.119469][T15711] usb 2-1: device descriptor read/8, error -71 [ 977.167049][ T5959] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 977.339279][ T5959] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x2E, changing to 0xE [ 977.356535][ T5959] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 25970, setting to 1024 [ 977.368098][T15711] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 977.376114][ T5959] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 977.388819][ T5959] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 977.404676][ T5959] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 977.415006][T15711] usb 2-1: device descriptor read/8, error -71 [ 977.421314][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 977.435435][ T5959] usb 4-1: SerialNumber: syz [ 977.466541][T22047] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 977.537050][T15711] usb usb2-port1: unable to enumerate USB device [ 977.692432][ T5959] usbtest 4-1:1.0: Linux user mode ISO test driver [ 977.708315][ T5959] usbtest 4-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 977.757417][ T5959] usb 4-1: USB disconnect, device number 68 [ 978.035156][T22102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4414'. [ 979.252918][ T30] audit: type=1326 audit(1776883984.240:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22142 comm="syz.1.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d0f9c819 code=0x7ffc0000 [ 979.312415][ T30] audit: type=1326 audit(1776883984.240:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22142 comm="syz.1.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d0f9c819 code=0x7ffc0000 [ 979.343903][ T30] audit: type=1326 audit(1776883984.240:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22142 comm="syz.1.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d0f9c819 code=0x7ffc0000 [ 979.367381][ T30] audit: type=1326 audit(1776883984.240:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22142 comm="syz.1.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d0f9c819 code=0x7ffc0000 [ 979.391714][ T30] audit: type=1326 audit(1776883984.240:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22142 comm="syz.1.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f53d0f9c819 code=0x7ffc0000 [ 979.436168][ T30] audit: type=1326 audit(1776883984.240:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22142 comm="syz.1.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d0f9c819 code=0x7ffc0000 [ 979.467552][T22156] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4426'. [ 979.487982][ T30] audit: type=1326 audit(1776883984.240:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22142 comm="syz.1.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d0f9c819 code=0x7ffc0000 [ 979.513260][ T30] audit: type=1326 audit(1776883984.240:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22142 comm="syz.1.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d0f9c819 code=0x7ffc0000 [ 979.537469][ T30] audit: type=1326 audit(1776883984.240:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22142 comm="syz.1.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d0f9c819 code=0x7ffc0000 [ 979.562019][ T5909] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 979.572428][ T30] audit: type=1326 audit(1776883984.240:3433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22142 comm="syz.1.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f53d0f9c819 code=0x7ffc0000 [ 979.596890][T22160] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4425'. [ 979.709716][T22164] loop8: detected capacity change from 0 to 7 [ 979.717018][T18490] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 979.727827][ T5909] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 4855, setting to 64 [ 979.740817][ T5909] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 979.757579][T22164] Dev loop8: unable to read RDB block 7 [ 979.763477][ T5909] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 979.773905][T22164] loop8: unable to read partition table [ 979.779819][ T5909] usb 5-1: Product: syz [ 979.784249][T22164] loop8: partition table beyond EOD, truncated [ 979.791864][ T5909] usb 5-1: Manufacturer: syz [ 979.802122][T22164] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 979.813900][T22148] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 979.826834][ T5909] hub 5-1:4.0: USB hub found [ 979.877166][T18490] usb 2-1: Using ep0 maxpacket: 16 [ 979.895294][T18490] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 979.908720][T18490] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 979.924739][T18490] usb 2-1: config 0 has no interface number 0 [ 979.934827][T18490] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 979.944210][T18490] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.952442][T18490] usb 2-1: Product: syz [ 979.957233][T18490] usb 2-1: Manufacturer: syz [ 979.976765][T18490] usb 2-1: SerialNumber: syz [ 979.998667][T18490] usb 2-1: config 0 descriptor?? [ 979.998957][T22181] netlink: 'syz.3.4431': attribute type 1 has an invalid length. [ 980.029580][ T5909] hub 5-1:4.0: 2 ports detected [ 980.040525][T18490] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 980.052667][T18490] uvcvideo 2-1:0.105: No valid video chain found. [ 980.182719][T22193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.198427][T22193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.260580][T22156] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4426'. [ 980.270466][T22156] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4426'. [ 980.287787][T22156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4426'. [ 980.329953][T22156] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4426'. [ 980.344674][T15711] usb 2-1: USB disconnect, device number 66 [ 980.424769][T22203] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 980.472319][T22203] overlayfs: missing 'lowerdir' [ 981.556635][T22237] loop8: detected capacity change from 0 to 7 [ 981.591792][T22237] Dev loop8: unable to read RDB block 7 [ 981.604570][T22237] loop8: unable to read partition table [ 981.623333][T22237] loop8: partition table beyond EOD, truncated [ 981.656568][T22237] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 981.853900][T22246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.883574][T22246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.957470][ T5909] usb 5-1-port1: cannot warm reset (err = -71) [ 981.957824][T15711] usb 5-1: USB disconnect, device number 18 [ 982.703749][ T5959] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 982.883880][ T5959] usb 4-1: Using ep0 maxpacket: 16 [ 982.919029][ T5959] usb 4-1: config 0 has no interfaces? [ 982.936580][ T5959] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 982.980890][ T5959] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 983.025560][ T5959] usb 4-1: Manufacturer: syz [ 983.088478][ T5959] usb 4-1: config 0 descriptor?? [ 983.136766][ T5909] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 983.438286][ T5909] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 983.557676][T22327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4445'. [ 983.592990][ T5909] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 983.649405][T22332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.674140][T22332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.703909][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 983.760423][ T5909] usb 5-1: Product: syz [ 983.780345][ T5909] usb 5-1: Manufacturer: syz [ 983.818728][ T5909] usb 5-1: SerialNumber: syz [ 984.108719][ T5909] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 984.440142][T22347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.493757][T22347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.508869][T18490] usb 5-1: USB disconnect, device number 19 [ 984.570248][T18490] usblp0: removed [ 984.579088][T22353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.632548][T22353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.689247][T22362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4454'. [ 985.963480][T22411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.002840][T22411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.067812][T22373] team0: Port device gtp0 added [ 986.705225][T22457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 987.005854][T22447] overlayfs: missing 'lowerdir' [ 987.196320][T15711] usb 4-1: USB disconnect, device number 69 [ 987.591787][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 987.591838][ T30] audit: type=1326 audit(1776883992.580:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22463 comm="syz.2.4461" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f424119c819 code=0x0 [ 988.251441][T22521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 988.277893][T22521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 988.545785][T22537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 988.567773][T22537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 988.601774][ T5959] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 988.757048][ T5959] usb 5-1: Using ep0 maxpacket: 8 [ 988.764676][ T5959] usb 5-1: config 211 has an invalid interface number: 68 but max is 0 [ 988.773180][ T5959] usb 5-1: config 211 has no interface number 0 [ 988.779678][ T5959] usb 5-1: config 211 interface 68 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 988.791022][ T5959] usb 5-1: config 211 interface 68 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 988.803260][ T5959] usb 5-1: config 211 interface 68 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 988.815133][ T5959] usb 5-1: config 211 interface 68 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 988.826035][ T5959] usb 5-1: config 211 interface 68 altsetting 1 has an endpoint descriptor with address 0x1D, changing to 0xD [ 988.838539][ T5959] usb 5-1: config 211 interface 68 altsetting 1 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 988.849728][ T5959] usb 5-1: config 211 interface 68 altsetting 1 endpoint 0xF has an invalid bInterval 67, changing to 7 [ 988.861263][ T5959] usb 5-1: config 211 interface 68 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 988.875080][ T5959] usb 5-1: config 211 interface 68 has no altsetting 0 [ 988.884371][ T5959] usb 5-1: Dual-Role OTG device on HNP port [ 988.890708][ T5959] usb 5-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=d5.a4 [ 988.899882][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.908445][ T5959] usb 5-1: Product: ⦵汀猎䯝ߺ겊ྡ匎㓊ѹᶘ亶꺄⸰◈坐㋚ﳟϠͧꋬ橾⭃欫⨸䩴᱀굀陕跏庝췞⸹呟ꟊᣱ◾ꉢ鯿䈖氡튢賛ྟ瘟⌮⯿㫼똚ꎒ⥉ࡪ [ 988.928383][ T5959] usb 5-1: Manufacturer: 볖 [ 988.933600][ T5959] usb 5-1: SerialNumber: 专窃㛘ؓ蹉䒤듙ᢃ嵄緑伵 [ 989.155919][ T5959] gspca_main: kinect-2.14.0 probing 045e:02bf [ 989.174607][ T5959] usb 5-1: USB disconnect, device number 20 [ 989.951320][T22574] kernel profiling enabled (shift: 63) [ 989.970063][ T5959] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 989.994005][T22574] profiling shift: 63 too large [ 989.999016][ T5909] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 990.164513][ T5959] usb 4-1: Using ep0 maxpacket: 8 [ 990.175829][ T5909] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 990.200143][ T5909] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 990.209033][ T5959] usb 4-1: config 252 has an invalid interface number: 227 but max is 2 [ 990.219092][ T5909] usb 5-1: config 0 has no interface number 0 [ 990.219288][ T5959] usb 4-1: config 252 contains an unexpected descriptor of type 0x1, skipping [ 990.240183][ T5909] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 990.248095][ T5959] usb 4-1: config 252 has an invalid interface number: 13 but max is 2 [ 990.265291][ T5909] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 990.281636][ T5959] usb 4-1: config 252 has an invalid interface number: 141 but max is 2 [ 990.284313][ T5909] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 990.300771][ T5959] usb 4-1: config 252 has no interface number 0 [ 990.310737][ T5959] usb 4-1: config 252 has no interface number 1 [ 990.324322][ T5959] usb 4-1: config 252 has no interface number 2 [ 990.330667][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.337076][ T5959] usb 4-1: config 252 interface 227 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 990.338808][ T5909] usb 5-1: Product: syz [ 990.369338][ T5959] usb 4-1: config 252 interface 227 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 990.369349][ T5909] usb 5-1: Manufacturer: syz [ 990.369367][ T5959] usb 4-1: config 252 interface 227 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 990.406770][ T5909] usb 5-1: SerialNumber: syz [ 990.417786][ T5909] usb 5-1: config 0 descriptor?? [ 990.453431][ T5959] usb 4-1: config 252 interface 227 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 990.503685][ T5959] usb 4-1: config 252 interface 227 altsetting 0 endpoint 0x81 has invalid maxpacket 18638, setting to 1024 [ 990.546814][ T5959] usb 4-1: config 252 interface 227 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 990.576778][ T5959] usb 4-1: config 252 interface 227 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 990.611895][ T5959] usb 4-1: config 252 interface 227 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 990.637805][ T5959] usb 4-1: config 252 interface 227 altsetting 0 has a duplicate endpoint with address 0x8A, skipping [ 990.656622][ T5959] usb 4-1: config 252 interface 227 altsetting 0 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 990.670253][ T5959] usb 4-1: config 252 interface 13 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 990.681234][ T5959] usb 4-1: config 252 interface 13 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 990.692263][ T5959] usb 4-1: config 252 interface 13 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 990.703553][ T5959] usb 4-1: config 252 interface 13 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 990.717180][T22601] i2c i2c-0: Invalid block read size 255 [ 990.733009][ T5959] usb 4-1: config 252 interface 13 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 990.744398][ T5959] usb 4-1: config 252 interface 13 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 990.767934][ T5959] usb 4-1: config 252 interface 13 altsetting 7 endpoint 0xB has invalid maxpacket 1536, setting to 1024 [ 990.802872][ T5959] usb 4-1: config 252 interface 13 altsetting 7 bulk endpoint 0xB has invalid maxpacket 1024 [ 990.845413][ T5959] usb 4-1: config 252 interface 13 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 990.860502][ T5959] usb 4-1: config 252 interface 13 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 990.873842][ T5959] usb 4-1: config 252 interface 13 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 64 [ 990.887011][ T5959] usb 4-1: config 252 interface 13 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 990.899378][ T5959] usb 4-1: config 252 interface 13 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 990.911326][ T5959] usb 4-1: config 252 interface 13 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 990.924505][ T5959] usb 4-1: config 252 interface 13 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 990.937694][ T5959] usb 4-1: config 252 interface 141 altsetting 2 endpoint 0xC has invalid wMaxPacketSize 0 [ 990.948539][ T5959] usb 4-1: config 252 interface 141 altsetting 2 has an endpoint descriptor with address 0x4C, changing to 0xC [ 990.961527][ T5959] usb 4-1: config 252 interface 141 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 990.972683][ T5959] usb 4-1: config 252 interface 141 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 990.987590][ T5959] usb 4-1: config 252 interface 141 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 991.003507][ T5959] usb 4-1: config 252 interface 141 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 991.014804][ T5959] usb 4-1: config 252 interface 141 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 991.026419][ T5959] usb 4-1: config 252 interface 141 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 991.038573][ T5959] usb 4-1: config 252 interface 141 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 991.051612][ T5959] usb 4-1: config 252 interface 141 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 991.063648][ T5959] usb 4-1: config 252 interface 141 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 991.076749][ T5959] usb 4-1: config 252 interface 141 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 991.088118][ T5959] usb 4-1: config 252 interface 141 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 991.099202][ T5959] usb 4-1: config 252 interface 141 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 991.110299][ T5959] usb 4-1: config 252 interface 13 has no altsetting 0 [ 991.117376][ T5959] usb 4-1: config 252 interface 141 has no altsetting 0 [ 991.126914][ T5959] usb 4-1: Dual-Role OTG device on HNP port [ 991.133061][ T5959] usb 4-1: New USB device found, idVendor=099e, idProduct=0052, bcdDevice=54.27 [ 991.142404][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.152462][ T5959] usb 4-1: Product: syz [ 991.156633][ T5959] usb 4-1: Manufacturer:   [ 991.161613][ T5959] usb 4-1: SerialNumber: syz [ 991.177382][T22580] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 991.428495][ T5959] usb 4-1: USB disconnect, device number 70 [ 992.772952][ T5959] usb 5-1: USB disconnect, device number 21 [ 992.895361][T22668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4490'. [ 992.913739][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.920576][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.226862][ T5959] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 993.406963][ T5959] usb 5-1: Using ep0 maxpacket: 32 [ 993.428563][ T5959] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 993.440952][T22676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4492'. [ 993.452669][ T5959] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 993.461308][ T5959] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.488455][ T5959] usb 5-1: config 0 has no interface number 0 [ 993.495152][ T5959] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 993.506407][ T5959] usb 5-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 993.522863][ T5959] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 993.534418][ T5959] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.556595][ T5959] usb 5-1: config 0 has no interface number 0 [ 993.563501][ T5959] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 993.578033][ T5959] usb 5-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 993.592549][ T5959] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 993.599753][T22685] netlink: 'syz.3.4495': attribute type 10 has an invalid length. [ 993.601545][ T5959] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.618665][T22685] dummy0: left allmulticast mode [ 993.620015][ T5959] usb 5-1: config 0 has no interface number 0 [ 993.632248][ T5959] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 993.640283][T22685] dummy0: entered allmulticast mode [ 993.643889][ T5959] usb 5-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 993.656628][T22685] team0: Port device dummy0 added [ 993.667207][T22688] netlink: 'syz.3.4495': attribute type 10 has an invalid length. [ 993.668341][T22689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.677430][ T5959] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 993.686053][T22689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.697936][T22688] dummy0: left allmulticast mode [ 993.713399][ T5959] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.729362][ T5959] usb 5-1: config 0 has no interface number 0 [ 993.735511][ T5959] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 993.745952][ T5959] usb 5-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 993.760270][T22688] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 993.770107][ T5959] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 993.778451][ T5959] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.782148][T22692] binder_alloc: 22687: binder_alloc_buf, no vma [ 993.795856][T22688] team0: Port device dummy0 removed [ 993.801677][T22688] dummy0: entered allmulticast mode [ 993.807627][ T5959] usb 5-1: config 0 has no interface number 0 [ 993.815173][T22692] blktrace: Concurrent blktraces are not allowed on nbd2 [ 993.821156][ T5959] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 993.833232][T22688] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 993.842762][ T5959] usb 5-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 993.873939][ T5959] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 993.882167][ T5959] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.892958][ T5959] usb 5-1: config 0 has no interface number 0 [ 993.899837][ T5959] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 993.909899][ T5959] usb 5-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 993.925355][ T5959] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 993.935441][ T5959] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.946137][ T5959] usb 5-1: config 0 has no interface number 0 [ 993.954154][ T5959] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 993.965071][ T5959] usb 5-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 993.979828][ T5959] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 993.989487][ T5959] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.999877][ T5959] usb 5-1: config 0 has no interface number 0 [ 994.005983][ T5959] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 994.016401][ T5959] usb 5-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 994.051708][ T5959] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 994.066524][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.084886][ T5959] usb 5-1: Product: syz [ 994.090041][ T5959] usb 5-1: Manufacturer: syz [ 994.105322][ T5959] usb 5-1: SerialNumber: syz [ 994.118704][ T5959] usb 5-1: config 0 descriptor?? [ 994.130655][ T5959] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 994.336769][ T5909] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 994.354020][ T5959] usb 5-1: USB disconnect, device number 22 [ 994.547867][ T5909] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 994.577335][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.605569][ T5909] usb 4-1: Product: syz [ 994.626099][ T5909] usb 4-1: Manufacturer: syz [ 994.641565][ T5909] usb 4-1: SerialNumber: syz [ 994.698851][ T5909] usb 4-1: config 0 descriptor?? [ 994.722467][ T5909] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 994.753257][ T5909] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 994.782647][ T5909] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 994.809309][ T5909] usb 4-1: media controller created [ 994.846847][ T5959] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 994.859727][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 994.954240][T22698] dvb-usb: bulk message failed: -22 (7/0) [ 995.006783][ T5959] usb 2-1: Using ep0 maxpacket: 32 [ 995.017285][ T5959] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 995.028062][ T5959] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 995.041218][ T5959] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 995.079941][ T5959] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 995.114474][ T5959] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 995.130198][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.165421][ T5959] usb 2-1: Product: syz [ 995.187682][ T5959] usb 2-1: Manufacturer: syz [ 995.199582][T22738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4502'. [ 995.208864][ T5959] usb 2-1: SerialNumber: syz [ 995.238578][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 995.274686][ T5959] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input117 [ 995.279192][ T5909] DVB: Unable to find symbol mt352_attach() [ 995.319762][T22738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4502'. [ 995.457258][ T5959] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 995.480595][ T5959] (id 0x00) [ 995.672950][ T5909] DVB: Unable to find symbol nxt6000_attach() [ 995.681690][ T5909] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 995.686892][ T5959] rc_core: IR keymap rc-imon-pad not found [ 995.737272][ T5909] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input119 [ 995.763291][ T5959] Registered IR keymap rc-empty [ 995.777821][ T5909] dvb-usb: schedule remote query interval to 1000 msecs. [ 995.805194][ T5959] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 995.806911][ T5909] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 995.888109][ T5959] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 995.915403][ T5909] dvb-usb: bulk message failed: -22 (7/0) [ 995.927554][ T5959] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 995.945086][ T5909] dvb-usb: bulk message failed: -22 (7/0) [ 995.966523][ T5959] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input118 [ 996.053993][ T5959] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:67> initialized [ 996.100695][ T5959] usb 2-1: USB disconnect, device number 67 [ 996.756870][ T5909] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 996.827033][ T5902] dvb-usb: bulk message failed: -22 (7/0) [ 996.839954][ T5902] dvb-usb: error while querying for an remote control event. [ 996.928883][ T5909] usb 5-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024 [ 996.940161][ T5909] usb 5-1: config 48 interface 0 altsetting 98 has an endpoint descriptor with address 0x5A, changing to 0xA [ 996.983195][ T5909] usb 5-1: config 48 interface 0 altsetting 98 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 997.006445][ T5902] usb 4-1: USB disconnect, device number 71 [ 997.033320][ T5909] usb 5-1: config 48 interface 0 altsetting 98 endpoint 0xA has invalid wMaxPacketSize 0 [ 997.078971][ T5909] usb 5-1: config 48 interface 0 has no altsetting 0 [ 997.118202][ T5909] usb 5-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 997.146433][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.187338][ T5909] usb 5-1: Product: syz [ 997.191882][ T5902] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 997.208359][ T5909] usb 5-1: Manufacturer: syz [ 997.218590][ T5909] usb 5-1: SerialNumber: syz [ 997.262827][T22784] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 997.289568][ T30] audit: type=1326 audit(1776884002.280:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22806 comm="syz.3.4509" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7eaf79c819 code=0x0 [ 997.507506][ T5909] usb 5-1: USB disconnect, device number 23 [ 997.623060][T22836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.640579][T22836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.676956][T18490] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 997.870601][T18490] usb 2-1: config 127 has an invalid interface number: 84 but max is 0 [ 997.884524][T18490] usb 2-1: config 127 has no interface number 0 [ 997.896633][T18490] usb 2-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=9c.e5 [ 997.906755][T18490] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.915176][T18490] usb 2-1: Product: syz [ 997.921342][T18490] usb 2-1: Manufacturer: syz [ 997.930365][T18490] usb 2-1: SerialNumber: syz [ 998.155712][T18490] gspca_main: spca501-2.14.0 probing 040a:0002 [ 998.205948][T22858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4518'. [ 998.410383][T22857] netlink: 'syz.4.4518': attribute type 11 has an invalid length. [ 998.446098][T22857] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.4518'. [ 998.465609][T22861] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4518'. [ 998.480351][T22858] netlink: 'syz.4.4518': attribute type 11 has an invalid length. [ 998.489388][T22858] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.4518'. [ 998.767818][T18490] gspca_spca501: reg write: error -71 [ 998.788026][T18490] spca501 2-1:127.84: Reg write failed for 0x00,0x01,0x02 [ 998.806140][T18490] spca501 2-1:127.84: probe with driver spca501 failed with error -22 [ 998.827151][T18490] usb 2-1: USB disconnect, device number 68 [ 1001.222462][T22918] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4533'. [ 1001.245009][T22918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4533'. [ 1001.458407][T22924] input: syz1 as /devices/virtual/input/input120 [ 1001.529720][T22944] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1001.756765][T18490] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1001.795078][T22966] overlayfs: missing 'lowerdir' [ 1001.904236][T22974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.916992][T18490] usb 2-1: Using ep0 maxpacket: 16 [ 1001.924632][T18490] usb 2-1: config 0 has no interfaces? [ 1001.931916][T18490] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1001.942615][T18490] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1001.951363][T18490] usb 2-1: Manufacturer: syz [ 1001.961055][T18490] usb 2-1: config 0 descriptor?? [ 1001.976189][T22974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1002.037931][T22981] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4537'. [ 1002.047093][T22981] tipc: Started in network mode [ 1002.054063][T22981] tipc: Node identity 9, cluster identity 4711 [ 1002.064603][T22981] tipc: Node number set to 9 [ 1002.073030][T22974] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4537'. [ 1002.186512][ T5902] usb 2-1: USB disconnect, device number 69 [ 1002.481907][T22990] netlink: 'syz.0.4538': attribute type 10 has an invalid length. [ 1002.492859][T22990] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4538'. [ 1003.599844][T23037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.672847][T23037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.730851][T23037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.769585][T23037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.495903][T23066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.519004][T23066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.312687][T23088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4557'. [ 1005.436430][T23097] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1005.693268][T23104] overlayfs: missing 'lowerdir' [ 1005.956768][ T5902] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1006.116767][ T5902] usb 4-1: Using ep0 maxpacket: 8 [ 1006.126058][ T5902] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 46, changing to 7 [ 1006.155509][ T5902] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1006.176416][ T5902] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 141, changing to 7 [ 1006.206949][ T5902] usb 4-1: New USB device found, idVendor=0e41, idProduct=414b, bcdDevice= 0.40 [ 1006.216339][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.233372][ T5902] usb 4-1: Product: Э [ 1006.243596][ T5902] usb 4-1: Manufacturer: с [ 1006.253697][ T5902] usb 4-1: SerialNumber: 硴ᦰ襯꩑儔벊ᆾㆉ㖆醵♾ꅘẾ뷜⧌ͩ⍋ꈲ浦裹躗挻渫殥鸑㽬챭獛匓풔밁滴歘⿬劑濇揖웨泦翎儓熓㼒頑뾧㯔떹ꚢ颁溁ꉴ⋱ਖ਼ெﳌ忻括냣ꩳ낛߭嘖㧘鯲翠醂삓厑볁꿚賂 [ 1006.504067][ T5902] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1006.779202][ T5902] usb 4-1: USB disconnect, device number 72 [ 1006.798618][ T30] audit: type=1326 audit(1776884011.780:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23127 comm="syz.1.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d0f9c819 code=0x7ffc0000 [ 1006.919500][ T7550] udevd[7550]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1006.945307][ T30] audit: type=1326 audit(1776884011.780:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23127 comm="syz.1.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d0f9c819 code=0x7ffc0000 [ 1006.998325][ T30] audit: type=1326 audit(1776884011.830:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23127 comm="syz.1.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f53d0f9c819 code=0x7ffc0000 [ 1007.454657][T23186] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4567'. [ 1007.501937][T15711] IPVS: starting estimator thread 0... [ 1007.510646][T23186] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1007.596823][T23191] IPVS: using max 54 ests per chain, 129600 per kthread [ 1008.581684][T23213] FAULT_INJECTION: forcing a failure. [ 1008.581684][T23213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1008.595039][T23213] CPU: 0 UID: 0 PID: 23213 Comm: syz.1.4575 Tainted: G L syzkaller #0 PREEMPT(full) [ 1008.595070][T23213] Tainted: [L]=SOFTLOCKUP [ 1008.595077][T23213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1008.595088][T23213] Call Trace: [ 1008.595097][T23213] [ 1008.595105][T23213] dump_stack_lvl+0xe8/0x150 [ 1008.595139][T23213] should_fail_ex+0x412/0x560 [ 1008.595172][T23213] _copy_to_user+0x31/0xb0 [ 1008.595196][T23213] simple_read_from_buffer+0xe1/0x170 [ 1008.595220][T23213] proc_fail_nth_read+0x1bb/0x230 [ 1008.595244][T23213] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1008.595267][T23213] ? rw_verify_area+0x2a6/0x4d0 [ 1008.595288][T23213] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1008.595309][T23213] vfs_read+0x20c/0xa70 [ 1008.595337][T23213] ? __pfx___mutex_lock+0x10/0x10 [ 1008.595363][T23213] ? __pfx_vfs_read+0x10/0x10 [ 1008.595386][T23213] ? __fget_files+0x2a/0x420 [ 1008.595409][T23213] ? __fget_files+0x3a0/0x420 [ 1008.595428][T23213] ? __fget_files+0x2a/0x420 [ 1008.595455][T23213] ksys_read+0x150/0x270 [ 1008.595479][T23213] ? __pfx_ksys_read+0x10/0x10 [ 1008.595509][T23213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.595530][T23213] do_syscall_64+0x15f/0xf80 [ 1008.595552][T23213] ? trace_irq_disable+0x3b/0x140 [ 1008.595575][T23213] ? clear_bhb_loop+0x40/0x90 [ 1008.595597][T23213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.595615][T23213] RIP: 0033:0x7f53d0f5d04e [ 1008.595631][T23213] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1008.595646][T23213] RSP: 002b:00007f53d1dc6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1008.595666][T23213] RAX: ffffffffffffffda RBX: 00007f53d1dc76c0 RCX: 00007f53d0f5d04e [ 1008.595680][T23213] RDX: 000000000000000f RSI: 00007f53d1dc70a0 RDI: 0000000000000005 [ 1008.595692][T23213] RBP: 00007f53d1dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.595704][T23213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1008.595715][T23213] R13: 00007f53d1216038 R14: 00007f53d1215fa0 R15: 00007f53d133fa48 [ 1008.595745][T23213] [ 1008.929974][T23216] loop9: detected capacity change from 0 to 524287871 [ 1009.001359][T23219] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.4577'. [ 1009.453092][T23245] tipc: Enabling of bearer rejected, failed to enable media [ 1009.719688][T23256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4586'. [ 1009.734738][T23260] netlink: 'syz.4.4587': attribute type 1 has an invalid length. [ 1009.776889][T23261] netlink: 'syz.3.4586': attribute type 2 has an invalid length. [ 1009.819976][T15181] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1009.832290][T15181] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1009.846496][T15181] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1009.858556][T15181] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1009.868617][T15181] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1009.994217][T23264] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1010.007147][T23264] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1010.079731][T23320] netlink: 'syz.3.4589': attribute type 21 has an invalid length. [ 1010.089174][T23320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4589'. [ 1010.125472][T23269] bond1: (slave bridge0): Enslaving as an active interface with a down link [ 1010.163652][T23275] bond1: (slave gretap1): making interface the new active one [ 1010.175685][T23275] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1010.186427][T23324] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4589'. [ 1010.406498][T23324] netlink: 'syz.3.4589': attribute type 4 has an invalid length. [ 1010.416026][T23325] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1010.430549][T23338] overlayfs: missing 'lowerdir' [ 1011.291262][ T9418] team0: Port device gtp0 removed [ 1011.346168][ T9418] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1011.593837][ T9418] bond0 (unregistering): Released all slaves [ 1011.639256][ T9418] bond1 (unregistering): Released all slaves [ 1011.710369][ T9418] bond2 (unregistering): Released all slaves [ 1011.755262][ T9418] bond3 (unregistering): Released all slaves [ 1011.814510][ T9418] bond4 (unregistering): Released all slaves [ 1011.871042][ T9418] bond5 (unregistering): Released all slaves [ 1011.916871][ T9418] bond6 (unregistering): Released all slaves [ 1011.950061][ T5850] Bluetooth: hci1: command tx timeout [ 1011.978339][ T9418] bond7 (unregistering): Released all slaves [ 1012.006021][ T9418] bond8 (unregistering): Released all slaves [ 1012.240050][ T5507] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1012.278690][ T9418] : left promiscuous mode [ 1012.446482][ T9418] tipc: Left network mode [ 1012.523712][T23451] bond5: option lacp_rate: invalid value (240) [ 1012.562968][T23451] bond5 (unregistering): Released all slaves [ 1012.568818][T23490] FAULT_INJECTION: forcing a failure. [ 1012.568818][T23490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1012.629109][T23292] chnl_net:caif_netlink_parms(): no params data found [ 1012.639897][T23490] CPU: 0 UID: 0 PID: 23490 Comm: syz.4.4599 Tainted: G L syzkaller #0 PREEMPT(full) [ 1012.639926][T23490] Tainted: [L]=SOFTLOCKUP [ 1012.639932][T23490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1012.639942][T23490] Call Trace: [ 1012.639950][T23490] [ 1012.639958][T23490] dump_stack_lvl+0xe8/0x150 [ 1012.639991][T23490] should_fail_ex+0x412/0x560 [ 1012.640022][T23490] _copy_from_user+0x2d/0xb0 [ 1012.640044][T23490] ___sys_sendmsg+0x1c6/0x360 [ 1012.640063][T23490] ? __lock_acquire+0x6b5/0x2cf0 [ 1012.640094][T23490] ? __pfx____sys_sendmsg+0x10/0x10 [ 1012.640144][T23490] ? __fget_files+0x2a/0x420 [ 1012.640162][T23490] ? __fget_files+0x3a0/0x420 [ 1012.640190][T23490] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1012.640212][T23490] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1012.640240][T23490] ? __pfx_ksys_write+0x10/0x10 [ 1012.640270][T23490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.640290][T23490] do_syscall_64+0x15f/0xf80 [ 1012.640312][T23490] ? trace_irq_disable+0x3b/0x140 [ 1012.640336][T23490] ? clear_bhb_loop+0x40/0x90 [ 1012.640358][T23490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.640376][T23490] RIP: 0033:0x7ff57c79c819 [ 1012.640392][T23490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1012.640406][T23490] RSP: 002b:00007ff57a9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1012.640426][T23490] RAX: ffffffffffffffda RBX: 00007ff57ca15fa0 RCX: 00007ff57c79c819 [ 1012.640439][T23490] RDX: 0000000002000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1012.640451][T23490] RBP: 00007ff57a9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1012.640462][T23490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1012.640472][T23490] R13: 00007ff57ca16038 R14: 00007ff57ca15fa0 R15: 00007ff57cb3fa48 [ 1012.640500][T23490] [ 1013.124643][T23573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1013.140291][T23573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1013.391195][ T9418] hsr_slave_0: left promiscuous mode [ 1013.407687][ T9418] hsr_slave_1: left promiscuous mode [ 1013.570696][T23620] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4605'. [ 1013.705678][T23630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4606'. [ 1013.997563][T23641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4609'. [ 1014.029446][ T5850] Bluetooth: hci1: command tx timeout [ 1014.059739][T23292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.067185][T23292] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.074405][T23292] bridge_slave_0: entered allmulticast mode [ 1014.082351][T23292] bridge_slave_0: entered promiscuous mode [ 1014.103411][ T5507] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1014.110232][ T5959] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1014.119363][T23292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.127375][T23292] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.140216][T23292] bridge_slave_1: entered allmulticast mode [ 1014.150258][T23292] bridge_slave_1: entered promiscuous mode [ 1014.266818][ T5959] usb 4-1: Using ep0 maxpacket: 32 [ 1014.291471][ T5959] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1014.308015][ T5959] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.328250][T23292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1014.344722][ T5959] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1014.363266][T23292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.377000][ T5959] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1014.399773][ T5959] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1014.418855][T23672] fuse: Unknown parameter '' [ 1014.467568][ T5959] usb 4-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 1014.491698][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.531532][ T5959] usb 4-1: Product: syz [ 1014.535764][ T5959] usb 4-1: Manufacturer: syz [ 1014.545831][ T5959] usb 4-1: SerialNumber: syz [ 1014.668409][T23292] team0: Port device team_slave_0 added [ 1014.698864][T23292] team0: Port device team_slave_1 added [ 1015.010003][T23292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1015.050009][T23292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.090688][ T5959] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1015.121918][ T5959] usb 4-1: MIDIStreaming interface descriptor not found [ 1015.165398][ T5959] usb 4-1: USB disconnect, device number 73 [ 1015.219805][T23760] FAULT_INJECTION: forcing a failure. [ 1015.219805][T23760] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.250943][T23760] CPU: 0 UID: 0 PID: 23760 Comm: syz.3.4612 Tainted: G L syzkaller #0 PREEMPT(full) [ 1015.250967][T23760] Tainted: [L]=SOFTLOCKUP [ 1015.250972][T23760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1015.250978][T23760] Call Trace: [ 1015.250983][T23760] [ 1015.250989][T23760] dump_stack_lvl+0xe8/0x150 [ 1015.251009][T23760] should_fail_ex+0x412/0x560 [ 1015.251028][T23760] should_failslab+0xa8/0x100 [ 1015.251044][T23760] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1015.251057][T23760] ? __alloc_skb+0x186/0x7d0 [ 1015.251067][T23760] ? __alloc_skb+0x1d0/0x7d0 [ 1015.251075][T23760] ? __local_bh_enable_ip+0xd0/0x130 [ 1015.251092][T23760] __alloc_skb+0x1d0/0x7d0 [ 1015.251104][T23760] netlink_sendmsg+0x5d4/0xb40 [ 1015.251118][T23760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1015.251130][T23760] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1015.251142][T23760] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1015.251156][T23760] ____sys_sendmsg+0x972/0x9f0 [ 1015.251167][T23760] ? __might_fault+0xaf/0x130 [ 1015.251181][T23760] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1015.251196][T23760] ? import_iovec+0x73/0xa0 [ 1015.251210][T23760] ___sys_sendmsg+0x2a5/0x360 [ 1015.251220][T23760] ? __lock_acquire+0x6b5/0x2cf0 [ 1015.251237][T23760] ? __pfx____sys_sendmsg+0x10/0x10 [ 1015.251264][T23760] ? __fget_files+0x2a/0x420 [ 1015.251274][T23760] ? __fget_files+0x3a0/0x420 [ 1015.251289][T23760] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1015.251301][T23760] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1015.251316][T23760] ? __pfx_ksys_write+0x10/0x10 [ 1015.251333][T23760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.251344][T23760] do_syscall_64+0x15f/0xf80 [ 1015.251358][T23760] ? trace_irq_disable+0x3b/0x140 [ 1015.251372][T23760] ? clear_bhb_loop+0x40/0x90 [ 1015.251385][T23760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.251395][T23760] RIP: 0033:0x7f7eaf79c819 [ 1015.251406][T23760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.251415][T23760] RSP: 002b:00007f7eb06ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1015.251426][T23760] RAX: ffffffffffffffda RBX: 00007f7eafa15fa0 RCX: 00007f7eaf79c819 [ 1015.251434][T23760] RDX: 0000000002000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1015.251441][T23760] RBP: 00007f7eb06ba090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.251447][T23760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.251453][T23760] R13: 00007f7eafa16038 R14: 00007f7eafa15fa0 R15: 00007f7eafb3fa48 [ 1015.251468][T23760] [ 1015.566326][T13478] udevd[13478]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1015.598950][T23292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1015.780602][ T9418] IPVS: stop unused estimator thread 0... [ 1015.819674][T23292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1015.865377][T23292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.917263][ T5959] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1016.006797][T23292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.107816][ T5850] Bluetooth: hci1: command tx timeout [ 1016.114865][ T5959] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1016.127080][ T5959] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1016.164079][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.336609][ T5959] usb 4-1: config 0 descriptor?? [ 1016.488966][T23292] hsr_slave_0: entered promiscuous mode [ 1016.531671][T23292] hsr_slave_1: entered promiscuous mode [ 1016.575478][T23292] debugfs: 'hsr0' already exists in 'hsr' [ 1016.609368][T23292] Cannot create hsr debugfs directory [ 1016.781637][T23764] fuse: Bad value for 'fd' [ 1016.879774][ T5959] video4linux radio48: keene_cmd_main failed (-71) [ 1016.958193][ T5959] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 1017.163547][ T5959] usb 4-1: USB disconnect, device number 74 [ 1017.375655][ T5507] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1017.502119][T23898] program syz.4.4618 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1017.787379][T15711] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1018.002567][T15711] usb 5-1: Using ep0 maxpacket: 16 [ 1018.030143][T15711] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 1018.063149][T15711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 1018.111535][T15711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024 [ 1018.149356][T15711] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1018.187757][ T5850] Bluetooth: hci1: command tx timeout [ 1018.202439][T15711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.210932][T15711] usb 5-1: Product: syz [ 1018.215507][T15711] usb 5-1: Manufacturer: syz [ 1018.220899][T15711] usb 5-1: SerialNumber: syz [ 1018.231255][T15711] usb 5-1: config 0 descriptor?? [ 1018.252027][T15711] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 1018.453298][T15711] usb 5-1: USB disconnect, device number 24 [ 1018.861090][T23965] kvm: pic: non byte read [ 1018.874941][T23965] kvm: pic: level sensitive irq not supported [ 1018.875005][T23965] kvm: pic: non byte read [ 1018.899947][T23965] kvm: pic: level sensitive irq not supported [ 1018.900078][T23965] kvm: pic: non byte read [ 1018.924604][T23965] kvm: pic: level sensitive irq not supported [ 1018.924766][T23965] kvm: pic: non byte read [ 1018.937746][T23965] kvm: pic: level sensitive irq not supported [ 1018.937809][T23965] kvm: pic: non byte read [ 1018.998114][T23965] kvm: pic: level sensitive irq not supported [ 1018.998181][T23965] kvm: pic: non byte read [ 1019.045268][T23965] kvm: pic: level sensitive irq not supported [ 1019.045334][T23965] kvm: pic: non byte read [ 1019.075449][T23965] kvm: pic: level sensitive irq not supported [ 1019.075564][T23965] kvm: pic: non byte read [ 1019.093327][T23965] kvm: pic: level sensitive irq not supported [ 1019.093468][T23965] kvm: pic: non byte read [ 1019.106479][T23965] kvm: pic: level sensitive irq not supported [ 1019.107288][T23965] kvm: pic: non byte read [ 1019.142269][T23965] kvm: pic: level sensitive irq not supported [ 1019.584906][T23292] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1019.655224][T23292] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1019.689050][T23292] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1019.727459][T23292] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1019.759040][T23292] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1019.814324][T23292] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1019.840090][T23292] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1019.915235][T23292] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1020.131804][T23292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.208783][T23292] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.235841][ T9423] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.243073][ T9423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.311325][ T9423] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.318618][ T9423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.555775][T24018] netlink: 556 bytes leftover after parsing attributes in process `syz.2.4625'. [ 1020.582382][T23292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1020.620086][T24018] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4625'. [ 1020.728192][T23292] veth0_vlan: entered promiscuous mode [ 1020.770854][T23292] veth1_vlan: entered promiscuous mode [ 1020.885094][T23292] veth0_macvtap: entered promiscuous mode [ 1020.931042][T23292] veth1_macvtap: entered promiscuous mode [ 1021.017293][T23292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1021.082303][T23292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1021.160237][ T9428] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.217704][ T9428] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.263153][ T9428] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.318390][T15712] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 1021.335272][ T9428] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.503115][T15712] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1021.561205][T15712] usb 5-1: not running at top speed; connect to a high speed hub [ 1021.601400][T15712] usb 5-1: config 2 has an invalid interface number: 77 but max is 0 [ 1021.632325][T15712] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.671442][T15712] usb 5-1: config 2 has no interface number 0 [ 1021.708168][T15712] usb 5-1: New USB device found, idVendor=0421, idProduct=042d, bcdDevice=67.12 [ 1021.736402][T15712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.759466][ T9432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.780847][T15712] usb 5-1: Product: syz [ 1021.795985][ T9432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.807349][T15712] usb 5-1: Manufacturer: syz [ 1021.823823][T15712] usb 5-1: SerialNumber: syz [ 1021.929279][ T9418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.955968][ T9418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1022.128008][T24035] bond0: (slave bond_slave_1): Releasing backup interface [ 1022.209499][T15712] rndis_host 5-1:2.77: invalid descriptor buffer length [ 1022.235972][T15712] rndis_host 5-1:2.77: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1022.271662][T15712] cdc_acm 5-1:2.77: invalid descriptor buffer length [ 1022.323590][T15712] usb 5-1: USB disconnect, device number 25 [ 1023.746820][T15712] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1023.816804][ T7273] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1023.916772][T15712] usb 5-1: Using ep0 maxpacket: 32 [ 1023.942674][T15712] usb 5-1: config 0 has no interfaces? [ 1023.962464][T15712] usb 5-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32 [ 1023.992126][ T7273] usb 2-1: Using ep0 maxpacket: 8 [ 1023.998802][T15712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.022942][ T7273] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.047097][T15712] usb 5-1: Product: syz [ 1024.054384][ T7273] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1024.073630][ T7273] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1024.091921][ T7273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.110559][T15712] usb 5-1: Manufacturer: syz [ 1024.115035][ T7273] usb 2-1: Product: syz [ 1024.133613][ T7273] usb 2-1: Manufacturer: syz [ 1024.140242][T15712] usb 5-1: SerialNumber: syz [ 1024.150656][ T7273] usb 2-1: SerialNumber: syz [ 1024.173210][ T7273] usb 2-1: config 0 descriptor?? [ 1024.205438][T15712] usb 5-1: config 0 descriptor?? [ 1024.206528][ T7273] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 1024.481086][T24145] binder_alloc: 24120: binder_alloc_buf, no vma [ 1024.482502][ T5909] usb 5-1: USB disconnect, device number 26 [ 1024.521773][T24145] blktrace: Concurrent blktraces are not allowed on nbd1 [ 1025.025999][T24172] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1025.145644][T24178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1025.162888][T24178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1025.254459][T24167] overlayfs: missing 'lowerdir' [ 1025.383645][T24188] loop8: detected capacity change from 0 to 7 [ 1025.398480][T24188] Dev loop8: unable to read RDB block 7 [ 1025.407621][T24188] loop8: unable to read partition table [ 1025.414875][T24188] loop8: partition table beyond EOD, truncated [ 1025.424891][T24188] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1025.466852][T24193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1025.559452][T24195] mac80211_hwsim hwsim22 syzkaller0: entered promiscuous mode [ 1025.576837][T24195] mac80211_hwsim hwsim22 syzkaller0: entered allmulticast mode [ 1026.293253][T24211] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1026.538675][T24224] netlink: 'syz.4.4654': attribute type 1 has an invalid length. [ 1026.634348][ T7273] snd_usb_toneport 2-1:0.0: set_interface failed [ 1026.660562][ T7273] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 1026.682236][ T7273] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 1026.716535][ T7273] usb 2-1: USB disconnect, device number 70 [ 1026.869540][T24240] loop8: detected capacity change from 0 to 7 [ 1026.876755][T24240] Dev loop8: unable to read RDB block 7 [ 1026.884863][T24240] loop8: unable to read partition table [ 1026.892038][T24240] loop8: partition table beyond EOD, truncated [ 1026.906507][T24240] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1027.065635][T24245] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4658'. [ 1027.084393][T24245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4658'. [ 1027.336553][T24249] FAULT_INJECTION: forcing a failure. [ 1027.336553][T24249] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.407109][T24249] CPU: 1 UID: 0 PID: 24249 Comm: syz.2.4660 Tainted: G L syzkaller #0 PREEMPT(full) [ 1027.407138][T24249] Tainted: [L]=SOFTLOCKUP [ 1027.407145][T24249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1027.407155][T24249] Call Trace: [ 1027.407162][T24249] [ 1027.407167][T24249] dump_stack_lvl+0xe8/0x150 [ 1027.407189][T24249] should_fail_ex+0x412/0x560 [ 1027.407209][T24249] should_failslab+0xa8/0x100 [ 1027.407225][T24249] __kmalloc_cache_noprof+0x88/0x660 [ 1027.407237][T24249] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1027.407252][T24249] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1027.407273][T24249] ? genl_start+0x1c9/0x6c0 [ 1027.407299][T24249] genl_start+0x1c9/0x6c0 [ 1027.407318][T24249] ? netlink_lookup+0x30/0x200 [ 1027.407350][T24249] __netlink_dump_start+0x469/0x7e0 [ 1027.407386][T24249] genl_family_rcv_msg_dumpit+0x213/0x310 [ 1027.407413][T24249] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1027.407434][T24249] ? genl_get_cmd+0x6cb/0x960 [ 1027.407460][T24249] ? __pfx_genl_start+0x10/0x10 [ 1027.407479][T24249] ? __pfx_genl_dumpit+0x10/0x10 [ 1027.407498][T24249] ? __pfx_genl_done+0x10/0x10 [ 1027.407534][T24249] genl_rcv_msg+0x5e8/0x7a0 [ 1027.407564][T24249] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1027.407585][T24249] ? __pfx_ethnl_default_start+0x10/0x10 [ 1027.407606][T24249] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 1027.407625][T24249] ? __pfx_ethnl_default_done+0x10/0x10 [ 1027.407647][T24249] ? __pfx_ref_tracker_free+0x10/0x10 [ 1027.407665][T24249] ? __asan_memcpy+0x40/0x70 [ 1027.407683][T24249] ? __skb_clone+0x63/0x7a0 [ 1027.407712][T24249] netlink_rcv_skb+0x232/0x4b0 [ 1027.407740][T24249] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1027.407765][T24249] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1027.407807][T24249] ? down_read+0x270/0x2e0 [ 1027.407831][T24249] ? genl_rcv+0xd/0x40 [ 1027.407855][T24249] genl_rcv+0x28/0x40 [ 1027.407876][T24249] netlink_unicast+0x75c/0x8e0 [ 1027.407918][T24249] netlink_sendmsg+0x813/0xb40 [ 1027.407947][T24249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1027.407969][T24249] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1027.407991][T24249] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1027.408016][T24249] ____sys_sendmsg+0x972/0x9f0 [ 1027.408037][T24249] ? __might_fault+0xaf/0x130 [ 1027.408064][T24249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1027.408093][T24249] ? import_iovec+0x73/0xa0 [ 1027.408118][T24249] ___sys_sendmsg+0x2a5/0x360 [ 1027.408137][T24249] ? __lock_acquire+0x6b5/0x2cf0 [ 1027.408168][T24249] ? __pfx____sys_sendmsg+0x10/0x10 [ 1027.408224][T24249] ? __fget_files+0x2a/0x420 [ 1027.408243][T24249] ? __fget_files+0x3a0/0x420 [ 1027.408272][T24249] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1027.408299][T24249] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1027.408328][T24249] ? __pfx_ksys_write+0x10/0x10 [ 1027.408358][T24249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.408378][T24249] do_syscall_64+0x15f/0xf80 [ 1027.408401][T24249] ? trace_irq_disable+0x3b/0x140 [ 1027.408425][T24249] ? clear_bhb_loop+0x40/0x90 [ 1027.408449][T24249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.408468][T24249] RIP: 0033:0x7f424119c819 [ 1027.408486][T24249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1027.408502][T24249] RSP: 002b:00007f4242130028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1027.408522][T24249] RAX: ffffffffffffffda RBX: 00007f4241415fa0 RCX: 00007f424119c819 [ 1027.408536][T24249] RDX: 0000000002000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1027.408549][T24249] RBP: 00007f4242130090 R08: 0000000000000000 R09: 0000000000000000 [ 1027.408560][T24249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1027.408571][T24249] R13: 00007f4241416038 R14: 00007f4241415fa0 R15: 00007f424153fa48 [ 1027.408603][T24249] [ 1027.899231][T24251] sctp: [Deprecated]: syz.3.4661 (pid 24251) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1027.899231][T24251] Use struct sctp_sack_info instead [ 1027.987015][T24256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.995857][T24256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.291265][T24279] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4667'. [ 1028.447455][T24282] loop8: detected capacity change from 0 to 7 [ 1028.486411][T24282] Dev loop8: unable to read RDB block 7 [ 1028.495809][T24285] fuse: Unknown parameter '0x0000000000000005' [ 1028.505975][T24282] loop8: unable to read partition table [ 1028.514875][T24282] loop8: partition table beyond EOD, truncated [ 1028.521734][T24282] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1028.608856][T24292] dvmrp0: left allmulticast mode [ 1028.621769][T24292] syz_tun: left allmulticast mode [ 1028.669669][T24296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4670'. [ 1028.694289][T24296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4670'. [ 1028.820449][ T9418] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1028.837308][T24293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.874846][ T9418] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1028.885651][ T9418] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1028.900806][T24293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.957560][ T9423] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1029.126912][ T5926] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1029.326763][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 1029.347878][ T5926] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 1029.424276][ T5926] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1029.455845][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.508858][ T5926] usb 2-1: Product: syz [ 1029.535965][ T5926] usb 2-1: Manufacturer: syz [ 1029.555030][ T5926] usb 2-1: SerialNumber: syz [ 1029.628505][ T5926] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1029.655148][ T5926] r8152-cfgselector 2-1: config 0 descriptor?? [ 1031.580456][T24355] loop5: detected capacity change from 0 to 1 [ 1031.608280][T24355] Dev loop5: unable to read RDB block 1 [ 1031.629856][T24355] loop5: unable to read partition table [ 1031.646455][T24357] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4674'. [ 1031.660547][T24355] loop5: partition table beyond EOD, truncated [ 1031.691847][T24355] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1031.898900][T24360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.931809][T24360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.012085][T15711] r8152-cfgselector 2-1: USB disconnect, device number 71 [ 1032.150825][T24382] syz_tun: entered allmulticast mode [ 1032.156896][ T5902] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1032.177918][T24382] syz_tun: left allmulticast mode [ 1032.327378][T24392] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4681'. [ 1032.356827][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 1032.365373][ T5902] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1032.390550][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.419832][ T5902] usb 5-1: config 0 descriptor?? [ 1032.448437][ T5902] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1032.835360][T24411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.862688][T24411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.885621][ T5902] gspca_sunplus: reg_w_riv err -71 [ 1032.894843][ T5902] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1032.927835][ T5902] usb 5-1: USB disconnect, device number 27 [ 1033.034761][T24423] netlink: 'syz.1.4686': attribute type 10 has an invalid length. [ 1033.061130][T24423] macvlan1: entered allmulticast mode [ 1033.100000][T24423] veth1_vlan: entered allmulticast mode [ 1033.121326][T24423] team0: Port device macvlan1 added [ 1033.185026][T24411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.206372][T24411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.695206][T24442] FAULT_INJECTION: forcing a failure. [ 1033.695206][T24442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1033.733784][T24442] CPU: 0 UID: 0 PID: 24442 Comm: syz.1.4691 Tainted: G L syzkaller #0 PREEMPT(full) [ 1033.733812][T24442] Tainted: [L]=SOFTLOCKUP [ 1033.733819][T24442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1033.733830][T24442] Call Trace: [ 1033.733838][T24442] [ 1033.733846][T24442] dump_stack_lvl+0xe8/0x150 [ 1033.733879][T24442] should_fail_ex+0x412/0x560 [ 1033.733912][T24442] _copy_from_iter+0x1d3/0x1670 [ 1033.733930][T24442] ? rcu_is_watching+0x15/0xb0 [ 1033.733950][T24442] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1033.733970][T24442] ? __build_skb+0x62/0x440 [ 1033.733998][T24442] ? __build_skb+0x62/0x440 [ 1033.734024][T24442] ? __pfx__copy_from_iter+0x10/0x10 [ 1033.734045][T24442] ? __build_skb+0x2a2/0x440 [ 1033.734072][T24442] ? netlink_sendmsg+0x650/0xb40 [ 1033.734089][T24442] ? skb_put+0x11b/0x210 [ 1033.734109][T24442] netlink_sendmsg+0x6c0/0xb40 [ 1033.734136][T24442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1033.734158][T24442] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1033.734177][T24442] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1033.734197][T24442] ____sys_sendmsg+0x972/0x9f0 [ 1033.734213][T24442] ? __might_fault+0xaf/0x130 [ 1033.734236][T24442] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1033.734264][T24442] ? import_iovec+0x73/0xa0 [ 1033.734287][T24442] ___sys_sendmsg+0x2a5/0x360 [ 1033.734306][T24442] ? __lock_acquire+0x6b5/0x2cf0 [ 1033.734336][T24442] ? __pfx____sys_sendmsg+0x10/0x10 [ 1033.734387][T24442] ? __fget_files+0x2a/0x420 [ 1033.734404][T24442] ? __fget_files+0x3a0/0x420 [ 1033.734438][T24442] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1033.734456][T24442] ? irqentry_exit+0x218/0x730 [ 1033.734482][T24442] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1033.734510][T24442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.734538][T24442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.734557][T24442] do_syscall_64+0x15f/0xf80 [ 1033.734579][T24442] ? trace_irq_disable+0x3b/0x140 [ 1033.734602][T24442] ? clear_bhb_loop+0x40/0x90 [ 1033.734624][T24442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.734641][T24442] RIP: 0033:0x7f5d51f9c819 [ 1033.734658][T24442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.734673][T24442] RSP: 002b:00007f5d52ea0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1033.734693][T24442] RAX: ffffffffffffffda RBX: 00007f5d52215fa0 RCX: 00007f5d51f9c819 [ 1033.734706][T24442] RDX: 000000000400c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1033.734718][T24442] RBP: 00007f5d52ea0090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.734729][T24442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.734740][T24442] R13: 00007f5d52216038 R14: 00007f5d52215fa0 R15: 00007f5d5233fa48 [ 1033.734765][T24442] [ 1034.181852][ T30] audit: type=1326 audit(1776884039.170:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24440 comm="syz.4.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c79c819 code=0x7ffc0000 [ 1034.217980][T24445] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4693'. [ 1034.227902][ T30] audit: type=1326 audit(1776884039.200:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24440 comm="syz.4.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c79c819 code=0x7ffc0000 [ 1034.287346][ T30] audit: type=1326 audit(1776884039.270:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24440 comm="syz.4.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff57c79c819 code=0x7ffc0000 [ 1034.320559][ T30] audit: type=1326 audit(1776884039.280:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24440 comm="syz.4.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c79c819 code=0x7ffc0000 [ 1034.389054][ T30] audit: type=1326 audit(1776884039.280:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24440 comm="syz.4.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c79c819 code=0x7ffc0000 [ 1034.433311][ T30] audit: type=1326 audit(1776884039.300:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24440 comm="syz.4.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff57c79c819 code=0x7ffc0000 [ 1034.511917][T24450] x_tables: duplicate underflow at hook 4 [ 1034.541804][ T30] audit: type=1326 audit(1776884039.370:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24440 comm="syz.4.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c79c819 code=0x7ffc0000 [ 1034.584345][ T30] audit: type=1326 audit(1776884039.370:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24440 comm="syz.4.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c79c819 code=0x7ffc0000 [ 1034.630924][T24465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.643132][ T30] audit: type=1326 audit(1776884039.410:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24440 comm="syz.4.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c79c819 code=0x7ffc0000 [ 1034.669298][T24465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.689803][T24465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.702635][T24465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.711181][ T30] audit: type=1326 audit(1776884039.410:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24440 comm="syz.4.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c79c819 code=0x7ffc0000 [ 1034.752669][T24465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.761335][ T7273] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1034.779408][T24465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.934174][ T7273] usb 2-1: Using ep0 maxpacket: 16 [ 1034.980874][ T7273] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.005846][ T7273] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.035102][ T7273] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1035.064719][ T7273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.096315][T24493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4699'. [ 1036.161799][T24493] : entered promiscuous mode [ 1036.271450][ T7273] mcp2221 0003:04D8:00DD.003E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1036.479009][T24450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.505756][T24450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.545512][T24450] i2c i2c-1: unsupported multi-msg i2c transaction [ 1037.636891][ T5909] usb 2-1: reset high-speed USB device number 72 using dummy_hcd [ 1038.638383][ T7273] usb 2-1: USB disconnect, device number 72 [ 1054.369867][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.376282][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1086.279010][T24548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4705'. [ 1086.338699][T24548] hsr0: entered promiscuous mode [ 1086.359296][T24548] macvlan2: entered allmulticast mode [ 1086.373490][T24548] hsr0: entered allmulticast mode [ 1086.383014][T24548] hsr_slave_0: entered allmulticast mode [ 1086.393619][T24555] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4709'. [ 1086.407592][T24548] hsr_slave_1: entered allmulticast mode [ 1192.177966][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1192.184950][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16235/1:b..l [ 1192.193522][ C0] rcu: (detected by 0, t=10503 jiffies, g=175497, q=781 ncpus=2) [ 1192.201347][ C0] task:syz-executor state:R running task stack:22304 pid:16235 tgid:16235 ppid:16230 task_flags:0x400140 flags:0x00080000 [ 1192.215855][ C0] Call Trace: [ 1192.219157][ C0] [ 1192.222204][ C0] __schedule+0x17b4/0x5680 [ 1192.226773][ C0] ? __pfx___schedule+0x10/0x10 [ 1192.231616][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1192.236559][ C0] preempt_schedule_irq+0x4d/0xa0 [ 1192.241578][ C0] irqentry_exit+0x14f/0x730 [ 1192.246249][ C0] ? trace_irq_disable+0x3b/0x140 [ 1192.251272][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1192.257249][ C0] RIP: 0010:lock_release+0x2d7/0x3c0 [ 1192.262532][ C0] Code: 06 9f 11 00 00 00 00 eb b5 e8 05 a6 16 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 f5 c0 9e 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 1a 96 19 0a cc 48 8d 3d 32 dc 94 [ 1192.282128][ C0] RSP: 0018:ffffc9000dc777a0 EFLAGS: 00000286 [ 1192.288188][ C0] RAX: d831b4cb75a79b00 RBX: 0000000000000202 RCX: 0000000000000046 [ 1192.296150][ C0] RDX: 0000000000000001 RSI: ffffffff8e24e50c RDI: ffffffff8c289ee0 [ 1192.304111][ C0] RBP: ffff88801ffb8bb8 R08: ffffc9000dc778f8 R09: 0000000000000000 [ 1192.312073][ C0] R10: ffffc9000dc77958 R11: fffff52001b8ef2d R12: 0000000000000001 [ 1192.320037][ C0] R13: 0000000000000001 R14: ffffffff8e95cce0 R15: ffff88801ffb8000 [ 1192.328030][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1192.333169][ C0] unwind_next_frame+0x1bba/0x2550 [ 1192.338282][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1192.343408][ C0] ? __unwind_start+0xf7/0x760 [ 1192.348184][ C0] __unwind_start+0x5b8/0x760 [ 1192.352855][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1192.359006][ C0] arch_stack_walk+0xe3/0x150 [ 1192.363678][ C0] ? arch_stack_walk+0xe3/0x150 [ 1192.368523][ C0] stack_trace_save+0xa9/0x100 [ 1192.373279][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1192.378738][ C0] save_stack+0x122/0x230 [ 1192.383065][ C0] ? __pfx_save_stack+0x10/0x10 [ 1192.387922][ C0] ? page_ext_put+0x97/0xc0 [ 1192.392419][ C0] __reset_page_owner+0x71/0x1f0 [ 1192.397360][ C0] __free_frozen_pages+0xbc7/0xd30 [ 1192.402470][ C0] __slab_free+0x274/0x2c0 [ 1192.406889][ C0] qlist_free_all+0x99/0x100 [ 1192.411480][ C0] ? do_getname+0x2e/0x250 [ 1192.415892][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1192.421520][ C0] __kasan_slab_alloc+0x22/0x80 [ 1192.426365][ C0] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1192.431814][ C0] ? do_getname+0x2e/0x250 [ 1192.436228][ C0] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 1192.441859][ C0] do_getname+0x2e/0x250 [ 1192.446111][ C0] ? user_path_at+0x1e/0x160 [ 1192.450714][ C0] user_path_at+0x2a/0x160 [ 1192.455146][ C0] __x64_sys_umount+0xf6/0x170 [ 1192.459912][ C0] ? __pfx___x64_sys_umount+0x10/0x10 [ 1192.465385][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.471509][ C0] do_syscall_64+0x15f/0xf80 [ 1192.476274][ C0] ? trace_irq_disable+0x3b/0x140 [ 1192.481305][ C0] ? clear_bhb_loop+0x40/0x90 [ 1192.485981][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.491866][ C0] RIP: 0033:0x7ff6dc19da57 [ 1192.496275][ C0] RSP: 002b:00007ff6dc53ecb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1192.504692][ C0] RAX: ffffffffffffffda RBX: 00007ff6dc232048 RCX: 00007ff6dc19da57 [ 1192.512659][ C0] RDX: 0000000000000004 RSI: 0000000000000009 RDI: 00007ff6dc53fe00 [ 1192.520625][ C0] RBP: 00007ff6dc53fdec R08: 0000000000000000 R09: 0000000000000000 [ 1192.528585][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6dc53fe00 [ 1192.536545][ C0] R13: 00007ff6dc232048 R14: 0000000000109646 R15: 00007ff6dc53fe40 [ 1192.544535][ C0] [ 1192.547554][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10502 jiffies! g175497 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1192.559949][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=87300 [ 1192.567822][ C0] rcu: rcu_preempt kthread starved for 10503 jiffies! g175497 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1192.579355][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1192.589320][ C0] rcu: RCU grace-period kthread stack dump: [ 1192.595210][ C0] task:rcu_preempt state:I stack:26880 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1192.607218][ C0] Call Trace: [ 1192.610488][ C0] [ 1192.613417][ C0] __schedule+0x17b4/0x5680 [ 1192.617921][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1192.622878][ C0] ? __pfx___schedule+0x10/0x10 [ 1192.627730][ C0] ? schedule+0x90/0x360 [ 1192.631977][ C0] schedule+0x164/0x360 [ 1192.636147][ C0] schedule_timeout+0x158/0x2c0 [ 1192.641011][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1192.646382][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1192.651670][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1192.657472][ C0] ? prepare_to_swait_event+0x340/0x370 [ 1192.663024][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 1192.667908][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1192.673108][ C0] ? rcu_gp_init+0x1315/0x15b0 [ 1192.677874][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1192.683155][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1192.688358][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1192.694200][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1192.698789][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1192.703984][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1192.709783][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 1192.714709][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 1192.719726][ C0] kthread+0x388/0x470 [ 1192.723787][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1192.728978][ C0] ? __pfx_kthread+0x10/0x10 [ 1192.733560][ C0] ret_from_fork+0x514/0xb70 [ 1192.738152][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1192.743281][ C0] ? __switch_to+0xc79/0x1410 [ 1192.747954][ C0] ? __pfx_kthread+0x10/0x10 [ 1192.752537][ C0] ret_from_fork_asm+0x1a/0x30 [ 1192.757303][ C0] [ 1192.760314][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1192.766634][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1192.771833][ C1] NMI backtrace for cpu 1 [ 1192.771852][ C1] CPU: 1 UID: 0 PID: 24548 Comm: syz.1.4705 Tainted: G L syzkaller #0 PREEMPT(full) [ 1192.771888][ C1] Tainted: [L]=SOFTLOCKUP [ 1192.771894][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1192.771904][ C1] RIP: 0010:sched_mm_cid_fork+0x657/0x10e0 [ 1192.771928][ C1] Code: c7 03 00 00 00 40 e9 19 01 00 00 49 c7 c4 b8 ae 29 8e 49 c1 ec 03 41 bd 00 00 00 80 eb 0a 89 e8 f7 d8 0f 81 09 fe ff ff f3 90 <48> b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 75 40 44 8b 35 [ 1192.771942][ C1] RSP: 0018:ffffc90005d8fc48 EFLAGS: 00000887 [ 1192.771957][ C1] RAX: 0000000080000000 RBX: ffff888033a079d0 RCX: 0000000080000001 [ 1192.771968][ C1] RDX: dffffc0000000000 RSI: 0000000000000002 RDI: ffff888033a079d0 [ 1192.771980][ C1] RBP: 0000000080000000 R08: 1ffff11006740de9 R09: 0000000000000000 [ 1192.771990][ C1] R10: ffff888033a0708c R11: fffff52000bb1f78 R12: 1ffffffff1c535d7 [ 1192.772006][ C1] R13: 0000000080000000 R14: 0000000000000002 R15: ffff888033a06e40 [ 1192.772017][ C1] FS: 00007f5d52ea06c0(0000) GS:ffff888125314000(0000) knlGS:0000000000000000 [ 1192.772031][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1192.772042][ C1] CR2: 00002000002ef030 CR3: 0000000078796000 CR4: 00000000003526f0 [ 1192.772057][ C1] Call Trace: [ 1192.772065][ C1] [ 1192.772083][ C1] bprm_execve+0xdb7/0x1440 [ 1192.772109][ C1] ? __pfx_bprm_execve+0x10/0x10 [ 1192.772126][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1192.772147][ C1] ? alloc_bprm+0x508/0x5c0 [ 1192.772163][ C1] ? count+0x1cb/0x230 [ 1192.772182][ C1] do_execveat_common+0x50d/0x690 [ 1192.772205][ C1] __x64_sys_execveat+0xc7/0xf0 [ 1192.772223][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.772240][ C1] do_syscall_64+0x15f/0xf80 [ 1192.772260][ C1] ? trace_irq_disable+0x3b/0x140 [ 1192.772279][ C1] ? clear_bhb_loop+0x40/0x90 [ 1192.772297][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.772312][ C1] RIP: 0033:0x7f5d51f9c819 [ 1192.772328][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1192.772341][ C1] RSP: 002b:00007f5d52ea0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1192.772356][ C1] RAX: ffffffffffffffda RBX: 00007f5d52215fa0 RCX: 00007f5d51f9c819 [ 1192.772368][ C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1192.772377][ C1] RBP: 00007f5d52032c91 R08: 0000000000001000 R09: 0000000000000000 [ 1192.772387][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1192.772396][ C1] R13: 00007f5d52216038 R14: 00007f5d52215fa0 R15: 00007f5d5233fa48 [ 1192.772415][ C1]