last executing test programs: 9m19.746617265s ago: executing program 4 (id=138): syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) memfd_create(&(0x7f0000000000)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb1w&\xdfP\xba\xdf\xf9F\xc1\xd4x\xaa\x92~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7R\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b$\x0e\x00\x00\x00\x00\x00\x00\x94&\xac\x88\x95\xff\xda\x14d\xcbx\bx\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x00\x17\x00\x00sH\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,-\n\xe6gB#\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f \xbb\xfa\xd3\x88\xad=5J\x13>u\x8c\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xdf\xcf\b\x9f\xb6\xf2\x84\xbag\xe5.\xe4\x1f\xb3\xf4\xc6\xad\x06\x1btb\"\x87\x0f\xd7\xf9\x10~\xdc7\xe7\xdc\x11\xd8?\x040\xc5%%\x1c\x8d\xe0\xb99\x10\x11\x84\xbb\xa9\x9em\x1d\xfd\xd4\xcf\x8cH\xa6\x980\xadg\x9b\x8b$\x0e\x04\xd8\xaa\x17\xac\xf4\xda\xd0z\x87H\x03Du\x91\x839\xec\xd7\xde\xf2P\xf6dj-b\x84\x18\xe9\fy`\xca\x86Za7\xe4P\x95B\xeefTdk\x83\xcc\xa4\xa5\b\x1e\x998\x042\xb2\xdd\x8a\xea\xefQ\xf3-Z\a\xd3\xbb\xd5\x80\xb7\v\xa9\xae*\xca\xd90\xc8\xf4_\xe9N7*K:\xe1\xa4\xf7G\a\xd4Q\f7\xdeK,&\xf8\xe7\xffj\xd1\xae\xa1\x04\xf9\xd5\xc5\\\xcc:\xb1\xa70\x84\xf72 \xd1\xcb}Ky\xa5\x9bx&\xad\xf0U\x1aK\x8bN\xcd\xf50\xa3\xc7\xee\x7f\x1a#\xc9\xb3^\xdd/\x13\xb6\xe9%\xed\x04\xf4o}\x17U\x16C\xb2\xea7C\xb6fH$\xd6\xeb\x03\xd2\xa9\xa0\x9a\x93\xed-S\xe5p\xa28*\x98C\xa9\xf5\xf1*\xaa3\xb9\x88\xb3E\x03\x06\xf7\xa7', 0xa) r1 = socket(0x15, 0x3, 0x0) fchmod(r1, 0x184) syz_io_uring_setup(0x279, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x10100, 0x0, 0x145}, &(0x7f0000000100), &(0x7f0000000000)) (async) r2 = syz_io_uring_setup(0x279, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x10100, 0x0, 0x145}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x2000, @fd=r0, 0x7df, 0x0, 0x0, 0x10}) (async) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x2000, @fd=r0, 0x7df, 0x0, 0x0, 0x10}) io_uring_enter(r2, 0x1ffe, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000371000/0x2000)=nil, 0x2000, 0x0) (async) madvise(&(0x7f0000371000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0xffffffffffffffe0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000002000010300000000010000000000165322a61f44c28c00"/40], 0x24}, 0x1, 0x0, 0x0, 0x200480d4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r8 = dup(0xffffffffffffffff) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x23f8, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10011, 0x0, 0x5e, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x30, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x1, 0x1}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000020601080000000000000000020000000c00078008001240002400000500010006000000050005000a00000005000400000000000c000300686173683a6970000900020073797a3200"], 0x50}, 0x1, 0x0, 0x0, 0x20000084}, 0x84) accept$alg(r8, 0x0, 0x0) (async) accept$alg(r8, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0xc6943) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0xc6943) 9m18.624064746s ago: executing program 4 (id=142): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$kcm(0x10, 0x2, 0x0) truncate(0x0, 0x80000) r1 = socket(0x200000000000011, 0x2, 0x1) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) syz_emit_ethernet(0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c2000000080007000000006800000d0690780a010100ac1414bb0044045d030000000000000000000000000000000000000300004e2100004e210085a0010000000100000001000000"], 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', 0x149182, 0x10) ioctl$TCSETA(r2, 0x5406, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) socket(0x1d, 0x2, 0x6) r5 = socket$kcm(0x10, 0x400000002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000001600), 0x42fffffe) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x3}, 0x4) syz_emit_ethernet(0xfdef, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 9m17.389800229s ago: executing program 4 (id=150): write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0e000000020000007f0a5c003eea176fedf7778e62"], 0x68) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c02000019000100000000000008000000000000000000000000ffff00000000be14144416000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x4000) 9m17.159892621s ago: executing program 4 (id=151): r0 = socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x4, 0x3a, '/dev/infiniband/rdma_cm\x00', 0x3a, '{', 0x3a, './file0', 0x3a, [0x0, 0x50, 0x46, 0x43, 0x50, 0xe6]}, 0x46) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000580)={0x0, 0x40, &(0x7f0000000440), {0x7, 0x100, 0x32315258, 0x6, 0x9, 0x3, 0xb, 0x8}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40080200}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbfb, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x48082, 0x0) pwritev2(r3, &(0x7f00000003c0)=[{&(0x7f0000000080)="dc64f4", 0x3}, {0x0}], 0x2, 0x400, 0x7ff, 0x13) userfaultfd(0x1) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2711, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r6 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x3bf8, 0x400, 0x1, 0x34}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r6, 0x6f58, 0x0, 0x0, 0x0, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x80000000000000, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r10}}, 0x20) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x20009, 0x1, 0x100, 0x1, 0x1ff, 0x4007}, 0x20) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r11, @ANYBLOB="05"], 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x1) 9m15.328790129s ago: executing program 4 (id=161): write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0e000000020000007f0a5c003eea176fedf7778e62"], 0x68) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c02000019000100000000000008000000000000000000000000ffff00000000be14144416000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x4000) 9m15.028252364s ago: executing program 4 (id=162): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400", @ANYRES32=r2, @ANYBLOB="ebffffffffffffff280012"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r3, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x70, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 9m14.507489697s ago: executing program 32 (id=162): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400", @ANYRES32=r2, @ANYBLOB="ebffffffffffffff280012"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r3, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x70, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3m31.963439435s ago: executing program 0 (id=1342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setxattr$incfs_metadata(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)="c8edf21333f01148048e67c4ec359f8d2278bcce3bbbace72f7c79b68e89e5886e72456d2e8e55fd11bdbe0844cb71473fd1cc86845ea1d7ab2d43a687024cd577f35d93d79fd73816863b5ee576e049886e699a3cefe005bb763dc7fb4cd5e9488f3d1c37b4fd0fcf327dd85f4a8c3937106fe431ad2e1e139e2ec2bb0f12afda65e573b2fc999af268e7a750338c296aaff3bebc679e7bb132ca5031e8e90c85e78cec76b4856e6ed482ef6a01b1caca1e55b32b9199d775b403d8059dc8e383", 0xc1, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_setlink={0x48, 0x13, 0xa2f, 0x70bd25, 0x0, {0x7, 0x0, 0x68, r3, 0x900, 0x62010}, [@IFLA_LINKINFO={0x28, 0x1a, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r3, 0x20c0, 0x10000}}}}}}]}, 0x48}}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, &(0x7f00000000c0)={0x2, 0x0, 0x3, 0x9, 'syz1\x00', 0x6}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0x40405515, &(0x7f0000000140)={0x9, 0x4, 0x5, 0x6, 'syz0\x00', 0x7}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3a69a81a2de3cec7, 0x12, r1, 0x58fd5000) r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r7, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x3, 0x7, 0x10001, 0x3ff, 0x2]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x40}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20040004) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1004, 0x2, {0x0}, 0x10000003}) r8 = syz_open_dev$media(&(0x7f00000000c0), 0x3, 0x802) ioctl$MEDIA_IOC_G_TOPOLOGY(r8, 0xc0487c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000f00), 0x0, 0x0, 0x0, 0xf4, 0x0, 0x0}) r9 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000300), 0x1180, 0x0) ioctl$RNDZAPENTCNT(r9, 0x5204, &(0x7f0000000380)=0x4) 3m31.291783628s ago: executing program 0 (id=1347): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) getsockopt$netlink(r2, 0x10e, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x34}}, 0x0) ioctl$SIOCSIFMTU(r5, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r7, 0x0, 0x40000100) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3m27.70997505s ago: executing program 0 (id=1358): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{&(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000980)=[{&(0x7f00000004c0)="64b7c1a65c90ee3b55fae9cf8ebb86ae30f0d095699d9866b2aa9bf478ca47f4355ed5837d5618ad9e50ae71", 0x2c}, {0x0}], 0x2}}, {{&(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}], 0x2, 0x20008040) r1 = syz_io_uring_setup(0x10d1, &(0x7f0000000000)={0x0, 0xc9a7, 0x80, 0x3, 0x334f}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) ftruncate(r1, 0x7) 3m27.341045305s ago: executing program 0 (id=1361): write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0e000000020000007f0a5c003eea176fedf7778e62"], 0x68) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c02000019000100000000000008000000000000000000000000ffff00000000be14144416000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff00000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ff010000000000000000000000000001000004d2330000000a000000000000000000000000000000000000000135000001003b00830000000500000007000000fe8000000000000000000000000000aa000004d63c0000000a000000ff01000000000000000000000000000102350000020007007f0000000000000004000000e0000001000000000000000000000000000004d56c00000002000000000000000000000000000000000000000000000004030300040000000200000003000000fc000000000000000000000000000000000004d33c00000002000000200100000000000000000000000000020000000000000200faffffff0104000081000000fe880000000000000000000000000001000004d32b"], 0x23c}}, 0x4000) 3m27.218003984s ago: executing program 0 (id=1363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8) r4 = accept(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20040011) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000ec0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000500)={0x980, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x33}}}}, [@NL80211_ATTR_FRAME={0x579, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7ff8}, @random="64579df5919d", @device_a, @device_b, {0x4, 0x9}, "", @void, @value=@ver_80211n={0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, @random="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"}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1a}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6002}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x3b9, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1}, @random="831b4a972a5e", @broadcast, @device_b, {0x0, 0x1}, "", @void, @value=@ver_80211n={0x0, 0x8, 0x2, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, @random="d4459b19f64a3a7dd24a3c8a5e3ac98a7476f12e7f98fc7ae97a4d75d374d4132334f9b0f2e222e9feff3de8f33d1fbbfce27d074234f6ff3720e7a1c3fc50bc932ea789846a0742595bbb411e5069a3b32760472d344605d12e36414a2e7410f2097279d43bb73134edbbe6471ade35aeaaf21d5cf561d832c8ece746a23b83649ec48b42437893a03de8790139ddcb06f107755cfb141a1e3728157c6b7099ff33e9c1553dfe27c18ab75886d1b53df78b36e9ec9d526c1ea6ee7bd0a97b84596da054d1ba9b95c3e3b342892c42a3cdeae5eabab9eccb3db6e5ecad7fdb0fea77e3023439373a9c7dc51c08ceee6ea66dc4a80dd5e687265cff2297e2c0507e4d954748a9399a84eb3934621f54bad2a21d6a4cb9defe669f2bdd9aac4c658861653d5df4edc96338c1fe9548e4ed53be7837b322abdd6c6e2c9f08bc035c00a2f87255915918378899fa5d77d052cc948fe5a271161f0cc830683b6fb2ea5ae3d8e0d9f1c42ef34b3e0a9e0fd273ae911ae1f0228eb753163b96847b43877388830bdf1536bf66371c45e2233a3a721a2c650ef4d0d297f16d1803d74c3ddba4e65d3721ecb8d7fe13ce9da13b73f500d3b1ce2ae98ae264c7103fa5a59cc5f513530e4c1b36e664d81936a39e19e3f02c082ea2baf3fb0841062714d18610041614dc696fa7cdc70733603bbd2fc3b8c46e08874b62311b6bb5bdbb53425cdb4a2f85082853bda2be78b628f88e146b6d949b6c05a7b8d06312310318663437759a7714422f5a567d050df3e320de1b068658e49aa9908efb69ae4ed220633d93b43403072ef9b60556fd097c3de7b79260fc1562fcb60391e6ea496ea59867ad862fddefe86949538ea304f927604b125879d66bada841c1117f7323f5a7a8410cc3120c8cb690fe2ed3a3374069f18fc640d6146de04ed9e04233dfcd681aa3b1cf1636292e53338c686c7a00653cec13927e26bee70e405dfc12b12d7c687aa8ed865b1d789d4b0f2b1ddb5347b7126f4870254dfed34b1ebc722603b8a87c6f4ba7365b31e382434004e0d87717797210f1838ddff6dc839ed1d5bc63ad7919ab06ae0dede973f28773f84bcd92c436ccd77547f9ab1d8e2231ad51fbb4c03e4f3701c98b6b12ec3e74a7e6511a222f5364df7fe540432a84e902ce97c21d3ac08f1e362755ab03379cbc798d27e5a08a1b8a2e8af8d99d39bd5afb8a7dffda0a36afe6e8ef38f3063e034047b5d2fa400edb55879526ed3bef698189c6886f4c679fcfe56a3f5659646077b420dff42f6ef078fa"}}]}, 0x980}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000800) r7 = accept4(r6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)) sendfile(r7, r7, 0x0, 0x24) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x20048050}, 0x5f3a1e12030bf48f) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10001, 0x4, 0x5a8b, 0x578, 0xd, 0x44, 0xffff, 0x8, 0xfff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80010}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@getchain={0x24, 0x66, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x4, 0x4}, {0x1, 0xfff1}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x34, r11, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000f40), r5) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r10, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r12, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0xc0) fcntl$getownex(r8, 0x10, &(0x7f0000000140)={0x0, 0x0}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r13}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x6f61d0fcb77f8fdd) 3m26.555897603s ago: executing program 0 (id=1366): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x0, 0x0, 0x83, 0xec}}]}}]}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0xff, 0x402080) io_uring_setup(0x4d51, &(0x7f0000000140)={0x0, 0x21ef, 0x1000, 0x2, 0x12e, 0x0, r3}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000400)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f00000001c0)="0f320f01cb26660f3ace8c0f008966b8009000000f23c00f21f86635200030000f23f8660fc7b2cbe1f30f090f20e06635020000000f22e00f89ba410066b803fef82366ef67f30f5c3c05a5000000"}], 0xaaaaaaaaaaaac44, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x7, 0x4007, 0x100000000], 0x3000, 0x280384}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x7, 0x4007, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000029000/0x4000)=nil, 0x4000, 0x1, 0x10, r5, 0x23290000) (async) mmap(&(0x7f0000029000/0x4000)=nil, 0x4000, 0x1, 0x10, r5, 0x23290000) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) (async) write$char_usb(r0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 3m11.055553484s ago: executing program 33 (id=1366): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x0, 0x0, 0x83, 0xec}}]}}]}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0xff, 0x402080) io_uring_setup(0x4d51, &(0x7f0000000140)={0x0, 0x21ef, 0x1000, 0x2, 0x12e, 0x0, r3}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000400)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f00000001c0)="0f320f01cb26660f3ace8c0f008966b8009000000f23c00f21f86635200030000f23f8660fc7b2cbe1f30f090f20e06635020000000f22e00f89ba410066b803fef82366ef67f30f5c3c05a5000000"}], 0xaaaaaaaaaaaac44, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x7, 0x4007, 0x100000000], 0x3000, 0x280384}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x7, 0x4007, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000029000/0x4000)=nil, 0x4000, 0x1, 0x10, r5, 0x23290000) (async) mmap(&(0x7f0000029000/0x4000)=nil, 0x4000, 0x1, 0x10, r5, 0x23290000) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) (async) write$char_usb(r0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 1m29.908122812s ago: executing program 1 (id=1817): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f00000004c0)=[{0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be10a42f01fe8000000000000000000000000000aaff020000000000000000000000000001330022eb"], 0x10da) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid_for_children\x00') openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x2}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15460100e40000001c0012800b0001006d616373656300000c000280060002404e24000008000500", @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x0) 1m29.235029312s ago: executing program 1 (id=1819): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r2, r1, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x633, 0x0, 0x80000008, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0x0, 0x0, 0x0, 0xfffc, 0xa}, {@in=@local, 0x4d2, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, {0x5, 0x0, 0x0, 0x5}, {0x6}, 0x70bd25, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r5, 0x0, 0x4, &(0x7f0000000040)="442810bc996c301c8107070400", 0x28) syz_usb_connect$hid(0x1, 0x50, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x2005}}}}]}}]}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup3(r2, r1, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x633, 0x0, 0x80000008, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0x0, 0x0, 0x0, 0xfffc, 0xa}, {@in=@local, 0x4d2, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, {0x5, 0x0, 0x0, 0x5}, {0x6}, 0x70bd25, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) setsockopt$inet_buf(r5, 0x0, 0x4, &(0x7f0000000040)="442810bc996c301c8107070400", 0x28) (async) syz_usb_connect$hid(0x1, 0x50, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x2005}}}}]}}]}}, 0x0) (async) 1m27.980007502s ago: executing program 1 (id=1823): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') syz_io_uring_setup(0x4e3, &(0x7f0000000380)={0x0, 0xb31, 0x10100, 0x0, 0x35c, 0x0, r0}, 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000)={0x0, 0x4}, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001a00010028bd7000fedbdf248180800400702ca4b7ece272"], 0x1c}}, 0x884) 1m27.672272186s ago: executing program 1 (id=1826): userfaultfd(0x801) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r4, 0x2285, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x38) read$snapshot(r5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r7, &(0x7f0000000200)='./file0\x00', r6, &(0x7f0000000240)='./file0\x00', 0x46) write$sndseq(r5, &(0x7f0000002840)=[{0x2, 0x0, 0x0, 0x0, @time={0x600000, 0x8}, {}, {}, @raw32}], 0x1c) open_by_handle_at(r3, &(0x7f0000000000)=ANY=[], 0x12000) close(r2) openat$tun(0xffffffffffffff9c, 0x0, 0x20041, 0x0) 1m24.278531645s ago: executing program 1 (id=1839): r0 = syz_io_uring_setup(0x24f1, &(0x7f0000000080)={0x0, 0x89aa, 0x10100, 0x0, 0xe6}, &(0x7f0000000300)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}}) io_uring_enter(r0, 0x31fa, 0x9cd9, 0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ipvlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) (async) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000100)={0x0, r0, 0x1, {0x16, 0x5}, 0x6}, 0x1) r6 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) r7 = socket$inet(0x2, 0x6, 0x3) clock_gettime(0x0, &(0x7f00000047c0)={0x0, 0x0}) recvmmsg(r7, &(0x7f0000004640)=[{{&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/64, 0x40}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000240)=""/15, 0xf}], 0x3}}, {{&(0x7f0000001440)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000002780)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/89, 0x59}, {&(0x7f0000002540)=""/132, 0x84}, {&(0x7f0000002600)=""/161, 0xa1}, {&(0x7f00000002c0)}, {&(0x7f00000026c0)=""/131, 0x83}], 0x6}, 0x9}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002800)=""/187, 0xbb}, {&(0x7f00000028c0)=""/66, 0x42}, {&(0x7f0000002940)=""/117, 0x75}, {&(0x7f00000029c0)=""/87, 0x57}, {&(0x7f0000002a40)=""/251, 0xfb}], 0x5, &(0x7f0000002bc0)=""/76, 0x4c}, 0x81}, {{&(0x7f0000002c40)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000000340)}], 0x1}, 0x1465eb3a}, {{&(0x7f0000002d00)=@pppol2tpv3in6, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002d80)=""/113, 0x71}, {&(0x7f0000002e00)=""/154, 0x9a}], 0x2, &(0x7f0000002f00)=""/178, 0xb2}, 0xb559fc}, {{&(0x7f0000002fc0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000004540)=[{&(0x7f0000003040)=""/145, 0x91}, {&(0x7f0000003100)=""/215, 0xd7}, {&(0x7f0000003200)=""/44, 0x2c}, {&(0x7f0000003240)=""/125, 0x7d}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/178, 0xb2}, {&(0x7f0000004380)=""/159, 0x9f}, {&(0x7f0000004440)=""/249, 0xf9}], 0x8, &(0x7f00000045c0)=""/92, 0x5c}, 0x8204}], 0x6, 0x2000, &(0x7f0000004800)={r8, r9+10000000}) (async) recvmmsg(r7, &(0x7f0000004640)=[{{&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/64, 0x40}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000240)=""/15, 0xf}], 0x3}}, {{&(0x7f0000001440)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000002780)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/89, 0x59}, {&(0x7f0000002540)=""/132, 0x84}, {&(0x7f0000002600)=""/161, 0xa1}, {&(0x7f00000002c0)}, {&(0x7f00000026c0)=""/131, 0x83}], 0x6}, 0x9}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002800)=""/187, 0xbb}, {&(0x7f00000028c0)=""/66, 0x42}, {&(0x7f0000002940)=""/117, 0x75}, {&(0x7f00000029c0)=""/87, 0x57}, {&(0x7f0000002a40)=""/251, 0xfb}], 0x5, &(0x7f0000002bc0)=""/76, 0x4c}, 0x81}, {{&(0x7f0000002c40)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000000340)}], 0x1}, 0x1465eb3a}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002d80)=""/113, 0x71}, {&(0x7f0000002e00)=""/154, 0x9a}], 0x2, &(0x7f0000002f00)=""/178, 0xb2}, 0xb559fc}, {{&(0x7f0000002fc0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000004540)=[{&(0x7f0000003040)=""/145, 0x91}, {&(0x7f0000003100)=""/215, 0xd7}, {&(0x7f0000003200)=""/44, 0x2c}, {&(0x7f0000003240)=""/125, 0x7d}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/178, 0xb2}, {&(0x7f0000004380)=""/159, 0x9f}, {&(0x7f0000004440)=""/249, 0xf9}], 0x8, &(0x7f00000045c0)=""/92, 0x5c}, 0x8204}], 0x6, 0x2000, &(0x7f0000004800)={r8, r9+10000000}) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) (async) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r10, 0x4002f516, &(0x7f00000002c0)={0x80, 0x4}) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r10, 0x4002f516, &(0x7f00000002c0)={0x80, 0x4}) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}, {0x1}, 0x2, {0x2, 0x4e23, @private=0xa010100}, 'vlan1\x00'}) 1m23.988495708s ago: executing program 1 (id=1840): r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x7c95, 0x2, 0x2}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200)={r1, 0xa2, "c2f71b1efef346e8f42622c72b531cd08410fc7ffaf6b03fdbc40146dbfc0658e87b37b4607bc33360aafc46911be38c6c82dcac768fc4bef6ea9ab5051c9fabcf7f2ac252beee738f87607d6b71b2335db80ab3706df9b969df5e94114c5b856293086fe65378180de302a6f6871a97917a648680fe63cf7b1a3011e70075bafae7faf6c32c27737b1c5b1f041ed5b2545fb1c0c93b2cf558b2fd67d1271286b4c4"}, &(0x7f0000000080)=0xaa) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x228000, 0x0) fsopen(&(0x7f0000000300)='befs\x00', 0x1) unshare(0x22020600) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000002180)='./control\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000040)='./control\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0x8d0, &(0x7f00000000c0)={0x0, 0xc48a, 0x800, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7800, 0x40, 0x1ff, 0x9, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x68, 0x0, 0x3, 0x29, 0x0, @multicast1, @remote}}}}) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x54, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private2}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_OIF={0x8, 0x5, r10}, @NHA_GATEWAY={0x14, 0x6, @ip4=@empty}]}, 0x54}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x47ba, 0x3e80, 0x2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3880, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x10201, 0x4, 0x1000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x5) connect$unix(r5, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x3, @mcast1, 0x2008}}, {{0xa, 0xffff, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x28}, 0x1004}}}, 0x108) 1m23.424154741s ago: executing program 34 (id=1840): r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x7c95, 0x2, 0x2}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200)={r1, 0xa2, "c2f71b1efef346e8f42622c72b531cd08410fc7ffaf6b03fdbc40146dbfc0658e87b37b4607bc33360aafc46911be38c6c82dcac768fc4bef6ea9ab5051c9fabcf7f2ac252beee738f87607d6b71b2335db80ab3706df9b969df5e94114c5b856293086fe65378180de302a6f6871a97917a648680fe63cf7b1a3011e70075bafae7faf6c32c27737b1c5b1f041ed5b2545fb1c0c93b2cf558b2fd67d1271286b4c4"}, &(0x7f0000000080)=0xaa) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x228000, 0x0) fsopen(&(0x7f0000000300)='befs\x00', 0x1) unshare(0x22020600) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000002180)='./control\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000040)='./control\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0x8d0, &(0x7f00000000c0)={0x0, 0xc48a, 0x800, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7800, 0x40, 0x1ff, 0x9, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x68, 0x0, 0x3, 0x29, 0x0, @multicast1, @remote}}}}) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x54, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private2}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_OIF={0x8, 0x5, r10}, @NHA_GATEWAY={0x14, 0x6, @ip4=@empty}]}, 0x54}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x47ba, 0x3e80, 0x2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3880, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x10201, 0x4, 0x1000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x5) connect$unix(r5, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x3, @mcast1, 0x2008}}, {{0xa, 0xffff, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x28}, 0x1004}}}, 0x108) 10.638390903s ago: executing program 5 (id=2112): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x18b801, 0x0) (async, rerun: 32) openat$uhid(0xffffffffffffff9c, &(0x7f0000001900), 0x802, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xe9) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket(0x18, 0x0, 0x0) (async, rerun: 32) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x2, 0x0, 0x6}}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) (async, rerun: 32) r8 = socket$pppoe(0x18, 0x1, 0x0) (rerun: 32) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0xc, @remote, 'ip6tnl0\x00'}}, 0x1e) (async) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6638a, 0x1001}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000280)={0xb, @pix={0x0, 0x0, 0x38414761, 0x0, 0x0, 0x0, 0x25}}) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) 8.016044081s ago: executing program 5 (id=2123): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x3b8, 0x280, 0xa, 0x148, 0x0, 0x148, 0x320, 0x240, 0x240, 0x320, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x21}, 0x0, 0x218, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x9, 0x0, 0x4a, 0x87, 0xfffffff8, 0x7fff, 0x9, 0x8, 0x20}, {0x3}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0, 0x0, {0x0, 0x20000000}}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) 7.885438947s ago: executing program 5 (id=2124): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)={0x150, 0x0, 0x0, [{{0x3, 0x2, 0x0, 0x11, 0x0, 0xc4b0, {0x0, 0x9, 0x8fb, 0xec3, 0x7, 0x8, 0x7f, 0x1, 0xffffffff, 0x6000, 0x5, r3, r4, 0xfffff057, 0xa}}, {0x4, 0x0, 0x8, 0x800, 'rootmode'}}, {{0x5, 0x2, 0x900000000000000, 0x21ff, 0x203, 0x2, {0x6, 0x87, 0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffff81, 0x800, 0x5, 0x4, 0xc000, 0x103, r3, 0x0, 0x2, 0x4a}}, {0x6, 0x0, 0x8, 0x2, 'rootmode'}}]}, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x2001000, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@blksize}, {@max_read={'max_read', 0x3d, 0x4}}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@allow_other}, {@default_permissions}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}]}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000200)) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r8 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x8, 0x0}) r11 = io_uring_setup(0x5cee, &(0x7f0000000180)={0x0, 0xf6a0, 0x800, 0x1, 0x20d, 0x0, r8}) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) unshare(0x10000) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r14 = dup3(r13, r12, 0x0) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$LOOP_CONFIGURE(r14, 0x4c0a, &(0x7f0000000380)={r0, 0x8, {0x0, 0x0, 0x0, 0xd, 0x5, 0x0, 0xa, 0x1a, 0x8, "d5ef84ee2eeff8f0e3039d5e90ea5669c30eaaae9380ae2ed8b34f3d481ceee5463501464b2988dc0630446515d303337b82d368e692dd42fd8c1a6380476819", "9b925b889c7f28c1dad1d63c4c7efa51d62eebb73f45e17ff3150bf08f0bd4425d8928dc06c5d7e2f80b989aeeb6042da36b21b3b93928ad783b28d433144247", "609ec2344584a7928905462399d3d7c712c5f7e52b5200044f684f7ad1ff7a4e", [0x81, 0x6]}}) io_uring_enter(r11, 0x203516, 0x0, 0x0, 0x0, 0x0) 7.684147929s ago: executing program 6 (id=2125): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) listen(r0, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8), 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='auxv\x00') syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xb579, 0x400, 0x4, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) unshare(0x2040400) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f0000000100)=0xffffffffffffffff, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) 6.987646683s ago: executing program 5 (id=2127): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x180, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7, 0x0, 0x78}}}, @common=@inet=@multiport={{0x50}, {0x0, 0xfe, [0x0, 0x0, 0x0, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe], [0x0, 0x0, 0x0, 0x1, 0xfe], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xd, 0xd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x34f) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x80001) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/128, 0x80}, {&(0x7f0000000180)=""/69, 0x45}, {&(0x7f0000001e00)=""/4084, 0xff4}, {&(0x7f0000000880)=""/217, 0xd9}], 0x4) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000280)={0x40, 0x3}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b40)={0x34, &(0x7f0000000840)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000006c0)={0x20}, 0x0, 0x0}) 6.714454126s ago: executing program 3 (id=2128): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0xff, 0x9, 0x9, 0x22, @empty, @mcast2, 0x8006, 0x7800, 0x5f5, 0x7fff}}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="450000000003000000000000001c000000000000002f737909006b65726e656c2f64656275672f75796e632f693fbf6936"], 0x45) vmsplice(r0, &(0x7f00000016c0)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000000100)="1a3d2c283816a0c5719c268cc797f2e2e11a77cd1182870bb8b4c2705f5c36af871b44c1cc1b378fb209e78799789f9846b8f0627fb011770e0d31f50dd5a60fea05263b5a6f95f09e5cc73619bda7b3b086e883a495188b2779a23ce33935b8f5f31d0c061744e3dd574015811425accc5c4a6e7b76d44c1dcc8b0ce5412eb86d424015852c3767535539da92105c359ead3dc4121fe7f3e79bbd2a0211f0370452cb8498e05154236c87c98cd3946d1260ecff82d6664aa6da3b", 0xbb}, {&(0x7f00000001c0)="a46e2f5ca96b46923e5af1f2ae5bbdf6d612c55c1f9bf04be22bc5cccf3b41bc8493ee502a50b8c97baae7381627bee544f9c27876a5d778ed6fd9f8008cfe487d6135d6ac18d9dfa533092d1dbd08de4bdd6637b9e3a6841cb1955ad8f4457a71481c9437351016c882567cf7004e6dfd943e9e78b8b57b2116f0f26c3650c4caf21136c3dd70b023124c218100a5b8267935d5db71096dfc8c9a24a115a0abac5945c4c7f503e0f48a90fbb47e11b0eb1705c7151a5f90c15e05b38f1b3119b4261ee3712821e3dac198e37d95b557438ff222c7fa5d9345d3bb36f8e8f966c46b2663", 0xe4}, {&(0x7f0000001380)="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", 0xff}, {&(0x7f0000001480)="e430836d11a5a01a74f10fe73c5717b4d1b165ee4fa0f92b9df70cbf01968a8481aee167826222bdaebc1ed485289faa259653ac3aff9f682c7bbf73391e518cf081417a750a02f514eb20ac70e2f1cda8cd27a8759f58101cd43092ba5363d502af772a0719f03e4f5b08155bed658d99b006e7514652465db8499a64a617eebe7818f3", 0x84}, {&(0x7f0000001540)="14fd3d25931cd3d9d5d65ebe14ce923121512b8e913ad42df4be38e0a26216d7d1a99bcb618795791f3995e61ad1f2c48950b014559a1f630b1ade71da7fdd72bbda786f46a398a45cc8c800b4f6e31edbaa22abf2a2ef400d42293653ba81d8dc9f11ab033e5c57ae1065d3248aed5ec3c332a3edb6a1fd45a70a50ca7e4391d59c03708a678f667f1e08d1980dbd51fa5f39b904ea1c4ca145cc65e400008b1031640c261f9158e889353dfd999c1649dc912e47f6680360420914e96292432e5b4e43bad0cd632447267a2973dbce6d1b7883e2ac998b298f5a398e6ce8475cffd0cfafd85cf7ba7654b1c42818fa50", 0xf1}, {&(0x7f0000001640)="badfb8f530553a05c55801058bc5ba6d3ab4894343f65e5b129961fc2ff7e59ae89df6940c3f55d04c7ca7aab3865f4e02a4bab371e31fb226ff3453d3edbf73e261ca894feaf9f448c7a92020297fce272e2eece974b2c200f6821653c1d2a4f73d4da936", 0x65}], 0x7, 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x4008031, 0xffffffffffffffff, 0x5b76f000) r2 = msgget(0x3, 0xa0) msgsnd(r2, &(0x7f0000000000)={0x3, "028227946122f3ae15bb51ee0a684b9e7019e963e4afe075794db1821e9462772eb7a2c9f12c90942196ad402305223744804545eb30ee9d82d9d58d55d3abaa3aed1ecd5e94b8ecefd1fab93eac57e70a673cbb0db8663c506e64bf4b2478f89f171770d80a3726f1f94fb466b4eee0bb4e2b9b5fa2e5eaa43339ec94d84fe2a75e8e2e1cd704cc0265dbdb22bab26c8c84869fd3fb7441d85e287704788db417d53602210bcfde9b250ecb150ee101c98d76432fdc546ae1fd11e767e91c60660f10c179d12afb20e6371c1971ca"}, 0xd7, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rt_sigprocmask(0x2, &(0x7f00000002c0)={[0x1]}, &(0x7f0000000340), 0x8) 6.131875233s ago: executing program 7 (id=2129): r0 = syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x10100}, 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101002) (rerun: 32) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000029005072ed978b649cc3df2521f686e0f28f24abeabb1f1a9475ed8d03000000"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) (async) r6 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100, 0x0, 0x16e}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4}) io_uring_enter(r6, 0x3f80, 0x3697, 0x25, 0x0, 0x0) (async) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r9, 0x400, 0x0) (async, rerun: 32) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="13000000080000000800000000000e0008000000", @ANYRES32=0x1, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r10, &(0x7f0000000300), 0x0}, 0x20) (async) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) (async, rerun: 64) signalfd(r0, &(0x7f0000000040)={[0xd4b5]}, 0x8) (async, rerun: 64) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x8000000, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) socket$tipc(0x1e, 0x2, 0x0) r11 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r11, 0x7a7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r13, &(0x7f00000bd000), 0x218, 0x0) (async, rerun: 64) recvmmsg(r12, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 64) 6.073541941s ago: executing program 6 (id=2130): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x6, 0x800000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000240)=0x1e) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "6ad9ba", 0x44, 0x2f, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x0, 0x5}, 0x1, {0x10}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x4, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}, 0x7a) (async) dup(r3) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) semctl$IPC_INFO(0x0, 0x2, 0x3, &(0x7f0000000080)=""/120) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="70caa200", @ANYRES16=r5, @ANYBLOB="b54300000000000000004a0000000f00a8007365636f6e646e616d650000"], 0x24}}, 0x2) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@mcast2, 0x14, r7}) (async) socket$key(0xf, 0x3, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000070000000800010001"], 0x40}}, 0x0) (async) fsopen(0x0, 0x0) (async, rerun: 64) socket$inet6(0xa, 0x80002, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) (rerun: 64) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 5.917761701s ago: executing program 2 (id=2131): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003680)=@newtfilter={0x1edc, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1eac, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x94}]}, @TCA_CGROUP_ACT={0x1e98, 0x1, [@m_pedit={0x1e04, 0x7, 0x0, 0x0, {{0xa}, {0x1d5c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xb8, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x9, 0x5, 0x7, 0xa3, 0x5}, 0x5, 0x10, [{0x7, 0xc8, 0x0, 0x9b, 0x7, 0x83b}, {0x3, 0x90db, 0x3, 0xc, 0x5, 0x2}, {0x9, 0xb, 0x8, 0x0, 0x1, 0x100}, {0x7f, 0x306, 0xd33, 0x8, 0x7, 0x4}]}, [{0xdd8, 0x5, 0x4, 0x7ff, 0xe, 0xc}, {0x1, 0xfffffffa, 0x4, 0xfff, 0x9dc, 0x3}, {0x1, 0x7, 0x2, 0x3, 0x2, 0x7}, {0x0, 0x0, 0x40, 0x0, 0xca, 0x8}, {0xf204, 0x4, 0x6, 0x7, 0x40, 0x87}, {0x6, 0x100, 0x7, 0x1, 0x80, 0x4}, {0x80000000, 0x4, 0x2, 0xa, 0x4, 0x863}, {0x80000001, 0x2, 0x3, 0xed, 0x5, 0xffffffff}, {0x4, 0x7, 0x1, 0x80000001, 0x8, 0x4}, {0x6, 0x4, 0x10001, 0x9, 0xc5d, 0x9}, {0x7ae6, 0x3, 0x9, 0x3, 0x200, 0x101}, {0xb, 0x2, 0xfffffffa, 0x3, 0x8, 0x10001}, {0x2, 0x80, 0x80, 0x6, 0x8, 0x11}, {0xd09, 0x0, 0x2, 0x0, 0x5, 0x7f}, {0xfff, 0x4, 0x20, 0x401, 0x4a5, 0x8}, {0x9, 0x6, 0x9, 0x5, 0xfff, 0x3}, {0x2, 0x400, 0x5150, 0x9fce, 0x7fffffff, 0x7ff}, {0xa, 0xbbb5, 0x2, 0x8, 0x0, 0x4}, {0x8, 0x6, 0x2, 0x2, 0x0, 0x6}, {0xa, 0xffffffff, 0x8000, 0xb, 0x8000, 0x4}, {0x60000000, 0x3, 0x1, 0x0, 0x80, 0x2}, {0x4, 0x9, 0x6, 0x7, 0x8, 0x3}, {0x2, 0xfff, 0x2, 0x7, 0xfffffff7, 0xd}, {0x8000, 0x1, 0x7fff, 0x5, 0x0, 0x4}, {0x7f, 0x0, 0x1, 0x5, 0x300000, 0x5}, {0x9, 0x5, 0xd, 0x7fffffff, 0x9, 0x9}, {0x0, 0x0, 0xffff, 0x56, 0x9, 0x3}, {0xd9, 0x5, 0x5, 0x6, 0x40}, {0x9, 0x40, 0x6, 0xf, 0x6, 0x4}, {0x7, 0x40, 0x9, 0x6, 0x4}, {0x4, 0x72, 0xa, 0xfff, 0x0, 0x2}, {0xa8, 0x302, 0x80, 0x7f, 0x626d, 0x6}, {0x81, 0x2, 0x7, 0xfffffffd, 0xfffffffa, 0x7}, {0x1, 0x5, 0x8, 0x2, 0x5a, 0x3}, {0x3, 0x7, 0x2, 0x8, 0x3, 0x9694}, {0x3, 0x6, 0x6, 0x6fa, 0xb77, 0x9}, {0x5, 0x0, 0x1, 0x8, 0x23, 0x1}, {0xea5, 0x4, 0x4, 0x7, 0x7, 0x8}, {0x101, 0x5, 0x6, 0xe, 0x101}, {0x3, 0x9, 0x4, 0x8, 0x79bd, 0xd}, {0xfb6, 0x2, 0x0, 0x5, 0x5, 0x1}, {0xffff07ed, 0xd, 0x1, 0x7, 0x8000}, {0x200, 0x2, 0xd56, 0x7, 0x4, 0x2}, {0x4, 0x3, 0x3, 0xfffffff9, 0x5, 0xd8}, {0x6, 0x0, 0x1, 0x3, 0x9, 0x5}, {0x10000, 0x2, 0x8ab5, 0x8f, 0x6, 0x7}, {0x5, 0x7, 0x2, 0xff, 0x7, 0x3a}, {0x78e, 0xffffffff, 0x3, 0x6, 0x6, 0xe000}, {0x1, 0x4, 0x8, 0x6, 0x10, 0x20}, {0xf, 0x4, 0x1ff, 0x80000000, 0x6}, {0x8, 0x4, 0xb, 0x1, 0x10000, 0x5}, {0x3525, 0x3, 0x5, 0x10001, 0xf1f, 0xf3}, {0xfffffff7, 0x2, 0x3, 0xfffffffb, 0x6e3, 0xc54}, {0xd, 0x8, 0x6, 0x4, 0x1325, 0x1}, {0xeca, 0x4, 0x1, 0x859, 0x8001, 0x15a}, {0x80, 0x7, 0x5, 0x10, 0x0, 0x2}, {0x4, 0xc6e, 0x80000000, 0x9, 0x7, 0x2a6}, {0x4, 0x8, 0x7, 0x2, 0x7, 0xbb5}, {0x2, 0x7, 0xcd76, 0x5, 0x7, 0xfff}, {0x401, 0x7639, 0x81, 0x6, 0x80000001, 0x2f}, {0x4, 0x9, 0x2, 0x95, 0x4b4, 0x9}, {0x5, 0x3, 0x20, 0xd, 0xd20, 0x3}, {0xa, 0x3, 0x4, 0xd1, 0x200, 0x41}, {0x0, 0x2b, 0x7fffffff, 0x9, 0x6, 0x4}, {0x401, 0x8, 0x8000, 0x0, 0x23, 0x101}, {0x3, 0x7, 0x0, 0xa2, 0x2, 0x5}, {0x2, 0x2, 0x101, 0xffffffff, 0x5, 0x7fffffff}, {0xfffffffb, 0xa563, 0x800, 0x2, 0x5}, {0x2, 0x800, 0xfff, 0x1, 0x7, 0x80000000}, {0x19, 0x77, 0x40, 0x10, 0xa, 0xfffffffb}, {0x3ff, 0x7, 0x8, 0xb0f, 0xf}, {0xffffffc0, 0x2, 0x1, 0x2, 0x1, 0x1}, {0x7, 0x0, 0x5, 0x8001, 0xc}, {0x7fffffff, 0x1, 0x400, 0x1ff, 0x9, 0x8}, {0xbd, 0xfffffff0, 0xffffffff, 0x7fffffff, 0x6, 0x9}, {0x80, 0x1, 0x1000, 0x7fff, 0x9, 0x80}, {0xe9, 0x2, 0x825e, 0xa, 0x4, 0xd}, {0x1f, 0x8001, 0x1, 0x8, 0x400, 0x10000}, {0x7, 0xf306, 0x6, 0xc9f3, 0x8, 0x60}, {0x0, 0x3, 0x3, 0x0, 0x2, 0x6}, {0x6, 0xff, 0x7, 0x3, 0x9, 0x1}, {0x4, 0x8e45d02, 0x3, 0x41d, 0x9, 0x5}, {0x4, 0x80, 0x7ff, 0xfffffff8, 0x2, 0x320c0000}, {0x8e, 0x730efe37, 0x545, 0x1, 0x2, 0x4}, {0x0, 0x3ff, 0x3, 0xffff7fff, 0x5, 0x5}, {0xa21, 0x1, 0xc, 0xfffffff9, 0x8, 0x6}, {0xc5, 0x6, 0x1, 0x7, 0x80000001, 0x8}, {0x1, 0x8, 0x9, 0x200, 0x6, 0x1}, {0x8, 0x73, 0x5, 0x9, 0xf98c, 0x2}, {0x7f, 0x4, 0x6e, 0x3, 0x6, 0x5}, {0x3, 0x5, 0x0, 0x34000000, 0x3000000, 0xc}, {0x8000, 0x6bf, 0x9, 0x6, 0x6, 0x9}, {0x3, 0x7f, 0x3, 0x3, 0x47a43e66, 0x8}, {0x9, 0xfffffff9, 0x5, 0x5, 0x200, 0x81}, {0xffffff7f, 0xfffffffc, 0x3, 0x0, 0x1, 0x6}, {0x0, 0xffffffff, 0x4, 0x4, 0x6, 0x7fff}, {0x3, 0x8, 0x101, 0xfd3, 0x80, 0x1}, {0x0, 0x6, 0x6, 0xb, 0x8, 0x7}, {0x0, 0xffffffff, 0x2ad0, 0x9, 0x10000, 0x3}, {0x8, 0x8, 0x8, 0x80000007, 0x1000, 0x8}, {0x4, 0x1, 0x4, 0x400, 0x9, 0x3690}, {0x3, 0x5, 0x6, 0x3ff, 0x5, 0xfffffffd}, {0x7fff, 0x80, 0xfffffffa, 0x4, 0xda3}, {0x1, 0x4, 0x5, 0x0, 0x1ff, 0x5}, {0x4, 0x3ff, 0x2, 0x4, 0xd}, {0x6e, 0x9, 0x0, 0x5, 0x7, 0x6}, {0x2000, 0x6, 0x8, 0x45, 0x7, 0x80000000}, {0x5, 0x97b, 0xffffffff, 0x8, 0xa, 0x1ff}, {0xb, 0x81, 0x4, 0xd, 0x80000000, 0x6480}, {0x0, 0x6, 0xac5, 0x1, 0x6, 0x5}, {0x1, 0x6, 0x0, 0x7, 0x7ff, 0x8}, {0x1, 0x1, 0x0, 0x80000000, 0x8, 0x40}, {0x6, 0x81, 0x6, 0x7, 0x0, 0x8}, {0x0, 0x7, 0x7ff, 0x10, 0xf, 0x7}, {0x1, 0xc, 0x55fe, 0x80000001, 0xfffffff3, 0xffff5545}, {0x0, 0x8, 0x10001, 0xca, 0x9}, {0x8, 0x8000, 0xaf, 0x4, 0x7, 0x2}, {0xff, 0x0, 0x8, 0x2, 0x8, 0x8}, {0x40, 0x6, 0xa499, 0x7, 0x4}, {0x4e4a, 0x7, 0x9, 0x0, 0x1ff, 0x7ff}, {0xe5, 0x0, 0x3, 0xaf0a, 0x1}, {0x5, 0x400, 0x3ff, 0x4, 0xac2, 0x2}, {0x9, 0x10001, 0x7a6ecb37, 0x6, 0x10947436, 0x9}, {0xffffffff, 0x9, 0x6, 0x7, 0x7fffffff, 0xa}, {0x40, 0x1, 0x6, 0x2, 0x5, 0x8001}, {0xc, 0x9, 0x0, 0x1, 0x1, 0x7}, {0x4, 0x0, 0x0, 0x7, 0x4, 0x2}, {0x7, 0x3ff, 0x1, 0x0, 0x8, 0x19}], [{0x3}, {}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x6, 0x1}, {0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x2}, {0x3e40d1c030c20a40, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x4}, {0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5af350c3ed33d350}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x4}, {}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x1}, {0x3, 0x1e7f464c81b4942}, {}, {0x4}, {0x3, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x2fb65f998d1eb50e}, {0x3}, {0x5}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x9}, {0x3, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x101, 0x6c, 0x6, 0x9678, 0x3}, 0xd, 0xaf}, [{0xc5, 0x5, 0x80, 0x1, 0xb33, 0x4}, {0x85, 0x9, 0x3, 0x1, 0xc, 0x789}, {0x0, 0x7, 0x6, 0x101, 0x6e, 0x8}, {0xe, 0x1, 0x6, 0x6535aa4f, 0x7, 0x7}, {0x1, 0x3d, 0x89, 0x9, 0xfffffffd, 0x3}, {0xb, 0x8, 0x3, 0x80000000, 0xc1, 0x2}, {0x3c9, 0x7ff, 0x2, 0x4, 0xe6, 0x7fffffff}, {0xe70, 0x2, 0xdd, 0x4, 0x2, 0xfffffff8}, {0x6, 0x3, 0x800, 0x9, 0x9, 0x1}, {0x2, 0x7, 0x7, 0x8, 0x4, 0x9fc}, {0x9, 0x3, 0x5, 0x1, 0x7fff, 0x2}, {0x5, 0x401, 0x10001, 0x5, 0x470, 0xe334}, {0x2, 0x85ec, 0x8, 0x7a58, 0x2, 0xfc}, {0x5, 0x7, 0x2, 0x101, 0x3, 0x8001}, {0xc, 0xf2, 0x7a, 0x8, 0xfffffffb, 0x9}, {0x682, 0x7, 0x0, 0x1, 0x3, 0x7}, {0x9, 0x80000000, 0x2cb, 0x71be, 0x401, 0x8000}, {0x2, 0xeda486b, 0xd48, 0x1, 0x100, 0x3}, {0x800, 0x3, 0x7, 0x2, 0x8, 0x7}, {0x2a, 0xfff, 0x81, 0x7f, 0x4, 0xffff0612}, {0x5, 0x3, 0x3ff, 0xe, 0x0, 0xed3d}, {0x7fff, 0x0, 0x6, 0x8000, 0x0, 0x4}, {0xe8bf, 0xfff, 0x80c8, 0xd, 0x6, 0x7}, {0x9259, 0x1, 0xa, 0xa, 0x1, 0x8}, {0x77f5, 0x7, 0x8000, 0x5, 0x6, 0x80000000}, {0x9, 0xf54d, 0x7, 0x7, 0x8, 0x6}, {0x1, 0x8, 0x3, 0x8, 0xcc, 0xe}, {0x78, 0x91a1, 0x1, 0x9, 0x8, 0x7}, {0x2, 0xd, 0x0, 0xa44, 0x5, 0x8}, {0xfff, 0x0, 0xa44, 0x7, 0x2, 0x8}, {0x2, 0x5ef, 0x5, 0x5, 0x5, 0x9}, {0x26, 0x6, 0x100, 0xff, 0xa, 0x770c}, {0x14, 0x1, 0x5, 0x0, 0x40, 0x9}, {0xfff, 0x8, 0x3417, 0xffffff7f, 0x2, 0x3}, {0x6, 0x2, 0x2, 0xf22, 0xfffffffa, 0xfff}, {0x5, 0xb, 0x1, 0x4f, 0x10001, 0x9}, {0x0, 0x3fe0000, 0x5, 0xfffffffd, 0x9, 0x14}, {0x7, 0x4000, 0x3, 0x6, 0xb}, {0xffffffff, 0x10001, 0x77376df9, 0xc, 0x6, 0x9}, {0x6, 0x7fffffff, 0x8, 0x100, 0x2, 0xf652}, {0x1, 0x0, 0x9, 0x100000, 0x6, 0x3}, {0xb1, 0x6fd, 0x4, 0x5, 0x9, 0x3}, {0x0, 0x7fff, 0xf, 0xfffffffa, 0x50, 0x4}, {0xd31, 0x6, 0x8, 0x4, 0x3, 0x7}, {0xfffffffc, 0x10, 0x400, 0x6, 0x3}, {0x1, 0x604d62f8, 0x3, 0x8, 0x5, 0xffffff8a}, {0x6, 0x400, 0x4, 0x3, 0x5, 0x9}, {0x3, 0x4, 0x4, 0x8, 0x41, 0x7}, {0x8, 0x80000001, 0x5, 0x200, 0x6, 0x5}, {0x895, 0x3587, 0x9, 0x800, 0x7f, 0x9}, {0x4, 0xf, 0x80000000, 0x1, 0x7, 0x6}, {0x6, 0xf60, 0x9, 0xff, 0x2, 0x5}, {0x80000000, 0x263ddde7, 0x43, 0xfffffffa, 0x8000}, {0x4, 0x5, 0x511, 0x8, 0x7ff, 0x9}, {0x6, 0x8000, 0xdc26, 0xffff, 0x6, 0x8}, {0x7d8, 0x8bd, 0x958, 0x735, 0xa69, 0x9}, {0x7, 0x6, 0x10001, 0x800, 0xffffffff, 0x9}, {0x0, 0x8b, 0x2, 0x0, 0x8, 0x101}, {0x4, 0x970, 0x9, 0x1, 0x79b32063, 0x2}, {0x4, 0x29, 0xff, 0x8, 0xc, 0x80}, {0xa3, 0xffffffff, 0x6, 0x5, 0x8daf, 0x9}, {0xffffffff, 0x10000, 0x8001, 0x1, 0xbbf, 0x5}, {0x1, 0x89, 0x51, 0xdc0000, 0x4, 0xffffffff}, {0x2e, 0x1, 0x3, 0x8, 0x3, 0x8}, {0xc, 0x4, 0x7fff, 0x3, 0x8001, 0x7}, {0xf000000, 0x7fffffff, 0x3, 0x4, 0x200, 0x2}, {0x670ec907, 0x20, 0x40, 0xfffffffc, 0x35b2, 0x6}, {0x10, 0x4080, 0x7, 0x3, 0x9, 0x6}, {0x4, 0x7, 0x0, 0x81, 0x0, 0x7}, {0x8001, 0xffffffff, 0x1, 0x4, 0x4, 0x7}, {0x3, 0x1, 0x3, 0x7}, {0xf07d, 0x4, 0x7, 0x49da, 0x3, 0x8}, {0x2, 0xd6, 0xfffffff9, 0x8e, 0x81, 0x1}, {0xffffa02e, 0xf90, 0x3, 0x80, 0x2, 0x7}, {0x165c, 0x6, 0x6, 0x0, 0x200, 0x2}, {0x0, 0xff, 0x3ff, 0x3b71, 0x0, 0x2}, {0x81, 0x4, 0xfffffff9, 0x4, 0x401, 0x1}, {0x1, 0x4, 0x0, 0x7, 0x7, 0x4aad}, {0x7, 0x4, 0x5, 0x2, 0x1, 0x1}, {0x5, 0xf07, 0x3b52, 0xb600, 0x3, 0x450b}, {0x2, 0x1, 0x8f1, 0xfffffff6, 0xbfc8, 0x28f}, {0x4, 0x1, 0x9, 0x600, 0x24}, {0x13356e22, 0x8001, 0x0, 0xf, 0x200, 0x7}, {0x3, 0x8, 0x1, 0x401, 0x4, 0x1}, {0x1, 0x1000, 0x3, 0x6, 0x8, 0x3}, {0x84, 0x7, 0x2, 0x9, 0x3b21c738, 0x401}, {0x5, 0xba, 0xf, 0x332d8574, 0x400, 0x100}, {0x4, 0xffffffff, 0x10001, 0x4, 0x4, 0x2}, {0x9, 0x2, 0x3, 0x9, 0x1, 0x3c4688cf}, {0x80000000, 0xd0, 0x9, 0x4, 0x2, 0x3efe5ec9}, {0x0, 0x2, 0x1000, 0x44, 0x8, 0x1000}, {0x2, 0xfffffff7, 0x4, 0xc, 0x2, 0xe}, {0xffffffff, 0x6, 0x4, 0xe4c, 0x4, 0x6d36}, {0x28, 0x651, 0xbf, 0x4dc1, 0x3ff, 0x3}, {0xe, 0x401, 0x1, 0x2, 0x4, 0x8}, {0x7, 0x4, 0x8, 0x7, 0xfffffff8, 0x3}, {0x8, 0x7b, 0x3, 0x2, 0x2}, {0x3d7a, 0x0, 0x1, 0x4, 0x6, 0xfffffffa}, {0x1, 0x1, 0x8001, 0x8, 0x100, 0xfffffff9}, {0x9, 0x4, 0x700, 0x7, 0x97, 0xd9d}, {0xe979, 0xe0, 0xffff, 0x2, 0x9, 0x9e}, {0x3, 0xea0, 0xa9ba, 0x2, 0x5, 0x2}, {0x2, 0xe05a, 0x4, 0x5, 0x1ff, 0x99}, {0x66a, 0x8b, 0x401, 0x6, 0x1000, 0x2}, {0x5, 0x1, 0xfffff000, 0x5, 0x8, 0x7}, {0x4, 0x97c9, 0xfffffffd, 0x0, 0x4, 0x7ff}, {0x2, 0x2, 0x0, 0x66, 0x386, 0x7199c0da}, {0x0, 0x80000000, 0x4, 0x55ad606e, 0x62980859, 0x200}, {0x8, 0x7, 0x9, 0x3, 0xc8, 0xfff}, {0x10000, 0x7fffffff, 0x400, 0x5, 0x1ff, 0x7fffffff}, {0x0, 0xd25, 0x6, 0x10000, 0x0, 0x6}, {0x6, 0x7ff, 0x7, 0x4, 0x4, 0x8}, {0x3, 0x9, 0xe2, 0x40, 0x8}, {0x8, 0x8, 0x8, 0x1, 0xa, 0x5}, {0x0, 0x7, 0xc, 0x5, 0x2, 0x9}, {0x4, 0x3, 0xffff, 0xe4, 0x3, 0xd}, {0x8000, 0x2, 0xfffffffd, 0x6, 0x8, 0xfffffffe}, {0x0, 0x200, 0x8, 0x3, 0x9, 0x5}, {0x5, 0x9, 0x9, 0xd, 0x6, 0x6}, {0x9, 0x1, 0x6, 0x5, 0xf1e1, 0x6}, {0xfffffff4, 0xc097, 0x3, 0x8, 0x9, 0x4}, {0xfffffffb, 0x9, 0x0, 0x7, 0xb4, 0x8}, {0x800, 0x1ff, 0x8000, 0x2, 0x2, 0x2}, {0x6, 0x2, 0x8, 0x7ff, 0x10, 0x9}, {0x1, 0x7, 0x4, 0x6, 0x3da7a0e2, 0xfc5}, {0x8, 0x4, 0x401, 0x5a0, 0x3c, 0xffffffff}, {0x80000000, 0x5, 0x2, 0x101, 0x1, 0xa151}, {0x3, 0x4, 0xfffffff9, 0x10001, 0x2}], [{0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x7, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x2}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0xe075cb8dcc832575, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x5}, {0x3}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x850a1b89475f8d18}, {}, {0x0, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x1}, {0x2}, {0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}]}}]}, {0x7d, 0x6, "db0fcdf22656be14ee68cf3a30e95a06ac51056ed97c98721a94ae8ac7c9b4581ed873cb7cd2130ebb2d2a03736a6efa6c055b19e5d646143b57dc143bf05d0f53353fcbfb776970ec7c17f748b9cabedcf6a66e4c13666110fc9a0eca5dfec5a3ae859ed16e94be1f4d185fa5037895d5852818591c85a432"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x90, 0x1f, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x564, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4a, 0xffff, 0x1, 0x60, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1f19, 0x30000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1081, 0x3}}]}, {0x27, 0x6, "798e87b0522a0174967a20f419b2b58a4cda504ac11df91afe6f2b7766da18be0f4723"}, {0xc, 0x7, {0x0, 0x13b3676d2735c775}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1edc}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 5.750449202s ago: executing program 3 (id=2132): r0 = socket$inet_tcp(0x2, 0x1, 0x0) move_pages(0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000003c0)={0x48}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x6, 0x0, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) (async) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000080)={0x18}) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000eeff0000006184c9567c00000007400000737440009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x75, 0x5f, 0x32, 0x20, 0x17dd, 0x5500, 0xf35e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xf0, 0x42, 0xa4, 0x0, [], [{{0x9, 0x5, 0x2, 0x3}}, {{0x9, 0x5, 0xd, 0x3}}]}}]}}]}}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="bf16000000000000b70700000100000048700000e4ff0000bc700000000000009500faff000000008aa1210b29017b83c8e96e6405f798585fb5030b3388b0409a814343f1ae341b74efa745a12f5c0685e5261482e31e0cacc902c97e6145ef48004d26342c94f56a39359ba56724e4535d80ffbd6848d53382c26211a2b975eb4a9d08501c000c00000000000097e50f118c4a3b05489d1d1245cb774879b0871dd61703eefe87ff070000000000008cca1a363b2b28add613658171122dc01e0a77d7c44b009fdac91fc827f5797532750d4d4639f11089feb3f25b4695c6dac2cabfa04e2c16fa741b0665bb33be6f0e742213d0bf5528a601b5934b867f39f7d776ac00a434949b4455b7c6c678de4d9740d8dff6169c664b55ce550fb4e686ae169d9f7abbeb08e02799374ae0081858bdf144d8c7fb67dcec5e43a0e8099e543116b1b7d144b5613845cca4388344d82de45f0c1b7d041db040fd777791232d5db32d14bc1c3d000000000000000000000016a1049b6f094e504c28d7daa2f61b2a7c14d2343b4308b36e6b141371c958406e212b3accb45f87aef8bd5e2181fd7826b9e5cb2f6a63f113491239dca17e4fb33e670daf1cd7a99015ae9e1ca32b4e64dc38b55d525bd10971b0898be9d6e6154dfc99b20622b604b87ba03524c2fed51056d672b1b966657de5c86ab09195fba55af17663fecf1b5c5a76cf07615c7ee54c361449e275371a8c4243b9060ecdeecfb1603b061a8a62159830049061800953f7d00c43c95068c62c2ca1ad7fea9de97216dbc9c8e36a5607608e77d1d7d72b78b4f1eab8e40000000000000000adc90eb850f42f44e4b48c9cc39412c0ce6c9f4b95936ec36efc8dfbc54eb44affe1cd0f14d124df0c29c51b5628646b8155a1859358aa08f71fd2d9b2c4288a0d8870e8767173c65476e1a4f000c580f61d73f5be35ca1aa1235cf309650cdf8c6cd950c477890089be400b26dedec1199479b1b5adfaf2b6e05b7f90c9098ed4accddabd802ac5dc1b436e"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x460, 0x0, 0x5002004a, 0x6, 0x2c8, 0x3, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'sit0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x2c8, 0x0, {0x0, 0x3fa}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r4}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x100, 0x1}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x0, 0x0, [0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe13], 0x0, 0x0, 0xfffffffffffffffc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c0) 5.749337818s ago: executing program 2 (id=2133): syz_open_dev$radio(&(0x7f0000001c40), 0x1, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4040084) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x0}, &(0x7f00000002c0)="ff35fb31317947eef7a8c28a4dc2922f3d3524e6836440450afa67fce96249ec50acaba1711cadfc89a877c89360db06d818fb922cbb4f5ac28ad7b3f75cfcef629fca32c3d46bacf5ed2ba19721b67f8707a9151a3ea939e63fb2b4e9cbc7b862a0e110477ecf468aa1cebaf197a5a2d97773ae699f3015", 0x78, 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) open$dir(&(0x7f00000000c0)='./file0\x00', 0x101040, 0x20) lsetxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=ANY=[@ANYBLOB="fa400c00006be9a109"], 0x9, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r2}) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000380)=""/169, 0xa9, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x9, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000440)=[{0x79df, 0x0, 0x8, 0xffff}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x91, 0x0, 0xff2c) r5 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r5, 0x11, 0xa, &(0x7f0000000040)=0x21, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x6008800, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 5.583928504s ago: executing program 7 (id=2134): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7, 0x5, 0x5) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x8) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) fcntl$setstatus(r0, 0x4, 0x6800) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x60, r3, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x66}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x2b, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x64, 0x1, @broadcast, 0xb, @value=@device_b, 0x100, 0xb, @device_a, 0x501f000}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x404400c}, 0x10) write$tun(0xffffffffffffffff, &(0x7f00000004c0)={@void, @val={0x4, 0x0, 0x2, 0xbe, 0x101, 0xf}, @ipv6=@dccp_packet={0xa, 0x6, "ef8750", 0x110, 0x21, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@routing={0x2f, 0x6, 0x2, 0x6e, 0x0, [@mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @remote]}, @dstopts={0x5e, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x401}]}, @fragment={0x95, 0x0, 0x3, 0x0, 0x0, 0x1, 0x68}, @fragment={0x5e, 0x0, 0x15, 0x0, 0x0, 0x6, 0x68}], {{0x4e24, 0x4e23, 0x4, 0x1, 0xc, 0x0, 0x0, 0x1, 0x4, "447ac3", 0x5, "ff8405"}, "71831f03651d7c481760ede796ca6f6859e428f09d4eb9bf5a9adb3e3337fa2f193f8cfc915bb88701b1ae1a59baa2e63e52f81f5550688d6922761ddcd617fde6db4bbe8833136291e8c85ea7410d726ec989b32198b6d4605f06d52c1234daeebac6cfb9aab4baa9927a025b206e7c083a19ddcbe365c26fcebb7fac3e6c0c6c053b3e98af9ea2346d1066a1e979f1f632ad8ccef09fd22c258dc3291b6f87860ebb397758cd88"}}}}, 0x142) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x0, 0x0, 0x1, 0x1}, 0x20) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) write$FUSE_NOTIFY_RESEND(r6, &(0x7f00000001c0)={0x14}, 0x14) fsopen(&(0x7f0000000480)='selinuxfs\x00', 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x8000000000000000, 0x101701) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02"]) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4008550d, 0x0) write$dsp(r0, &(0x7f0000000100)="dad2a9e1", 0x4) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) 5.454888418s ago: executing program 6 (id=2135): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0xa4, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}]}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4877}, @IPSET_ATTR_IP_TO={0x0, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_CADT_FLAGS, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @IPSET_ATTR_MARKMASK={0xfffffeb7, 0xb, 0x1, 0x0, 0x4}, @IPSET_ATTR_SIZE={0x0, 0x17, 0x1, 0x0, 0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_IP={0x0, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0xffffffffffffff5c, 0x5, 0xa}]}, 0xa4}, 0x1, 0x0, 0x0, 0x855}, 0x20000005) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="d15c7614fbc000b8985d8a6feca5ac3391fc40cd63bacf0ae2938c38d8249540ec28af86d9ed445a30bfd04c16630a9402c27a8fe48d3f6043c8981c64048c1503029d4f951dd258d0d65a89b9246d4ff6fd4de431732bffa387daf0b71c1e97d62c6795da5860b3fc5642542fdcc8ce40e899672c1fecb4bce495265ee7", 0x7e, r2) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) readv(r3, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/242, 0xf2}], 0x1) syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa86dd60f800000000000000000066eb0000ff02ed000000000000000000000000010445d5f5da87009078cf000000604aa1980000330000000000000000000000ffff000000000000000000005db902f9000000fc22000004000000000000000000000000000000000000397d30858400000000"], 0x0) 5.283449126s ago: executing program 6 (id=2136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc4, 0x66, 0x0, 0xa, 0x88, 0x0, @rand_addr=0x64010120, @dev={0xac, 0x14, 0x14, 0x14}, {[@end]}}, "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"}}, 0xfd2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r3 = socket(0x2b, 0x80801, 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) syz_usb_connect(0x0, 0x36, 0x0, 0x0) (async) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r5, r5, r5}, &(0x7f0000001cc0)=""/194, 0xc2, &(0x7f00000000c0)={&(0x7f0000000000)={'xxhash64-generic\x00'}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x20, 0x0, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x0, 0x4, 0x80, 0x0, 0x0, @multicast2}}}}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) (async) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x6c) fcntl$notify(r6, 0x402, 0x5) (async) preadv(r6, 0x0, 0x0, 0x0, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = syz_io_uring_setup(0x6c3a, 0x0, &(0x7f0000000380), &(0x7f0000000000)) (async) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r9, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f00000002c0)=0x78) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) syz_io_uring_setup(0x43d4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f00000002c0), &(0x7f0000000140)) 4.879950351s ago: executing program 6 (id=2137): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x40015b0b, &(0x7f0000000040)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x40, 0x5, 0x81, 0x2, {0x7fffffff, 0x3, 0x3, 0x5, 0x9, 0xbce, 0xc, 0xf, 0x81, 0xd5, 0x4, 0x10, 0x8, 0x8, "37d4a5c2ca6b7934b6d4b75ce3eb1cb17559d73e79fa886da2a1dd5d599f2363"}}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, 0x4d, 0x1, 0x6a, 0x5, 0x10001, 0x3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220000018000000", @ANYRES32=r4, @ANYBLOB="0000000000000001b702000014000000b7030000000000008500000005000006bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000180095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xffffffff, 0xa5a020b, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6}}, 0x50) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000380)=')\x80', 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x64, 0x2) 4.712058947s ago: executing program 7 (id=2138): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) mq_open(&(0x7f0000000100)='\xbd\x16 lhOb\xed\xf1~\xe5\x01\xd1h\xfe\xb5\x1d\x90\x933\x9e\x8f\x06J\xc7\xc8y\xfbx\xd0\xee\xc3\xfcv\xf7L\xaa=Q\xe4R\xfan\xc1\x02\x93\xf9u\x1a\tGa\x15\xc7\xb9\x94\x9d\xf3W\xa3FGr\x82\xa5\xf2\x8fq\xf0\xcf\x82\xc3\xbb~Q\x7fV\x7f7\xb6\xb7\x1c\xddD0\xaa)g\n.jL`\x1f~\xe9\xe4N@\xbb\xdb\x80\xcfW\x13\x12\xe2ct\xe9\xf6\\x\x95|\xeab\xceE\xefVyS$\x92\xb5PAXg\xa68mRC\x93l\x86Et\xf9T\xed\x90TS_\xf8m\a)\xd7\x9c-\x00'/171, 0x40, 0x76, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) mq_open(&(0x7f0000000100)='\xbd\x16 lhOb\xed\xf1~\xe5\x01\xd1h\xfe\xb5\x1d\x90\x933\x9e\x8f\x06J\xc7\xc8y\xfbx\xd0\xee\xc3\xfcv\xf7L\xaa=Q\xe4R\xfan\xc1\x02\x93\xf9u\x1a\tGa\x15\xc7\xb9\x94\x9d\xf3W\xa3FGr\x82\xa5\xf2\x8fq\xf0\xcf\x82\xc3\xbb~Q\x7fV\x7f7\xb6\xb7\x1c\xddD0\xaa)g\n.jL`\x1f~\xe9\xe4N@\xbb\xdb\x80\xcfW\x13\x12\xe2ct\xe9\xf6\\x\x95|\xeab\xceE\xefVyS$\x92\xb5PAXg\xa68mRC\x93l\x86Et\xf9T\xed\x90TS_\xf8m\a)\xd7\x9c-\x00'/171, 0x40, 0x76, 0x0) (async) 4.486840774s ago: executing program 7 (id=2139): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="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", 0xec1, 0x20008091, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}, {0x9, 0x0, 0xb187}], 0x2, 0x201, 0x0, 0x0, 0x42, 0x5c}) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080)=@srh={0x8, 0xe, 0x4, 0x7, 0x5, 0x40, 0xc, [@ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x2}]}, 0x78) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x5e21, @multicast1}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x2e) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa693584", 0x35}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x2}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/95, 0x5f}, {&(0x7f0000000280)=""/233, 0xe9}], 0x2}, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000022c0)={0xf, 0xfffffff9, 0x7f, 0x1f1, 0x6, 0x6ad}) 4.06014572s ago: executing program 3 (id=2140): r0 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x4) 3.602889369s ago: executing program 5 (id=2141): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@broadcast, @random="6a00084fa53b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00k', 0x18, 0x3a, 0xff, @private2, @local, {[], @ndisc_na={0x87, 0x0, 0x0, 0x0, '\x00', @local}}}}}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x2f, 0x0, @multicast1, @rand_addr=0x3, {[@lsrr={0x83, 0x7, 0xd6, [@private=0xa010101]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', r2, 0x8, 0x8, 0x0, 0x1ff, {{0x5, 0x4, 0x2, 0x2b, 0x14, 0x65, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f2303920422c02124085010242866791a619700f00100009040c0202c17f4d00090582020002020000090582020002000000"], 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x8, 0x11, 0x0, @empty, @empty, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r10 = syz_open_dev$vim2m(0x0, 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, 0x0) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x2c, 0x11, 0x1, 0x2000000, 0xffffffff, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}, [{0x8, 0xb, 0x200}]}, 0x2c}}, 0x0) 3.535085365s ago: executing program 2 (id=2142): mmap(&(0x7f0000a50000/0x4000)=nil, 0x4000, 0x3000002, 0xa032, 0xffffffffffffffff, 0x55802000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x40007f) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000200)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r6}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xf, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x42ab, 0x24d417d6, 0x8, 0x800, 0xe26}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r10, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) 3.203919027s ago: executing program 7 (id=2143): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, 0x0) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket(0x8, 0x5, 0x1) (async) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) inotify_init() (async) io_setup(0x3ff, &(0x7f0000000500)=0x0) r5 = eventfd2(0x681, 0x800) io_submit(r4, 0x2, &(0x7f0000000300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r2, &(0x7f00000001c0)='m', 0x1, 0x1}]) (async) r6 = socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x0, r7, 0x0, 0x300}]) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$KDDELIO(r0, 0x4b35, 0x4000000000003) 2.262575519s ago: executing program 2 (id=2144): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) pselect6(0x40, &(0x7f0000000000)={0x9, 0x1, 0x4973, 0xfa, 0x867, 0xb, 0x8, 0x8}, &(0x7f0000000040)={0x9, 0x1004000000000000, 0x0, 0x6, 0x1000000, 0xfffffffffffeffff, 0x3ff, 0xffffffffffffffc0}, &(0x7f0000000080)={0x3, 0xffffffffbdc8e313, 0x7, 0xcfdc, 0x10001, 0x7, 0x5, 0x998}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x3000000000000000]}, 0x8}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x11) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 2.110644121s ago: executing program 7 (id=2145): socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000480)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x200000000500, 0x0, 0x2a2e4006], 0x2, 0x0, &(0x7f0000000500)=ANY=[@ANYRES32=r1]}, 0x7c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0) getpid() setrlimit(0xf, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) syz_open_dev$dri(0x0, 0x8, 0x101300) fanotify_init(0x200, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r3, @ANYRES8], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0xff6a, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000100050c100000000000224e0000", 0x58}], 0x1) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x201, 0x4800003e, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, 0x0) 2.00378685s ago: executing program 2 (id=2146): r0 = syz_usb_connect(0x6, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203d53545e854e4eb2535ea7cd9b368e14b010902240001000010000904430002317d7500090502020002020000090582020002eaffffe31911a2485a4e5afffffffffffff8bf5b27c70dc67bff0300001503c07f36773fd96cbe436d2271268f24d3ac0463"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0xffb) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000006}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r6 = io_uring_setup(0x4bea, &(0x7f0000000000)={0x0, 0x829b, 0x800, 0x0, 0x2f}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/189, 0xbd}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x0, 0x2}, 0x20) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000800)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x38}, @flat=@weak_binder={0x77622a85, 0x115, 0x3}, @fda={0x66642a85, 0x3, 0x1, 0x200}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000640)={'#! ', './file0/file0', [], 0xa, "84597039dae7f8cd43b847b038ebc6e509e718c834338d43f11d2f786dda0fea3dfa1c8f836a472c607394370854cb28cf695ede047d37489702f0b29dc502eb3c000000be66f878229a867863cb7a93915a4458c466dc096796afe6330817b33e0366666bf076f7199f90c95f6ef01f1698a04427d24fe80f5b7635c376a6b0d7294c7d03c10adc6e6ae62b3a4d6a5146e6e8701776d494b4fdfc63fe7e4e00f1b5082f"}, 0xb5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10012, r4, 0x0) add_key$user(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000540)=0x7b1) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) r9 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0x4008af12, &(0x7f0000000080)={0x1, 0x83}) ioctl$VHOST_SET_LOG_FD(r8, 0x4004af07, &(0x7f0000000240)=r9) 1.361022752s ago: executing program 6 (id=2147): ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000340)={0xe, 0x3, {0x7, @struct={0x1, 0xd}, 0x0, 0x7db, 0x7, 0x4, 0x2, 0x9, 0x50, @struct={0x8761, 0x5}, 0x9, 0x49, [0x4, 0x0, 0x4, 0x2, 0x602, 0x8]}, {0x401, @struct={0x7ff, 0x7f}, 0x0, 0x5e, 0x2, 0x5, 0x8, 0x100000000, 0x6c, @struct={0x2, 0x9}, 0x7, 0x4, [0x4165, 0xd, 0x0, 0x6, 0xffffffffffffff19, 0x8]}, {0x5, @struct={0x2, 0x1}, 0x0, 0x400008, 0x101, 0x0, 0x9, 0x7, 0x0, @struct={0x6, 0x9}, 0x0, 0x200, [0xe, 0x5, 0x200000000000000, 0x7, 0xffffffffffffffff, 0x55]}, {0x2, 0x0, 0x57fe}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0) syz_usb_connect$uac1(0x0, 0xa3, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x10, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001}, [@extension_unit={0x7, 0x24, 0x8, 0x4, 0x1, 0x5}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x0, 0x0, "d885700585"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x3, 0x3, 0x1, 'b'}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x14, 0x4, 0xcc, {0x7, 0x25, 0x1, 0x1, 0x7f, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1002}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6896, 0x2, 0x0, "78f4cd9535ca"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x4, 0x3, {0x7, 0x25, 0x1, 0x2, 0xf4}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x1, 0x7, 0x701}, 0x14}, 0x1, 0x0, 0x0, 0x4008015}, 0x8000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r2, 0x4068aea3, &(0x7f0000000080)={0xc5, 0x0, r2}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000001240)={[0x1, 0x8, 0x199, 0xba1d, 0x7, 0x1, 0x9, 0x4, 0x1, 0x67, 0x9, 0xffff, 0xc, 0x6, 0x401, 0x7, 0x639, 0x10000, 0x7, 0x6, 0x1, 0x6, 0x8, 0x7, 0xd, 0xfffffff7, 0x80000001, 0xaf, 0x3ff, 0x2, 0x0, 0x0, 0x1, 0x100, 0x5, 0x23, 0x2, 0xfff, 0x1000, 0x1372, 0x7f, 0x9, 0x1, 0x6, 0x75, 0xd, 0x9, 0x5, 0xa7be, 0x3, 0xc116, 0x8, 0xa83f, 0x8, 0x7ff, 0x6, 0x3, 0x6, 0xa, 0x5f, 0x3, 0x8001, 0x400, 0x9, 0x10, 0x8, 0x7, 0x5, 0x100, 0x8001, 0xe, 0x1, 0x2, 0x3796, 0xf, 0x6, 0x5, 0xf, 0x773, 0xffffffff, 0xb, 0xf, 0xc, 0x8, 0x5, 0x2, 0x80000001, 0x8001, 0x2, 0xc, 0x4, 0x1, 0x4, 0x6, 0x6, 0x12000, 0xf, 0xfffffffe, 0x1, 0x400, 0x81, 0xfffffe00, 0x3, 0x8f, 0xb7, 0x70, 0x1, 0x8, 0xcda2, 0x2a32, 0x4, 0x1102f8a3, 0x4, 0x9, 0x195, 0x3, 0x8, 0x6, 0xbf, 0x7, 0x10, 0x4d1, 0x7f, 0x7, 0x9, 0x101, 0x3, 0x7ff, 0x4, 0x5, 0x3, 0x7f, 0x4, 0x0, 0xeb, 0x10000, 0x1, 0x6, 0x6, 0x2, 0x7, 0x1, 0xb, 0x8, 0xffffff00, 0x3, 0x4, 0x38, 0xfffffe01, 0x2c, 0x7f, 0x5, 0x1, 0x3, 0xa, 0x5, 0x8, 0x1, 0xe14c, 0x4, 0x40, 0x5, 0x9, 0xffffffff, 0x0, 0x80000001, 0x7, 0x401, 0x3, 0x57, 0x7, 0x8, 0xc, 0x6, 0x0, 0x10001, 0x91f, 0x80000001, 0x9, 0x62, 0xfffffffe, 0xfa, 0x800, 0x8, 0x4, 0x7f, 0x80000001, 0x1ac, 0x4, 0x10, 0x15, 0x200, 0x2, 0xd, 0xffffffff, 0x0, 0xfff, 0x101, 0x7, 0x7, 0x3, 0x0, 0x200, 0xdffd, 0xc2, 0x4, 0x6b0, 0xc, 0x7, 0x288b46da, 0x9, 0x0, 0xd7b, 0x6, 0x80000000, 0x5, 0x9, 0x6, 0x2, 0xf, 0x8212, 0x0, 0x7fff, 0x365e, 0x3, 0x120000, 0x6, 0x81, 0x401, 0x5, 0x8, 0x5, 0x1, 0x1, 0xd, 0x3, 0xb, 0x1, 0x6, 0x9, 0x9699, 0x10, 0x0, 0x0, 0x200, 0x4, 0x9, 0x1, 0x8, 0x7, 0x1ff, 0x7, 0xffffffc0, 0xaa2, 0x400, 0x4, 0x7, 0xe, 0x95c, 0x33, 0x7, 0x2, 0x5, 0x81, 0xf, 0x0, 0x8, 0xd, 0xcb, 0x5, 0x9, 0x9, 0x2, 0x200, 0x81, 0x3bf, 0x5, 0x2, 0x400, 0x6, 0x200, 0x7, 0xf3, 0x2, 0x7, 0x8, 0x7, 0x1a7b, 0x5, 0x7, 0x2, 0x9d, 0x101, 0x6, 0x0, 0x3, 0x5, 0x4, 0x4, 0xe265, 0xb3, 0x5c2, 0xe3, 0x1e0000, 0x8, 0x1, 0x8, 0x8, 0x7, 0x4, 0xffffffff, 0x5, 0x2, 0xffffffff, 0xffffffff, 0x3, 0x6, 0x5, 0x0, 0x9, 0x6, 0x7ff, 0x838e, 0x620, 0x3de, 0x45bf, 0xffff, 0x100, 0x3, 0x4, 0x4, 0x1, 0x23178e71, 0x7, 0x1ff, 0x5, 0x7, 0x10001, 0x2, 0x100, 0x3, 0x9, 0x9, 0x3, 0x1, 0x96af, 0x1, 0x2, 0xfffffffa, 0xffff, 0x10000, 0x34, 0x0, 0x4b, 0x1, 0xd0, 0xec4, 0xfffffffd, 0x3, 0xfff, 0x4, 0x5, 0x7, 0xfffffc00, 0x7, 0x4, 0x4, 0x3, 0xff, 0x0, 0x9d53, 0x8, 0x8001, 0x1, 0x1ff, 0x3, 0x140, 0x800, 0x6, 0x1, 0x5, 0x7fffffff, 0x8, 0x4, 0x9, 0x1, 0x0, 0x0, 0x6, 0x0, 0xa95, 0x3, 0xd8, 0x4, 0x10, 0x8, 0xf65, 0x7, 0x1, 0xfffffffe, 0x10000, 0x4, 0xfffffff9, 0x8, 0xe7, 0x5, 0x6, 0x2, 0x2, 0x2, 0x9, 0xffff, 0x1, 0x9, 0x0, 0x9, 0x3ff, 0x1000, 0x400, 0x0, 0x0, 0xffffffec, 0x84, 0x2, 0x5, 0x5, 0x3, 0x2, 0xb7d, 0xdbb, 0x8001, 0x4, 0x0, 0x2, 0x4, 0xf7df, 0x1ff, 0x4, 0x5, 0xe, 0x0, 0x4, 0x0, 0x4, 0xe, 0xd, 0x4, 0xfffffffa, 0x9, 0x6, 0x7, 0x200, 0xfffffffa, 0x4, 0x8, 0xd19, 0x7fffffff, 0x6, 0x8, 0x8, 0xd, 0x0, 0x3, 0x9, 0x6, 0xd7, 0x5, 0x2, 0x9, 0xfff, 0x2, 0x80000000, 0x0, 0x4, 0x10, 0x6, 0x7, 0x10, 0x7, 0x6, 0x1, 0x8, 0x0, 0x140, 0x9, 0x7, 0x1, 0x53e4694e, 0x5, 0x8, 0x3, 0x0, 0x3, 0x0, 0x0, 0x8, 0xffffffff, 0x5, 0xf, 0x8, 0x3, 0x6, 0x0, 0x8, 0x100, 0x8, 0x5, 0x7, 0x3, 0x400, 0x241c, 0xbdd, 0xe10, 0x0, 0xfffffffb, 0x4, 0xffff, 0x3, 0x6, 0x5, 0x9, 0x1, 0x5, 0xffffffff, 0x9, 0x2, 0x2, 0xe9c, 0x3, 0x1, 0x39, 0x9, 0x3, 0xde, 0x400, 0x3, 0x4, 0x1, 0x81, 0x5, 0x2, 0xed, 0x6, 0x3, 0x4, 0x1, 0x101, 0xd, 0x1, 0x811d, 0x2, 0x0, 0x8, 0xf206, 0x5, 0x2, 0x1000, 0x9, 0x0, 0x80000000, 0x2, 0x9, 0x0, 0x6, 0x1, 0x722, 0x1ff, 0x5, 0x6, 0xd27b, 0x6, 0x0, 0x0, 0x5, 0x8, 0x4, 0x8, 0x4, 0x6, 0x5, 0x0, 0x115c, 0x556644c3, 0x4, 0x222, 0x5, 0x2, 0x8000, 0x3d, 0x4, 0x4, 0x3, 0xac, 0x6, 0x6, 0x8001, 0x9, 0x0, 0x3, 0x0, 0x200, 0x1, 0x0, 0x2, 0x9, 0x1, 0x3, 0x40, 0x7f, 0x554, 0x5, 0x5, 0x0, 0x800, 0x16cc5971, 0xe, 0x0, 0x85, 0xffffffff, 0x8, 0x14, 0xff, 0xa, 0x10000, 0x1, 0x3, 0x1, 0x80000001, 0xfa5, 0x10001, 0x8, 0xf, 0xb71d, 0xdbb2, 0x9, 0x80000001, 0x24ee9221, 0x1, 0x3, 0x0, 0x0, 0x1, 0x80000000, 0x8, 0x4, 0x101, 0x3, 0x100, 0x1, 0x9, 0x5, 0x0, 0xfffffff8, 0x3, 0xdba1, 0xfffffffc, 0x2, 0x9, 0x81, 0x81, 0xfffffffe, 0x4, 0x208cfee3, 0x4, 0x8, 0x43d, 0x0, 0x0, 0x5, 0xaa7a, 0x3, 0x7, 0x6931, 0x1, 0x1, 0x7, 0x8, 0x6, 0xb, 0xfffffffc, 0x3, 0x3, 0x0, 0x7, 0x8, 0x8, 0x4, 0x9, 0x2, 0xc1, 0x9, 0x128000, 0xfffff801, 0x834, 0x4, 0x5, 0x8000, 0xfffffffb, 0x82a6, 0x1, 0x4, 0x5, 0x7, 0x1, 0x3, 0x0, 0x4, 0x0, 0x8, 0x3, 0x2, 0x2, 0x3, 0xf759, 0xb, 0x783, 0x1, 0x101, 0x4, 0x4, 0xff, 0x2633, 0x5, 0x8, 0x9, 0xfa, 0x3d0, 0x2, 0x6, 0x6, 0x8, 0xffff7fff, 0xa53, 0x6, 0x6, 0x2, 0x6, 0x10, 0x2, 0x2ba9, 0x1, 0x16, 0x9, 0x1ff, 0x0, 0xb118, 0xfffffe01, 0x40a8, 0x1, 0x8, 0x7fff, 0xb, 0xf, 0x1, 0x6, 0x24f, 0x1, 0xeb6, 0xf4, 0xfb, 0x8, 0x8, 0x4, 0x0, 0x7ff, 0x9, 0xed, 0x2, 0xf, 0x7, 0x7fff, 0x0, 0x9, 0x9, 0x3, 0x1, 0xc, 0xff, 0x8, 0x7, 0x1, 0xd75, 0x1, 0x8, 0x4, 0x0, 0x7fff, 0x5, 0x8001, 0xb, 0x6, 0x2, 0x7, 0xc, 0x8, 0x7f, 0xfffffffc, 0xffffffac, 0x400, 0x5, 0x4, 0x1, 0x8, 0xe20c8e4, 0x6, 0x200, 0x5, 0x5, 0xd, 0x40, 0x401, 0x0, 0x6229, 0x0, 0x800, 0x1000, 0x5, 0x8, 0xb76, 0x5, 0x66, 0x9, 0x9, 0x6, 0x3, 0x9, 0x1000, 0x5, 0x2, 0x21, 0x2, 0x6, 0xfff, 0xff, 0x1, 0x8a60, 0x6, 0x80000000, 0x3, 0x7, 0x4, 0x0, 0x1, 0x4, 0x5, 0xf46, 0x10000, 0x0, 0xffffffff, 0x2, 0x7fff, 0x3e78, 0xb4b, 0xd, 0x3, 0x80000000, 0x3, 0xa7, 0x10200, 0xff, 0x3, 0x9, 0x4, 0xe, 0x6, 0x8, 0x6, 0x5, 0x401, 0x0, 0x1e7, 0x8, 0x3, 0x9, 0x5, 0xc, 0x4, 0x3, 0xe90c, 0xf28, 0x3, 0x6, 0x4, 0xfffffffe, 0x3, 0x86, 0x526, 0x9, 0x45b, 0x5, 0x2c, 0x9, 0x4, 0x4, 0xd65f, 0x2, 0x101, 0x3, 0x101, 0x3, 0xffffffff, 0xff, 0x7e9934fe, 0x3, 0x6, 0x5691, 0x7, 0x5, 0x5, 0x7ff, 0x1, 0x504, 0x1, 0xfffffffd, 0x50, 0x10000, 0x200, 0x5, 0x1, 0xf8, 0x6, 0xfffffffd, 0xa84, 0x7, 0xfff, 0x8, 0x0, 0x8, 0x8, 0x3, 0xe, 0x8, 0x9, 0x9709, 0x80000001, 0x1, 0xc0, 0x3, 0xdd63, 0x8, 0x1, 0x98c, 0x800, 0x22e1, 0x8, 0x7, 0x7, 0xffff4106, 0x1, 0x1, 0x392, 0x5, 0x3ff, 0x9, 0x1, 0x81, 0x5, 0x6, 0x0, 0x1, 0x8, 0x10000, 0x401, 0x2fb, 0xa69, 0x3, 0x511, 0x1, 0x7, 0x4, 0x6, 0x1, 0x0, 0x8, 0xffffffff, 0x1000, 0x5, 0x3, 0xa50, 0x58ad, 0x82e, 0x1000, 0x2, 0x3, 0x80000001, 0xab9f, 0x62, 0xaf2, 0x4, 0x0, 0xd8c, 0x3, 0x963, 0x8000, 0x6d25, 0x6, 0x7fff, 0x1e1f1b, 0x2a, 0x1, 0x0, 0xf, 0x7, 0x3, 0x5, 0x2, 0x2, 0x7, 0x4, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x5, 0x3, 0x6, 0x67, 0x9, 0x79b40000, 0x3, 0xfff, 0xfffffffe]}) (async) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000001240)={[0x1, 0x8, 0x199, 0xba1d, 0x7, 0x1, 0x9, 0x4, 0x1, 0x67, 0x9, 0xffff, 0xc, 0x6, 0x401, 0x7, 0x639, 0x10000, 0x7, 0x6, 0x1, 0x6, 0x8, 0x7, 0xd, 0xfffffff7, 0x80000001, 0xaf, 0x3ff, 0x2, 0x0, 0x0, 0x1, 0x100, 0x5, 0x23, 0x2, 0xfff, 0x1000, 0x1372, 0x7f, 0x9, 0x1, 0x6, 0x75, 0xd, 0x9, 0x5, 0xa7be, 0x3, 0xc116, 0x8, 0xa83f, 0x8, 0x7ff, 0x6, 0x3, 0x6, 0xa, 0x5f, 0x3, 0x8001, 0x400, 0x9, 0x10, 0x8, 0x7, 0x5, 0x100, 0x8001, 0xe, 0x1, 0x2, 0x3796, 0xf, 0x6, 0x5, 0xf, 0x773, 0xffffffff, 0xb, 0xf, 0xc, 0x8, 0x5, 0x2, 0x80000001, 0x8001, 0x2, 0xc, 0x4, 0x1, 0x4, 0x6, 0x6, 0x12000, 0xf, 0xfffffffe, 0x1, 0x400, 0x81, 0xfffffe00, 0x3, 0x8f, 0xb7, 0x70, 0x1, 0x8, 0xcda2, 0x2a32, 0x4, 0x1102f8a3, 0x4, 0x9, 0x195, 0x3, 0x8, 0x6, 0xbf, 0x7, 0x10, 0x4d1, 0x7f, 0x7, 0x9, 0x101, 0x3, 0x7ff, 0x4, 0x5, 0x3, 0x7f, 0x4, 0x0, 0xeb, 0x10000, 0x1, 0x6, 0x6, 0x2, 0x7, 0x1, 0xb, 0x8, 0xffffff00, 0x3, 0x4, 0x38, 0xfffffe01, 0x2c, 0x7f, 0x5, 0x1, 0x3, 0xa, 0x5, 0x8, 0x1, 0xe14c, 0x4, 0x40, 0x5, 0x9, 0xffffffff, 0x0, 0x80000001, 0x7, 0x401, 0x3, 0x57, 0x7, 0x8, 0xc, 0x6, 0x0, 0x10001, 0x91f, 0x80000001, 0x9, 0x62, 0xfffffffe, 0xfa, 0x800, 0x8, 0x4, 0x7f, 0x80000001, 0x1ac, 0x4, 0x10, 0x15, 0x200, 0x2, 0xd, 0xffffffff, 0x0, 0xfff, 0x101, 0x7, 0x7, 0x3, 0x0, 0x200, 0xdffd, 0xc2, 0x4, 0x6b0, 0xc, 0x7, 0x288b46da, 0x9, 0x0, 0xd7b, 0x6, 0x80000000, 0x5, 0x9, 0x6, 0x2, 0xf, 0x8212, 0x0, 0x7fff, 0x365e, 0x3, 0x120000, 0x6, 0x81, 0x401, 0x5, 0x8, 0x5, 0x1, 0x1, 0xd, 0x3, 0xb, 0x1, 0x6, 0x9, 0x9699, 0x10, 0x0, 0x0, 0x200, 0x4, 0x9, 0x1, 0x8, 0x7, 0x1ff, 0x7, 0xffffffc0, 0xaa2, 0x400, 0x4, 0x7, 0xe, 0x95c, 0x33, 0x7, 0x2, 0x5, 0x81, 0xf, 0x0, 0x8, 0xd, 0xcb, 0x5, 0x9, 0x9, 0x2, 0x200, 0x81, 0x3bf, 0x5, 0x2, 0x400, 0x6, 0x200, 0x7, 0xf3, 0x2, 0x7, 0x8, 0x7, 0x1a7b, 0x5, 0x7, 0x2, 0x9d, 0x101, 0x6, 0x0, 0x3, 0x5, 0x4, 0x4, 0xe265, 0xb3, 0x5c2, 0xe3, 0x1e0000, 0x8, 0x1, 0x8, 0x8, 0x7, 0x4, 0xffffffff, 0x5, 0x2, 0xffffffff, 0xffffffff, 0x3, 0x6, 0x5, 0x0, 0x9, 0x6, 0x7ff, 0x838e, 0x620, 0x3de, 0x45bf, 0xffff, 0x100, 0x3, 0x4, 0x4, 0x1, 0x23178e71, 0x7, 0x1ff, 0x5, 0x7, 0x10001, 0x2, 0x100, 0x3, 0x9, 0x9, 0x3, 0x1, 0x96af, 0x1, 0x2, 0xfffffffa, 0xffff, 0x10000, 0x34, 0x0, 0x4b, 0x1, 0xd0, 0xec4, 0xfffffffd, 0x3, 0xfff, 0x4, 0x5, 0x7, 0xfffffc00, 0x7, 0x4, 0x4, 0x3, 0xff, 0x0, 0x9d53, 0x8, 0x8001, 0x1, 0x1ff, 0x3, 0x140, 0x800, 0x6, 0x1, 0x5, 0x7fffffff, 0x8, 0x4, 0x9, 0x1, 0x0, 0x0, 0x6, 0x0, 0xa95, 0x3, 0xd8, 0x4, 0x10, 0x8, 0xf65, 0x7, 0x1, 0xfffffffe, 0x10000, 0x4, 0xfffffff9, 0x8, 0xe7, 0x5, 0x6, 0x2, 0x2, 0x2, 0x9, 0xffff, 0x1, 0x9, 0x0, 0x9, 0x3ff, 0x1000, 0x400, 0x0, 0x0, 0xffffffec, 0x84, 0x2, 0x5, 0x5, 0x3, 0x2, 0xb7d, 0xdbb, 0x8001, 0x4, 0x0, 0x2, 0x4, 0xf7df, 0x1ff, 0x4, 0x5, 0xe, 0x0, 0x4, 0x0, 0x4, 0xe, 0xd, 0x4, 0xfffffffa, 0x9, 0x6, 0x7, 0x200, 0xfffffffa, 0x4, 0x8, 0xd19, 0x7fffffff, 0x6, 0x8, 0x8, 0xd, 0x0, 0x3, 0x9, 0x6, 0xd7, 0x5, 0x2, 0x9, 0xfff, 0x2, 0x80000000, 0x0, 0x4, 0x10, 0x6, 0x7, 0x10, 0x7, 0x6, 0x1, 0x8, 0x0, 0x140, 0x9, 0x7, 0x1, 0x53e4694e, 0x5, 0x8, 0x3, 0x0, 0x3, 0x0, 0x0, 0x8, 0xffffffff, 0x5, 0xf, 0x8, 0x3, 0x6, 0x0, 0x8, 0x100, 0x8, 0x5, 0x7, 0x3, 0x400, 0x241c, 0xbdd, 0xe10, 0x0, 0xfffffffb, 0x4, 0xffff, 0x3, 0x6, 0x5, 0x9, 0x1, 0x5, 0xffffffff, 0x9, 0x2, 0x2, 0xe9c, 0x3, 0x1, 0x39, 0x9, 0x3, 0xde, 0x400, 0x3, 0x4, 0x1, 0x81, 0x5, 0x2, 0xed, 0x6, 0x3, 0x4, 0x1, 0x101, 0xd, 0x1, 0x811d, 0x2, 0x0, 0x8, 0xf206, 0x5, 0x2, 0x1000, 0x9, 0x0, 0x80000000, 0x2, 0x9, 0x0, 0x6, 0x1, 0x722, 0x1ff, 0x5, 0x6, 0xd27b, 0x6, 0x0, 0x0, 0x5, 0x8, 0x4, 0x8, 0x4, 0x6, 0x5, 0x0, 0x115c, 0x556644c3, 0x4, 0x222, 0x5, 0x2, 0x8000, 0x3d, 0x4, 0x4, 0x3, 0xac, 0x6, 0x6, 0x8001, 0x9, 0x0, 0x3, 0x0, 0x200, 0x1, 0x0, 0x2, 0x9, 0x1, 0x3, 0x40, 0x7f, 0x554, 0x5, 0x5, 0x0, 0x800, 0x16cc5971, 0xe, 0x0, 0x85, 0xffffffff, 0x8, 0x14, 0xff, 0xa, 0x10000, 0x1, 0x3, 0x1, 0x80000001, 0xfa5, 0x10001, 0x8, 0xf, 0xb71d, 0xdbb2, 0x9, 0x80000001, 0x24ee9221, 0x1, 0x3, 0x0, 0x0, 0x1, 0x80000000, 0x8, 0x4, 0x101, 0x3, 0x100, 0x1, 0x9, 0x5, 0x0, 0xfffffff8, 0x3, 0xdba1, 0xfffffffc, 0x2, 0x9, 0x81, 0x81, 0xfffffffe, 0x4, 0x208cfee3, 0x4, 0x8, 0x43d, 0x0, 0x0, 0x5, 0xaa7a, 0x3, 0x7, 0x6931, 0x1, 0x1, 0x7, 0x8, 0x6, 0xb, 0xfffffffc, 0x3, 0x3, 0x0, 0x7, 0x8, 0x8, 0x4, 0x9, 0x2, 0xc1, 0x9, 0x128000, 0xfffff801, 0x834, 0x4, 0x5, 0x8000, 0xfffffffb, 0x82a6, 0x1, 0x4, 0x5, 0x7, 0x1, 0x3, 0x0, 0x4, 0x0, 0x8, 0x3, 0x2, 0x2, 0x3, 0xf759, 0xb, 0x783, 0x1, 0x101, 0x4, 0x4, 0xff, 0x2633, 0x5, 0x8, 0x9, 0xfa, 0x3d0, 0x2, 0x6, 0x6, 0x8, 0xffff7fff, 0xa53, 0x6, 0x6, 0x2, 0x6, 0x10, 0x2, 0x2ba9, 0x1, 0x16, 0x9, 0x1ff, 0x0, 0xb118, 0xfffffe01, 0x40a8, 0x1, 0x8, 0x7fff, 0xb, 0xf, 0x1, 0x6, 0x24f, 0x1, 0xeb6, 0xf4, 0xfb, 0x8, 0x8, 0x4, 0x0, 0x7ff, 0x9, 0xed, 0x2, 0xf, 0x7, 0x7fff, 0x0, 0x9, 0x9, 0x3, 0x1, 0xc, 0xff, 0x8, 0x7, 0x1, 0xd75, 0x1, 0x8, 0x4, 0x0, 0x7fff, 0x5, 0x8001, 0xb, 0x6, 0x2, 0x7, 0xc, 0x8, 0x7f, 0xfffffffc, 0xffffffac, 0x400, 0x5, 0x4, 0x1, 0x8, 0xe20c8e4, 0x6, 0x200, 0x5, 0x5, 0xd, 0x40, 0x401, 0x0, 0x6229, 0x0, 0x800, 0x1000, 0x5, 0x8, 0xb76, 0x5, 0x66, 0x9, 0x9, 0x6, 0x3, 0x9, 0x1000, 0x5, 0x2, 0x21, 0x2, 0x6, 0xfff, 0xff, 0x1, 0x8a60, 0x6, 0x80000000, 0x3, 0x7, 0x4, 0x0, 0x1, 0x4, 0x5, 0xf46, 0x10000, 0x0, 0xffffffff, 0x2, 0x7fff, 0x3e78, 0xb4b, 0xd, 0x3, 0x80000000, 0x3, 0xa7, 0x10200, 0xff, 0x3, 0x9, 0x4, 0xe, 0x6, 0x8, 0x6, 0x5, 0x401, 0x0, 0x1e7, 0x8, 0x3, 0x9, 0x5, 0xc, 0x4, 0x3, 0xe90c, 0xf28, 0x3, 0x6, 0x4, 0xfffffffe, 0x3, 0x86, 0x526, 0x9, 0x45b, 0x5, 0x2c, 0x9, 0x4, 0x4, 0xd65f, 0x2, 0x101, 0x3, 0x101, 0x3, 0xffffffff, 0xff, 0x7e9934fe, 0x3, 0x6, 0x5691, 0x7, 0x5, 0x5, 0x7ff, 0x1, 0x504, 0x1, 0xfffffffd, 0x50, 0x10000, 0x200, 0x5, 0x1, 0xf8, 0x6, 0xfffffffd, 0xa84, 0x7, 0xfff, 0x8, 0x0, 0x8, 0x8, 0x3, 0xe, 0x8, 0x9, 0x9709, 0x80000001, 0x1, 0xc0, 0x3, 0xdd63, 0x8, 0x1, 0x98c, 0x800, 0x22e1, 0x8, 0x7, 0x7, 0xffff4106, 0x1, 0x1, 0x392, 0x5, 0x3ff, 0x9, 0x1, 0x81, 0x5, 0x6, 0x0, 0x1, 0x8, 0x10000, 0x401, 0x2fb, 0xa69, 0x3, 0x511, 0x1, 0x7, 0x4, 0x6, 0x1, 0x0, 0x8, 0xffffffff, 0x1000, 0x5, 0x3, 0xa50, 0x58ad, 0x82e, 0x1000, 0x2, 0x3, 0x80000001, 0xab9f, 0x62, 0xaf2, 0x4, 0x0, 0xd8c, 0x3, 0x963, 0x8000, 0x6d25, 0x6, 0x7fff, 0x1e1f1b, 0x2a, 0x1, 0x0, 0xf, 0x7, 0x3, 0x5, 0x2, 0x2, 0x7, 0x4, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x5, 0x3, 0x6, 0x67, 0x9, 0x79b40000, 0x3, 0xfff, 0xfffffffe]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) socket$netlink(0x10, 0x3, 0x6) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000380)="721fa8beb0dcec6dd07c238b793882ea91d6bfa6654fe625194f27c8134d3403a797c17d711ab4204bc6bf69474eb3aa7c3b294710f70cd5ea12c71776135ee4f0b95996", 0x44}], 0x1) (async) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000380)="721fa8beb0dcec6dd07c238b793882ea91d6bfa6654fe625194f27c8134d3403a797c17d711ab4204bc6bf69474eb3aa7c3b294710f70cd5ea12c71776135ee4f0b95996", 0x44}], 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) r7 = accept4$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/81, 0x51}], 0x1}, 0x4c2103a0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x9, @loopback, 0x8}, 0x1c) (async) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x9, @loopback, 0x8}, 0x1c) 1.284735626s ago: executing program 2 (id=2148): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7, 0x5, 0x5) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x8) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) fcntl$setstatus(r0, 0x4, 0x6800) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x60, r3, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x66}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x2b, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x64, 0x1, @broadcast, 0xb, @value=@device_b, 0x100, 0xb, @device_a, 0x501f000}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x404400c}, 0x10) write$tun(0xffffffffffffffff, &(0x7f00000004c0)={@void, @val={0x4, 0x0, 0x2, 0xbe, 0x101, 0xf}, @ipv6=@dccp_packet={0xa, 0x6, "ef8750", 0x110, 0x21, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@routing={0x2f, 0x6, 0x2, 0x6e, 0x0, [@mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @remote]}, @dstopts={0x5e, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x401}]}, @fragment={0x95, 0x0, 0x3, 0x0, 0x0, 0x1, 0x68}, @fragment={0x5e, 0x0, 0x15, 0x0, 0x0, 0x6, 0x68}], {{0x4e24, 0x4e23, 0x4, 0x1, 0xc, 0x0, 0x0, 0x1, 0x4, "447ac3", 0x5, "ff8405"}, "71831f03651d7c481760ede796ca6f6859e428f09d4eb9bf5a9adb3e3337fa2f193f8cfc915bb88701b1ae1a59baa2e63e52f81f5550688d6922761ddcd617fde6db4bbe8833136291e8c85ea7410d726ec989b32198b6d4605f06d52c1234daeebac6cfb9aab4baa9927a025b206e7c083a19ddcbe365c26fcebb7fac3e6c0c6c053b3e98af9ea2346d1066a1e979f1f632ad8ccef09fd22c258dc3291b6f87860ebb397758cd88"}}}}, 0x142) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x0, 0x0, 0x1, 0x1}, 0x20) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) write$FUSE_NOTIFY_RESEND(r6, &(0x7f00000001c0)={0x14}, 0x14) fsopen(&(0x7f0000000480)='selinuxfs\x00', 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x8000000000000000, 0x101701) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02"]) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4008550d, 0x0) write$dsp(r0, &(0x7f0000000100)="dad2a9e1", 0x4) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) 556.060901ms ago: executing program 3 (id=2149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10001, 0x4, 0x5a8b, 0x578, 0xd, 0x44, 0xffff, 0x8, 0xfff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80010}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@getchain={0x24, 0x66, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x4, 0x4}, {0x1, 0xfff1}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) (fail_nth: 8) 264.551784ms ago: executing program 3 (id=2150): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000001000040"]) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newchain={0x880, 0x64, 0x8, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff1, 0x3}, {0xfff3, 0x8}, {0x9, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x0, 0xc}}, @filter_kind_options=@f_cgroup={{0xb}, {0x840, 0x2, [@TCA_CGROUP_POLICE={0x83c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x42000000, 0xf5, 0x3, 0x5, 0x2, 0x411b, 0x5, 0x5, 0xfffffffd, 0x40, 0xffff989c, 0x8000, 0x2, 0x8, 0x5, 0x40, 0x6, 0x2, 0x522e, 0x7d, 0x401, 0x200, 0x9, 0x1, 0x4, 0x0, 0xb, 0x43, 0xba, 0x7f9, 0x2, 0x6, 0x4, 0x7ec, 0x3, 0x3, 0x80000001, 0xdf61, 0x4, 0xfffffff7, 0x0, 0x3, 0x6, 0x0, 0x8, 0xb, 0x3ff, 0x8, 0x5c2, 0x28, 0xff, 0xffffccdc, 0x10000, 0x4, 0x80000000, 0x6, 0x3, 0x0, 0x3ff, 0x7, 0x96, 0x3, 0x534160f9, 0x1ff, 0x6, 0x1, 0xfb, 0x5, 0x40, 0x0, 0x713, 0x9, 0xff, 0x2, 0x2, 0x8, 0x79, 0x1, 0xf, 0x6, 0x8001, 0x764, 0x80, 0x7b, 0x8001, 0x1000, 0x9, 0x8c7, 0x10000, 0x1, 0x2, 0x6d, 0x1, 0xe8, 0x1ff, 0x46d, 0x5, 0x401, 0x7, 0x5, 0x0, 0xfffffff9, 0x8, 0xffffff43, 0x0, 0xfffffffa, 0x8, 0x4, 0x5, 0x5000000, 0xec96, 0x5, 0x1, 0x983f, 0x8, 0x0, 0xfffffffe, 0x1, 0x67558128, 0x7ff, 0x1, 0x2f, 0x10, 0x9, 0x8000, 0xa, 0x8, 0x2, 0x4, 0x9, 0x800, 0x7fff, 0x80, 0x1, 0x5, 0x4, 0x10001, 0x0, 0x10, 0xfffffffb, 0x2, 0xfffffff8, 0xc662, 0x3, 0x2917, 0x9177, 0x7, 0xb974, 0xb32, 0xc1, 0x0, 0x800, 0x5, 0x85, 0x9, 0x1, 0x401, 0xfffff800, 0xf30, 0x10000, 0x4, 0xffff35f0, 0x8, 0x5, 0x2bf, 0x0, 0x2, 0x0, 0x6, 0xf3c, 0x100, 0xfffffffa, 0x6, 0xccbc, 0xe6df, 0xffffffff, 0x6b, 0x3, 0x1, 0xff, 0x5, 0x101, 0x6, 0x1000, 0xef07, 0x8, 0x2, 0x2, 0x1, 0x6, 0x9e, 0x8, 0x8, 0x6, 0x3, 0x4e5, 0x35, 0x800, 0x7f, 0x188, 0x9, 0x5, 0x9, 0xfff, 0x51d1, 0x7f, 0x9, 0x7, 0x7fff, 0x6, 0xf2, 0x627a592c, 0x5, 0xa, 0xc, 0x8, 0x4, 0x6, 0x1, 0xfff, 0x7fff, 0x3, 0x1, 0xfffffffb, 0x3, 0xe0, 0x3f1, 0x6, 0x1, 0xbe, 0x3, 0x3, 0x6, 0x8, 0x0, 0x0, 0x4, 0x3, 0x8, 0xc, 0x96, 0x401, 0xfffffffb, 0xd879, 0x1, 0xadf, 0x0, 0x7, 0xfb, 0x7, 0x6, 0x2, 0x2, 0x0, 0x5, 0xbf7c]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x100, 0x86d5, 0x6, 0x4, 0x3, 0x38, 0x6, 0xfffffff9, 0x4, 0x40, 0x0, 0x7, 0x4, 0x20c, 0xc, 0x0, 0xfffffffa, 0x5, 0x4, 0xed8, 0xfffffff3, 0x5, 0x80, 0x1000, 0xc, 0x2, 0xe1b4, 0x800000, 0x91, 0x4, 0x7f, 0x3, 0x9, 0x0, 0x5, 0x1000, 0x8, 0x56, 0x80000000, 0x5, 0x1, 0x5, 0x20000000, 0x800, 0x5e25, 0x3, 0x1, 0x8, 0x8, 0xe, 0xca4a, 0x2, 0xd5f, 0x0, 0x5, 0x8, 0x3, 0x3, 0x0, 0x7, 0x7, 0xffffffff, 0x3, 0x8, 0x6, 0x3, 0x56, 0x9, 0xb, 0x4, 0xc4, 0x9, 0x5, 0x4, 0x2e7, 0x3, 0x401, 0x7, 0x1, 0x2f, 0xa, 0xc, 0xfffffffb, 0xc, 0x7fffffff, 0xa, 0xe7, 0x7, 0x2, 0x30000000, 0x6, 0x9, 0x80000001, 0x1, 0x200, 0x1ff, 0x9, 0x0, 0x2, 0x8, 0x1, 0x6, 0xfffff800, 0x800, 0x4, 0x5, 0x3, 0x8001, 0x4, 0x6, 0x0, 0x0, 0x1, 0x5, 0x2, 0xfffffff9, 0x5, 0x4, 0x5, 0x1, 0x40, 0x2, 0x7fffffff, 0xfffffff3, 0x7, 0xffffffff, 0x2, 0x9, 0x10, 0x3, 0x4, 0x7ff, 0x80000000, 0xdf, 0x3f, 0x1, 0x6, 0x2, 0x6, 0xbe14, 0x1, 0x8, 0x1, 0x8, 0x4, 0xf, 0x57, 0x7, 0x3, 0x3, 0x2, 0x6, 0xfffffeff, 0xe, 0xcad, 0x4fb, 0x4, 0x9, 0xf91, 0x6, 0x6, 0x6, 0x8, 0x401, 0x7, 0x6, 0x3, 0x1, 0x5, 0x32e, 0x9, 0x6, 0xff000000, 0xf8e4, 0xffffffff, 0x8, 0x3, 0x8000, 0x7, 0xeb4, 0x2, 0x400, 0x18000, 0x6, 0x3d8, 0x7f, 0x80000001, 0x81, 0x0, 0x7, 0xff, 0x2, 0x4, 0xbe7f, 0x4c5c, 0xfffffff9, 0x35e7, 0x2, 0x6, 0x4, 0x4, 0xff, 0xd, 0xe, 0x1, 0x10001, 0xfffff074, 0x29, 0x7, 0x4, 0x8, 0xff, 0xfffffff9, 0xffff80a8, 0x9, 0xa27, 0x1, 0x977, 0xc02ae9c0, 0x1d, 0x80000000, 0x6, 0x1ff, 0x3fd6, 0x9, 0x401, 0x5, 0x6, 0xd, 0x4, 0xd376, 0xffff66ca, 0xb708, 0xc, 0x9, 0x2, 0xc2c8, 0x3, 0x4, 0x9, 0x9dbf, 0x5, 0x7fff, 0x2, 0x2, 0x40, 0x831, 0x80, 0x1, 0x33, 0x4, 0x6, 0x1, 0x1, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x81}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x401}, @TCA_POLICE_PEAKRATE64={0xc}]}]}}]}, 0x880}}, 0x0) syz_open_dev$vcsu(&(0x7f0000000100), 0x1, 0x131803) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000140)={0x0, @bt={0x2, 0xb, 0x1, 0x2, 0x8001, 0xffff, 0x6, 0x0, 0x3, 0x5af, 0xee4, 0x10, 0x7, 0x9, 0x17, 0x9, {0x0, 0x8}, 0x5, 0x6}}) 163.30591ms ago: executing program 5 (id=2151): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x200) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)=0x71b49247, 0x4) r2 = fsmount(0xffffffffffffffff, 0x0, 0x2) name_to_handle_at(r2, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=@reiserfs_5={0x14, 0x5, {0x1, 0x9, 0x1, 0x2, 0x106f}}, &(0x7f0000000240), 0x600) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x8000, 0x12) r5 = openat$cgroup_ro(r3, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000580)={0xf, 0x8, 0xfa00, {r6, 0x1}}, 0x10) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) r7 = getpgrp(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000080)={0xd, 0x8, {r7}, {}, 0x100000001, 0x5}) r9 = syz_open_procfs(r8, &(0x7f00000000c0)='net/tcp\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r10, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000000100)={0x50, 0x0, r11, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r10, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff30000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x6330, &(0x7f0000000400)={0x0, 0x52b8, 0x200, 0x2, 0x1b6, 0x0, r9}, &(0x7f0000000480), &(0x7f00000004c0)) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) syz_fuse_handle_req(r10, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000b00)={&(0x7f0000000280)={0x50, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fdatasync(r12) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r5) 0s ago: executing program 3 (id=2152): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x64c842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000001140)="660f5efd0f0009f30fc7373e640f01c467afba4200edda7ec00f01c27a0965660f380a32", 0x24}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000002640)=[{{&(0x7f0000000280)=@ax25={{0x3, @netrom}, [@remote, @netrom, @remote, @rose, @default, @remote, @default, @rose]}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000840)=""/204, 0xcc}, {&(0x7f00000000c0)=""/38, 0x26}, {&(0x7f0000000140)=""/47, 0x2f}, {&(0x7f0000000380)=""/167, 0xa7}, {&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/163, 0xa3}, {&(0x7f0000000200)=""/21, 0x15}], 0x7, &(0x7f0000000b00)=""/223, 0xdf}, 0x81}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c00)=""/47, 0x2f}, {&(0x7f0000000c40)=""/149, 0x95}, {&(0x7f0000000d00)=""/244, 0xf4}], 0x10000000000001f5, &(0x7f0000000e40)=""/106, 0x6a}, 0x2}, {{&(0x7f0000000ec0)=@phonet, 0x80, &(0x7f0000001100), 0x0, &(0x7f0000002780)=""/87, 0x57}, 0x400}, {{&(0x7f00000011c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000002340)=[{&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000001240)=""/221, 0xdd}], 0x2, &(0x7f0000002380)=""/92, 0x5c}, 0x8}, {{&(0x7f0000000f40)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002480)=""/161, 0xa1}], 0x1, &(0x7f0000002580)=""/185, 0xb9}, 0x18e}], 0x5, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x1, 0xb}, 0x0) epoll_create(0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x8940, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x40000) ioctl$FIONCLEX(r0, 0x5450) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket(0x2b, 0x80801, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) kernel console output (not intermixed with test programs): altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 592.257781][ T5918] usb 4-1: config 2 interface 45 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 592.274463][ T5918] usb 4-1: config 2 interface 30 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 592.285484][ T9] usb 2-1: device descriptor read/64, error -71 [ 592.296243][ T5918] usb 4-1: config 2 interface 30 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 592.328138][ T5918] usb 4-1: config 2 interface 30 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 592.356755][ T5918] usb 4-1: config 2 interface 30 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 592.384791][ T5918] usb 4-1: config 2 interface 30 altsetting 4 has an endpoint descriptor with address 0x3F, changing to 0xF [ 592.405832][ T5918] usb 4-1: config 2 interface 30 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 592.416958][ T5918] usb 4-1: config 2 interface 30 altsetting 4 has 6 endpoint descriptors, different from the interface descriptor's value: 15 [ 592.432874][ T5918] usb 4-1: too many endpoints for config 2 interface 150 altsetting 27: 246, using maximum allowed: 30 [ 592.444886][ T5918] usb 4-1: config 2 interface 150 altsetting 27 has a duplicate endpoint with address 0x5, skipping [ 592.456309][ T5918] usb 4-1: config 2 interface 150 altsetting 27 has a duplicate endpoint with address 0x9, skipping [ 592.465804][ T8127] usb 7-1: USB disconnect, device number 31 [ 592.467944][ T5918] usb 4-1: config 2 interface 150 altsetting 27 has a duplicate endpoint with address 0xC, skipping [ 592.489590][ T5918] usb 4-1: config 2 interface 150 altsetting 27 has a duplicate endpoint with address 0x4, skipping [ 592.556829][ T5918] usb 4-1: config 2 interface 150 altsetting 27 has a duplicate endpoint with address 0xE, skipping [ 592.569063][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 592.578357][ T5918] usb 4-1: config 2 interface 150 altsetting 27 has a duplicate endpoint with address 0x7, skipping [ 592.590552][ T5918] usb 4-1: config 2 interface 150 altsetting 27 has a duplicate endpoint with address 0x5, skipping [ 592.602111][ T5918] usb 4-1: config 2 interface 150 altsetting 27 has a duplicate endpoint with address 0xA, skipping [ 592.614570][ T5918] usb 4-1: config 2 interface 150 altsetting 27 has 9 endpoint descriptors, different from the interface descriptor's value: 246 [ 592.628514][ T5918] usb 4-1: config 2 interface 192 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 592.641298][ T5880] usb 6-1: Firmware version (0.0) predates our first public release. [ 592.649772][ T5880] usb 6-1: Please update to version 0.2 or newer [ 592.656879][ T5918] usb 4-1: config 2 interface 192 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 592.669119][ T5880] usb 6-1: Firmware: build [ 592.674201][ T5918] usb 4-1: config 2 interface 192 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 592.686019][ T5918] usb 4-1: config 2 interface 192 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 592.701415][ T5918] usb 4-1: config 2 interface 192 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 592.713441][ T9] usb 2-1: device descriptor read/64, error -71 [ 592.730880][ T5918] usb 4-1: config 2 interface 192 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 592.769147][ T5918] usb 4-1: config 2 interface 192 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 592.789108][ T5918] usb 4-1: config 2 interface 192 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 592.830023][ T9] usb usb2-port1: attempt power cycle [ 592.847629][ T5918] usb 4-1: config 2 interface 192 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 592.872846][T12882] xt_hashlimit: max too large, truncated to 1048576 [ 592.880004][T12882] xt_hashlimit: overflow, try lower: 9/0 [ 592.906073][ T5918] usb 4-1: config 2 interface 192 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 592.924401][ T5918] usb 4-1: config 2 interface 192 altsetting 3 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 592.937196][T12865] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 592.944984][ T5918] usb 4-1: config 2 interface 192 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 592.958325][ T5918] usb 4-1: config 2 interface 192 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 592.974977][T12865] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1719'. [ 593.005275][ T5918] usb 4-1: config 2 interface 192 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 593.026441][ T5918] usb 4-1: config 2 interface 192 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 593.057442][ T5918] usb 4-1: config 2 interface 192 altsetting 3 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 593.088490][ T5918] usb 4-1: config 2 interface 101 has no altsetting 0 [ 593.127807][ T5918] usb 4-1: config 2 interface 45 has no altsetting 0 [ 593.138389][ T5918] usb 4-1: config 2 interface 30 has no altsetting 0 [ 593.150245][T10260] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 593.169875][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 593.267089][ T5918] usb 4-1: config 2 interface 150 has no altsetting 0 [ 593.285950][ T5880] usb 6-1: USB disconnect, device number 4 [ 593.310141][ T9] usb 2-1: device descriptor read/8, error -71 [ 593.325649][ T5918] usb 4-1: config 2 interface 192 has no altsetting 0 [ 593.426991][ T5918] usb 4-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice= 1.a9 [ 593.450542][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.540421][ T5918] usb 4-1: Product: syz [ 593.560501][ T5918] usb 4-1: Manufacturer: syz [ 593.570561][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 593.580339][ T5918] usb 4-1: SerialNumber: syz [ 593.618543][ T9] usb 2-1: device descriptor read/8, error -71 [ 593.632996][T12894] could not allocate digest TFM handle poly1305-arm [ 593.657454][T12889] netlink: 'syz.2.1724': attribute type 29 has an invalid length. [ 593.662007][T12855] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 593.706832][T12899] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1724'. [ 593.780178][ T9] usb usb2-port1: unable to enumerate USB device [ 593.891756][ T5918] usb 4-1: bad CDC descriptors [ 594.075083][ T5918] usb 4-1: USB disconnect, device number 21 [ 594.199123][ T9] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 594.359177][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 594.367679][ T9] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 594.377978][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.390372][ T9] usb 7-1: config 0 descriptor?? [ 594.390507][T10256] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 594.605913][ T9] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 594.657109][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 594.657128][ T30] audit: type=1326 audit(1746626292.309:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.2.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38d18e969 code=0x7ffc0000 [ 594.719282][ T30] audit: type=1326 audit(1746626292.309:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.2.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38d18e969 code=0x7ffc0000 [ 594.747195][ T30] audit: type=1326 audit(1746626292.359:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.2.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7fa38d18e969 code=0x7ffc0000 [ 594.772442][ T30] audit: type=1326 audit(1746626292.359:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.2.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38d18e969 code=0x7ffc0000 [ 594.795501][ T30] audit: type=1326 audit(1746626292.359:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.2.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38d18e969 code=0x7ffc0000 [ 594.851630][ T30] audit: type=1326 audit(1746626292.359:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.2.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa38d18e969 code=0x7ffc0000 [ 594.892422][ T30] audit: type=1326 audit(1746626292.359:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.2.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38d18e969 code=0x7ffc0000 [ 594.969621][ T30] audit: type=1326 audit(1746626292.359:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.2.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa38d18e969 code=0x7ffc0000 [ 595.028306][ T30] audit: type=1326 audit(1746626292.359:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.2.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38d18e969 code=0x7ffc0000 [ 595.073545][ T30] audit: type=1326 audit(1746626292.359:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.2.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38d18e969 code=0x7ffc0000 [ 595.218154][ T5882] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 595.220908][T12925] xt_hashlimit: max too large, truncated to 1048576 [ 595.238786][T12925] xt_hashlimit: overflow, try lower: 9/0 [ 595.559384][T10256] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 595.633333][ T5882] usb 4-1: config 0 has no interfaces? [ 595.645475][ T5882] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 595.655004][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.663166][ T5882] usb 4-1: Product: syz [ 595.695666][ T5882] usb 4-1: Manufacturer: syz [ 595.745801][ T5882] usb 4-1: SerialNumber: syz [ 595.763217][ T5882] usb 4-1: config 0 descriptor?? [ 596.791226][T12940] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1737'. [ 596.861752][T10256] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 596.904333][T12940] netlink: 'syz.5.1737': attribute type 29 has an invalid length. [ 597.440036][ T9] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 597.503631][ T9] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 597.563290][ T9] asix 7-1:0.0: probe with driver asix failed with error -71 [ 597.638401][ T9] usb 7-1: USB disconnect, device number 32 [ 597.762502][T12948] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1740'. [ 598.000980][ T24] usb 4-1: USB disconnect, device number 22 [ 598.124652][ T9] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 598.189379][ T8127] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 598.223241][ T1165] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 598.326214][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 598.336447][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.353405][ T8127] usb 6-1: config 0 interface 0 has no altsetting 0 [ 598.355955][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 598.374336][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.381655][ T8127] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 598.383092][ T9] usb 7-1: Product: 뼆겘ꢗ꓋紮ᮅ⬭굉鶵ì¹ç†šæ˜ªã¿™è…€ç‰ˆäŸî”Šå¾µé»˜â­¦ [ 598.404010][ T9] usb 7-1: Manufacturer: 暒猙敤㶭綋䵨點↋氳纰逘媵嚋벑㲾ԩ쥺慹ዪî±ïŸ¦ó°µ¥è­£ì²‚騪今㻫ࡰ个脙⚰̴æ™è«¯æ³ì†ºæš–슓酾ã˜é¯½ã¸¢ê§©î‘¯æ‡°é«¾ë©—Я呒锥狔앷쀂領畅褜狼紪刳ο㺟釴ã¢è†žâ¯®î³è šê‡•î•‚ﾊä¤í†å€¡è¶„监߶ᅰ麿ྔ民é“啥豅๚ï¥áœªâª†ï¢ˆâ®¡ï£é—å„«ã¸è£—赕 [ 598.424912][ T8127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.450225][ T8127] usb 6-1: config 0 descriptor?? [ 598.461210][ T8127] cp210x 6-1:0.0: cp210x converter detected [ 598.475804][ T9] usb 7-1: SerialNumber: Ðœ [ 598.579117][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 598.729129][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 598.741836][ T24] usb 2-1: config 8 has an invalid interface number: 39 but max is 0 [ 598.750419][ T24] usb 2-1: config 8 has no interface number 0 [ 598.757242][ T24] usb 2-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 598.769461][ T24] usb 2-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 598.779535][ T24] usb 2-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 598.794111][ T24] usb 2-1: config 8 interface 39 has no altsetting 0 [ 598.806370][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 598.845445][ T9] usb 7-1: USB disconnect, device number 33 [ 598.873331][ T8127] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 598.884787][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.892040][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 598.915383][ T24] usb 2-1: Product: syz [ 598.921349][ T24] usb 2-1: Manufacturer: syz [ 598.926057][ T24] usb 2-1: SerialNumber: syz [ 599.194979][ T24] ipheth 2-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 599.218909][ T24] ipheth 2-1:8.39: probe with driver ipheth failed with error -71 [ 599.280610][ T24] usb 2-1: USB disconnect, device number 8 [ 599.289325][ T8127] cp210x 6-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 599.300018][ T5882] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 599.307490][ T8127] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 599.362433][ T8127] usb 6-1: cp210x converter now attached to ttyUSB0 [ 599.390271][ T1165] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 599.403640][ T8127] usb 6-1: USB disconnect, device number 5 [ 599.414764][ T8127] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 599.428734][ T8127] cp210x 6-1:0.0: device disconnected [ 599.509409][ T5882] usb 4-1: device descriptor read/64, error -71 [ 599.586105][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.633288][ T8127] usb 1-1: USB disconnect, device number 5 [ 599.697348][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.709306][ T5918] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 599.773553][ T5882] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 599.783856][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.856681][T12963] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1745'. [ 599.869242][ T5918] usb 7-1: Using ep0 maxpacket: 8 [ 599.880962][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.892692][ T5918] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 599.903284][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.919394][ T5882] usb 4-1: device descriptor read/64, error -71 [ 599.935213][ T5918] usb 7-1: config 0 descriptor?? [ 600.029658][ T5882] usb usb4-port1: attempt power cycle [ 600.155647][ T5918] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 600.182687][ T5918] asix 7-1:0.0: probe with driver asix failed with error -61 [ 600.215167][ T62] bridge_slave_1: left allmulticast mode [ 600.222050][ T62] bridge_slave_1: left promiscuous mode [ 600.228200][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.265638][ T62] bridge_slave_0: left allmulticast mode [ 600.275813][ T62] bridge_slave_0: left promiscuous mode [ 600.285672][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.399795][ T5882] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 600.440387][ T5882] usb 4-1: device descriptor read/8, error -71 [ 600.554563][ T3441] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 600.699622][ T5882] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 600.709386][ T5883] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 600.742963][ T5882] usb 4-1: device descriptor read/8, error -71 [ 600.784993][ T5880] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 600.876775][ T5882] usb usb4-port1: unable to enumerate USB device [ 600.930144][ T5883] usb 6-1: Using ep0 maxpacket: 8 [ 600.965760][ T5883] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 600.969608][ T5880] usb 2-1: config 0 has no interfaces? [ 600.983816][ T5883] usb 6-1: config 0 has no interface number 0 [ 600.999358][ T5884] usb 7-1: USB disconnect, device number 34 [ 601.034234][ T5880] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 601.047943][ T5883] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 601.082684][ T5883] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 601.082710][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.103144][ T5883] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 601.115068][ T5880] usb 2-1: Product: syz [ 601.115093][ T5880] usb 2-1: Manufacturer: syz [ 601.115109][ T5880] usb 2-1: SerialNumber: syz [ 601.132466][ T5883] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 601.154463][ T5880] usb 2-1: config 0 descriptor?? [ 601.253247][ T5883] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 601.390093][ T5883] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 601.475496][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.490616][ T5883] usb 6-1: config 0 descriptor?? [ 601.505912][ T5883] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 601.672885][T12984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.710596][T10260] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 601.742097][T12984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.881111][T12983] ldusb 6-1:0.55: Write buffer overflow, 1 bytes dropped [ 601.909795][T12983] ldusb 6-1:0.55: Couldn't submit interrupt_out_urb -90 [ 602.943037][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.970432][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.990805][ T62] bond0 (unregistering): Released all slaves [ 603.117868][T12999] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1750'. [ 603.128380][T13002] netlink: 'syz.6.1750': attribute type 29 has an invalid length. [ 603.185705][ T8127] usb 6-1: USB disconnect, device number 6 [ 603.196417][ T8127] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 603.461924][ T3441] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 603.909941][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 604.009681][T13039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1756'. [ 604.494206][ T8127] usb 2-1: USB disconnect, device number 9 [ 604.931691][T13042] netlink: 'syz.6.1759': attribute type 1 has an invalid length. [ 604.973848][T10260] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 605.069162][ T8127] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 605.272901][ T62] hsr_slave_0: left promiscuous mode [ 605.312870][ T62] hsr_slave_1: left promiscuous mode [ 605.340478][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.352512][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.360295][ T8127] usb 2-1: Using ep0 maxpacket: 16 [ 605.369176][ T5880] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 605.378030][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.387543][ T8127] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 605.402299][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.410913][ T8127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.451840][ T8127] usb 2-1: Product: syz [ 605.456325][ T8127] usb 2-1: Manufacturer: syz [ 605.488306][ T8127] usb 2-1: SerialNumber: syz [ 605.539742][ T8127] usb 2-1: config 0 descriptor?? [ 605.571054][ T8127] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 605.574551][ T62] veth1_macvtap: left promiscuous mode [ 605.643064][ T5880] usb 4-1: config 0 has no interfaces? [ 605.654482][ T5880] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 605.663674][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.693891][ T5880] usb 4-1: Product: syz [ 605.698121][ T5880] usb 4-1: Manufacturer: syz [ 605.739226][ T62] veth0_macvtap: left promiscuous mode [ 605.748199][ T5880] usb 4-1: SerialNumber: syz [ 605.757851][ T62] veth1_vlan: left promiscuous mode [ 605.763609][ T62] veth0_vlan: left promiscuous mode [ 605.809361][ T5880] usb 4-1: config 0 descriptor?? [ 605.988625][ T8127] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 606.016897][T13065] PKCS7: Unknown OID: [4] 5.25.264.37.2351.52 [ 606.035334][T13065] PKCS7: Only support pkcs7_signedData type [ 606.059770][ T8127] usb 2-1: USB disconnect, device number 10 [ 606.159320][T10260] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 607.059264][ T5883] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 607.257583][ T5883] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 607.276014][ T5883] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.289962][ T5883] usb 6-1: config 0 has no interface number 0 [ 607.300840][ T62] team0 (unregistering): Port device team_slave_1 removed [ 607.301732][ T3441] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 607.313426][ T5883] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 607.338416][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.362692][ T5883] usb 6-1: Product: syz [ 607.367025][ T5883] usb 6-1: Manufacturer: syz [ 607.376729][ T5883] usb 6-1: SerialNumber: syz [ 607.395644][ T5883] usb 6-1: config 0 descriptor?? [ 607.403373][ T5883] hub 6-1:0.31: bad descriptor, ignoring hub [ 607.422757][ T62] team0 (unregistering): Port device team_slave_0 removed [ 607.431179][ T5883] hub 6-1:0.31: probe with driver hub failed with error -5 [ 607.461383][ T5883] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 607.473403][ T5883] uvcvideo 6-1:0.31: Entity type for entity Output 6 was not initialized! [ 607.482528][ T5883] usb 6-1: Failed to create links for entity 6 [ 607.514336][ T5883] usb 6-1: Failed to register entities (-22). [ 607.870221][ T5880] usb 4-1: USB disconnect, device number 28 [ 607.999551][ T5882] usb 6-1: USB disconnect, device number 7 [ 608.246586][T13118] fuse: Unknown parameter '9P—¦)¨’ÃŃ(§SeîÍ/' [ 608.261541][T13076] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1765'. [ 608.277509][T13077] netlink: 'syz.6.1765': attribute type 29 has an invalid length. [ 608.466307][T10260] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 608.796090][T13136] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 608.879333][ T5880] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 608.950800][ T5882] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 609.059261][ T5880] usb 7-1: Using ep0 maxpacket: 32 [ 609.067389][ T5880] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.087916][ T5880] usb 7-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 609.104586][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.113892][ T5880] usb 7-1: Product: syz [ 609.118488][ T5880] usb 7-1: Manufacturer: syz [ 609.130296][ T5880] usb 7-1: SerialNumber: syz [ 609.140578][ T5880] usb 7-1: config 0 descriptor?? [ 609.146824][ T5882] usb 6-1: config 0 has no interfaces? [ 609.168553][ T5880] etas_es58x 7-1:0.0: Starting syz syz (Serial Number syz) [ 609.202450][ T5882] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 609.241397][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.280814][ T5882] usb 6-1: Product: syz [ 609.295135][ T5882] usb 6-1: Manufacturer: syz [ 609.319746][ T5882] usb 6-1: SerialNumber: syz [ 609.330834][ T5882] usb 6-1: config 0 descriptor?? [ 609.363767][ T5880] usb 7-1: USB disconnect, device number 35 [ 609.565147][T13134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.574181][T13134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.639323][T10260] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 609.779179][ T5882] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 610.039285][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 610.065547][ T5882] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 610.095263][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.135989][ T5882] usb 4-1: config 0 descriptor?? [ 610.186774][ T5882] gspca_main: sq930x-2.14.0 probing 041e:403c [ 610.739172][ T5918] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 610.871957][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 610.903916][ T5882] gspca_sq930x: reg_r 001f failed -110 [ 610.916223][ T5882] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 611.094460][ T5918] usb 7-1: Using ep0 maxpacket: 8 [ 611.161705][ T5918] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 611.381820][ T5918] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 611.444610][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.627417][ T9] usb 6-1: USB disconnect, device number 8 [ 612.001581][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 612.040504][T10256] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 612.159195][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 612.172123][ T9] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.190611][ T9] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.230662][ T9] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 612.354809][ T9] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 612.463911][ T9] usb 6-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 612.509880][T13197] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 612.548468][ T9] usb 6-1: config 7 interface 0 has no altsetting 0 [ 612.588326][ T9] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 612.687137][T13205] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1781'. [ 612.804743][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.960033][T13205] netlink: 'syz.1.1781': attribute type 29 has an invalid length. [ 613.260554][ T3441] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 613.749883][ T5918] usb 4-1: USB disconnect, device number 29 [ 613.921718][ T9] usbhid 6-1:7.0: can't add hid device: -71 [ 613.927904][ T9] usbhid 6-1:7.0: probe with driver usbhid failed with error -71 [ 614.019376][ T9] usb 6-1: USB disconnect, device number 9 [ 614.215606][ T5918] usb 7-1: USB disconnect, device number 36 [ 614.491438][ T3441] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 614.649542][ T5883] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 614.834247][ T5883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.867499][ T5883] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 614.877962][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.910056][ T5883] usb 2-1: Product: syz [ 614.956388][ T5883] usb 2-1: Manufacturer: syz [ 615.005819][ T5883] usb 2-1: SerialNumber: syz [ 615.037092][ T5883] usb 2-1: config 0 descriptor?? [ 615.042411][ T8127] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 615.092590][T13255] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1789'. [ 615.126433][ T5883] ims_pcu 2-1:0.0: Zero length descriptor [ 615.186465][ T5883] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 615.322214][ T8127] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.369732][ T8127] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 615.400522][ T8127] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 615.410904][ T8127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 615.419615][ T8127] usb 6-1: SerialNumber: syz [ 615.507434][ T8127] usb 6-1: 0:2 : does not exist [ 615.611986][ T5883] usb 2-1: USB disconnect, device number 11 [ 615.650292][ T3441] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 615.874434][ T8127] usb 6-1: USB disconnect, device number 10 [ 616.734351][T13281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1791'. [ 616.796820][T13284] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1793'. [ 616.907636][T13288] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 616.914299][T13288] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 616.975518][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 617.174088][T13288] vhci_hcd vhci_hcd.0: Device attached [ 617.217351][T13284] netlink: 'syz.6.1793': attribute type 29 has an invalid length. [ 617.429120][ T8127] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 617.469107][ T5883] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 617.476769][ T5884] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 617.639133][ T5884] usb 4-1: Using ep0 maxpacket: 16 [ 617.645592][ T5883] usb 6-1: Using ep0 maxpacket: 8 [ 617.655179][ T5884] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 617.669036][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.690603][ T5883] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 617.705388][ T5884] usb 4-1: Product: syz [ 617.716841][ T5883] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 617.739073][ T5884] usb 4-1: Manufacturer: syz [ 617.743780][ T5884] usb 4-1: SerialNumber: syz [ 617.758902][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.827387][ T5884] usb 4-1: config 0 descriptor?? [ 617.859320][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 617.859335][ T30] audit: type=1326 audit(1746626315.499:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13305 comm="syz.6.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2c38e969 code=0x7ffc0000 [ 617.894716][ T5884] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 617.923498][ T5884] usb 4-1: Detected FT232H [ 617.956608][ T30] audit: type=1326 audit(1746626315.499:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13305 comm="syz.6.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2c38e969 code=0x7ffc0000 [ 617.979013][ C1] vkms_vblank_simulate: vblank timer overrun [ 618.005332][ T30] audit: type=1326 audit(1746626315.509:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13305 comm="syz.6.1797" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd2c38e969 code=0x0 [ 618.027185][ C1] vkms_vblank_simulate: vblank timer overrun [ 618.036843][ T30] audit: type=1326 audit(1746626315.559:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13305 comm="syz.6.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd2c38e969 code=0x7ffc0000 [ 618.059308][ C1] vkms_vblank_simulate: vblank timer overrun [ 618.066094][ T30] audit: type=1326 audit(1746626315.559:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13305 comm="syz.6.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2c38e969 code=0x7ffc0000 [ 618.092990][T13316] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 618.168821][ T30] audit: type=1326 audit(1746626315.559:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13305 comm="syz.6.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2c38e969 code=0x7ffc0000 [ 618.191580][ C1] vkms_vblank_simulate: vblank timer overrun [ 618.279669][ T8127] usb 39-1: device descriptor read/64, error -71 [ 618.361471][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 618.549824][ T8127] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 618.572063][T13321] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1801'. [ 618.870146][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1801'. [ 619.316684][T13326] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1800'. [ 619.502680][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 619.693446][ T5884] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 619.701230][T13289] vhci_hcd: connection closed [ 619.716374][ T3441] vhci_hcd: stop threads [ 619.735437][ T3441] vhci_hcd: release socket [ 619.746133][ T5884] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 619.746957][ T3441] vhci_hcd: disconnect device [ 619.823935][T13342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 619.935543][ T5884] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 619.980125][ T5884] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 620.050739][ T5884] usb 4-1: USB disconnect, device number 30 [ 620.074826][ T5884] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 620.114440][ T5884] ftdi_sio 4-1:0.0: device disconnected [ 620.143486][ T5883] usb 6-1: USB disconnect, device number 11 [ 620.231332][T13348] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1805'. [ 620.450100][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1804'. [ 620.474968][T13361] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1807'. [ 620.613371][T13368] netlink: 'syz.5.1807': attribute type 29 has an invalid length. [ 620.654763][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 620.782004][T13359] tipc: Enabling of bearer rejected, failed to enable media [ 620.929331][ T5918] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 621.154273][ T5918] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 621.221745][ T5918] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 621.309407][ T5918] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 1145, setting to 64 [ 621.360214][ T5918] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 621.389482][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.435963][ T5918] usb 7-1: Product: syz [ 621.451411][ T5918] usb 7-1: Manufacturer: syz [ 621.466334][ T5918] usb 7-1: SerialNumber: syz [ 621.502009][ T5918] usb 7-1: config 0 descriptor?? [ 621.528331][T13370] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 621.598057][T13370] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 621.632714][ T5918] usb 7-1: ucan: probing device on interface #0 [ 621.849374][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 621.855788][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 622.000646][ T5882] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 622.039144][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 622.055915][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 55661, setting to 1024 [ 622.088424][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 622.130154][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 622.165153][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 622.179230][ T5882] usb 6-1: device descriptor read/64, error -71 [ 622.218265][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.242656][ T9] usb 2-1: config 0 descriptor?? [ 622.269957][T13387] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 622.281020][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 622.349851][ T5918] ucan 7-1:0.0: probe with driver ucan failed with error -71 [ 622.373759][ T5918] usb 7-1: USB disconnect, device number 37 [ 622.429203][ T5882] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 622.579096][ T5882] usb 6-1: device descriptor read/64, error -71 [ 622.651365][ T5883] usb 2-1: USB disconnect, device number 12 [ 622.692641][ T5882] usb usb6-port1: attempt power cycle [ 622.943673][T13425] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1816'. [ 623.027512][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 623.049521][ T5882] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 623.098235][ T5882] usb 6-1: device descriptor read/8, error -71 [ 623.389249][ T5882] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 623.510339][ T5882] usb 6-1: device descriptor read/8, error -71 [ 623.619448][ T5882] usb usb6-port1: unable to enumerate USB device [ 623.689212][ T8127] vhci_hcd: vhci_device speed not set [ 623.810494][T13445] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1820'. [ 623.826893][T13445] netlink: 'syz.2.1820': attribute type 29 has an invalid length. [ 623.899148][ T9] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 624.091374][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 624.129209][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.139538][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 624.153341][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 624.162697][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.174869][ T9] usb 2-1: config 0 descriptor?? [ 624.195152][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input53 [ 624.201450][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 624.403307][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.409926][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.605532][ T5185] bcm5974 2-1:0.0: could not read from device [ 624.619458][ T8126] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 624.688683][ T5185] bcm5974 2-1:0.0: could not read from device [ 624.723237][ T9] usb 2-1: USB disconnect, device number 13 [ 624.766716][ T5878] bcm5974 2-1:0.0: could not read from device [ 624.811922][ T5185] bcm5974 2-1:0.0: could not read from device [ 624.869437][ T8126] usb 7-1: Using ep0 maxpacket: 8 [ 624.874568][ T5878] udevd[5878]: Error opening device "/dev/input/event4": No such file or directory [ 624.905354][ T8126] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 624.925513][ T5878] udevd[5878]: Unable to EVIOCGABS device "/dev/input/event4" [ 624.944750][ T8126] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 624.968950][ T5878] udevd[5878]: Unable to EVIOCGABS device "/dev/input/event4" [ 624.983565][ T8126] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 625.012217][ T5878] udevd[5878]: Unable to EVIOCGABS device "/dev/input/event4" [ 625.030399][ T5878] udevd[5878]: Unable to EVIOCGABS device "/dev/input/event4" [ 625.042647][ T5882] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 625.043581][ T8126] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 625.089235][ T8126] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 625.130878][ T8126] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 625.146559][ T8126] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.379192][ T5882] usb 6-1: Using ep0 maxpacket: 16 [ 625.396496][ T5882] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 625.447797][ T5882] usb 6-1: config 1 has an invalid descriptor of length 203, skipping remainder of the config [ 625.529106][ T5882] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 625.558506][ T5882] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 625.588803][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.605268][ T1165] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 625.645091][ T5882] usb 6-1: Product: syz [ 625.660656][ T5882] usb 6-1: Manufacturer: syz [ 625.660737][ T8126] usb 7-1: usb_control_msg returned -32 [ 625.693279][ T5882] usb 6-1: SerialNumber: syz [ 625.699249][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 625.732554][ T8126] usbtmc 7-1:16.0: can't read capabilities [ 625.851383][T13473] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 625.894424][T13475] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1829'. [ 625.944994][ T8126] usb 7-1: USB disconnect, device number 38 [ 625.990741][ T9] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 626.025420][ T5882] usb 6-1: 0:2 : does not exist [ 626.037657][ T9] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 626.047910][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 626.086244][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.121081][ T5882] usb 6-1: USB disconnect, device number 16 [ 626.197011][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 626.671640][T13489] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1831'. [ 626.831308][T13494] netlink: 'syz.3.1831': attribute type 29 has an invalid length. [ 626.846300][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 627.027846][T13500] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 627.034504][T13500] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 627.092455][T13500] vhci_hcd vhci_hcd.0: Device attached [ 627.201143][T13501] vhci_hcd: connection closed [ 627.229700][ T3441] vhci_hcd: stop threads [ 627.238808][ T3441] vhci_hcd: release socket [ 627.249438][ T3441] vhci_hcd: disconnect device [ 627.269177][ T8126] vhci_hcd: vhci_device speed not set [ 627.347905][T13510] sg_write: data in/out 32732/14 bytes for SCSI command 0x0-- guessing data in; [ 627.347905][T13510] program syz.3.1836 not setting count and/or reply_len properly [ 628.034835][T10260] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 628.349567][ T5882] usb 2-1: USB disconnect, device number 14 [ 628.984202][T13525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.231069][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 629.966450][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 629.977430][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 629.988036][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 629.989864][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 630.008015][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 630.016435][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 630.061553][ T10] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 630.176318][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 630.189692][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25264, setting to 1024 [ 630.266984][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 630.299385][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 630.440738][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 630.459250][ T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 630.529101][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 630.538919][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 630.549116][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 630.558199][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.581909][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 630.602767][ T9] usb 6-1: config 0 descriptor?? [ 630.618627][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 630.759179][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 630.809135][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.078425][ T10] usb 7-1: GET_CAPABILITIES returned 0 [ 631.090959][ T10] usbtmc 7-1:16.0: can't read capabilities [ 631.157892][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 631.184786][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 631.281658][T13544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.297946][ T9] usb 6-1: USB disconnect, device number 17 [ 631.314633][T13544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.394895][ T10] usb 7-1: USB disconnect, device number 39 [ 631.612125][T10256] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 631.814810][T10260] bond0 (unregistering): Released all slaves [ 631.856160][T10260] bond1 (unregistering): Released all slaves [ 631.869302][ T8126] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 631.925687][T13561] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1846'. [ 631.935076][T13562] netlink: 'syz.3.1846': attribute type 29 has an invalid length. [ 631.984495][T10260] tipc: Disabling bearer [ 632.038551][T10260] tipc: Left network mode [ 632.043735][ T8126] usb 6-1: Using ep0 maxpacket: 32 [ 632.071627][ T8126] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.ae [ 632.121758][T13573] kvm: pic: level sensitive irq not supported [ 632.149351][ T5838] Bluetooth: hci0: command tx timeout [ 632.169181][ T8126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.178183][ T8126] usb 6-1: Product: syz [ 632.183856][ T8126] usb 6-1: Manufacturer: syz [ 632.188778][ T8126] usb 6-1: SerialNumber: syz [ 632.210038][ T8126] usb 6-1: config 0 descriptor?? [ 632.251956][ T8126] ums_eneub6250 6-1:0.0: USB Mass Storage device detected [ 632.459664][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 632.619135][ T5884] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 632.639525][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 632.653656][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.693147][ T10] usb 4-1: config 0 has no interfaces? [ 632.694794][T13589] usb usb8: usbfs: process 13589 (syz.2.1851) did not claim interface 0 before use [ 632.722509][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 632.735533][T10260] hsr_slave_0: left promiscuous mode [ 632.747221][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.758539][T10260] hsr_slave_1: left promiscuous mode [ 632.786704][ T10] usb 4-1: config 0 descriptor?? [ 632.799250][ T5884] usb 7-1: Using ep0 maxpacket: 32 [ 632.804663][ T1165] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 632.813992][ T5884] usb 7-1: config 64 has an invalid interface number: 4 but max is 0 [ 632.823162][ T5884] usb 7-1: config 64 has no interface number 0 [ 632.830029][ T5884] usb 7-1: config 64 interface 4 has no altsetting 0 [ 632.850970][ T5884] usb 7-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice=28.46 [ 632.884064][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.895390][ T5884] usb 7-1: Product: syz [ 632.901914][T10260] pim6reg (unregistering): left allmulticast mode [ 632.909704][ T5884] usb 7-1: Manufacturer: syz [ 632.916674][ T5884] usb 7-1: SerialNumber: syz [ 633.147671][ T5884] qmi_wwan 7-1:64.4: probe with driver qmi_wwan failed with error -22 [ 633.186495][ T5884] usb 7-1: USB disconnect, device number 40 [ 633.950481][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 634.229143][ T5838] Bluetooth: hci0: command tx timeout [ 634.437097][ T9] usb 6-1: USB disconnect, device number 18 [ 634.441223][T13551] chnl_net:caif_netlink_parms(): no params data found [ 634.823503][T13626] netlink: 'syz.5.1857': attribute type 72 has an invalid length. [ 634.831612][T13626] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1857'. [ 634.883596][T13621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.884916][T13551] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.910681][T13551] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.918284][T13551] bridge_slave_0: entered allmulticast mode [ 634.936209][T13551] bridge_slave_0: entered promiscuous mode [ 634.973542][T13551] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.008736][T13551] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.028480][T13551] bridge_slave_1: entered allmulticast mode [ 635.065270][T13551] bridge_slave_1: entered promiscuous mode [ 635.079288][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 635.372662][T13642] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1858'. [ 635.386307][ T5883] usb 4-1: USB disconnect, device number 31 [ 635.667768][T13551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.777292][T13551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.819187][ T5884] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 635.835682][T13636] netlink: 'syz.2.1858': attribute type 29 has an invalid length. [ 636.016144][ T5884] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 636.049681][ T5884] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 636.096649][T13551] team0: Port device team_slave_0 added [ 636.099566][ T5884] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 636.158154][ T5884] usb 7-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 636.179399][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.208035][ T5884] usb 7-1: config 0 descriptor?? [ 636.215331][T13551] team0: Port device team_slave_1 added [ 636.279444][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 636.293874][T13551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.302656][T13551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.333644][ T5838] Bluetooth: hci0: command tx timeout [ 636.341196][T13551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.360963][T13551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.368061][T13551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.395052][T13551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.580982][T13551] hsr_slave_0: entered promiscuous mode [ 636.596316][T13551] hsr_slave_1: entered promiscuous mode [ 637.303219][ T5884] usbhid 7-1:0.0: can't add hid device: -71 [ 637.319494][ T5884] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 637.357060][ T5884] usb 7-1: USB disconnect, device number 41 [ 637.389985][ T1165] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 637.533025][T13551] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 637.567282][T13551] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 637.605373][T13551] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 637.631878][T13551] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 637.710940][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 637.767909][T13551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.806284][T13551] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.822993][T10260] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.830437][T10260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.869192][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 637.875695][T10260] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.882916][T10260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.924529][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 637.950066][ T10] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 637.970178][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=15 [ 637.988349][ T10] usb 4-1: Product: syz [ 637.995220][ T10] usb 4-1: Manufacturer: syz [ 638.000327][ T10] usb 4-1: SerialNumber: syz [ 638.009964][ T10] usb 4-1: config 0 descriptor?? [ 638.048398][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 638.132039][ T10] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 638.174711][T13551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.211928][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 638.314361][ T5884] usb 4-1: USB disconnect, device number 32 [ 638.389587][ T5838] Bluetooth: hci0: command tx timeout [ 638.420720][T13551] veth0_vlan: entered promiscuous mode [ 638.433873][T13551] veth1_vlan: entered promiscuous mode [ 638.500844][T13551] veth0_macvtap: entered promiscuous mode [ 638.520281][T10260] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 638.528840][T13551] veth1_macvtap: entered promiscuous mode [ 638.566411][T13551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.582706][T13551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.604275][T13551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.615743][T13551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.627069][T13551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.629377][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 638.639286][T13551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.666823][T13551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.679316][T13551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.692235][T13551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.708174][T13551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.722394][T13551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.732880][T13551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.743573][T13551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.753814][T13551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.764601][T13551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.775733][T13551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.786479][T13551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.798288][T13551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.816435][T13551] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.817426][ T10] usb 6-1: config 0 has an invalid interface number: 32 but max is 0 [ 638.825664][T13551] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.838785][ T10] usb 6-1: config 0 has no interface number 0 [ 638.843207][ T5884] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 638.852972][ T10] usb 6-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.858793][T13551] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.880106][T13551] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.907996][ T10] usb 6-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.949517][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 638.958619][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.005928][ T10] usb 6-1: config 0 descriptor?? [ 639.019202][ T5884] usb 7-1: device descriptor read/64, error -71 [ 639.081282][T10260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.110761][T10260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.218708][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.259607][ T5884] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 639.269843][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.300240][T13748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.309515][T13748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.341913][T13748] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1876'. [ 639.419668][ T5884] usb 7-1: device descriptor read/64, error -71 [ 639.532037][ T5884] usb usb7-port1: attempt power cycle [ 639.661749][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 639.673729][T13761] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1882'. [ 639.891893][ T5884] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 639.952544][ T5884] usb 7-1: device descriptor read/8, error -71 [ 640.182625][T13777] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1884'. [ 640.219154][ T5884] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 640.242126][T13778] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1883'. [ 640.262767][ T5884] usb 7-1: device descriptor read/8, error -71 [ 640.395922][ T5884] usb usb7-port1: unable to enumerate USB device [ 640.439400][ T5881] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 640.623876][ T5881] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 640.656414][ T5881] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 640.706757][ T5881] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 640.734706][ T5881] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 640.778013][ T5881] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 640.813556][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 640.823644][ T5881] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 640.846128][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 640.877936][ T5881] usb 4-1: Product: syz [ 640.890340][ T5881] usb 4-1: Manufacturer: syz [ 640.898916][T13796] ttyprintk ttyprintk: ldisc open failed (-12), clearing slot 0 [ 640.930743][ T5881] cdc_wdm 4-1:1.0: skipping garbage [ 640.945016][ T5881] cdc_wdm 4-1:1.0: skipping garbage [ 640.957981][ T5881] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 641.142290][ T8127] usb 4-1: USB disconnect, device number 33 [ 641.281029][T13808] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1887'. [ 641.315846][T13808] netlink: 'syz.2.1887': attribute type 29 has an invalid length. [ 641.406898][ T10] usbhid 6-1:0.32: can't add hid device: -71 [ 641.443331][ T10] usbhid 6-1:0.32: probe with driver usbhid failed with error -71 [ 641.486773][ T10] usb 6-1: USB disconnect, device number 19 [ 641.879725][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 642.033147][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 642.049306][ T10] usb 6-1: device descriptor read/64, error -71 [ 642.322332][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 642.469415][ T10] usb 6-1: device descriptor read/64, error -71 [ 642.604082][ T10] usb usb6-port1: attempt power cycle [ 642.670136][T13790] syz.7.1885 (13790): drop_caches: 2 [ 642.771923][T13844] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1891'. [ 642.853822][T13839] netlink: 'syz.2.1891': attribute type 29 has an invalid length. [ 642.863585][ T8126] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 642.992171][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 643.021235][ T10] usb 6-1: device descriptor read/8, error -71 [ 643.042881][ T8126] usb 7-1: config 0 has no interfaces? [ 643.070049][ T8126] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 643.102518][ T8126] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.131358][ T8126] usb 7-1: Product: syz [ 643.152069][ T8126] usb 7-1: Manufacturer: syz [ 643.172539][ T8126] usb 7-1: SerialNumber: syz [ 643.213422][ T8126] usb 7-1: config 0 descriptor?? [ 643.230442][T10260] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 643.300058][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 643.339737][ T10] usb 6-1: device descriptor read/8, error -71 [ 643.449547][ T10] usb usb6-port1: unable to enumerate USB device [ 643.652283][T13861] QAT: Stopping all acceleration devices. [ 644.178152][T13879] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1897'. [ 644.293637][T13884] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1898'. [ 644.423022][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 644.677304][T13899] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1901'. [ 644.706537][T13899] netlink: 'syz.3.1901': attribute type 29 has an invalid length. [ 645.218374][T13892] netlink: 'syz.2.1900': attribute type 10 has an invalid length. [ 645.439643][T13892] team0: Device veth1_macvtap failed to register rx_handler [ 645.568921][ T5884] usb 7-1: USB disconnect, device number 46 [ 645.570299][T13876] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 645.926843][T13931] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1905'. [ 646.330840][T13937] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1906'. [ 646.359104][ T10] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 646.392555][T13946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1909'. [ 646.408589][T13946] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 646.440310][T13937] netlink: 'syz.6.1906': attribute type 29 has an invalid length. [ 646.531013][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 646.557089][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 646.660839][ T10] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 646.687073][ T10] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 646.753811][ T10] usb 6-1: config 1 has no interface number 1 [ 646.760379][T10260] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 646.782877][T13954] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 646.789472][T13954] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 646.824221][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 646.839328][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.848902][ T10] usb 6-1: Product: syz [ 646.856510][ T10] usb 6-1: Manufacturer: syz [ 646.862755][ T10] usb 6-1: SerialNumber: syz [ 646.909524][T13954] vhci_hcd vhci_hcd.0: Device attached [ 646.965109][T13908] Bluetooth: hci5: command 0x0406 tx timeout [ 647.149137][ T9] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 647.164178][T13966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.241133][T13966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.246916][T13967] batadv_slave_1: entered promiscuous mode [ 647.584012][T13974] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1912'. [ 647.950286][T13965] batadv_slave_1: left promiscuous mode [ 648.049136][ T5882] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 648.085962][T13875] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 648.319239][ T5882] usb 7-1: device descriptor read/64, error -71 [ 648.620154][ T5882] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 648.841291][ T5882] usb 7-1: device descriptor read/64, error -71 [ 648.959650][ T5882] usb usb7-port1: attempt power cycle [ 649.249280][T13990] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1915'. [ 649.324141][ T5882] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 649.343902][T13990] netlink: 'syz.3.1915': attribute type 29 has an invalid length. [ 649.378683][ T3441] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 649.545410][ T5882] usb 7-1: device descriptor read/8, error -71 [ 649.798867][T13956] vhci_hcd: connection reset by peer [ 649.809085][ T5882] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 649.868471][ T3441] vhci_hcd: stop threads [ 649.930303][ T10] usb 6-1: 2:1 : unsupported format bits 0x80 [ 649.949365][ T3441] vhci_hcd: release socket [ 650.001727][ T3441] vhci_hcd: disconnect device [ 650.023026][ T10] usb 6-1: USB disconnect, device number 24 [ 650.032207][ T5882] usb 7-1: device descriptor read/8, error -71 [ 650.139484][ T5882] usb usb7-port1: unable to enumerate USB device [ 650.201333][ T5909] udevd[5909]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 650.420891][T14004] program syz.3.1920 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 650.720288][T13875] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 652.184660][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 652.310709][ T9] vhci_hcd: vhci_device speed not set [ 652.382415][T14043] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1923'. [ 652.396552][T14043] netlink: 'syz.6.1923': attribute type 29 has an invalid length. [ 652.976561][ T30] audit: type=1326 audit(1746626350.629:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14049 comm="syz.3.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f59f8e969 code=0x7ffc0000 [ 653.001574][ T30] audit: type=1326 audit(1746626350.629:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14049 comm="syz.3.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f59f8e969 code=0x7ffc0000 [ 653.355132][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 653.673910][T14089] netlink: 'syz.2.1932': attribute type 29 has an invalid length. [ 653.683838][T14089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.724622][T14089] netlink: 'syz.2.1932': attribute type 29 has an invalid length. [ 653.804451][T14084] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1930'. [ 653.826231][T14089] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1932'. [ 653.859771][T14089] unsupported nla_type 58 [ 653.906080][T14084] netlink: 'syz.7.1930': attribute type 29 has an invalid length. [ 654.133345][T14101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1936'. [ 654.287405][ T5880] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 654.449244][ T5880] usb 7-1: Using ep0 maxpacket: 32 [ 654.465465][ T5880] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 654.469795][ T5884] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 654.521324][T10260] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 654.536968][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.611133][ T5880] usb 7-1: config 0 descriptor?? [ 654.653763][ T5880] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 654.669647][ T5884] usb 4-1: config 0 has no interfaces? [ 654.699427][ T5884] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 654.712690][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.721766][ T5884] usb 4-1: Product: syz [ 654.725984][ T5884] usb 4-1: Manufacturer: syz [ 654.731322][ T5884] usb 4-1: SerialNumber: syz [ 654.741899][ T5884] usb 4-1: config 0 descriptor?? [ 655.178668][ T5880] gspca_nw80x: reg_w err -71 [ 655.214772][T14129] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1941'. [ 655.234360][T14129] netlink: 'syz.5.1941': attribute type 29 has an invalid length. [ 655.255247][ T5880] nw80x 7-1:0.0: probe with driver nw80x failed with error -71 [ 655.333761][ T5880] usb 7-1: USB disconnect, device number 51 [ 655.701745][T10260] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 655.756580][T14141] bridge0: entered promiscuous mode [ 655.787803][T14141] macvlan2: entered promiscuous mode [ 655.832173][T14141] bridge0: port 3(macvlan2) entered blocking state [ 655.875870][T14141] bridge0: port 3(macvlan2) entered disabled state [ 655.923897][T14141] macvlan2: entered allmulticast mode [ 655.952241][T14141] bridge0: entered allmulticast mode [ 655.992473][T14141] macvlan2: left allmulticast mode [ 656.020406][T14141] bridge0: left allmulticast mode [ 656.081753][T14141] bridge0: left promiscuous mode [ 656.511417][T14162] fuse: Bad value for 'fd' [ 656.657734][ T30] audit: type=1326 audit(1746626354.309:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14169 comm="syz.5.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c0178e969 code=0x7ffc0000 [ 656.717768][T14170] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1949'. [ 656.723361][ T30] audit: type=1326 audit(1746626354.319:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14169 comm="syz.5.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f3c0178e969 code=0x7ffc0000 [ 656.750285][ T30] audit: type=1326 audit(1746626354.319:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14169 comm="syz.5.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c0178e969 code=0x7ffc0000 [ 656.777256][ T30] audit: type=1326 audit(1746626354.319:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14169 comm="syz.5.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3c0178e969 code=0x7ffc0000 [ 656.824048][ T30] audit: type=1326 audit(1746626354.319:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14169 comm="syz.5.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c0178e969 code=0x7ffc0000 [ 656.824176][T14170] netlink: 'syz.2.1949': attribute type 29 has an invalid length. [ 656.858723][ T30] audit: type=1326 audit(1746626354.319:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14169 comm="syz.5.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3c0178e969 code=0x7ffc0000 [ 656.933968][ T1002] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 657.250139][ T8127] usb 4-1: USB disconnect, device number 34 [ 657.329161][ T5884] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 657.593256][ T5884] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.699185][ T5884] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 657.779129][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 657.842087][ T8127] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 657.886545][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 657.920414][ T5884] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 658.040311][ T5884] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 658.054080][ T8127] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.095243][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.118934][ T8127] usb 4-1: config 0 interface 0 has no altsetting 0 [ 658.181887][ T3441] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 658.205191][ T5884] usb 6-1: Product: syz [ 658.222803][ T5884] usb 6-1: Manufacturer: syz [ 658.227474][ T5884] usb 6-1: SerialNumber: syz [ 658.247583][ T8127] usb 4-1: New USB device found, idVendor=0463, idProduct=1215, bcdDevice= 0.00 [ 658.285705][ T8127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.295058][ T5884] usb 6-1: config 0 descriptor?? [ 658.427867][ T5884] garmin_gps 6-1:0.0: Garmin GPS usb/tty converter detected [ 658.446801][ T8127] usb 4-1: config 0 descriptor?? [ 658.453545][T14208] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1955'. [ 658.519723][T14208] netlink: 'syz.2.1955': attribute type 29 has an invalid length. [ 658.557352][ T5884] garmin_gps ttyUSB0: failed to submit interrupt urb: -90 [ 658.619241][ T5884] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 658.914712][ T8127] hid-generic 0003:0463:1215.0025: hidraw0: USB HID v0.04 Device [HID 0463:1215] on usb-dummy_hcd.3-1/input0 [ 659.115540][ T8127] usb 4-1: USB disconnect, device number 35 [ 659.414006][ T3441] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 659.639361][ T8127] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 659.924119][ T8127] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 659.924153][ T8127] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 659.924177][ T8127] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 659.942246][ T8127] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 659.942280][ T8127] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.942302][ T8127] usb 7-1: Product: syz [ 659.942319][ T8127] usb 7-1: Manufacturer: syz [ 659.942336][ T8127] usb 7-1: SerialNumber: syz [ 660.079774][T14232] ipvlan1: mtu less than device minimum [ 660.169885][ T8127] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 660.505921][T14217] netlink: 'syz.6.1956': attribute type 1 has an invalid length. [ 660.590191][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 660.777209][ T5884] usb 6-1: USB disconnect, device number 25 [ 660.811280][ T5884] garmin_gps 6-1:0.0: device disconnected [ 661.211896][T14249] input: syz0 as /devices/virtual/input/input54 [ 661.330519][ T5884] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 661.469110][ T5884] usb 6-1: device descriptor read/64, error -71 [ 661.579375][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 661.709202][ T5884] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 661.730167][ T3441] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 661.749177][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 661.755898][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.767192][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 661.780887][ T9] usb 4-1: New USB device found, idVendor=03eb, idProduct=2118, bcdDevice=40.00 [ 661.792547][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.805656][ T9] usb 4-1: config 0 descriptor?? [ 661.859099][ T5884] usb 6-1: device descriptor read/64, error -71 [ 661.969728][ T5884] usb usb6-port1: attempt power cycle [ 662.097197][T14257] xt_hashlimit: max too large, truncated to 1048576 [ 662.105419][T14257] xt_hashlimit: overflow, try lower: 9/0 [ 662.319094][ T5884] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 662.349755][ T5884] usb 6-1: device descriptor read/8, error -71 [ 662.589253][ T5884] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 662.609982][ T5884] usb 6-1: device descriptor read/8, error -71 [ 662.727878][ T5884] usb usb6-port1: unable to enumerate USB device [ 662.846488][ T5880] usb 7-1: USB disconnect, device number 52 [ 662.853245][T14217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.865600][ T3441] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 662.896229][ T5880] usblp0: removed [ 663.020528][T14275] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1970'. [ 664.010584][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 664.264541][T14297] netlink: 'syz.5.1975': attribute type 1 has an invalid length. [ 664.316994][T14297] 8021q: adding VLAN 0 to HW filter on device bond1 [ 664.520499][T14299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 664.533281][T14299] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 664.556198][T14299] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 664.585471][ T9] usb 4-1: string descriptor 0 read error: -71 [ 664.633541][T14297] veth1: entered promiscuous mode [ 664.645245][T14297] bond1: (slave veth1): Enslaving as an active interface with a down link [ 664.650333][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 664.664996][T14300] erspan0: entered allmulticast mode [ 664.676298][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 664.694201][T14300] bond1: (slave erspan0): making interface the new active one [ 664.707684][ T9] usb 4-1: USB disconnect, device number 36 [ 664.732969][T14302] FAULT_INJECTION: forcing a failure. [ 664.732969][T14302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 664.733037][T14300] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 664.849079][T14302] CPU: 1 UID: 0 PID: 14302 Comm: syz.3.1976 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 664.849113][T14302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 664.849127][T14302] Call Trace: [ 664.849136][T14302] [ 664.849146][T14302] dump_stack_lvl+0x189/0x250 [ 664.849181][T14302] ? __lock_acquire+0xaac/0xd20 [ 664.849206][T14302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 664.849230][T14302] ? __pfx__printk+0x10/0x10 [ 664.849247][T14302] ? __might_fault+0xb0/0x130 [ 664.849277][T14302] should_fail_ex+0x414/0x560 [ 664.849308][T14302] _copy_from_user+0x2d/0xb0 [ 664.849331][T14302] udp_lib_setsockopt+0x1ef/0x940 [ 664.849354][T14302] ? __pfx_udp_lib_setsockopt+0x10/0x10 [ 664.849379][T14302] udpv6_setsockopt+0x77/0xc0 [ 664.849396][T14302] ? __pfx_udp_v6_push_pending_frames+0x10/0x10 [ 664.849413][T14302] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 664.849432][T14302] do_sock_setsockopt+0x257/0x3e0 [ 664.849455][T14302] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 664.849473][T14302] ? __fget_files+0x2a/0x420 [ 664.849499][T14302] ? __fget_files+0x3a0/0x420 [ 664.849519][T14302] ? __fget_files+0x2a/0x420 [ 664.849545][T14302] __x64_sys_setsockopt+0x18b/0x220 [ 664.849571][T14302] do_syscall_64+0xf6/0x210 [ 664.849593][T14302] ? clear_bhb_loop+0x45/0xa0 [ 664.849613][T14302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.849629][T14302] RIP: 0033:0x7f7f59f8e969 [ 664.849645][T14302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 664.849660][T14302] RSP: 002b:00007f7f5adb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 664.849679][T14302] RAX: ffffffffffffffda RBX: 00007f7f5a1b5fa0 RCX: 00007f7f59f8e969 [ 664.849691][T14302] RDX: 000000000000000b RSI: 0000000000000011 RDI: 0000000000000003 [ 664.849701][T14302] RBP: 00007f7f5adb4090 R08: 0000000000000004 R09: 0000000000000000 [ 664.849712][T14302] R10: 0000200000001800 R11: 0000000000000246 R12: 0000000000000001 [ 664.849722][T14302] R13: 0000000000000000 R14: 00007f7f5a1b5fa0 R15: 00007f7f5a2dfa28 [ 664.849746][T14302] [ 665.340904][T10256] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 665.469253][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 665.515050][T14313] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1979'. [ 665.527605][T14313] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1979'. [ 665.649110][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 665.656343][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.669706][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.679686][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 665.689985][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.701729][ T9] usb 4-1: config 0 descriptor?? [ 665.713680][ T9] hub 4-1:0.0: USB hub found [ 666.068280][ T9] hub 4-1:0.0: 2 ports detected [ 666.340266][ T5880] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 666.491026][ T3441] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 666.579289][ T5880] usb 6-1: Using ep0 maxpacket: 8 [ 666.590580][ T5880] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 666.600604][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.612430][ T5880] usb 6-1: Product: syz [ 666.620353][ T5880] usb 6-1: Manufacturer: syz [ 666.633832][ T5880] usb 6-1: SerialNumber: syz [ 666.869742][ T5880] usb 6-1: config 0 descriptor?? [ 666.908540][ T5880] gspca_main: se401-2.14.0 probing 047d:5003 [ 666.923804][T14325] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1983'. [ 667.088123][T14327] xt_CT: You must specify a L4 protocol and not use inversions on it [ 667.113685][ T9] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 667.132521][T14318] fuse: Unknown parameter 'rootmoSe' [ 667.201357][ T9] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 667.254734][ T9] usbhid 4-1:0.0: can't add hid device: -32 [ 667.268815][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 667.517421][T14318] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1980'. [ 667.574323][ T5880] gspca_se401: Bayer format not supported! [ 667.949160][ T5880] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 667.977270][T13875] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 668.141072][ T5880] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 668.254263][ T5880] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 668.271892][ T5880] usb 7-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 668.281098][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.290270][ T5880] usb 7-1: Product: syz [ 668.296172][ T5880] usb 7-1: Manufacturer: syz [ 668.299154][ T8126] usb 6-1: USB disconnect, device number 30 [ 668.301784][ T5880] usb 7-1: SerialNumber: syz [ 668.315825][ T5880] usb 7-1: config 0 descriptor?? [ 668.326362][ T5880] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 669.001507][T14347] FAULT_INJECTION: forcing a failure. [ 669.001507][T14347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.126981][T14347] CPU: 1 UID: 0 PID: 14347 Comm: syz.2.1988 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 669.127006][T14347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 669.127016][T14347] Call Trace: [ 669.127022][T14347] [ 669.127029][T14347] dump_stack_lvl+0x189/0x250 [ 669.127059][T14347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 669.127081][T14347] ? __pfx__printk+0x10/0x10 [ 669.127104][T14347] should_fail_ex+0x414/0x560 [ 669.127131][T14347] _copy_to_user+0x31/0xb0 [ 669.127159][T14347] simple_read_from_buffer+0xe1/0x170 [ 669.127189][T14347] proc_fail_nth_read+0x1df/0x250 [ 669.127223][T14347] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 669.127256][T14347] ? rw_verify_area+0x258/0x650 [ 669.127275][T14347] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 669.127297][T14347] vfs_read+0x1fd/0x980 [ 669.127317][T14347] ? __pfx___mutex_lock+0x10/0x10 [ 669.127335][T14347] ? __pfx_vfs_read+0x10/0x10 [ 669.127352][T14347] ? __fget_files+0x2a/0x420 [ 669.127373][T14347] ? __fget_files+0x3a0/0x420 [ 669.127391][T14347] ? __fget_files+0x2a/0x420 [ 669.127415][T14347] ksys_read+0x145/0x250 [ 669.127433][T14347] ? __pfx_ksys_read+0x10/0x10 [ 669.127451][T14347] ? do_syscall_64+0xba/0x210 [ 669.127472][T14347] do_syscall_64+0xf6/0x210 [ 669.127497][T14347] ? clear_bhb_loop+0x45/0xa0 [ 669.127515][T14347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.127530][T14347] RIP: 0033:0x7fa38d18d37c [ 669.127543][T14347] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 669.127556][T14347] RSP: 002b:00007fa38dff9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 669.127572][T14347] RAX: ffffffffffffffda RBX: 00007fa38d3b5fa0 RCX: 00007fa38d18d37c [ 669.127583][T14347] RDX: 000000000000000f RSI: 00007fa38dff90a0 RDI: 0000000000000004 [ 669.127592][T14347] RBP: 00007fa38dff9090 R08: 0000000000000000 R09: 0000000000000000 [ 669.127602][T14347] R10: 0000200000001800 R11: 0000000000000246 R12: 0000000000000001 [ 669.127611][T14347] R13: 0000000000000000 R14: 00007fa38d3b5fa0 R15: 00007fa38d4dfa28 [ 669.127633][T14347] [ 669.469509][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 669.569609][T14357] ptrace attach of "./syz-executor exec"[13551] was attempted by "./syz-executor exec"[14357] [ 670.070368][ T5882] usb 4-1: USB disconnect, device number 37 [ 670.267764][T14363] bridge0: port 3(vlan2) entered blocking state [ 670.333971][T14363] bridge0: port 3(vlan2) entered disabled state [ 670.399202][T14363] vlan2: entered allmulticast mode [ 670.439391][T14363] team0: entered allmulticast mode [ 670.457086][T14363] team_slave_0: entered allmulticast mode [ 670.494990][T14363] team_slave_1: entered allmulticast mode [ 670.548486][T14363] vlan2: entered promiscuous mode [ 670.619400][ T8127] usb 7-1: USB disconnect, device number 53 [ 670.632330][T14363] team0: entered promiscuous mode [ 670.637426][T14363] team_slave_0: entered promiscuous mode [ 670.679406][T14363] team_slave_1: entered promiscuous mode [ 670.712474][T14363] bridge0: port 3(vlan2) entered blocking state [ 670.719883][T14363] bridge0: port 3(vlan2) entered forwarding state [ 670.861674][ T3441] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 670.949672][ T5880] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 671.141918][ T5880] usb 6-1: Using ep0 maxpacket: 16 [ 671.178588][ T5880] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 671.197430][ T5880] usb 6-1: config 0 has no interface number 0 [ 671.207626][ T5880] usb 6-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.235047][ T5880] usb 6-1: config 0 interface 8 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.267055][ T5880] usb 6-1: config 0 interface 8 has no altsetting 0 [ 671.279095][ T5880] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 671.298576][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.332573][ T5880] usb 6-1: config 0 descriptor?? [ 671.811447][ T5880] uclogic 0003:5543:0522.0026: item fetching failed at offset 2/5 [ 671.842467][ T5880] uclogic 0003:5543:0522.0026: parse failed [ 671.858837][ T5880] uclogic 0003:5543:0522.0026: probe with driver uclogic failed with error -22 [ 672.019339][ T9] usb 6-1: USB disconnect, device number 31 [ 672.072709][ T3441] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 672.301271][ T5880] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 672.459277][ T5880] usb 7-1: device descriptor read/64, error -71 [ 672.722833][ T5880] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 672.859719][ T5880] usb 7-1: device descriptor read/64, error -71 [ 672.981485][ T5880] usb usb7-port1: attempt power cycle [ 673.029188][ T8127] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 673.070828][T14437] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1999'. [ 673.125792][T14437] netlink: 'syz.5.1999': attribute type 29 has an invalid length. [ 673.223563][T13875] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 673.331370][ T5880] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 673.399930][ T5880] usb 7-1: device descriptor read/8, error -71 [ 673.771283][ T5880] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 674.057032][ T5880] usb 7-1: device not accepting address 57, error -71 [ 674.073334][ T5880] usb usb7-port1: unable to enumerate USB device [ 674.289062][ T8127] usb 4-1: unable to get BOS descriptor or descriptor too short [ 674.396296][ T8127] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 674.405949][ T8127] usb 4-1: can't read configurations, error -71 [ 674.420261][T10260] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 674.707331][T14473] netlink: 'syz.5.2005': attribute type 21 has an invalid length. [ 674.766394][T14473] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2005'. [ 674.829227][ T8127] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 674.989938][ T8127] usb 4-1: too many configurations: 146, using maximum allowed: 8 [ 675.108294][ T8127] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 675.119517][ T5882] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 675.133981][T14486] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2008'. [ 675.158859][ T8127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.177962][T14486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 675.196295][ T8127] usb 4-1: Product: syz [ 675.211732][ T8127] usb 4-1: Manufacturer: syz [ 675.217683][T14486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 675.235582][ T8127] usb 4-1: SerialNumber: syz [ 675.333483][T14486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 675.349682][ T8127] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 675.350906][ T5882] usb 7-1: Using ep0 maxpacket: 8 [ 675.409717][ T5882] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 675.430470][ T5882] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 675.485488][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.499174][T14486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.576715][ T5884] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 675.614432][T14486] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 675.630563][T10256] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 675.779633][T14486] batman_adv: batadv0: Removing interface: virt_wifi0 [ 676.353086][T14464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.398703][T14464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.655088][ T30] audit: type=1326 audit(1746626374.309:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14512 comm="syz.5.2012" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c0178e969 code=0x0 [ 676.813151][ T5882] usb 4-1: USB disconnect, device number 39 [ 676.824088][ T5884] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 676.842409][ T5884] ath9k_htc: Failed to initialize the device [ 676.908436][ T5882] usb 4-1: ath9k_htc: USB layer deinitialized [ 677.052079][T13876] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 677.099091][ T9] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 677.279191][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 677.287260][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.311734][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 677.353629][ T9] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 677.384792][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.423904][ T9] usb 6-1: config 0 descriptor?? [ 677.879795][ T5884] usb 7-1: USB disconnect, device number 58 [ 678.214479][T13876] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 679.520214][T10256] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 680.188890][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 680.250180][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 680.304103][ T9] usb 6-1: USB disconnect, device number 32 [ 680.897774][T13875] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 681.346074][T14584] IPVS: set_ctl: invalid protocol: 92 172.20.20.42:20002 [ 682.171659][T10256] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 682.764543][T14610] sock: sock_timestamping_bind_phc: sock not bind to device [ 682.816638][T14610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2027'. [ 682.839122][ T5884] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 683.044679][T14614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.049107][ T5884] usb 7-1: Using ep0 maxpacket: 32 [ 683.071585][ T5884] usb 7-1: unable to get BOS descriptor or descriptor too short [ 683.079985][T14614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.094449][ T5884] usb 7-1: config 127 has an invalid interface number: 25 but max is 0 [ 683.109423][ T5884] usb 7-1: config 127 has no interface number 0 [ 683.121008][ T5884] usb 7-1: config 127 interface 25 has no altsetting 0 [ 683.136419][ T5884] usb 7-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 683.146016][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.156784][ T5884] usb 7-1: Product: syz [ 683.165860][ T5884] usb 7-1: Manufacturer: syz [ 683.202041][ T5884] usb 7-1: SerialNumber: syz [ 683.249228][ T5882] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 683.387256][T13875] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 683.551450][ T5882] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 683.573580][ T5882] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.580052][ T5884] usb 7-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 683.618600][ T5882] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 683.634519][ T5882] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 683.653609][ T5882] usb 6-1: Product: syz [ 683.661116][ T5882] usb 6-1: Manufacturer: syz [ 683.691036][ T5882] hub 6-1:4.0: USB hub found [ 683.829375][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 683.891238][ T5882] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 683.937012][T14625] fuse: Unknown parameter '' [ 683.944637][ T5882] usb 6-1: USB disconnect, device number 33 [ 684.002448][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.020471][ T10] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 684.047116][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.080663][ T10] usb 4-1: config 0 descriptor?? [ 684.104349][ T5884] usb 7-1: reset high-speed USB device number 59 using dummy_hcd [ 684.108523][ T10] usb 4-1: bad CDC descriptors [ 684.357800][T14606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.419805][T14606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.531431][T14606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.547670][T14606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.569347][T13876] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 684.723587][ T5884] usb 7-1: unable to get BOS descriptor or descriptor too short [ 684.749205][ T5884] usb 7-1: device firmware changed [ 684.806895][ T5884] ueagle-atm 7-1:127.25: usbatm_usb_probe: bind failed: -19! [ 684.857934][ T5884] usb 7-1: USB disconnect, device number 59 [ 684.889188][ T5880] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 685.059593][ T5880] usb 6-1: device descriptor read/64, error -71 [ 685.319186][ T5880] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 685.479293][ T5880] usb 6-1: device descriptor read/64, error -71 [ 685.553662][ T5884] usb 4-1: USB disconnect, device number 40 [ 685.624858][ T5880] usb usb6-port1: attempt power cycle [ 685.712005][T13876] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 685.834400][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.847394][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.989403][ T5880] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 686.025483][ T5880] usb 6-1: device descriptor read/8, error -71 [ 686.228913][T14659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2043'. [ 686.239737][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2043'. [ 686.291086][ T5880] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 686.369683][T14665] raw_sendmsg: syz.6.2042 forgot to set AF_INET. Fix it! [ 686.422097][ T5880] usb 6-1: device descriptor read/8, error -71 [ 686.452717][T14664] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 686.479674][T14664] batman_adv: batadv0: Adding interface: ip6gretap1 [ 686.535669][T14664] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.616112][ T5880] usb usb6-port1: unable to enumerate USB device [ 686.645998][T14664] batman_adv: batadv0: Interface activated: ip6gretap1 [ 687.250110][ T1002] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 687.746025][T14680] netlink: 'syz.5.2048': attribute type 4 has an invalid length. [ 688.440687][ T3441] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 688.929144][ T5881] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 689.243191][ T5881] usb 6-1: device descriptor read/64, error -71 [ 689.542023][ T5881] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 689.699085][ T5881] usb 6-1: device descriptor read/64, error -71 [ 689.708066][ T3441] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 689.823684][ T5881] usb usb6-port1: attempt power cycle [ 689.969176][ T8127] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 690.139058][ T8127] usb 4-1: Using ep0 maxpacket: 32 [ 690.189119][ T5881] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 690.241477][ T8127] usb 4-1: config 0 has an invalid interface number: 77 but max is 0 [ 690.302523][ T5881] usb 6-1: device descriptor read/8, error -71 [ 690.319255][ T8127] usb 4-1: config 0 has no interface number 0 [ 690.352711][ T8127] usb 4-1: too many endpoints for config 0 interface 77 altsetting 112: 127, using maximum allowed: 30 [ 690.489488][ T8127] usb 4-1: config 0 interface 77 altsetting 112 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.549297][ T8127] usb 4-1: config 0 interface 77 altsetting 112 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.612837][ T5881] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 690.643345][ T8127] usb 4-1: config 0 interface 77 altsetting 112 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 690.769018][ T8127] usb 4-1: config 0 interface 77 has no altsetting 0 [ 690.799224][ T8127] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 690.843122][ T5881] usb 6-1: device descriptor read/8, error -71 [ 690.884920][ T8127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.909206][ T8127] usb 4-1: config 0 descriptor?? [ 690.942990][ T3441] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 690.991750][ T5881] usb usb6-port1: unable to enumerate USB device [ 691.348073][T14757] xt_hashlimit: max too large, truncated to 1048576 [ 691.400427][T14757] xt_hashlimit: overflow, try lower: 9/0 [ 692.150224][T13876] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 692.559097][ T5881] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 692.719943][ T5881] usb 7-1: Using ep0 maxpacket: 16 [ 692.733164][ T5881] usb 7-1: config index 0 descriptor too short (expected 17170, got 18) [ 692.742139][ T5881] usb 7-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 692.758875][ T5881] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 692.856532][ T5881] usb 7-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 692.874479][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.883280][ T5881] usb 7-1: Product: syz [ 692.887479][ T5881] usb 7-1: Manufacturer: syz [ 692.892151][ T5881] usb 7-1: SerialNumber: syz [ 692.904602][ T5881] usb 7-1: config 0 descriptor?? [ 692.933751][ T5881] ums-freecom 7-1:0.0: USB Mass Storage device detected [ 693.005070][ T10] usb 4-1: USB disconnect, device number 41 [ 693.174979][T14788] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2073'. [ 693.207557][T14788] netlink: 'syz.7.2073': attribute type 29 has an invalid length. [ 693.235062][T14787] netlink: 'syz.3.2074': attribute type 16 has an invalid length. [ 693.310614][T14787] netlink: 'syz.3.2074': attribute type 17 has an invalid length. [ 693.559986][ T3441] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 693.953076][T14787] bridge0: port 3(vlan2) entered disabled state [ 693.959807][T14787] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.967197][T14787] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.224313][ T5884] usb 7-1: USB disconnect, device number 60 [ 694.308582][ T10] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 694.338118][T14787] batman_adv: batadv0: Interface deactivated: dummy0 [ 694.627367][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 694.681534][T13875] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 694.713288][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 694.857172][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 694.879603][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.887824][ T10] usb 4-1: Product: syz [ 694.892331][ T10] usb 4-1: Manufacturer: syz [ 694.896949][ T10] usb 4-1: SerialNumber: syz [ 694.928448][T14787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.978808][T14787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.179866][T14790] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2074'. [ 695.334711][T14805] binder: 14804:14805 ioctl c0306201 2000000003c0 returned -14 [ 695.398862][T14787] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.426631][T14787] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.455450][T14787] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.544566][T14787] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.878619][T14798] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2075'. [ 695.894216][T14794] netlink: 'syz.5.2075': attribute type 29 has an invalid length. [ 695.959767][ T10] usb 4-1: 0:2 : does not exist [ 696.050955][ T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 696.078561][ T10] usb 4-1: USB disconnect, device number 42 [ 696.120598][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 696.639174][T14824] netlink: 'syz.2.2082': attribute type 4 has an invalid length. [ 696.745840][T14826] batadv_slave_1: entered promiscuous mode [ 696.764666][T14826] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2084'. [ 697.049140][ T10] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 697.211713][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 697.243719][ T10] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 697.269064][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.299621][ T10] usb 6-1: config 0 descriptor?? [ 697.322154][T14828] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 697.751171][ T10] hid-multitouch 0003:0EEF:72C4.0027: item fetching failed at offset 3/5 [ 697.780147][ T10] hid-multitouch 0003:0EEF:72C4.0027: probe with driver hid-multitouch failed with error -22 [ 697.962422][T14828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.987390][T14828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.010377][T14841] loop2: detected capacity change from 0 to 7 [ 698.020713][T14841] Dev loop2: unable to read RDB block 7 [ 698.026369][T14841] loop2: AHDI p2 [ 698.032925][T14841] loop2: partition table partially beyond EOD, truncated [ 698.083138][ T10] usb 6-1: USB disconnect, device number 42 [ 698.272678][T14847] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2091'. [ 698.323614][T14847] netlink: 'syz.6.2091': attribute type 29 has an invalid length. [ 699.157421][ T30] audit: type=1800 audit(1746626396.809:296): pid=14870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2099" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 699.389051][ T5881] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 699.539443][ T5881] usb 7-1: device descriptor read/64, error -71 [ 699.869440][ T5881] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 700.029294][ T5881] usb 7-1: device descriptor read/64, error -71 [ 700.118149][T14862] sock: sock_timestamping_bind_phc: sock not bind to device [ 700.139877][ T5881] usb usb7-port1: attempt power cycle [ 700.540168][ T5881] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 700.577034][ T5881] usb 7-1: device descriptor read/8, error -71 [ 700.846869][ T5881] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 700.879756][ T5881] usb 7-1: device descriptor read/8, error -71 [ 700.993946][ T5881] usb usb7-port1: unable to enumerate USB device [ 701.056152][T14906] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2108'. [ 701.068279][T14906] netlink: 'syz.7.2108': attribute type 29 has an invalid length. [ 701.139038][ T10] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 701.161083][ T8127] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 701.294329][ T5838] Bluetooth: hci3: ISO packet too small [ 701.305748][ T10] usb 6-1: string descriptor 0 read error: -71 [ 701.312201][ T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 701.319343][ T8127] usb 4-1: Using ep0 maxpacket: 32 [ 701.345842][ T8127] usb 4-1: config 0 has an invalid interface number: 104 but max is 0 [ 701.354336][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.384454][ T10] usb 6-1: can't set config #1, error -71 [ 701.398820][ T10] usb 6-1: USB disconnect, device number 43 [ 701.406040][ T8127] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 701.423683][ T8127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.434169][ T8127] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 701.444558][ T8127] usb 4-1: config 0 has no interface number 0 [ 701.450869][ T8127] usb 4-1: config 0 has no interface number 1 [ 701.457754][ T8127] usb 4-1: config 0 interface 104 altsetting 250 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 701.472035][ T8127] usb 4-1: config 0 interface 104 has no altsetting 0 [ 701.478844][ T8127] usb 4-1: config 0 interface 2 has no altsetting 0 [ 701.488376][ T8127] usb 4-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice=6b.76 [ 701.497615][ T8127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.505705][ T8127] usb 4-1: Product: syz [ 701.510270][ T8127] usb 4-1: Manufacturer: syz [ 701.514890][ T8127] usb 4-1: SerialNumber: syz [ 701.523879][ T8127] usb 4-1: config 0 descriptor?? [ 701.932058][T14913] netlink: 'syz.5.2111': attribute type 10 has an invalid length. [ 701.945397][T14913] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2111'. [ 702.342582][T14921] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2113'. [ 703.466907][T14937] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 703.610077][T14940] netlink: 'syz.2.2119': attribute type 1 has an invalid length. [ 703.647868][T14940] netlink: 'syz.2.2119': attribute type 2 has an invalid length. [ 703.705320][T14940] netlink: 'syz.2.2119': attribute type 1 has an invalid length. [ 703.739850][T14940] netlink: 'syz.2.2119': attribute type 2 has an invalid length. [ 703.769588][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 703.797002][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 703.805950][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 703.823638][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 703.853269][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 703.864160][T14945] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2120'. [ 703.888660][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 703.940624][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 703.972733][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.026116][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.051713][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.065453][ T8127] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 704.070210][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.102546][ T8127] snd-usb-audio 4-1:0.104: probe with driver snd-usb-audio failed with error -2 [ 704.117574][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.128599][ T8127] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 704.199029][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.214556][ T8127] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 704.245479][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.249856][ T8127] usb 4-1: USB disconnect, device number 43 [ 704.303598][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.314193][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.326526][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.336366][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.346574][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 704.366372][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.377758][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.386188][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.411160][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.442052][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.472686][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.495744][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.518854][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.544201][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.568608][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.587238][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.605562][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.616287][T14951] xt_hashlimit: max too large, truncated to 1048576 [ 704.617136][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.630710][T14951] xt_hashlimit: overflow, try lower: 9/0 [ 704.636638][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.636674][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.636703][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.636730][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.636757][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.636783][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.653089][ T8127] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 704.665609][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.710815][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.718814][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.730174][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.773192][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.781664][ T10] hid-generic 0000:007F:FFFFFFFE.0028: unknown main item tag 0x0 [ 704.781995][T14947] netlink: 'syz.6.2121': attribute type 2 has an invalid length. [ 704.819235][ T10] hid-generic 0000:007F:FFFFFFFE.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 704.861647][ T8127] usb 4-1: Using ep0 maxpacket: 32 [ 704.880905][ T8127] usb 4-1: unable to get BOS descriptor or descriptor too short [ 704.900645][ T8127] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 704.918741][ T8127] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 704.946731][ T8127] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 704.965923][ T8127] usb 4-1: config 128 has no interface number 0 [ 704.974557][ T8127] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 704.981876][T14955] binder: 14953:14955 ioctl 4c0a 200000000380 returned -22 [ 705.003773][ T8127] usb 4-1: config 128 interface 127 has no altsetting 0 [ 705.015415][ T8127] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 705.026065][ T8127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.035530][ T8127] usb 4-1: Product: syz [ 705.043310][ T8127] usb 4-1: Manufacturer: syz [ 705.050610][ T8127] usb 4-1: SerialNumber: syz [ 705.058803][T14949] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 705.290635][T14949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.314711][T14949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.418874][ T8127] usb 4-1: USB disconnect, device number 44 [ 705.477642][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 705.919147][ T8127] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 706.076098][ T8127] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 706.097294][ T8127] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.126493][ T8127] usb 6-1: Product: syz [ 706.142136][ T8127] usb 6-1: Manufacturer: syz [ 706.159120][ T8127] usb 6-1: SerialNumber: syz [ 706.195453][ T8127] usb 6-1: config 0 descriptor?? [ 706.227859][ T8127] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 707.496775][T15005] syzkaller1: entered promiscuous mode [ 707.527099][T15005] syzkaller1: entered allmulticast mode [ 708.170145][ T8126] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 708.209355][ T8127] gspca_sunplus: reg_r err -110 [ 708.214346][ T8127] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 708.389258][ T8126] usb 7-1: Using ep0 maxpacket: 8 [ 708.398583][ T8126] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 708.409677][ T8126] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 708.430966][ T8126] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.994239][ T5882] usb 6-1: USB disconnect, device number 44 [ 709.538522][ T8127] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 710.299108][ T8127] usb 6-1: Using ep0 maxpacket: 32 [ 710.318657][ T8127] usb 6-1: too many configurations: 134, using maximum allowed: 8 [ 710.465809][ T8127] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 710.481173][ T8127] usb 6-1: can't read configurations, error -61 [ 710.639842][ T8127] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 710.819106][ T8127] usb 6-1: Using ep0 maxpacket: 32 [ 710.826987][ T8127] usb 6-1: too many configurations: 134, using maximum allowed: 8 [ 710.837926][ T8127] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 710.862854][ T8127] usb 6-1: can't read configurations, error -61 [ 710.937510][ T8127] usb usb6-port1: attempt power cycle [ 711.248121][ T10] usb 7-1: USB disconnect, device number 65 [ 711.329276][ T8127] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 711.351325][ T8127] usb 6-1: Using ep0 maxpacket: 32 [ 711.393028][ T8127] usb 6-1: too many configurations: 134, using maximum allowed: 8 [ 711.464470][ T8127] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 711.479669][ T8127] usb 6-1: can't read configurations, error -61 [ 711.639122][ T8127] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 711.668533][ T8127] usb 6-1: Using ep0 maxpacket: 32 [ 711.674663][ T8127] usb 6-1: too many configurations: 134, using maximum allowed: 8 [ 711.719310][ T10] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 711.737562][ T8127] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 711.757354][ T8127] usb 6-1: can't read configurations, error -61 [ 711.765009][ T8127] usb usb6-port1: unable to enumerate USB device [ 711.882113][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 711.891219][ T10] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 711.906646][ T10] usb 7-1: config 1 has no interface number 1 [ 711.918512][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 711.947482][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 711.957116][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.968258][ T10] usb 7-1: Product: syz [ 711.975237][ T10] usb 7-1: Manufacturer: syz [ 711.982978][ T10] usb 7-1: SerialNumber: syz [ 712.061386][T15067] FAULT_INJECTION: forcing a failure. [ 712.061386][T15067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.078246][T15067] CPU: 1 UID: 0 PID: 15067 Comm: syz.3.2149 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 712.078277][T15067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 712.078291][T15067] Call Trace: [ 712.078300][T15067] [ 712.078310][T15067] dump_stack_lvl+0x189/0x250 [ 712.078343][T15067] ? __lock_acquire+0xaac/0xd20 [ 712.078376][T15067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 712.078412][T15067] ? __pfx__printk+0x10/0x10 [ 712.078433][T15067] ? __might_fault+0xb0/0x130 [ 712.078472][T15067] should_fail_ex+0x414/0x560 [ 712.078511][T15067] _copy_from_user+0x2d/0xb0 [ 712.078540][T15067] kstrtouint_from_user+0xc4/0x170 [ 712.078566][T15067] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 712.078606][T15067] proc_fail_nth_write+0x88/0x240 [ 712.078641][T15067] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 712.078674][T15067] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 712.078704][T15067] vfs_write+0x27b/0xa90 [ 712.078737][T15067] ? __pfx_vfs_write+0x10/0x10 [ 712.078760][T15067] ? __fget_files+0x2a/0x420 [ 712.078792][T15067] ? __fget_files+0x3a0/0x420 [ 712.078816][T15067] ? __fget_files+0x2a/0x420 [ 712.078852][T15067] ksys_write+0x145/0x250 [ 712.078876][T15067] ? __pfx_ksys_write+0x10/0x10 [ 712.078904][T15067] ? do_syscall_64+0xba/0x210 [ 712.078934][T15067] do_syscall_64+0xf6/0x210 [ 712.078958][T15067] ? clear_bhb_loop+0x45/0xa0 [ 712.078983][T15067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.079002][T15067] RIP: 0033:0x7f7f59f8d41f [ 712.079020][T15067] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 712.079037][T15067] RSP: 002b:00007f7f5adb4030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 712.079059][T15067] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7f59f8d41f [ 712.079073][T15067] RDX: 0000000000000001 RSI: 00007f7f5adb40a0 RDI: 0000000000000006 [ 712.079085][T15067] RBP: 00007f7f5adb4090 R08: 0000000000000000 R09: 0000000000000000 [ 712.079098][T15067] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 712.079110][T15067] R13: 0000000000000000 R14: 00007f7f5a1b5fa0 R15: 00007f7f5a2dfa28 [ 712.079142][T15067] [ 712.700028][ T10] usb 7-1: found format II with max.bitrate = 26774, frame size=2 [ 712.727478][ T10] usb 7-1: found format II with max.bitrate = 26774, frame size=2 [ 712.741053][T15077] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 712.751407][T15075] [ 712.753800][T15075] ====================================================== [ 712.760817][T15075] WARNING: possible circular locking dependency detected [ 712.767938][T15075] 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 Not tainted [ 712.775160][T15075] ------------------------------------------------------ [ 712.782177][T15075] syz.5.2151/15075 is trying to acquire lock: [ 712.788234][T15075] ffff88801aef79e0 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0xb3/0x500 [ 712.798519][T15075] [ 712.798519][T15075] but task is already holding lock: [ 712.805878][T15075] ffff888024b03168 (&q->q_usage_counter(io)#19){++++}-{0:0}, at: lo_ioctl+0x1c22/0x22e0 [ 712.815655][T15075] [ 712.815655][T15075] which lock already depends on the new lock. [ 712.815655][T15075] [ 712.826066][T15075] [ 712.826066][T15075] the existing dependency chain (in reverse order) is: [ 712.835108][T15075] [ 712.835108][T15075] -> #3 (&q->q_usage_counter(io)#19){++++}-{0:0}: [ 712.843742][T15075] lock_acquire+0x120/0x360 [ 712.848788][T15075] blk_alloc_queue+0x538/0x620 [ 712.854091][T15075] __blk_mq_alloc_disk+0x164/0x350 [ 712.859739][T15075] loop_add+0x41d/0xae0 [ 712.864472][T15075] loop_init+0x173/0x230 [ 712.869254][T15075] do_one_initcall+0x233/0x820 [ 712.874579][T15075] do_initcall_level+0x137/0x1f0 [ 712.880048][T15075] do_initcalls+0x69/0xd0 [ 712.884911][T15075] kernel_init_freeable+0x3d9/0x570 [ 712.890810][T15075] kernel_init+0x1d/0x1d0 [ 712.895674][T15075] ret_from_fork+0x4b/0x80 [ 712.900620][T15075] ret_from_fork_asm+0x1a/0x30 [ 712.905906][T15075] [ 712.905906][T15075] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 712.913133][T15075] lock_acquire+0x120/0x360 [ 712.918165][T15075] fs_reclaim_acquire+0x72/0x100 [ 712.923632][T15075] kmem_cache_alloc_noprof+0x44/0x3c0 [ 712.929551][T15075] __kernfs_iattrs+0x93/0x280 [ 712.934758][T15075] kernfs_iop_setattr+0xea/0x3f0 [ 712.940231][T15075] notify_change+0xb33/0xe40 [ 712.945346][T15075] do_truncate+0x19a/0x220 [ 712.950285][T15075] path_openat+0x306c/0x3830 [ 712.955395][T15075] do_filp_open+0x1fa/0x410 [ 712.960419][T15075] do_sys_openat2+0x121/0x1c0 [ 712.965624][T15075] __x64_sys_openat+0x138/0x170 [ 712.971004][T15075] do_syscall_64+0xf6/0x210 [ 712.976036][T15075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.982456][T15075] [ 712.982456][T15075] -> #1 (iattr_mutex){+.+.}-{4:4}: [ 712.989771][T15075] lock_acquire+0x120/0x360 [ 712.994807][T15075] __mutex_lock+0x182/0xe80 [ 712.999839][T15075] __kernfs_iattrs+0x2a/0x280 [ 713.005131][T15075] kernfs_iop_setattr+0xea/0x3f0 [ 713.010627][T15075] notify_change+0xb33/0xe40 [ 713.015745][T15075] do_truncate+0x19a/0x220 [ 713.020686][T15075] path_openat+0x306c/0x3830 [ 713.025801][T15075] do_filp_open+0x1fa/0x410 [ 713.030829][T15075] do_sys_openat2+0x121/0x1c0 [ 713.036041][T15075] __x64_sys_openat+0x138/0x170 [ 713.041436][T15075] do_syscall_64+0xf6/0x210 [ 713.046472][T15075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.052896][T15075] [ 713.052896][T15075] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 713.061425][T15075] validate_chain+0xb9b/0x2140 [ 713.066717][T15075] __lock_acquire+0xaac/0xd20 [ 713.072107][T15075] lock_acquire+0x120/0x360 [ 713.077145][T15075] down_read+0x46/0x2e0 [ 713.081939][T15075] kernfs_iop_getattr+0xb3/0x500 [ 713.087422][T15075] vfs_getattr_nosec+0x2de/0x430 [ 713.092983][T15075] loop_assign_backing_file+0x227/0x410 [ 713.099093][T15075] lo_ioctl+0x1c94/0x22e0 [ 713.103946][T15075] blkdev_ioctl+0x5a5/0x6d0 [ 713.108980][T15075] __se_sys_ioctl+0xf9/0x170 [ 713.114109][T15075] do_syscall_64+0xf6/0x210 [ 713.119161][T15075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.125576][T15075] [ 713.125576][T15075] other info that might help us debug this: [ 713.125576][T15075] [ 713.135808][T15075] Chain exists of: [ 713.135808][T15075] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#19 [ 713.135808][T15075] [ 713.150287][T15075] Possible unsafe locking scenario: [ 713.150287][T15075] [ 713.157826][T15075] CPU0 CPU1 [ 713.163191][T15075] ---- ---- [ 713.168553][T15075] lock(&q->q_usage_counter(io)#19); [ 713.173943][T15075] lock(fs_reclaim); [ 713.180457][T15075] lock(&q->q_usage_counter(io)#19); [ 713.188447][T15075] rlock(&root->kernfs_iattr_rwsem); [ 713.193854][T15075] [ 713.193854][T15075] *** DEADLOCK *** [ 713.193854][T15075] [ 713.202092][T15075] 3 locks held by syz.5.2151/15075: [ 713.207298][T15075] #0: ffff888024b16b68 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0xef0/0x22e0 [ 713.216290][T15075] #1: ffff888024b03168 (&q->q_usage_counter(io)#19){++++}-{0:0}, at: lo_ioctl+0x1c22/0x22e0 [ 713.226590][T15075] #2: ffff888024b031a0 (&q->q_usage_counter(queue)#19){+.+.}-{0:0}, at: lo_ioctl+0x1c22/0x22e0 [ 713.237063][T15075] [ 713.237063][T15075] stack backtrace: [ 713.242959][T15075] CPU: 0 UID: 0 PID: 15075 Comm: syz.5.2151 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 713.242983][T15075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 713.242995][T15075] Call Trace: [ 713.243001][T15075] [ 713.243010][T15075] dump_stack_lvl+0x189/0x250 [ 713.243045][T15075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 713.243069][T15075] ? __pfx__printk+0x10/0x10 [ 713.243088][T15075] ? print_lock_name+0xde/0x100 [ 713.243115][T15075] print_circular_bug+0x2ee/0x310 [ 713.243134][T15075] check_noncircular+0x134/0x160 [ 713.243152][T15075] validate_chain+0xb9b/0x2140 [ 713.243176][T15075] __lock_acquire+0xaac/0xd20 [ 713.243201][T15075] ? kernfs_iop_getattr+0xb3/0x500 [ 713.243223][T15075] lock_acquire+0x120/0x360 [ 713.243245][T15075] ? kernfs_iop_getattr+0xb3/0x500 [ 713.243272][T15075] down_read+0x46/0x2e0 [ 713.243294][T15075] ? kernfs_iop_getattr+0xb3/0x500 [ 713.243317][T15075] kernfs_iop_getattr+0xb3/0x500 [ 713.243340][T15075] vfs_getattr_nosec+0x2de/0x430 [ 713.243365][T15075] loop_assign_backing_file+0x227/0x410 [ 713.243390][T15075] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 713.243411][T15075] ? schedule+0x91/0x360 [ 713.243434][T15075] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 713.243459][T15075] lo_ioctl+0x1c94/0x22e0 [ 713.243483][T15075] ? __pfx_lo_ioctl+0x10/0x10 [ 713.243507][T15075] ? __lock_acquire+0xaac/0xd20 [ 713.243537][T15075] ? __lock_acquire+0xaac/0xd20 [ 713.243562][T15075] ? __lock_acquire+0xaac/0xd20 [ 713.243589][T15075] ? __lock_acquire+0xaac/0xd20 [ 713.243615][T15075] ? __lock_acquire+0xaac/0xd20 [ 713.243643][T15075] ? is_bpf_text_address+0x26/0x2b0 [ 713.243668][T15075] ? is_bpf_text_address+0x292/0x2b0 [ 713.243691][T15075] ? is_bpf_text_address+0x26/0x2b0 [ 713.243714][T15075] ? kernel_text_address+0xa5/0xe0 [ 713.243737][T15075] ? __kernel_text_address+0xd/0x40 [ 713.243758][T15075] ? unwind_get_return_address+0x4d/0x90 [ 713.243778][T15075] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 713.243796][T15075] ? arch_stack_walk+0xfc/0x150 [ 713.243822][T15075] ? stack_trace_save+0x9c/0xe0 [ 713.243840][T15075] ? stack_depot_save_flags+0x40/0x910 [ 713.243858][T15075] ? kasan_save_track+0x4f/0x80 [ 713.243875][T15075] ? kasan_save_track+0x3e/0x80 [ 713.243892][T15075] ? do_vfs_ioctl+0xf36/0x1eb0 [ 713.243908][T15075] ? __se_sys_ioctl+0x47/0x170 [ 713.243923][T15075] ? do_syscall_64+0xf6/0x210 [ 713.243944][T15075] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 713.243972][T15075] ? kasan_quarantine_put+0xdd/0x220 [ 713.243992][T15075] ? blkdev_common_ioctl+0xfc3/0x2450 [ 713.244012][T15075] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 713.244046][T15075] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 713.244065][T15075] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 713.244091][T15075] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 713.244117][T15075] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 713.244143][T15075] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 713.244175][T15075] ? __lock_acquire+0xaac/0xd20 [ 713.244203][T15075] ? __pfx_lo_ioctl+0x10/0x10 [ 713.244223][T15075] blkdev_ioctl+0x5a5/0x6d0 [ 713.244242][T15075] ? __pfx_blkdev_ioctl+0x10/0x10 [ 713.244260][T15075] ? __fget_files+0x3a0/0x420 [ 713.244282][T15075] ? __fget_files+0x2a/0x420 [ 713.244304][T15075] ? bpf_lsm_file_ioctl+0x9/0x20 [ 713.244326][T15075] ? __pfx_blkdev_ioctl+0x10/0x10 [ 713.244344][T15075] __se_sys_ioctl+0xf9/0x170 [ 713.244360][T15075] do_syscall_64+0xf6/0x210 [ 713.244381][T15075] ? clear_bhb_loop+0x45/0xa0 [ 713.244399][T15075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.244416][T15075] RIP: 0033:0x7f3c0178e969 [ 713.244431][T15075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.244446][T15075] RSP: 002b:00007f3c0257b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 713.244465][T15075] RAX: ffffffffffffffda RBX: 00007f3c019b6080 RCX: 00007f3c0178e969 [ 713.244478][T15075] RDX: 0000000000000007 RSI: 0000000000004c06 RDI: 0000000000000003 [ 713.244489][T15075] RBP: 00007f3c01810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 713.244500][T15075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.244511][T15075] R13: 0000000000000000 R14: 00007f3c019b6080 R15: 00007f3c01adfa28 [ 713.244529][T15075] [ 713.664678][T15077] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 713.677216][T15072] PM: Image not found (code -6) [ 713.697987][ T10] usb 7-1: failed to enable PITCH for EP 0x82 [ 713.717063][ T10] usb 7-1: USB disconnect, device number 66 [ 713.807759][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory