last executing test programs: 6m43.5156011s ago: executing program 1 (id=1814): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000040)={0x1000000000000073, 0x0, [{0x87d, 0x0, 0x7}, {0x401, 0x0, 0xb2c}, {0xbf0, 0x0, 0x1}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000001ac0)=@ethtool_regs={0x4, 0x4000005}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) socket(0x10, 0x80000, 0x800) r4 = syz_io_uring_setup(0x1683, &(0x7f0000000000)={0x0, 0xaa27, 0x80, 0x3, 0x3e7}, &(0x7f0000000080), &(0x7f00000000c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0xb688, 0x1c803, 0x1, 0x20002f7}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x804d, {0xa, 0x14, 0x10, 0x0, 0xfe, 0x1, 0x0, 0x0, 0x2400}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x11, 0x0, 0x2000000}, 0x20000080) io_uring_enter(r5, 0x6250, 0x366, 0x30, 0x0, 0x0) io_uring_enter(r4, 0x5b6a, 0x5590, 0x8, &(0x7f0000000100)={[0xdf21, 0x10001]}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r7 = openat$autofs(0xffffff9c, &(0x7f0000000140), 0x149006, 0x0) r8 = openat$tcp_mem(0xffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r8, {0x1}}, './file0\x00'}) 6m43.034675039s ago: executing program 1 (id=1816): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000008000000030000005800018044000400200001000a000004000000020000000000000000000012571e00000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) 6m42.544292032s ago: executing program 1 (id=1819): syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000002100)='keyring\x00', 0x0, &(0x7f0000002180), 0x0, 0xfffffffffffffffb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="ab", 0x1}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="100000ac0e00000000000500"], 0x10}, 0x20040001) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) r5 = openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0), 0x12) 6m41.368325664s ago: executing program 3 (id=1824): r0 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x800) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100) ioctl$MON_IOCX_GETX(r0, 0x400c920a, &(0x7f0000000280)={0x0, &(0x7f0000000340)=""/120, 0x78}) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local, 0x9}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x691, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) 6m41.271491458s ago: executing program 3 (id=1825): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@bridge_delvlan={0x70, 0x71, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x1e}}, @BRIDGE_VLANDB_ENTRY={0xfffffefc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x0, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0xffffffffffffffee, 0x6, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x0, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x0, 0x1, 0x1bdd5678}}}]}, 0x70}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x441, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r6}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x68, r2, 0x1, 0x70bd26, 0x20003, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @empty}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x68}}, 0x0) write(r0, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x5) syz_open_dev$tty1(0xc, 0x4, 0x4) timer_create(0x0, &(0x7f0000000000)={0x0, 0x121, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f0000000500)=@buf={0x7c, &(0x7f0000000480)="010e8ef0af8011848a7dfe1d8e3d2970bd35b9eb4362d8167d224d7f5e550c42e70e52715cafc6d02b06b250584b25b09f29e0cd89384b0db92eabaeea31a7fc822ba0f43434c68b6ff44833d70110f9b4608d82396ebb9c1ed719e93038f7b39da24c94d249495b6f6b78989e6bd37a390fff0e07148257a877831f"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_connect(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5f8e400905080aff03f70709090587"], 0x0) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_clone3(&(0x7f0000000340)={0x80192800, &(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000140), {0x2f}, &(0x7f0000000180)=""/48, 0x30, &(0x7f0000000200)=""/22, &(0x7f0000000240)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) timer_create(0x2, &(0x7f0000000400)={0x0, 0x25, 0x0, @tid=r9}, &(0x7f0000000440)) 6m40.603909259s ago: executing program 1 (id=1827): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@local, 0x0}, &(0x7f0000000240)=0x14) sendto$packet(r0, &(0x7f00000001c0)="6f120641dc22df4b804ae5680df8dad04d411c10989d03b4e89c3f392e0dd693fcc800a2b812cd1d56269e1f9409d7927f63dc133ae7ec32e2cf726b2770510529eb69bcbfeddf929e5181cbb095cb40dcf0d282e6b5f11635262dc8a4874474ac3751fe", 0x64, 0x40800, &(0x7f0000000280)={0x11, 0xf6, r1, 0x1, 0xb, 0x6, @link_local}, 0x14) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) unshare(0x2c020400) 6m39.160435341s ago: executing program 1 (id=1834): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0xc4, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@empty, 0x3502}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x8a9a518a60ddf29d, 0x3, 0x0, 0x0, 0x0, 0x2}]}]}, 0x17c}}, 0x0) 6m38.572623622s ago: executing program 1 (id=1835): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="02ac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x2c00, 0x42804}, 0x0) 6m37.999197578s ago: executing program 32 (id=1835): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="02ac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x2c00, 0x42804}, 0x0) 6m37.988615404s ago: executing program 3 (id=1837): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1) io_uring_enter(0xffffffffffffffff, 0x2ded, 0xef92, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x76}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) chdir(&(0x7f0000000540)='./cgroup\x00') mprotect(&(0x7f000069a000/0x400000)=nil, 0x400000, 0x200000a) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) 6m36.795412546s ago: executing program 3 (id=1844): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@local, 0x0}, &(0x7f0000000240)=0x14) sendto$packet(r0, &(0x7f00000001c0)="6f120641dc22df4b804ae5680df8dad04d411c10989d03b4e89c3f392e0dd693fcc800a2b812cd1d56269e1f9409d7927f63dc133ae7ec32e2cf726b2770510529eb69bcbfeddf929e5181cbb095cb40dcf0d282e6b5f11635262dc8a4874474ac3751fe", 0x64, 0x40800, &(0x7f0000000280)={0x11, 0xf6, r1, 0x1, 0xb, 0x6, @link_local}, 0x14) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) unshare(0x2c020400) 6m35.847466198s ago: executing program 3 (id=1849): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$netlink(0x10, 0x3, 0xa) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @private2, 0x3}]}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000040)={r4, 0x7}, 0x8) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000180)) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a2003c000301000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x5) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000000040)={0x3, 0x84a, 0x4, 0x8}) ftruncate(r5, 0x200004) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CAP_X2APIC_API(r9, 0x4068aea3, 0x0) ioctl$KVM_SIGNAL_MSI(r9, 0x4020aea5, &(0x7f0000000340)={0xeeee8000, 0x0, 0x59, 0x0, 0x80000000}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0xffffffffffffffae, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x9}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 6m35.161651357s ago: executing program 3 (id=1852): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000900)=@newqdisc={0x238, 0x28, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x7}, {0xffff, 0xffff}, {0x2, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x6}}, @TCA_STAB={0x100, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x1, 0x0, 0x1, 0x1, 0x3e0, 0x5, 0x7}}, {0x12, 0x2, [0xee, 0x4, 0x2, 0x2, 0x8, 0x4, 0x2]}}, {{0x1c, 0x1, {0x1, 0x9, 0x0, 0x200, 0x2, 0x6, 0x0, 0x2}}, {0x8, 0x2, [0xcd55, 0x2]}}, {{0x1c, 0x1, {0x3d, 0x3, 0x4, 0x0, 0x2, 0x6, 0x4, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x1, 0x2, 0xfff3, 0x3, 0x1, 0x5, 0x1, 0x8}}, {0x14, 0x2, [0x9, 0x4, 0xe1bd, 0x1c9d, 0x2, 0xfffd, 0x7, 0x3]}}, {{0x1c, 0x1, {0x81, 0x4, 0x5, 0x52c, 0x1, 0x3, 0xfffffffe, 0x7}}, {0x12, 0x2, [0x7ff, 0xf880, 0x8000, 0x2, 0x2, 0x2fb, 0x1ff]}}, {{0x1c, 0x1, {0xd2, 0x0, 0x4d0a, 0x10001, 0x2, 0x7, 0xffff5e99, 0x2}}, {0x8, 0x2, [0x0, 0x44]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x77}}, @TCA_STAB={0xfc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0xff, 0x401, 0x101, 0x1, 0x400, 0x5, 0x5}}, {0xe, 0x2, [0x5, 0x0, 0x7, 0xd, 0xfff6]}}, {{0x1c, 0x1, {0xc9, 0x8, 0x3, 0xe, 0x0, 0x7, 0xa, 0x8}}, {0x14, 0x2, [0x7, 0x8, 0x4, 0x6d, 0x7be, 0x6, 0x1, 0x0]}}, {{0x1c, 0x1, {0x5b, 0x7, 0x100, 0x5, 0x1, 0xff, 0x1}}, {0x4}}, {{0x1c, 0x1, {0xe, 0x10, 0xa, 0x0, 0x0, 0x8001, 0xb, 0x5}}, {0xe, 0x2, [0x5, 0x40, 0x7, 0x5, 0x3e1e]}}, {{0x1c, 0x1, {0x6, 0x4, 0x8, 0x401, 0x1, 0x6, 0x7, 0x2}}, {0x8, 0x2, [0xfffb, 0x5]}}, {{0x1c, 0x1, {0xcb, 0x5, 0x1, 0x8000, 0x2, 0x99, 0x5, 0x6}}, {0x10, 0x2, [0x2, 0xd, 0x1c1a, 0xfffa, 0x2, 0xb282]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff7}]}, 0x238}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 6m34.758736519s ago: executing program 33 (id=1852): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000900)=@newqdisc={0x238, 0x28, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x7}, {0xffff, 0xffff}, {0x2, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x6}}, @TCA_STAB={0x100, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x1, 0x0, 0x1, 0x1, 0x3e0, 0x5, 0x7}}, {0x12, 0x2, [0xee, 0x4, 0x2, 0x2, 0x8, 0x4, 0x2]}}, {{0x1c, 0x1, {0x1, 0x9, 0x0, 0x200, 0x2, 0x6, 0x0, 0x2}}, {0x8, 0x2, [0xcd55, 0x2]}}, {{0x1c, 0x1, {0x3d, 0x3, 0x4, 0x0, 0x2, 0x6, 0x4, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x1, 0x2, 0xfff3, 0x3, 0x1, 0x5, 0x1, 0x8}}, {0x14, 0x2, [0x9, 0x4, 0xe1bd, 0x1c9d, 0x2, 0xfffd, 0x7, 0x3]}}, {{0x1c, 0x1, {0x81, 0x4, 0x5, 0x52c, 0x1, 0x3, 0xfffffffe, 0x7}}, {0x12, 0x2, [0x7ff, 0xf880, 0x8000, 0x2, 0x2, 0x2fb, 0x1ff]}}, {{0x1c, 0x1, {0xd2, 0x0, 0x4d0a, 0x10001, 0x2, 0x7, 0xffff5e99, 0x2}}, {0x8, 0x2, [0x0, 0x44]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x77}}, @TCA_STAB={0xfc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0xff, 0x401, 0x101, 0x1, 0x400, 0x5, 0x5}}, {0xe, 0x2, [0x5, 0x0, 0x7, 0xd, 0xfff6]}}, {{0x1c, 0x1, {0xc9, 0x8, 0x3, 0xe, 0x0, 0x7, 0xa, 0x8}}, {0x14, 0x2, [0x7, 0x8, 0x4, 0x6d, 0x7be, 0x6, 0x1, 0x0]}}, {{0x1c, 0x1, {0x5b, 0x7, 0x100, 0x5, 0x1, 0xff, 0x1}}, {0x4}}, {{0x1c, 0x1, {0xe, 0x10, 0xa, 0x0, 0x0, 0x8001, 0xb, 0x5}}, {0xe, 0x2, [0x5, 0x40, 0x7, 0x5, 0x3e1e]}}, {{0x1c, 0x1, {0x6, 0x4, 0x8, 0x401, 0x1, 0x6, 0x7, 0x2}}, {0x8, 0x2, [0xfffb, 0x5]}}, {{0x1c, 0x1, {0xcb, 0x5, 0x1, 0x8000, 0x2, 0x99, 0x5, 0x6}}, {0x10, 0x2, [0x2, 0xd, 0x1c1a, 0xfffa, 0x2, 0xb282]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff7}]}, 0x238}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 4m56.420851453s ago: executing program 0 (id=2238): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) removexattr(0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000400)={0x0, 'veth0_to_bond\x00', {0x1}, 0x3}) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r2, 0x29, 0xcf, &(0x7f00000003c0)=0x1, 0x4) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000240)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044090}, 0x0) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x7fff, @remote, 0x7fff}}, 0x6, 0x2, 0x800, 0x7ff, 0x8}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r3, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @empty}]}, &(0x7f0000000380)=0xc) recvmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000005540)=""/4099, 0x1003}], 0x1}, 0x1) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000003c0)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="200ca700000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 4m54.360576645s ago: executing program 0 (id=2252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000f50900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 4m54.156460157s ago: executing program 0 (id=2255): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xf23}, 0x18}, 0x1, 0x0, 0xa6}, 0x0) 4m53.972643777s ago: executing program 0 (id=2258): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000008900000000000500000a44000000060a010400000000000000000a0000010900010073797a3100000000100004800c00018007000100727400000900020073797a3200000000050007402e"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000100)) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) 4m53.081849094s ago: executing program 0 (id=2262): ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000600017000000400006803c00040063636d2861657329"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 4m52.704120905s ago: executing program 0 (id=2264): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x238, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x600000000000000}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in6=@loopback, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x33}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in=@local}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@empty}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8}, {{@in=@remote, 0x4000, 0x2b}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x1, 0x0, 0x0, 0x1, 0x9}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4m52.068286938s ago: executing program 34 (id=2264): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x238, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x600000000000000}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in6=@loopback, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x33}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in=@local}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@empty}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8}, {{@in=@remote, 0x4000, 0x2b}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x1, 0x0, 0x0, 0x1, 0x9}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x1}, 0x0) 10.032903961s ago: executing program 7 (id=3367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x30, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) 9.92551269s ago: executing program 7 (id=3369): socket(0x18, 0x3, 0xff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) preadv(r3, &(0x7f00000010c0)=[{&(0x7f0000001600)=""/4095, 0xfff}], 0x1, 0x7, 0x401) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) read(r4, &(0x7f0000000080)=""/186, 0xba) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0xc000) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f00000002c0)={0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x20040054) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) ioctl$SG_IO(r10, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x3, 0x0, @scatter={0x2, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}]}, &(0x7f0000000240)="008d7a", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 9.055517099s ago: executing program 2 (id=3375): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x1f13, 0x12) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) syz_io_uring_setup(0x496, &(0x7f0000000400)={0x0, 0x7daf, 0x10, 0x8000, 0x8000e1}, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 8.567299438s ago: executing program 2 (id=3378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0xffffffff, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) 8.497220802s ago: executing program 5 (id=3380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r1, 0x0, 0x0, 0x40012000, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x6, 0x504}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcdd, r2}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a0000000060a010400000000000000000100000808000b400000000078000480340001800b0001006578746864720000240002"], 0x114}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00'}) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x560e, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000340)={0x4, 0x1, 0x9, 0x3}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x587, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) 8.355906159s ago: executing program 7 (id=3381): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20083, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffffffdb) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000001, &(0x7f0000000a00)=[{&(0x7f0000000c80)=""/197, 0xc5}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/152, 0x98}, {0x0}, {&(0x7f00000009c0)=""/44, 0x2c}], 0x5, 0x12}) socket$key(0xf, 0x3, 0x2) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}], 0x1}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 8.24004897s ago: executing program 2 (id=3383): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109000000000904000001030000000921000000012205000905810300000000b23031ec1e55b5ab671c00c555a399ea5ae33e90a29a5e3b5d00bae4865d82f4c48547ed24d4b88e8bc7e15bcf215061239202d1e028fbe0f3c1f3de39a1be12e1a2b3c6e07b788d77855a6a65fc4ca50dd05a39c6d2aea8cc404a07cfd64728052f6446c17283035f05ca2083f5aee133bb053090dd38570da0b82a356a758fcc00f459b52331007bb72cd9cee9cbf7b02001d0600fc021df7fa596"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x18, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="200100000000bd426ee7b5989882fbb9d957a35fbbea756efd873a27294f80eca6c002411b83a3e3baed1879280aa567a7f35a0bbcb9658609008b83e20bd56a4717e7bc4b268a8f55f74e03c913a49a6d2cc0f8df1d625da18ec164a83674d749b1eee3a155732d4729eb09418a47a7fff2944f50989f12bd38a807576c3b97e9c0ffb4da6b22c228bd3cd3935198bf77e1c1d61a9634341cbea688d21bcf736ae93795f1e99e904a27aa51e154cf766ed8493be74aa891a977f5d61acae5148235fd1ee2aeee5ee1701a45a255109f3a8729fd104dbcdc993671f8cee64cd8590cf0f3ee0078c981bb52de1615831b3cc5"], 0x0}) (async) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000440)={0x80, "99b0f587ab891d4092ef24dcb9337f0a67af99fccd6a9e5ade883d0c3391775d4ad24cb974ebd6ea244be4ecfe61be00d3224e60057300adc5d2566a6c892345"}) 6.759776342s ago: executing program 6 (id=3387): syz_io_uring_setup(0x7183, &(0x7f0000000440)={0x0, 0x0, 0x10100}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) io_setup(0x81, &(0x7f0000000080)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x8, r3, &(0x7f00000000c0)='\x00', 0x1, 0x3}]) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x0, 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1, &(0x7f0000000040)=@raw=[@ldst={0x2, 0x1, 0x2, 0xa}], &(0x7f0000000180)='GPL\x00', 0xd5, 0x7f, &(0x7f00000001c0)=""/127, 0x41100, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x0, 0x3, 0x8, 0xb}, {0x4, 0x3, 0xc, 0x1}, {0x0, 0x2, 0x1, 0x3}, {0x5, 0x0, 0x2}, {0x2, 0x1, 0x0, 0x6}], 0x10, 0x9}, 0x94) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2042, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x8d, 0x0, 0xb}]}) r9 = syz_io_uring_setup(0x6f33, &(0x7f0000000080)={0x0, 0x2b2f, 0x80, 0x2, 0x66}, 0x0, 0x0) syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199, 0x0, r9}, 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x0) socket(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r13, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x410c0}, 0x4048084) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r5, r13, 0x25, 0x0, @void}, 0x10) 6.67937145s ago: executing program 5 (id=3388): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x7, 0x1, 0x7, 0x0, 0x1}], {0x95, 0x0, 0x0, 0x6400}}, &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) 6.48408153s ago: executing program 5 (id=3390): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x42, &(0x7f00000001c0)=ANY=[@ANYBLOB="b7050000000000007910bd00000000001d0a000000000000950000000000000092"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x408, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x400, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r4, r4, 0x4, &(0x7f0000000140)={0x2b, 0x5, 0xfffffff9}) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0xe, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb5e}]}}]}, 0xa4}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xff4f, 0xffffffffffffff4f, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xeb) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=@getqdisc={0x40, 0x26, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x10, 0xa}, {0x6, 0xc}, {0xfff1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40894}, 0x4c000) 6.326393498s ago: executing program 6 (id=3391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c0000001b0a05000001000000000020010000000900010073797a30000000000c0002"], 0x74}}, 0x0) 6.104189725s ago: executing program 6 (id=3392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000006000000000a20000000000a03000000000000000000070000040900010073797a30000000007c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000000000000000069800636f6e6e6c696d697400000008000340000001"], 0xc4}}, 0x20050800) 5.960212545s ago: executing program 5 (id=3393): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x80601) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r2, 0x400454a4, &(0x7f0000000280)) (async, rerun: 64) r3 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0x4000000000000000}) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) (async) unshare(0x22020600) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f0000000140)=r7) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) (async) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r10, 0x80085504, &(0x7f0000000180)={0xa1}) (async) ioctl$FS_IOC_MEASURE_VERITY(r9, 0xc0046686, &(0x7f0000000180)={0x2, 0x79, "f8b44c29c4e098e9f0edc973f77434e5a410ad765fb0de23b77b3cf90be2bf194b992b50c613eee504624a9d9449e66abb0b2c35227fb6b91d32e663beecee4a18f876ba4fcd7b0706940d115fecd1937c2efc4804f391b556ca94e75167bfc20424912f8929e89909fc36a220e12a6b956e1e3961eb994b16"}) r11 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) pwrite64(r11, &(0x7f0000000040)="a6", 0x1, 0xa) execveat(r11, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) close_range(r0, r9, 0x0) 5.851998992s ago: executing program 6 (id=3394): landlock_create_ruleset(&(0x7f0000000000)={0x40, 0x1, 0x3}, 0x18, 0x1) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x801, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3131}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 4.878800116s ago: executing program 2 (id=3395): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xe4, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0xfff3, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @filter_kind_options=@f_fw={{0x7}, {0xa8, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ip6gretap0\x00'}, @TCA_FW_ACT={0x90, 0x4, [@m_sample={0x8c, 0x1f, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6b, 0x6, 0x4, 0x4, 0x800}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}]}, {0x1e, 0x6, "b78a1b5dd10518eb9ef4cd742a2307b75f64dd00ef8bb2a6debe"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4.285775947s ago: executing program 2 (id=3396): r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f00000013c0)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8004}}, {{&(0x7f0000000bc0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001340)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}}], 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "1d"}]}], {0x14}}, 0x74}}, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@un=@abs, &(0x7f00000000c0)=0x80, 0x80800) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000100)='vlan0\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs_stats\x00') ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000002200)={{0xd000, 0x2000, 0xb, 0x1e, 0x7, 0xd, 0x6, 0x9, 0x3, 0x2, 0xd8, 0x68}, {0xf000, 0x9000, 0xd, 0x7, 0x0, 0x8, 0x1, 0x8, 0x5, 0xd, 0x1, 0x7}, {0xeeee0000, 0x70000, 0xa, 0xd, 0xf7, 0x30, 0x7f, 0x1, 0xe, 0x0, 0x5, 0x3}, {0x58000, 0x100000, 0xa, 0x12, 0x3, 0xf9, 0x3, 0x8, 0x4, 0x8, 0x6, 0x57}, {0x1000, 0xb000, 0x4, 0x9, 0x7, 0x1, 0x11, 0xd, 0xe, 0x7, 0x2, 0xe}, {0xc000, 0x1, 0x4, 0x5, 0x7, 0x4, 0xff, 0xfe, 0x5, 0x0, 0x7, 0x92}, {0xffffffff, 0x4000, 0x18, 0x2, 0x4, 0x9, 0x0, 0x8, 0x6, 0x2, 0x5, 0x1}, {0x100000, 0x100000, 0x8, 0x8, 0x1, 0xf, 0xc, 0x98, 0x1, 0xe6, 0x4, 0x8}, {0xeeee8000, 0x4}, {0x200000, 0x4}, 0x80000016, 0x0, 0x26000, 0x4c, 0x6, 0x4400, 0x41000, 0x1, [0x1ff, 0xa8a, 0x8, 0x7]}) read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000140)=0x4aff) syz_open_dev$video4linux(&(0x7f0000000040), 0x4, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000003ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fddbdf256c0000000800", @ANYBLOB="880726"], 0x24}}, 0x20000000) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x8d2c96d7d1bc7a59, 0x0) fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000", 0x20) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002380), r2) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000002540)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002500)={&(0x7f00000023c0)=ANY=[@ANYBLOB="3c010000", @ANYRES16=r6, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0xc8d0}, 0x4044810) r7 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) io_setup(0x3f, &(0x7f0000000140)=0x0) r10 = timerfd_create(0x0, 0x80800) io_submit(r9, 0xf000, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffff, r10, &(0x7f0000000000)="66fe1ff6b94d79bc", 0x8, 0x7}]) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r8) keyctl$search(0xa, r8, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) 4.104499904s ago: executing program 4 (id=3397): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1/../file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000140)={{0x3, 0x3}, {0x4, 0x6}, 0x9, 0x4}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r6 = syz_open_dev$video(&(0x7f0000000240), 0x9, 0x800) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000280)={0x3, 0xb, 0x4, "d85cc433a48625bed5f359233316cc0821c5141bd5973ca0d545dea11c400569", 0x30395056}) r7 = syz_open_dev$loop(&(0x7f00000000c0), 0xf01c, 0x210003) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000400)={'#! ', './file1/../file0', [{0x20, '#! '}, {0x20, '.'}, {0x20, '}'}, {0x20, 'cpuset.ef\x95\"\"\x1e\xb3\xd7\xe6\x9ecpus\x00'}, {0x20, ')(@*'}], 0xa, "008b3d5978e08402781366b29e7bca03b6000093"}, 0x4c) write$UHID_INPUT(r8, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c781265406c7f306003d8a0f4bd0000000300000000002f59911800"}}) 3.873749488s ago: executing program 7 (id=3398): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) close(0x3) unshare(0x64000600) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cbba25083b0904a10100010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r3, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0x24}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x0, 0x1, 0x0, 0xd, @loopback, @empty, 0x700, 0x0, 0xfffffffc}}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000000c0)={{}, {}, [], {}, [{0x8, 0x6}]}, 0x2c, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r6, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 2.722241298s ago: executing program 5 (id=3399): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0103000000060000e800010000000900010073797a300000000040000000030a01080000000000000000010400000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002114000000110035"], 0xd8}}, 0x8090) 2.366915143s ago: executing program 6 (id=3400): r0 = syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x226841, 0x11, 0x1a}, 0x18) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0108000082ad219ac4869ff28ba2a255af00", @ANYRES32=r3, @ANYBLOB="2c0050800500020004000000090001007ee5d52ffd0000001100010016c25da0667a91db991b19cad2000000"], 0xa7}}, 0x40000) openat$uhid(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x4, 0x2, 0x0, 0x8d}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f0000000140)=r4) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x490, 0x204, 0x204, 0x204, 0x204, 0x170, 0x3fc, 0x3fc, 0x3fc, 0x3fc, 0x3fc, 0x6, 0x0, {[{{@ip={@broadcast, @rand_addr=0x64010102, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x1}, 0x0, 0x134, 0x170, 0x0, {}, [@common=@unspec=@conntrack3={{0xc4}, {{@ipv4=@loopback, [0xff000000, 0xff, 0xff000000, 0xff000000], @ipv6=@mcast1, [0xff000000, 0xffffff00, 0xffffffff], @ipv6=@local, [0x0, 0xff, 0xff000000, 0xffffff00], @ipv6=@loopback, [0xffffffff, 0xffffff00, 0xff, 0xffffffff], 0x6, 0x1, 0x73, 0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x800}, 0x40, 0x480, 0x4e23, 0xe, 0x4e21, 0x4e23}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x3, 0x8001, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @ECN={0x24}}, {{@ip={@multicast1, @broadcast, 0xff, 0xff000000, 'bridge_slave_0\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x62, 0x2, 0x42}, 0x0, 0x70, 0x94}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x298}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00', {}, {0xff}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6]}, {0x0, [0x1]}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x4ec) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000564404204e080110f9330102030109021b00010000000009040000014a90c200090588df"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 2.361901211s ago: executing program 4 (id=3401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4040895}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2281, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x2000000, 0x4040010}, 0x0) 2.247841497s ago: executing program 5 (id=3402): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x3, &(0x7f0000002380)=[{0x6, 0xfd, 0x2, 0x7fffffff}, {0x80, 0x87, 0x7, 0x100}, {0x5, 0x3, 0x3, 0x8}]}) (async) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa101020301c5c3ffe05d647409021200010000000009040000009d144e00"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000bc0)={0x34, &(0x7f00000006c0)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000280)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$uac1(r2, &(0x7f00000000c0)={0xc, &(0x7f00000004c0)={0x60, 0x7, 0xf6, {0xf6, 0xc, "0e2b95ca25964948c3b209c72b7572cc08d41c0e5003f1679289b09d1d2f1631eafd0b704f6bfd0f110379b52565b9f24c94b07c60082bad463463f006b641602661df81910da4e14d52c24ae606b0c37b7404ceed6b68cef307cad830cba862f860ef55899ba0b2d38f91f2b1449bca016a5e11d372d09f10593235b3e4266781da7ad13d85de3905510b4f417cb1370f853f1c326e478c51ee7adb1577ecfa26c631398073a4f4981cfb6b97d9061ad42bf948b3f5ab3bbc5e7c36b43c7ea92fb6a0560adee738befa590fd005f645b0f6e47e1f50d85c75a824f7d29efd98dbbee13f1db6d31b2c3a6e1e72e4d0c35bc0079c"}}, &(0x7f00000002c0)={0x0, 0x3, 0xb7, @string={0xb7, 0x3, "88070f56617a37721b72a73de5a161588c827e007e1f893c03254e2696de7b71b95621c2bd11f680128522f91e91e7f5135907ad4674a00c9fc95496144d20cb7af9381684d3a0176413fd1e22f29edf901416d6e19d7137932d7a5344be51b553e6de0e01e94c6c842ac523ddd46f7991eea266760fcf1e2383ad4b27525da24c139ca0a7b670aa740496879e747ae2d463a3352f5e868e886818c026fe68737179cb1455fcac88f67186b5d5eef9097d1e1a3d15"}}}, &(0x7f0000000780)={0x24, &(0x7f00000005c0)={0x20, 0x16, 0x69, "1f674f34dde710e7eb87927170c711f567b4421656aca587b4f5bc4bf17ca821ea42cb915a96f825f68d2217938103bfd5feff2ca510bbfbc4ba36b8496a6de8a7fad61f1a0ee49a3dcc4f9b36690b2b7fada04e301cbd8276d61c0dfbba8f61cdc7bea0418477f1af"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xb9}, &(0x7f00000003c0)={0x20, 0x81, 0x3, "0f9d3c"}, &(0x7f0000000440)={0x20, 0x82, 0x1, "88"}, &(0x7f0000000680)={0x20, 0x83, 0x3, "47cd21"}, &(0x7f0000000700)=ANY=[@ANYBLOB="c6000000000000000000"], &(0x7f0000000740)={0x20, 0x85, 0x3, "f10f9a"}}) (async) socket$tipc(0x1e, 0x2, 0x0) (async, rerun: 64) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) (rerun: 64) ioctl$FIONREAD(r3, 0x541b, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 32) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x1ff) (async, rerun: 32) mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r5 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x1885, 0x80, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r8 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r8, 0x0, 0x0, 0x0, 0x80800}) (async, rerun: 32) io_uring_enter(r5, 0xb516, 0xc2de, 0x8, 0x0, 0x0) (async, rerun: 32) read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2092) (async) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000002300)) syz_fuse_handle_req(r4, &(0x7f0000002580)="5536182daefa2fc6ee10a1b2d4e27cff3c3e628d4656f7b27979e371b15b420c01ae674ddb8fff7b2bc41e7c5927065cd32f2ff7908ef7dd74cdc82f3799ab12edbbfd0b8f6d2194d7f72aec3a136e25c7bf733436bf6cbfc94431ad053a2ec4ccac5aaada8a41ac38c0e1849e599dce84e431ac501db105b4484146b338c0ae9124877ccb8273c7fbb32603251e2d66c71398a7a715bcbe5c9d87e41af55f837e2931c4c1b6b7bbc30dfedfe6e61a39e28f66bbe56496745fbe03f6035183257edac4b0fe3087e7f3e79c2952a07341f3ae9ec68e78875b6e12b5a2a1abbcca4d7963be818a7a31290cad5a025ccd05b609c7ac49ea85d49f354c1e76091a917966665e77471005a46a195b290c01bb7ddf4709e94543471d87a0a5047d3631b00862e1e9a00c60b83371cc16ba087463122a892a1b21786fe3d450c7ba97799d88126f09a698a421242e9c67c981ebc576f57ba3df22e0071db74fa22e97b0fbe589894931a4c4e0eda8bb9533c4ce503fba218d0ae43ab4b4d0c705e04442d093ca5299ae8499c6db904bda6c68105bc2a1cd8e16067215476e573745d1e99daa73400567a9978dd7bffb21429479ace30c95afdfaebd7faf74343cd58e14ce6d2fada5a1c665049eeaa717ee681666c8b63c6d54e66df86144f85d80dcaa3ae7a13b58d5f2b607029efbbf8593afc75e0ce0a875a5fbedecb425a22624a0bb8e2fd06212a1fdafb92430d309f8f68504484fb1246f3d7b0893d3dc9d0b6c8d7476b6aea871eb4f32c283e22435fccb221484409cc28a6609dd869b99547fc81b2e517809a5b77783f9fc11b5fe584b9f64c0fec35d3db21ae30d0b8b88d722dea4a376d2a610f0a9d08b311e2ed3ef5d72d0e040e41d3dc45e5a17d740c67db88d95b18c8610fed3302aef0c3c1871ff8a5ae1908bf9668f0bc8e5867f56cc59cd303bafabde6a4034a96ba66b98a910dfaaff712673dcbf84c5354f066126068de620f08be67e6034138dd9a312f9ff197fca56a77bad46e59edfd79dfa3aee4582bfe01ce2201f6569178be7a4bdd28e495114944e538ee7b8f11e0812d9f822cd9760316809eccb9b0bbc5f0630224a1534f88600bbb2af2882562e76d149b44780380b62241829e5734fdfff1a2b3a052f3504dffe04d4632e9fef82762fe1950fbaceeb961464dfe2699f0a898fc8783cfdde45ecc3a16f052c4777beb1fddb080fc802a8cc760d1a0d4606b669e78ee9ba1ac398914ed5096850dedc513e5c71eca19d51af9075151f4ca3d8a841b7b1d205f5f3d223f7e48685daa0836f93017935ad1d942c7392667145ccc1d4700f5d8fb2fc218fd6d70357667d339a28dba3360761857b19f9f91e56a0e0281af1042a409a4e2839f3d21b73a5c352b22e4ff06e563e92c00b48e7f8bcdbbbd398c65331298f779dafe875854e301394b0faac2126138908fa8598b4f5e58ed1ac451eb0187e20077099d12d745fcff0b7fb5e8b9fa65ac617ea6c953e8786229b67a604c46810876650f919e6bc6792db22ec0be29cff94e9c24eb6e1830f890bb4b6bcd74b39060506095b99b95f2a8addfb8dfe11f47479fd23cc7c0701ae00774c430b3b9f52ab2579d47a2c2095365aa569f55a1431f93e651c01f0d67ff9337708a72e352c0e699f14bf07f9b9c056897c78edcf34ade3dfd17a04446d565fb6e7c701a237fe1a3d932371654a43b56e7f5ccdadc0f506d746c3f0047b69c0c174cbbfe092f139c09c0e2e76d9a777142813cb78174630ea8d73301e3343b94856fe610777468a9fb4518a0cf68243a4bd715e38e3431a811f962edb1306d76d89e0aad9be5800e7bebb82ccaec2382c9c114c91aee013acca2d8ddf99465e760bd185453a9eb4e5a78383094603b749c6242ad227124ef4b7ec7506b8a76f714099c954f0b2f2d427af0451a7ea3d1dbfa8a3e644c3640d397de3ce942311deb73fad3a76cba773f416314e81e70bda715b342113a18a249300b43250cb3b3aa46ecabe42d0e8c1dc4be286e539c71f0d1c0b0e1795ae7428a3887f36b79e9c76401a5dd460f45b9d8277e04c7c1e615fb33d0fbc444421f3fd0bff4e045d790610aaa2b62945e4b398024c75680b5e12235c35f5b23ddd99454fe527acad6d08fb37c35d9ecc0a8b10e2c31fac786666eb2ad499ddb7d06c7526fb1c5412f6a0df003410e69b81fe523057b6b73cdecf0e5bc4d3b87757889fe49dbdb3ec79c7eb3a868480fc87528e80400de837cccd4a6345508386ada1833f57a20c56e973569bc7821088d343e80009b7b35390975323d24e764aa6c90d3dd5fdec08ed363dc9ab57de949282994cd3858f829c7e5e9a745261383db27c9c53e9e98e109fda6cbb88649ba40b5067470d73b7471d406e5ea8041f9fa25f5b6c919aef84f7595511141e9f090ee103b20a13b22c9a88348ed6d284c0d7a58326e0c4c9626d9a5390bae2be199b201ea136a9aac76e6125db9bf58f61e6a46f8145a9df1305415989435f51529da03f09a67e3629e6f6cb6b70407d9d848f554f1a7e63602e678e62d3b41b4bf4ddda713ed2c291536d8cc12a16bde144ef56acc17778b1aa8eeeeeb60c781365b615be4435c7158d926351cdb46b89fa82acb384c7318dcb2e51db8bdb223aff2c8f36d9e6b1135ad18f7e0b9d91a76972c3140f8e21dc71422de12a4f5d08624bdaeb983619a5ff82cf788c6b8a5fbf0f78e61ae4058d6e03a3d5130646dfc13686e356a1325434caac94ced659529181561fee7ce4f7e1e7945f119ad8474ea6b00257ceb7af2d9b3f9ad5782cd986f1b097d61bf26a6c48c3ab597e4678d609f3050eec9f3bbea1bc67314407521950526e6d71e34e35392067ac84b66badc82a54bb0dc8ed2f1050711ef2d47af5252075c0441aad6900539fcc649c1b1ffc70a1cc39e0c2136c764ba718d50f4800dc29769c4bc9a2fd0f43eb6ffb717a473ccb14ccd58bd506c4e4a0f4ea1158b59b3d6bf1a2d010c456c1f099bff69add46cc60fd2d9779f603ebb943ab8eb02627ac8aebdd52f25b069f64a61e90fa9ac979cb4c6cf0ebcd070099a1a6e6a747e8989e84afe090390953f988f2dcee405086ce51b1d2d8d249f45899b4e862008d28efad8aa5abd0912fa456aa9d3a918a0dd3420d7c4b04b9e3d65c41a1548b7caeef5fbcededf64697786a0bae73d2c5352658b871c806bd150c91bbf8f4735dddee9cfd3e152b5d44cbcce912a2809760e225b9018fa498c86ccb2359cb0834bcefab92c0468522648fbefbe25cf8d82b897371b5369e8f2972502574c0a3235066969c4d5d67fc312d6631702f66a113d22063ba2ac7d9ab387ad1e115e9c98275f3e0dacd2e8f0843f24687b297bf42bca11b89c6db2fc7026d364486ef2d614bc45d5cff0758d69fd48ea06b8a97667e4d7d30bf7f1c30b62287547f50468bf144fd177fdabcbd0d12b50c9cbd052dcd66993c72f48bd6086412ed5f9af3d44dffdf7c012aadd5cf7bd3b314f236660fa1c0e4773a4e9ccc36fd130ffda59a9bf41f7fbf79e5e3333365a3ed2e7714e50805bc70bc6fd20203cacbbeecb8e01a2ce626756cdbd01c53717c2e7b56b47e21f13209c2bf2b1b251e7a93f8a085dcc61d9ae82303a962441372ff7c0b8b8ba75bbf5b861ff7ddbc9781d40c90ae467bdeddfdf949e9a8b8c9fb7db3a9323d05d15bef19ce2e7634b84ac082d50e84b66f99f34b2f852fefe67faa403e848f3de110eb1d9faefa176c3cacd20c7f87d74e858a1a7bfc2c9e895541f691f99a2b8771c8755300ee74e3d6a048b30d02ca16202ecfc207a0b29302aabc1c5b57c7d0d31d43be5cb1f7230dc238fb701e7037aa00c9b57c6fc85baccaa56754d27b975872051566187b0983d93b9ec052edf3b33f7ddab343eac6f7aed97771e708e40a4cc6797f85d91a0debd5c6169895e895f67a10685af5e0b80b0e728731cbffbff8be603469d03bd47dbca4456108c79c029af16482c5c2590c1e0673c7e943699ea107d906a3e667fe7b2afaeb489548b6a11d9862e86a0b549a42b607ffeda6e3ba0f567b63b0be6edb9098cf3a44e6864c5e99fa5f475acb57e2b7343eb7fe3e8c139b515348b188defd2d3021fd27950d822f6df5f9c93584fd95f3f88c85231943ed4d511249f96447f7903779e4d8c4a680661fe5133d415b862e668441e8077bfb827293a9eb733e914f37a19e01ad4b014ef87ed5a5817ab8123af9fd863090b8e9a50ce29cf706b2182fd79660cbdbb53ba71b750e71a21d0ed01db3335cad91d5cb4d4648f46468b6e51f63e4088386913ae6b6cbf103947c32d25a8a825118cd6ce23f53ffe3c087114700e9a5932faf3d844fc6b323b3e722ed3ed75037bd9a7fd9d256b2b9a168e66802e284853a0d6b47d39675900f02f005050425731f9c2cb329f70d7a5ce2ee256212bf8b2ba9ece0df39c58f0fbac06c4da946787abf19dadb536bddbf7e51d89f22413575e064c6482d936a89d48be159aeb5055feb0577ced6c5334411d1d58a7e6d02eca6164d90fda39685fd619269fea7f21db51f6aa6961250e03c9e00788c178dabeb68f13dea29f8cdcf30478dbca15c4519bb342ba8b201019061bf8317022dbc5673fb4ed92ef1a1dea0a1a00cb3cbca291f7ebcbec27ea5e824f04b82f5644d4368cdf8026550bc2f86b83da6a265357eb548a9eec6622204b3dcd22440fec0e12819ade4ba53b53b1e6ab906fe0cacabb9c15e8b657475a0dad62dbcb1037aa8617787abce24a0aa4cf1b5c85c030a14277832a95d8b29a4ea86fb80148ece147ce4bf386995ac28e1ad1e2072f3f4fce5c05d9bdd0af118815d6ee89aabfa3f8173e6fa59dfa4a8c1ba7641291b3c18c6ccc4c3588d56d169d397facb4e67485610cc68197b3a43fe78b9458dc47e5057d5bc6b8e3b65bf414818b65d41ed7cfd7a35fe79c9851ef39c3e059fb3dffe331a791ce75728efcd58dd9b3ed1c93b128469afa648f4f91de6e39d5bef7a0e69bdf5b2202682d857847a64b33432ea0f33bbfd1948ad0b6c66d853fef1e6c0d712b86c40f79ff4d125baebf2a4b32dfc8bed2a697f745cfeb16303b4f8e866ee0bb6a5eb6c6ce513b5cb84e2b44854c72ed0cf2e838245be8d098a6943d845f5a8c07c1036da86cab0d5be4ce29545fade4323acf2085b7645107dd12d5b3af7bb37be1b291cbd6fe297c4b4a2a23280358711be91f21305c035bf1f57467a1853c999b3fb478b11c49cfac66429a76099633a54689047d66fd8bd6eebea94fc8007d9e2765e2969608a78d0b96d6b30360e81fb9df5262c8ff15f2fd7000756d8cda1db3847d6f793bf803b159344c57b480c87702cb3d1260692a19ebdceb2e05a2fe2eb5ac5cfa76551a04795915bfaba9849a623e46ac1832157d0ea5255b5cacd4efa844b0ce5f2f0e1a9dc4fb115fce2640ec6d03c5fe15b4837bd6e6127349f2b6b0fd61c82c96531714f5b623ce4e4978c4a0c86b3c17f50acdd67d283ec934ed36ba7360a10ffeeb7864113eeaa25cccc66613e0757782381614b8da3cd0a85cef7bc384969517c920e8454a5a0f112d1653b2828e895d0614e5bf4dec0ec863432cce9337ce7c29affa7f29fff97bd54a6947cc68df8fed17850209242c1c67d0d7aced2efec4b3c006678bcb8716e8e9e40d78781fd6cc5b5522b8ed2ec8cecb677849b778c0a2a17817a3dd2278080e109906dd4e99b772d5911893fa09ade4296876921d1e009e714df7e4973ab1d2e593d88ecf2151e97ec66176549d3af66652c8377e162454ce7cc8ab34397d31978e84aea92a3c0a8106a2a31e33a8dfe942819fa1f2c1272d0f3cbd7dae820642cbc00202455ab7fb81857ef050a1965a291001874b38397ed9a8e8106dcfcdfd80d0f5d0ef0d5775e53cc5aeb1d6bc13886f8f3491cd6af5dd77ace3689fa2bf56e9b4d1e4964f8fd8f0a4a8b5d7fb678f0f3adcb4a19b5168ac5aeee6f087af15af3bde52a9be0f550b21b10ce98da70445284d9db9416732e63b6efb3ced984c0df50c11aa677f822af7ad39b8b4c0d236e4b36a00ff73587b39f917d7effbb37b95a96e350a430d544d68623c80bf2cd2d689b4dc41e8ef374c393092a2619055f268fbdcb9de494e6582be90a4798bac801bcac8389c823759860e7c9d692f41ee2a6b9624da3c09a2c8e7cdeaa100ba8ca25a737046d8bb237b9546641cfbb2eac9bbee9e125b14dfabac642e634d32151c06ceb3ddbb3d3f038ab2efdd063152270449ed5eca2655cd0016147ebbd00003eb8cd25297350afbffae43cfd9867543b81da4510850b1afaa199d0477837017e9098bf5b3973efe218a88b3d2bb172fe77278088997758fdc1dbb0b1fb6af2ab9db1ddf3e3fbd8e8dd35f918779ccba75b3cdfa317fc6e3cbeaa8b11ce2a30cc53292bcb9dc2a18ca400c674360c041c97ee6aec1448a025c6b04ae9efb3a01d31e3f897cfd5dc94dac95c88b95a26676cc6153e203535891116a5f4ebf54c71cbbe3215a04c57c7ba874a1e203bc66d8161d5b556f661244d9d405a2e6baaedd0d0e4c7e093c2ac0e5ee83b7ddf91669dd59016f7cb53d19896fcc838dc008da4a5fdc0a4fac1a6d7f49b24bcc01467df04d8a3f3181cc4e811942a53daf784b59186a17756a8f3a41ad93035a893a4ff60dd8f54a533e94cf87864169287804df3aa38dc5ce6021a06c58d48985c562a0f51d8b32879f9fb7d4a1d3d442626810f151b161b7e35f9a0b3bec05979e381140f31c03ee6f5549e6e7f116be5e87e0a9ab71ee632f837e9a0f9ad1b4979304c26bad6e84eff0b5b79b667e3d74e354d04f5b2c237102e41a1a4dcac99cbb911d9484aebe6ab2cb539a1db3e3302fb833a44a2d725e858ea9a65d43bb7661842b655c51a1ff25207956e8c6c71667c79975d69f688dfa34c59771488028e3d7500ba0cb71ae5751a51b568e67bdf2abb63838aba5e5cfbbeaf02285f6cbe58428a92a6fc25abb01f8d55ecbd7cc0ea69cdfb188b79048dbea488493681b0e70234463ca3e425d24e2ae4d800ce3adb04ce69428b5f884f8dc83392c22e456a2e195b86d717ac45003a99ae9a59c94167eb04aba3612528f94dad3360b46bc456fbb78072eb7f96418c71bec09831b0a63e83816ffde0d9909c06e765a666c2c41b20c339e0d39107311830ae9ad912f0a85f2ec5ca66a79798a568dae14f76b6d59e6c0bc0f9ebdff29c0fce58367c9705bd4323d3c3e125cdb13da6e58f3fdb2751401014e393e3fc688f04080a90430e531767a7c4f3187ccb7b90880955e766aba6091c4e8fed36482bb5a63372350dd08fe84bf5afd1a30a0f8f4de7a640fa84b9c0447073a0b39bf875d0377c8a572adefec3e033fb3dad91b22bfe22c01f23f27ab0c6a1ce19d2f4f4235281cbca15dafe50f383ba89a8c46a666b106c1ac534955df71f4c560010934fd3eb68eebd55487defa1e024f75ac30139cd190bde1dc8684936bc23a1882ae469fc4af8730d29658f996f71c219526497918e359228b55849d952f4b2996fe5f45a6cfdf87da93bfada579479b18d05c4e964c85b88a7bfc6e4f2b5d6e98e00635e8bd2ebb9eb40b99a9e9db2f688b2d94b8cc8c5fb2a1928624fa5df1c228e6499d992453772084bcd33dda984d97e3857b6fee43c6666b3206ccfe3af52debea4ee060c6edd194b90309213f5c4805f454c7e57bc759377aae9727e484391486be0849c5cdfa99c5a0d0687d6afdce97a32e01d45fef015e7c869ca190219a778b91d881a7b595313fb462e5bf78260c78285d6ccf5e4c50ed56ff28e3f49912773f0a58093f259b5cf4e7f607c51a81576fa95b97bf32d0e2e3511b5d784eba29a15246a97ccf608db456cd70adacc6c31913416f24f38dec3544ac2e88c409b5ff7771d873ea8d7a1868775c8b5502273c784cf945680fb14f143140b56462cd46874ffeacde7bf329fe8369df9c4b95a42535ea56ad6fa260f5c738eb9627f890f4a34f80bf3b8fe568d44c3895029b5f9557f17469a53fe4c0d581eb29029ff162ca906cd0e4bb81138be91a254752bf849232ed7042a82cda1e14dfbfdf74a09c17a9039749c789ab0242ed2d0249231c4ad70c23c805676968bdeb96c2d8886f784ecc3e42e6493e45aa20b6e8ede65c49136c9e9414a4371e3012bf596d55315be17ea9396b1df7f82db27f0d121f8aa66c40365fa686a46f430b4cd336da0d9937d5c26284bdcc6c4e0d5a6acc1be089e1a5d6ec422ad3961fb5c5c9836466c3366e6d3f2686b19b529549cacb6252b0d7a7f5df42ea2961ac59ba0b911311ccc4d83f8611f0c4b071544236037b2863d673303a4e3d428131b07f60eb2cd507dc43503456ce829aed8254bf0b51b38008d42e445acb0effc2ab7e4bc26ad76ffba1220f2e878fe9b5de39bf4f25a9ed468cdb100008ffac6bef401df4817b23463e771a3c834c32993274689c01004eb94b89bc44257b7d2b3936caab6d86937b5bb8f705d00fb6f091711222b6dc25eeaa0e350fe484337396162c86bf7d3a1ab82591ad35d393664617041142c0f8b528e947c092f28c3142493d056bd548910615e7300f041f5d01a2f00138ae5d7849244ef9215f5c9dd874e60ca4ad883f86e71690a510831e35c24de1e0d1261172bf4a8625af958febb7b109c5ca5bfffd4342c43ad02136c6eb117b4a6ea98c07a91279731c1228b01e6be755c1c1d095d3cdfe950ac32eee77327a0e7e342ccfc13c69ab6ab113b18c1abe72d39c03e351986cb3326b8b17ada5884aa7d0a553b0d35e32b8c09f1a4106f5d675a88a1508de4a0e9c598c082ae5b229b75579e39e297b225a852e3f6a7d0990a45fdf68771991acf9b7a5c04bc21a40c57817d500e8ebc6b5919219a4110395817c92bf9eb9c623606d4d98ed68dc0b51a0278b0addce8753f86316158bb4bd6a7a0c4c72b0d17b9545695e54826021a6ac44b4de1b4ea977b20af3c47b8860b0ed29a68c1a883777097d54b162cc58edc0f4de1afbbad7c340a5cd9f2f93133cb2a4babc2a688e2ddd580ef8d9d0846c269c265ce9d978aa233c73aa11eb78d3a67f4e7a3dd035ef5a1f832ada87c7dfa377b77215f8c23b1a78e4a7faa6d0c1a4a28a0ef7b32b36bd566d8c478d0133ab43f9c2a4829624eec535234eb89a177ca8d4e9d2d422f33a24d15044822e4a4c1bca5f470b8c8fde09fb69160297218398da27f4e80dbd480782ee75cecd20ad23fdbcc1d4a0acbc63241c1e2cf1a0b12949e42f707ba06b6fdbd8f336bd72d7f96ddf9ec2b5cfcc4c8da6e1ea573e97eeaea537511ac9fd2ae78eb18cb50c13b595f8b6d65ce8c08e9028fffff6b512080dbbd3fb5e5068538c05f73254969f9727db9bff0c6aeaaf83713812499308792a7fc8318e6b2996bcd1b072641be1eb8e028cbd6b0a5f1fa13bfe35b5cd0d2ca21d9cf8ed97f724ef73ab5a99d65befa38d636f2f827d229479377f25501f3a6ece12cb095549503b2299db7806d32751d4851d62b0c6a91e2e961d475d33a8874c96df52c75bb5a0569e892743937451f75345e0351bfa334d37aa43f01ad1ff984dec164faebc713de31470db5e536a0681a042ced0f9839d9ce89259349075961985171c27c410c99458d4c25614ea1d4252293c4f85b0d2ded9ac560cfd024c199d5f0f4bd47763690ba1bca88b8cc81059bb9fe82c955488523114db8c2caf8a63c0049e90ca524330b57edcf718f6a7aab0efe282079d198cc3c1294f35d1a1bf5f69a8838cfc5d4363f9ca9383f83e4f9576de3fac48866ddcde282e5e4ee3f852a063bd6423ac1fdc6201b1facd6c36609fa2faf96afc1c0b76fff27bce059ad6390fd1e3f735806ce654ed555a78ea8e59fb16ff5ac5ad183aab9de37c3d033b3018d591e7ff1a896de969f561260f797603df5fc232076ccdc2e1fe9fc789253a54af151dd50f89e777c2541591101720c893647bd4b3e6257de85251c9bcd700154e85db2a9e2c4d9d2e531a18bfaa05d16ce75f823e60416b3afebce16555536120d5f554fd13e861d74c4947a62d2d09473d8d75f03d354572b371b02e16f3976b1b0b235582ee38d938fe843b107c77c2acd88f34e1669816eb3867134b1c5fce5afad3c70f9bca972ed494577f2ba6362a6ee6b4720bd86938bb49490982a1b5ce6dd54b79f093ce27051530e12ff07000000000000e7a1f7dcec8ba86d8f32f00f0ad50a29b1e17de07bd0205c0d893532c198f23656f7f5d178c0745b7e0b7e8afdd29c8fa1639a06039980d9a5fba11801db4e7868a9b77925a03a770aae3430b1ccbddb8bd766f51fef71ba25cf9184c9cfa6f9921d69066d09a656080f3c5fe475ccab94cdfccd76f3c7dada9236d1be861eb5fe6247ae9f97b7705bb71c375e8b98203c5bd224202c1aa714da47e0daf98fd3eca617f9a255df5dbe98a7520a1e6db9b88af893521f2ecf7fd2b08a7f3c5aeb77ebe6f52739b473840889c41315407477b82242d9a805f9aa200a129c4701d1c88ccd34871f356caf02da9937a88612a9755315914f4e8e1bf471a46c00650457cc06db168e5457fb3f9662994d901a1f58306156979aa795afacc1a7d6111cbea53e97fb71c7bbe44558fb06f8d78ee08e3678b5d218e13f79cf06f1da9f7e128647884589c487147b3edbdaffa16f9388568d3c8caa34a6b944e4f171842cdbb293474fcd5201b7440e05ddcf9e0b476773119516ef45077705e8bab5f877657205bf9eaaa7c86734b1b6c3661dfd4b9eb8590f962e17ad51b44058d558744e5b44cf9db280bff1062b2431d298064f11e7700ba4c8ece6f4df659d4880c4983db0152f1f903023672f6234620134bd5d1d888022da128a527d82e8fa1a562827a4f1592efe3b0bb78060626e8688ef3d5162afe9f1060123dbb1f93b7bdb6ad4ad6e1772bf8705cca424d9c42e4992eb5bef1ec7961bd4260d1e55e863fa9c8e0cb6d28b495fa37b5f59fd18cfcec6319288dd7363821e47ec46664e1994157319eb0d466b42fd9b5fac5ba979a9baf4f699dc539bf77852e18014074f88108b654219e4f9396696c94eb9fb9b360e59920f187029608bed76d09dd006f4033d384cd109726d51850202ba564599dbff7808591f834cc4084db29111de86a70217defa490e39c6e281650d15b1e44bb55164be0f6da58e838bf5f4d7cc2a23b818557ab1fad0fb2253c4da6af41591940b2608f6fa6bc25939ede95317ff96050bbc1f389235caa78adc0d801a56b2fb4cc41e73d5131552985b5af241722e0637f3b88e46b09ea875e5cf66f534666368ff8e46413e5ab557236134afa63478e18328d33b1a235deb2034955cdbb2bfd0e55fd885f380ae8efca1feea985a946519a712df1384f9e024efec61c30a6989aa3b5bd486366f3fccadc0add175c1cf0d2730ab97370eb47bcda4226ee140edbcd9b38b8ee913587125cb185adb4df18e80df2b0ea6e3e87dc8755fe6823ab5ee1feaebb1e6208cf3dd5ad5581f2388be92", 0x2000, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18, 0x0, 0x800000, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r4, &(0x7f00000046c0)={0x50, 0x0, r9, {0x7, 0x9, 0x4, 0x403a1810, 0xfffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) (async) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async, rerun: 32) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='Fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) read$FUSE(r10, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 2.246780709s ago: executing program 4 (id=3403): socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000002100)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800949646a0b37c50001007866726d0000000014000280080001000400000008000200020000000a00020000000000000000000a000100aa7284d685dff6480e6225d1520dbb791710a5a213728b9aacf6dcb7b4badba4da9aef1f639d8bcf65b532659f66905dfa9d7f2846c61679e205b9149bd6cb50bf3df2f4b784486467581cc3370fbf9b3a9a84205b64a031abb3c03051b07675"], 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x4, r2, &(0x7f0000000340), 0xfffffffd) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/146, 0x92}, {&(0x7f0000000400)=""/161, 0xa1}, {&(0x7f0000000040)=""/43, 0x2b}], 0x5}, 0x8}], 0x1, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='\x00', 0x0, 0x8, r1}, 0x14) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'xfrm0\x00', &(0x7f0000000040)=@ethtool_cmd={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xffffffff}}) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000580), &(0x7f0000000600), 0x2, 0x1) r6 = openat$cgroup_pressure(r3, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) pipe(&(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r7 = socket(0x10, 0x3, 0x0) unshare(0x2a020400) write(r7, &(0x7f0000000180)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) r8 = openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000005c0), 0x12) 2.095902211s ago: executing program 4 (id=3404): r0 = openat$vmci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) (fail_nth: 2) 1.634957621s ago: executing program 2 (id=3405): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20083, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffffffdb) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000001, &(0x7f0000000a00)=[{&(0x7f0000000c80)=""/197, 0xc5}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/152, 0x98}, {0x0}, {&(0x7f00000009c0)=""/44, 0x2c}], 0x5, 0x12}) socket$key(0xf, 0x3, 0x2) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}], 0x1}) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.634764395s ago: executing program 4 (id=3406): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xd8, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0xfff3, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @filter_kind_options=@f_fw={{0x7}, {0x9c, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xc, 0x2}}, @TCA_FW_ACT={0x90, 0x4, [@m_sample={0x8c, 0x1f, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6b, 0x6, 0x4, 0x4, 0x800}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}]}, {0x1e, 0x6, "b78a1b5dd10518eb9ef4cd742a2307b75f64dd00ef8bb2a6debe"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.43329042s ago: executing program 4 (id=3407): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbff, 0x80000000}, 0xc) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff, 0x58031215}, 0xc) r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000300)={0x18, &(0x7f00000003c0)={0x20, 0xf, 0xf8, "11cd5594cd75e6f0959eb0c386338b850ce8e383160f51b0ac25ac14a1beaf7009fe9819c2d1a6fa841e0177263fb03ea0c24df978ae3964761b0c0e571c5c19147c20dfd02f674fe6018657f8a5faf915d55773515b02f2480652cf7c995942c4f7fe287ddc6515f12c7e0d03bcf851a0272c99dd98daba06dd1a39b2bc0dd3fd88e64b056a8176ed4c052caac81b0413f4562e387d47e863f4c588b782b607139fc28b1393f2c03151e66fd71bc711e5fc2a5b25086f0000ce24c048379bc4b594762345997c77049878a2ad677a7177784f10a2e7601701106d3ad676bd24df89dc5105fe4daa0e0c22ebda092a4e3b8c82d97b4db664"}, 0x0, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xd2}, &(0x7f0000000240), &(0x7f0000000340)}) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}], 0x1}) 619.875769ms ago: executing program 6 (id=3408): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20083, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffffffdb) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000001, &(0x7f0000000a00)=[{&(0x7f0000000c80)=""/197, 0xc5}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/152, 0x98}, {0x0}, {&(0x7f00000009c0)=""/44, 0x2c}], 0x5, 0x12}) socket$key(0xf, 0x3, 0x2) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}], 0x1}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 619.668204ms ago: executing program 7 (id=3409): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r0, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x5000000, {0x20}, 0x0, 0x0, 0x0, 0x300, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) 0s ago: executing program 7 (id=3410): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0b00c327675700e400f464022700", @ANYRES16=r3, @ANYBLOB="01002cbd7000fbdbdf250500000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4cc04}, 0x4040140) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe8, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xde}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff81}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) writev(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)="ef", 0x1}], 0x1) kernel console output (not intermixed with test programs): ask+0x20/0x1f0 [ 798.287332][T16118] ? get_pid_task+0x20/0x1f0 [ 798.287357][T16118] ? get_pid_task+0x20/0x1f0 [ 798.287417][T16118] ? __fget_files+0x2a/0x420 [ 798.287442][T16118] ? __fget_files+0x3a0/0x420 [ 798.287481][T16118] __sys_sendmsg+0x164/0x220 [ 798.287509][T16118] ? __pfx___sys_sendmsg+0x10/0x10 [ 798.287545][T16118] ? __pfx_ksys_write+0x10/0x10 [ 798.287579][T16118] __do_fast_syscall_32+0x1dc/0x560 [ 798.287604][T16118] ? lockdep_hardirqs_on+0x7b/0x110 [ 798.287624][T16118] ? do_fast_syscall_32+0x34/0x80 [ 798.287647][T16118] ? irqentry_exit+0x10f/0x660 [ 798.287673][T16118] do_fast_syscall_32+0x34/0x80 [ 798.287697][T16118] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 798.287724][T16118] RIP: 0023:0xf7f85539 [ 798.287743][T16118] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 798.287764][T16118] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 798.287787][T16118] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 798.287803][T16118] RDX: 00000000040048a4 RSI: 0000000000000000 RDI: 0000000000000000 [ 798.287817][T16118] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 798.287831][T16118] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 798.287844][T16118] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 798.287876][T16118] [ 798.658643][T13840] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 798.666750][T13840] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 798.736451][ T129] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 798.885750][ T129] usb 5-1: Using ep0 maxpacket: 16 [ 798.903485][T13840] usb 7-1: USB disconnect, device number 28 [ 798.918043][ T129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.929209][ T129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.956548][ T129] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 798.966774][ T129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.982485][T13840] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 798.997157][ T129] usb 5-1: config 0 descriptor?? [ 799.451867][ T129] corsair 0003:1B1C:1B02.0013: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 799.625026][T16129] xt_hashlimit: max too large, truncated to 1048576 [ 799.838397][ T44] psmouse serio2: Failed to reset mouse on : -5 [ 800.949756][T16143] tipc: Enabling of bearer rejected, failed to enable media [ 801.007095][ T129] corsair 0003:1B1C:1B02.0013: Failed to get K90 initial state (error -71). [ 801.020799][ T129] usb 5-1: USB disconnect, device number 108 [ 801.844370][T16151] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.844819][T16151] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.928030][T16151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 802.034860][ T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.048209][ T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.048269][ T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.048307][ T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.151066][T16159] netlink: 'syz.5.2845': attribute type 8 has an invalid length. [ 802.382261][T16161] fuse: root generation should be zero [ 802.926041][ T5919] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 803.107457][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 803.120557][ T5919] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 803.138462][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.148598][ T5919] usb 5-1: Product: syz [ 803.156191][ T5919] usb 5-1: Manufacturer: syz [ 803.165595][ T5919] usb 5-1: SerialNumber: syz [ 803.242306][T16174] hub 1-0:1.0: USB hub found [ 803.253416][T16174] hub 1-0:1.0: 1 port detected [ 803.325176][ T5919] usb 5-1: config 0 descriptor?? [ 803.736012][ T44] misc userio: Buffer overflowed, userio client isn't keeping up [ 803.745465][ T5919] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 803.764331][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 803.791056][ T5919] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 803.800917][ T5919] usb 5-1: media controller created [ 803.890186][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 803.947170][ T5919] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 803.968993][ T5919] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 804.186696][ T981] usb 5-1: USB disconnect, device number 109 [ 804.482392][ T981] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 804.791132][ T44] input: PS/2 Generic Mouse as /devices/serio2/input/input40 [ 805.015951][ T44] psmouse serio2: Failed to enable mouse on [ 805.487146][T16192] netlink: 'syz.2.2854': attribute type 30 has an invalid length. [ 805.670631][T16194] xt_CT: No such helper "syz1" [ 805.694241][T16198] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2857'. [ 805.776001][ T981] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 805.906105][ T981] usb 3-1: device descriptor read/64, error -71 [ 806.160251][T16205] delete_channel: no stack [ 806.167552][ T981] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 806.322518][ T981] usb 3-1: device descriptor read/64, error -71 [ 806.446232][ T981] usb usb3-port1: attempt power cycle [ 806.815850][ T981] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 806.836730][ T981] usb 3-1: device descriptor read/8, error -71 [ 806.967911][ T44] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 807.088994][T16227] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2868'. [ 807.105794][ T44] usb 5-1: device descriptor read/64, error -71 [ 807.116175][ T981] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 807.157876][ T981] usb 3-1: device descriptor read/8, error -71 [ 807.268100][ T981] usb usb3-port1: unable to enumerate USB device [ 807.345759][ T44] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 807.366997][T11295] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 807.415793][ T30] audit: type=1326 audit(1767001600.492:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.5.2869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 807.475850][ T44] usb 5-1: device descriptor read/64, error -71 [ 807.492598][ T30] audit: type=1326 audit(1767001600.492:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.5.2869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f85558 code=0x7ffc0000 [ 807.558535][ T30] audit: type=1326 audit(1767001600.532:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.5.2869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 807.584511][T11295] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 807.586954][ T44] usb usb5-port1: attempt power cycle [ 807.594990][T11295] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.618788][ T30] audit: type=1326 audit(1767001600.532:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.5.2869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f85558 code=0x7ffc0000 [ 807.642955][T11295] usb 7-1: Product: syz [ 807.652321][T11295] usb 7-1: Manufacturer: syz [ 807.657269][T11295] usb 7-1: SerialNumber: syz [ 807.673168][T11295] usb 7-1: config 0 descriptor?? [ 807.682755][ T30] audit: type=1326 audit(1767001600.532:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.5.2869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 807.796290][ T30] audit: type=1326 audit(1767001600.532:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.5.2869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f85558 code=0x7ffc0000 [ 807.844587][ T30] audit: type=1326 audit(1767001600.532:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.5.2869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 807.897688][ T30] audit: type=1326 audit(1767001600.532:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.5.2869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 808.018122][ T30] audit: type=1326 audit(1767001600.532:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.5.2869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f85558 code=0x7ffc0000 [ 808.053787][ T30] audit: type=1326 audit(1767001600.532:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.5.2869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 808.076193][ T44] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 808.096512][ T44] usb 5-1: device descriptor read/8, error -71 [ 808.347389][ T44] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 808.405573][ T44] usb 5-1: device descriptor read/8, error -71 [ 808.493667][T16232] netlink: 'syz.2.2870': attribute type 10 has an invalid length. [ 808.501952][T16232] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2870'. [ 808.531246][ T44] usb usb5-port1: unable to enumerate USB device [ 808.549445][T16232] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 808.705852][ T44] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 809.051653][ T44] usb 6-1: device descriptor read/all, error -71 [ 809.610423][T16247] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2875'. [ 809.820949][T16249] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2876'. [ 809.831530][T16249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 810.288013][ T44] usb 7-1: USB disconnect, device number 29 [ 810.395934][T11295] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 810.406403][T16260] netlink: 'syz.5.2879': attribute type 8 has an invalid length. [ 810.691195][T11295] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 810.748192][T11295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.807602][T11295] usb 3-1: Product: syz [ 810.815954][T11295] usb 3-1: Manufacturer: syz [ 810.829732][T11295] usb 3-1: SerialNumber: syz [ 810.852985][T11295] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 811.133930][ T981] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 811.352515][T16269] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2881'. [ 811.544904][ T44] usb 3-1: USB disconnect, device number 8 [ 812.396149][ T981] usb 3-1: Service connection timeout for: 256 [ 812.402363][ T981] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 812.421506][ T981] ath9k_htc: Failed to initialize the device [ 812.438406][ T44] usb 3-1: ath9k_htc: USB layer deinitialized [ 812.451725][ T30] kauditd_printk_skb: 353 callbacks suppressed [ 812.451744][ T30] audit: type=1326 audit(1767001605.532:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16275 comm="syz.2.2884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 812.549793][ T30] audit: type=1326 audit(1767001605.612:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16275 comm="syz.2.2884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d558 code=0x7ffc0000 [ 812.649298][ T30] audit: type=1326 audit(1767001605.612:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16275 comm="syz.2.2884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d558 code=0x7ffc0000 [ 812.694383][ T795] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 812.708749][T16283] hub 1-0:1.0: USB hub found [ 812.724874][T16283] hub 1-0:1.0: 1 port detected [ 812.846169][ T30] audit: type=1326 audit(1767001605.612:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16275 comm="syz.2.2884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d558 code=0x7ffc0000 [ 812.885737][ T795] usb 7-1: Using ep0 maxpacket: 16 [ 812.953777][ T795] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 812.967349][ T795] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.983935][ T795] usb 7-1: Product: syz [ 812.996434][ T795] usb 7-1: Manufacturer: syz [ 813.011387][ T795] usb 7-1: SerialNumber: syz [ 813.017374][ T30] audit: type=1326 audit(1767001605.612:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16275 comm="syz.2.2884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d558 code=0x7ffc0000 [ 813.062715][ T795] usb 7-1: config 0 descriptor?? [ 813.155443][ T30] audit: type=1326 audit(1767001605.612:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16275 comm="syz.2.2884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d558 code=0x7ffc0000 [ 813.239992][ T30] audit: type=1326 audit(1767001605.622:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16275 comm="syz.2.2884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d558 code=0x7ffc0000 [ 813.297782][ T30] audit: type=1326 audit(1767001605.622:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16275 comm="syz.2.2884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 813.331119][T16288] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2888'. [ 813.516549][ T795] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 813.556121][ T795] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 813.586522][ T795] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 813.594483][ T795] usb 7-1: media controller created [ 813.623144][ T795] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 813.655986][ T30] audit: type=1326 audit(1767001605.622:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16275 comm="syz.2.2884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 813.757389][ T795] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 813.765344][ T795] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 813.815716][ T30] audit: type=1326 audit(1767001605.622:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16275 comm="syz.2.2884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d558 code=0x7ffc0000 [ 813.964807][ T795] usb 7-1: USB disconnect, device number 30 [ 814.047101][ T795] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 814.092317][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.102389][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.360130][T16292] fuse: Bad value for 'fd' [ 814.989150][T16300] netlink: 'syz.2.2892': attribute type 8 has an invalid length. [ 815.226193][T16305] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 816.063979][T16317] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2898'. [ 816.435774][T11296] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 816.615179][T16327] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2899'. [ 817.176209][T11296] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 817.185313][T11296] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.215975][T11296] usb 6-1: Product: syz [ 817.250815][T11296] usb 6-1: Manufacturer: syz [ 817.262560][T11296] usb 6-1: SerialNumber: syz [ 817.280520][T11296] usb 6-1: config 0 descriptor?? [ 818.278517][T16342] xt_TPROXY: Can be used only with -p tcp or -p udp [ 819.144679][T16348] netlink: 'syz.2.2908': attribute type 10 has an invalid length. [ 819.153125][T16348] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2908'. [ 819.267857][ T795] usb 6-1: USB disconnect, device number 39 [ 819.281398][T16348] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 819.599589][T11296] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 819.835969][T11296] usb 7-1: Using ep0 maxpacket: 8 [ 819.850122][T11296] usb 7-1: unable to get BOS descriptor or descriptor too short [ 819.873467][T11296] usb 7-1: config 4 interface 0 has no altsetting 0 [ 819.905308][T11296] usb 7-1: string descriptor 0 read error: -22 [ 819.914705][T11296] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 819.981333][T11296] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.023781][T11296] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 820.046705][T11296] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 820.079153][T11296] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 820.095251][T11296] usb 7-1: media controller created [ 820.136991][T11296] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 822.594184][T12236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 822.607303][T12236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 822.624681][T12236] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 822.633103][T12236] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 822.642100][T12236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 822.892662][T11296] usb 7-1: USB disconnect, device number 31 [ 823.267502][T12077] syz_tun (unregistering): left allmulticast mode [ 823.839328][T16392] chnl_net:caif_netlink_parms(): no params data found [ 824.096316][ T795] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 824.255866][ T795] usb 6-1: Using ep0 maxpacket: 16 [ 824.269571][ T795] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 824.312120][ T795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.372304][ T795] usb 6-1: Product: syz [ 824.405965][ T795] usb 6-1: Manufacturer: syz [ 824.413272][ T795] usb 6-1: SerialNumber: syz [ 824.439916][ T795] usb 6-1: config 0 descriptor?? [ 824.548930][T16392] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.562256][T16392] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.571571][T16392] bridge_slave_0: entered allmulticast mode [ 824.715789][T12236] Bluetooth: hci5: command tx timeout [ 824.922427][T16392] bridge_slave_0: entered promiscuous mode [ 824.949285][T16392] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.976144][T16392] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.983472][T16392] bridge_slave_1: entered allmulticast mode [ 825.006012][ T795] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 825.045467][T16392] bridge_slave_1: entered promiscuous mode [ 825.050431][ T795] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 825.178970][ T795] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 825.205374][ T795] usb 6-1: media controller created [ 825.326251][ T795] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 825.403862][T16392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.429171][T16392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.586797][ T795] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 825.594812][ T795] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 825.801272][ T795] usb 6-1: USB disconnect, device number 40 [ 825.923963][T16392] team0: Port device team_slave_0 added [ 825.962901][ T795] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 826.008451][T16392] team0: Port device team_slave_1 added [ 826.043790][ T3732] bridge_slave_1: left allmulticast mode [ 826.065078][ T3732] bridge_slave_1: left promiscuous mode [ 826.076059][ T3732] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.100747][ T3732] bridge_slave_0: left allmulticast mode [ 826.136051][ T3732] bridge_slave_0: left promiscuous mode [ 826.153809][ T3732] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.795818][T12236] Bluetooth: hci5: command tx timeout [ 827.095202][ T3732] bridge0 (unregistering): left allmulticast mode [ 827.505792][ T795] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 827.657538][ T795] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 827.671188][ T795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.690299][ T795] usb 5-1: config 0 descriptor?? [ 827.935873][ T5919] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 828.007747][ T3732] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 828.034645][ T3732] bond2 (unregistering): (slave macvlan3): Releasing backup interface [ 828.058797][ T3732] bond4 (unregistering): (slave macvlan4): Releasing backup interface [ 828.085543][ T3732] bond5 (unregistering): (slave macvlan5): Releasing backup interface [ 828.096074][ T5919] usb 6-1: Using ep0 maxpacket: 16 [ 828.107358][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.125039][ T795] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 828.134159][ T5919] usb 6-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 828.145211][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.160333][ T3732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 828.170124][ T5919] usb 6-1: config 0 descriptor?? [ 828.176633][ T3732] bond_slave_0: left allmulticast mode [ 828.189047][ T3732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 828.198371][ T3732] bond_slave_1: left allmulticast mode [ 828.204337][ T3732] bond0 (unregistering): Released all slaves [ 828.326049][ T795] [drm:udl_init] *ERROR* Selecting channel failed [ 828.357984][ T795] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 828.367166][ T795] [drm] Initialized udl on minor 2 [ 828.382515][ T795] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 828.398259][ T3732] bond1 (unregistering): Released all slaves [ 828.405129][ T795] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 828.423829][ T6060] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 828.434176][ T795] usb 5-1: USB disconnect, device number 114 [ 828.466181][ T6060] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 828.586321][ T3732] bond2 (unregistering): Released all slaves [ 828.602672][ T5919] mcp2200 0003:04D8:00DF.0014: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.5-1/input0 [ 828.628365][ T3732] bond3 (unregistering): Released all slaves [ 828.785255][ T3732] bond4 (unregistering): Released all slaves [ 828.875965][T12236] Bluetooth: hci5: command tx timeout [ 828.934440][ T3732] bond5 (unregistering): Released all slaves [ 829.025670][T16392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 829.047127][T16392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.093680][T16392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.122394][T16450] loop6: detected capacity change from 0 to 2640 [ 829.132295][ T6234] buffer_io_error: 11 callbacks suppressed [ 829.132312][ T6234] Buffer I/O error on dev loop6, logical block 0, async page read [ 829.157297][ T6234] Buffer I/O error on dev loop6, logical block 0, async page read [ 829.165413][ T6234] Buffer I/O error on dev loop6, logical block 0, async page read [ 829.175601][T16392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 829.179565][ T6234] Buffer I/O error on dev loop6, logical block 0, async page read [ 829.201072][T16392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.215243][ T6234] Buffer I/O error on dev loop6, logical block 0, async page read [ 829.253777][T16392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 829.267980][ T6234] Buffer I/O error on dev loop6, logical block 0, async page read [ 829.284738][ T6234] Buffer I/O error on dev loop6, logical block 0, async page read [ 829.295443][ T6234] Buffer I/O error on dev loop6, logical block 0, async page read [ 829.306612][ T3732] tipc: Left network mode [ 829.367310][ T6234] ldm_validate_partition_table(): Disk read failed. [ 829.416556][ T6234] Buffer I/O error on dev loop6, logical block 0, async page read [ 829.448032][T16458] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2938'. [ 829.490705][ T6234] Buffer I/O error on dev loop6, logical block 0, async page read [ 829.506328][ T6234] Dev loop6: unable to read RDB block 0 [ 829.525250][ T6234] loop6: unable to read partition table [ 829.546696][T16450] ldm_validate_partition_table(): Disk read failed. [ 829.555856][T16450] Dev loop6: unable to read RDB block 0 [ 829.573207][T16450] loop6: unable to read partition table [ 829.630253][T16450] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 829.643432][T16392] hsr_slave_0: entered promiscuous mode [ 829.674566][T16392] hsr_slave_1: entered promiscuous mode [ 829.719146][T11296] usb 6-1: USB disconnect, device number 41 [ 829.744139][T16392] debugfs: 'hsr0' already exists in 'hsr' [ 829.770317][T16392] Cannot create hsr debugfs directory [ 829.885856][T11295] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 829.980200][T16465] netlink: 'syz.4.2940': attribute type 11 has an invalid length. [ 830.000148][T16465] netlink: 170288 bytes leftover after parsing attributes in process `syz.4.2940'. [ 830.102546][T11295] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 830.129946][T11295] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.152834][T16471] netlink: 'syz.4.2940': attribute type 10 has an invalid length. [ 830.184778][T11295] usb 7-1: Product: syz [ 830.210246][T11295] usb 7-1: Manufacturer: syz [ 830.230519][T11295] usb 7-1: SerialNumber: syz [ 830.281691][T11295] usb 7-1: config 0 descriptor?? [ 830.393532][T16471] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 830.406097][T16471] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 830.477756][T16471] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 830.680071][T16477] tipc: Enabling of bearer rejected, failed to enable media [ 830.956240][T12236] Bluetooth: hci5: command tx timeout [ 831.084834][ T3732] hsr_slave_0: left promiscuous mode [ 831.092543][ T3732] hsr_slave_1: left promiscuous mode [ 831.104960][ T3732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 831.144891][ T3732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 831.233497][ T3732] pim6reg (unregistering): left allmulticast mode [ 831.957537][ T3732] team0 (unregistering): Port device macvlan0 removed [ 832.437020][ T44] usb 7-1: USB disconnect, device number 32 [ 832.949902][ T3732] team0 (unregistering): Port device team_slave_1 removed [ 833.113702][ T3732] team0 (unregistering): Port device team_slave_0 removed [ 834.463302][T16495] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2946'. [ 835.067365][T16525] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2950'. [ 835.325767][ T44] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 835.560873][ T44] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 835.591089][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.645319][ T44] usb 5-1: Product: syz [ 835.676111][ T44] usb 5-1: Manufacturer: syz [ 835.680802][ T44] usb 5-1: SerialNumber: syz [ 835.731906][ T44] usb 5-1: config 0 descriptor?? [ 836.289962][T16392] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 836.416565][T16392] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 836.761171][T16392] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 836.826119][T16392] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 836.956715][ T3732] IPVS: stop unused estimator thread 0... [ 837.072464][T16552] netlink: 'syz.7.2956': attribute type 1 has an invalid length. [ 837.183844][T16552] netlink: 'syz.7.2956': attribute type 2 has an invalid length. [ 837.273525][T16552] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2956'. [ 837.609258][T16392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.744032][T16392] 8021q: adding VLAN 0 to HW filter on device team0 [ 837.814373][ T3732] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.821671][ T3732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.852238][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.859514][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.017377][ T44] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 838.109015][ T5985] usb 5-1: USB disconnect, device number 115 [ 838.195740][ T44] usb 7-1: Using ep0 maxpacket: 16 [ 838.196949][T16392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 838.254516][ T44] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 838.254550][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.254583][ T44] usb 7-1: Product: syz [ 838.254600][ T44] usb 7-1: Manufacturer: syz [ 838.254619][ T44] usb 7-1: SerialNumber: syz [ 838.282128][ T44] usb 7-1: config 0 descriptor?? [ 838.321446][T16392] veth0_vlan: entered promiscuous mode [ 838.481168][T16392] veth1_vlan: entered promiscuous mode [ 838.573411][T16392] veth0_macvtap: entered promiscuous mode [ 838.689344][T16392] veth1_macvtap: entered promiscuous mode [ 838.744940][ T44] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 838.761081][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 838.794965][T16392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 838.817321][ T44] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 838.837228][T16392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 838.857220][ T44] usb 7-1: media controller created [ 838.876271][ T7341] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.998420][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 839.126294][ T44] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 839.134278][ T44] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 839.195090][ T7341] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.266197][T16596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 839.266358][ T7341] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.344872][ T44] usb 7-1: USB disconnect, device number 33 [ 839.358654][ T7341] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.508176][ T44] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 839.572516][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.604616][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.723279][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.736715][ T981] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 839.753261][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.926700][ T981] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 839.945732][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.966498][ T981] usb 5-1: Product: syz [ 839.970747][ T981] usb 5-1: Manufacturer: syz [ 839.975380][ T981] usb 5-1: SerialNumber: syz [ 840.246317][T16596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2962'. [ 840.498532][T16633] xt_TPROXY: Can be used only with -p tcp or -p udp [ 841.060452][ T981] rtl8150 5-1:1.0: couldn't reset the device [ 841.256822][ T981] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 841.274201][ T981] usb 5-1: USB disconnect, device number 116 [ 841.545861][T16655] netlink: 'syz.2.2974': attribute type 8 has an invalid length. [ 841.656887][ T30] kauditd_printk_skb: 212 callbacks suppressed [ 841.656906][ T30] audit: type=1326 audit(1767001634.742:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16658 comm="syz.6.2975" exe="/root/syz-executor" sig=9 arch=40000003 syscall=172 compat=1 ip=0xf70cd539 code=0x0 [ 842.169877][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 842.180197][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 842.190902][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 842.200643][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 842.208525][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 842.969754][T16680] chnl_net:caif_netlink_parms(): no params data found [ 843.421257][T16697] kernel profiling enabled (shift: 63) [ 843.442913][T16680] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.451273][T16697] profiling shift: 63 too large [ 843.458239][T16680] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.469339][T16680] bridge_slave_0: entered allmulticast mode [ 843.482452][T16680] bridge_slave_0: entered promiscuous mode [ 843.531814][T16680] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.540941][T16680] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.550761][T16680] bridge_slave_1: entered allmulticast mode [ 843.566272][T16680] bridge_slave_1: entered promiscuous mode [ 843.785466][T16680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.917697][ T68] bond0: (slave netdevsim0): Releasing backup interface [ 843.930344][ T68] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 843.980220][ T68] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 844.052719][T16680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.248440][T16680] team0: Port device team_slave_0 added [ 844.282160][T16680] team0: Port device team_slave_1 added [ 844.319533][T12236] Bluetooth: hci4: command tx timeout [ 844.480773][T16680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.497466][T16680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.552356][T16680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.607929][T16680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.635517][T16680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.711712][T16680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.751492][ T68] bond3: left allmulticast mode [ 844.758399][ T68] bond3: left promiscuous mode [ 844.764746][ T68] bridge0: port 5(bond3) entered disabled state [ 844.781413][ T68] dummy0: left allmulticast mode [ 844.787418][ T68] bridge0: port 4(dummy0) entered disabled state [ 844.807805][ T68] macsec1: left allmulticast mode [ 844.813642][T16712] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2986'. [ 844.830776][ T68] macsec1: left promiscuous mode [ 844.845920][ T68] bridge0: port 3(macsec1) entered disabled state [ 844.864351][ T68] bridge_slave_1: left allmulticast mode [ 844.875751][ T68] bridge_slave_1: left promiscuous mode [ 844.887402][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.911952][ T68] bridge_slave_0: left allmulticast mode [ 844.920944][ T68] bridge_slave_0: left promiscuous mode [ 844.932466][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.300566][ T68] bridge0 (unregistering): left allmulticast mode [ 846.334803][ T68] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 846.357137][ T68] bond2 (unregistering): (slave macvlan3): Releasing backup interface [ 846.380066][ T68] bond4 (unregistering): (slave macvlan4): Releasing backup interface [ 846.405269][T12236] Bluetooth: hci4: command tx timeout [ 846.412962][ T68] bond5 (unregistering): (slave macvlan5): Releasing backup interface [ 846.443024][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 846.452401][ T68] bond_slave_0: left promiscuous mode [ 846.460576][ T68] bond_slave_0: left allmulticast mode [ 846.469153][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 846.478603][ T68] bond_slave_1: left promiscuous mode [ 846.484170][ T68] bond_slave_1: left allmulticast mode [ 846.492179][ T68] bond0 (unregistering): Released all slaves [ 846.609165][ T68] bond1 (unregistering): Released all slaves [ 846.724154][ T68] bond2 (unregistering): Released all slaves [ 846.836733][ T68] bond3 (unregistering): Released all slaves [ 846.954153][ T68] bond4 (unregistering): Released all slaves [ 847.071550][ T68] bond5 (unregistering): Released all slaves [ 847.085112][ T68] bond6 (unregistering): Released all slaves [ 847.099628][T16713] tipc: Started in network mode [ 847.104680][T16713] tipc: Node identity 070000000000000000e7, cluster identity 4711 [ 847.331462][T16680] hsr_slave_0: entered promiscuous mode [ 847.351897][T16680] hsr_slave_1: entered promiscuous mode [ 847.377525][T16680] debugfs: 'hsr0' already exists in 'hsr' [ 847.491715][T16680] Cannot create hsr debugfs directory [ 847.510002][ T68] tipc: Left network mode [ 847.518450][T16726] syzkaller0: entered promiscuous mode [ 847.656461][T16726] syzkaller0: entered allmulticast mode [ 847.885083][T16730] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2988'. [ 848.210366][T16739] xt_TPROXY: Can be used only with -p tcp or -p udp [ 848.489719][T12236] Bluetooth: hci4: command tx timeout [ 849.092467][T16747] netlink: 'syz.5.2993': attribute type 3 has an invalid length. [ 849.945848][T16761] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2996'. [ 850.288658][T16765] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.296315][T16765] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.306207][ T981] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 850.524239][ T981] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 850.540708][ T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.556590][T12236] Bluetooth: hci4: command tx timeout [ 850.568970][ T981] usb 6-1: Product: syz [ 850.579836][ T981] usb 6-1: Manufacturer: syz [ 850.585925][ T981] usb 6-1: SerialNumber: syz [ 850.607028][ T981] usb 6-1: config 0 descriptor?? [ 850.732120][T16765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.913110][T16765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 852.361286][ T5974] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.483994][ T5974] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.593714][ T5974] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.638592][ T5974] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.413216][T16800] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3005'. [ 853.431889][T16800] tipc: Invalid UDP bearer configuration [ 853.431948][T16800] tipc: Enabling of bearer rejected, failed to enable media [ 853.759923][T16806] qrtr: Invalid version 0 [ 853.789192][T11295] usb 6-1: USB disconnect, device number 42 [ 854.591065][T16680] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 854.660353][T16680] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 854.882837][T16680] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 854.953292][T16680] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 855.063142][T16823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3010'. [ 855.541895][T16842] xt_TPROXY: Can be used only with -p tcp or -p udp [ 855.963495][T16680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.121844][T16680] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.332552][ T68] hsr_slave_0: left promiscuous mode [ 856.333127][ T68] hsr_slave_1: left promiscuous mode [ 856.333622][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 856.334161][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 857.411190][ T6060] hid-generic 0008:0000:00E1.0015: unknown main item tag 0x0 [ 857.447816][ T6060] hid-generic 0008:0000:00E1.0015: unknown main item tag 0x0 [ 857.455503][ T6060] hid-generic 0008:0000:00E1.0015: unknown main item tag 0x0 [ 857.464288][ T6060] hid-generic 0008:0000:00E1.0015: unknown main item tag 0x0 [ 857.472197][ T6060] hid-generic 0008:0000:00E1.0015: unknown main item tag 0x0 [ 857.495886][ T6060] hid-generic 0008:0000:00E1.0015: unknown main item tag 0x0 [ 857.503639][ T6060] hid-generic 0008:0000:00E1.0015: unknown main item tag 0x0 [ 857.514033][ T6060] hid-generic 0008:0000:00E1.0015: unknown main item tag 0x0 [ 857.535838][ T6060] hid-generic 0008:0000:00E1.0015: unknown main item tag 0x0 [ 857.564375][ T6060] hid-generic 0008:0000:00E1.0015: unknown main item tag 0x0 [ 857.599884][T16865] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3017'. [ 857.800237][ T6060] hid-generic 0008:0000:00E1.0015: hidraw0: HID v400000.00 Device [syz1] on syz0 [ 857.906325][ T68] team_slave_1 (unregistering): left promiscuous mode [ 857.933224][ T68] team0 (unregistering): Port device team_slave_1 removed [ 857.966112][T16876] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 858.018681][T16871] fido_id[16871]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 858.275252][T16880] qrtr: Invalid version 0 [ 859.183024][ T68] team_slave_0 (unregistering): left promiscuous mode [ 859.196138][T16888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3022'. [ 859.218285][ T68] team0 (unregistering): Port device team_slave_0 removed [ 859.354106][T16895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3022'. [ 859.525739][T11295] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 859.633563][T16893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 859.671394][T11295] usb 7-1: device descriptor read/64, error -71 [ 859.921271][T11295] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 859.956304][ T7826] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 860.070160][T11295] usb 7-1: device descriptor read/64, error -71 [ 860.110521][ T7826] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 860.130168][ T7826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.163234][ T7826] usb 6-1: config 0 descriptor?? [ 860.202059][T11295] usb usb7-port1: attempt power cycle [ 860.287272][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.294829][ T5959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 860.373160][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.380428][ T5959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 860.594997][T11295] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 860.617156][T11295] usb 7-1: device descriptor read/8, error -71 [ 860.643452][T16680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 860.860102][T16928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 860.869798][ T7826] ath6kl: mismatched byte count 0 vs. expected 12 [ 860.887413][T16928] 8021q: adding VLAN 0 to HW filter on device team0 [ 860.919506][T16928] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 860.935917][T11295] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 860.950783][ T7341] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 860.961372][ T7826] ath6kl: Failed to init ath6kl core: -22 [ 861.114613][ T7826] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 861.123662][T11295] usb 7-1: device descriptor read/8, error -71 [ 861.302523][ T7341] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 861.408879][T11295] usb usb7-port1: unable to enumerate USB device [ 861.421571][ T7341] bond0: now running without any active interface! [ 861.472702][ T7826] usb 6-1: USB disconnect, device number 43 [ 861.602925][ T68] IPVS: stop unused estimator thread 0... [ 861.820874][T16680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 861.943880][T16680] veth0_vlan: entered promiscuous mode [ 861.962444][T16680] veth1_vlan: entered promiscuous mode [ 862.308864][T16680] veth0_macvtap: entered promiscuous mode [ 862.361445][T16680] veth1_macvtap: entered promiscuous mode [ 862.490279][T16680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.546736][T16680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 862.616860][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.616925][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.616965][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.617003][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.055755][T16940] netlink: 'syz.5.3029': attribute type 1 has an invalid length. [ 863.068990][T16940] netlink: 'syz.5.3029': attribute type 2 has an invalid length. [ 863.147729][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3029'. [ 863.180432][T16942] xt_CT: No such helper "syz1" [ 863.185451][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.228455][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.310330][ T5988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.376428][ T5988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.805833][ T795] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 863.975874][ T795] usb 5-1: Using ep0 maxpacket: 16 [ 863.990316][ T795] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 864.000997][ T795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.009360][ T795] usb 5-1: Product: syz [ 864.014810][ T795] usb 5-1: Manufacturer: syz [ 864.020176][ T795] usb 5-1: SerialNumber: syz [ 864.032388][T16957] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3033'. [ 864.042022][ T795] usb 5-1: config 0 descriptor?? [ 864.486969][ T795] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 864.587044][ T795] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 864.667232][ T795] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 864.689418][ T795] usb 5-1: media controller created [ 864.752320][ T795] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 864.844521][T16969] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3035'. [ 864.875711][ T7826] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 864.928087][ T795] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 864.937122][ T795] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 865.089869][ T7826] usb 7-1: config 0 has an invalid interface number: 160 but max is 0 [ 865.098405][ T7826] usb 7-1: config 0 has no interface number 0 [ 865.104556][ T7826] usb 7-1: config 0 interface 160 has no altsetting 0 [ 865.126399][ T7826] usb 7-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4 [ 865.140610][ T795] usb 5-1: USB disconnect, device number 117 [ 865.152346][ T7826] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.165158][ T7826] usb 7-1: Product: syz [ 865.170926][ T7826] usb 7-1: Manufacturer: syz [ 865.201930][ T7826] usb 7-1: SerialNumber: syz [ 865.284270][ T795] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 865.297578][ T7826] usb 7-1: config 0 descriptor?? [ 865.311120][ T7826] usb-storage 7-1:0.160: USB Mass Storage device detected [ 865.957929][T16981] syzkaller0: entered promiscuous mode [ 866.495731][ T5985] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 866.665831][ T5985] usb 5-1: Using ep0 maxpacket: 16 [ 866.692767][ T5985] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 866.728493][ T5985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 866.837256][ T5985] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 866.852575][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.876175][ T5985] usb 5-1: Product: syz [ 866.880398][ T5985] usb 5-1: Manufacturer: syz [ 866.905795][ T5985] usb 5-1: SerialNumber: syz [ 866.934315][ T5985] usb 5-1: config 0 descriptor?? [ 866.945455][ T5985] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 866.977640][ T5985] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 867.148588][T16986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.163590][T16986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.605827][ T5985] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 867.616333][ T5985] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 868.094696][ T795] usb 7-1: USB disconnect, device number 38 [ 868.207968][T16994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.308381][T16994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.339201][ T5985] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 868.346924][ T5985] em28xx 5-1:0.0: No AC97 audio processor [ 868.370409][ T5985] usb 5-1: USB disconnect, device number 118 [ 868.476031][ T5985] em28xx 5-1:0.0: Disconnecting em28xx [ 868.512105][ T5985] em28xx 5-1:0.0: Freeing device [ 868.734368][T16998] netlink: 'syz.6.3044': attribute type 3 has an invalid length. [ 868.976509][T17005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.011679][T17005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.178919][T17003] netlink: 'syz.6.3046': attribute type 1 has an invalid length. [ 869.205787][T17003] netlink: 'syz.6.3046': attribute type 2 has an invalid length. [ 869.216877][T17003] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3046'. [ 869.276286][T17015] macvlan0: entered promiscuous mode [ 869.505761][ T795] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 869.657943][ T795] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 869.668021][ T795] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 869.679147][ T795] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 869.691454][ T795] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 869.705135][ T795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.713305][ T795] usb 3-1: Product: syz [ 869.717621][ T795] usb 3-1: Manufacturer: syz [ 869.722262][ T795] usb 3-1: SerialNumber: syz [ 869.730152][ T795] usb 3-1: config 0 descriptor?? [ 869.736107][T17017] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 870.040771][ T795] usb 3-1: USB disconnect, device number 10 [ 870.757997][T17043] netlink: 'syz.2.3057': attribute type 10 has an invalid length. [ 870.798347][T17043] team0: Port device macvlan0 added [ 871.364816][T17052] xt_CT: No such helper "syz1" [ 873.026294][T17069] netlink: 'syz.2.3064': attribute type 1 has an invalid length. [ 873.065811][T17069] netlink: 'syz.2.3064': attribute type 2 has an invalid length. [ 873.073651][T17069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3064'. [ 873.858100][T17085] netlink: 'syz.5.3069': attribute type 3 has an invalid length. [ 873.858126][T17085] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3069'. [ 874.356106][ T5985] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 874.515743][ T5985] usb 6-1: device descriptor read/64, error -71 [ 874.786022][ T5985] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 874.905895][ T795] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 874.927809][ T5985] usb 6-1: device descriptor read/64, error -71 [ 875.046171][ T5985] usb usb6-port1: attempt power cycle [ 875.065716][ T795] usb 3-1: Using ep0 maxpacket: 16 [ 875.092178][ T795] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 875.116293][ T795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.144403][ T795] usb 3-1: Product: syz [ 875.158007][ T795] usb 3-1: Manufacturer: syz [ 875.162668][ T795] usb 3-1: SerialNumber: syz [ 875.190160][ T795] usb 3-1: config 0 descriptor?? [ 875.418065][ T5985] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 875.446563][ T5985] usb 6-1: device descriptor read/8, error -71 [ 875.530547][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.554832][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.612378][ T795] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 875.630482][ T795] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 875.657756][ T795] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 875.666043][ T795] usb 3-1: media controller created [ 875.705471][ T795] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 875.734529][ T5985] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 875.766593][ T5985] usb 6-1: device descriptor read/8, error -71 [ 875.821695][ T795] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 875.834077][ T795] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 875.906375][ T5985] usb usb6-port1: unable to enumerate USB device [ 876.030226][ T795] usb 3-1: USB disconnect, device number 11 [ 876.095516][ T795] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 877.375431][T17127] netlink: 'syz.2.3083': attribute type 3 has an invalid length. [ 877.720597][ T30] audit: type=1326 audit(1767001670.802:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17128 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 878.122042][ T30] audit: type=1326 audit(1767001670.822:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17128 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 878.171501][T17135] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3085'. [ 878.189292][ T30] audit: type=1326 audit(1767001670.822:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17128 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 878.265154][ T30] audit: type=1326 audit(1767001670.822:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17128 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 878.366370][ T30] audit: type=1326 audit(1767001670.822:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17128 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 878.428613][ T30] audit: type=1326 audit(1767001670.822:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17128 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 878.486384][ T795] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 878.529337][ T30] audit: type=1326 audit(1767001670.822:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17128 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 878.575804][ T30] audit: type=1326 audit(1767001670.822:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17128 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 878.620465][ T30] audit: type=1326 audit(1767001670.822:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17128 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 878.626196][ T44] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 878.686571][ T795] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 878.729142][ T795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.771135][ T30] audit: type=1326 audit(1767001670.822:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17128 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 878.820789][ T795] usb 3-1: Product: syz [ 878.827526][ T795] usb 3-1: Manufacturer: syz [ 878.858517][ T795] usb 3-1: SerialNumber: syz [ 878.893500][ T795] usb 3-1: config 0 descriptor?? [ 878.946140][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 878.956863][ T44] usb 5-1: config 1 has an invalid interface number: 233 but max is 0 [ 878.965130][ T44] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 878.999408][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 879.055931][ T44] usb 5-1: config 1 has no interface number 0 [ 879.086930][ T44] usb 5-1: config 1 interface 233 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 879.141289][ T44] usb 5-1: config 1 interface 233 has no altsetting 0 [ 879.151196][ T44] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=34.ac [ 879.160889][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.173834][ T44] usb 5-1: Product: syz [ 879.180887][ T44] usb 5-1: Manufacturer: syz [ 879.185549][ T44] usb 5-1: SerialNumber: syz [ 879.515174][T17158] tipc: Invalid UDP bearer configuration [ 879.515235][T17158] tipc: Enabling of bearer rejected, failed to enable media [ 879.546599][ T44] imon_raw 5-1:1.233: IR endpoint missing [ 879.564818][ T44] usb 5-1: USB disconnect, device number 119 [ 879.674937][T17160] netlink: 'syz.5.3095': attribute type 1 has an invalid length. [ 879.683467][T17160] netlink: 'syz.5.3095': attribute type 2 has an invalid length. [ 879.691622][T17160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3095'. [ 880.353208][T17174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3097'. [ 880.683159][ T981] usb 3-1: USB disconnect, device number 12 [ 881.793558][T17204] syzkaller0: entered promiscuous mode [ 881.815524][T17204] syzkaller0: entered allmulticast mode [ 881.865099][T17204] tipc: Started in network mode [ 881.875824][T17204] tipc: Node identity aabe8ad76566, cluster identity 4711 [ 881.883468][T17204] tipc: Enabled bearer , priority 0 [ 881.931480][T17203] tipc: Resetting bearer [ 881.986594][T17203] tipc: Disabling bearer [ 882.085178][T17209] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3109'. [ 882.140526][T17207] netlink: 'syz.2.3108': attribute type 1 has an invalid length. [ 882.171136][T17207] netlink: 'syz.2.3108': attribute type 2 has an invalid length. [ 882.190617][T17207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3108'. [ 882.645275][T17219] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3110'. [ 882.938353][ T795] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 883.157497][ T795] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 883.166881][ T795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.182545][ T795] usb 5-1: Product: syz [ 883.190885][ T795] usb 5-1: Manufacturer: syz [ 883.201796][ T795] usb 5-1: SerialNumber: syz [ 883.221960][ T795] usb 5-1: config 0 descriptor?? [ 883.346087][ T44] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 883.533025][ T44] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 883.543242][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.565052][ T44] usb 6-1: Product: syz [ 883.569924][ T44] usb 6-1: Manufacturer: syz [ 883.574833][ T44] usb 6-1: SerialNumber: syz [ 883.600059][ T44] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 883.639636][ T7826] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 883.716058][ T795] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 883.875826][ T795] usb 7-1: Using ep0 maxpacket: 16 [ 883.892024][ T795] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 883.901999][ T795] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.911899][ T795] usb 7-1: Product: syz [ 883.917179][ T795] usb 7-1: Manufacturer: syz [ 883.922025][ T795] usb 7-1: SerialNumber: syz [ 883.931124][T17246] netlink: 'syz.2.3122': attribute type 153 has an invalid length. [ 883.945354][ T795] usb 7-1: config 0 descriptor?? [ 884.286674][ T981] usb 6-1: USB disconnect, device number 48 [ 884.358772][ T795] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 884.377238][ T795] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 884.388021][ T795] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 884.397158][ T795] usb 7-1: media controller created [ 884.411663][ T795] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 884.449467][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 884.449567][ T30] audit: type=1326 audit(1767001677.532:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17254 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 884.486010][ T30] audit: type=1326 audit(1767001677.572:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17254 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 884.512973][ T30] audit: type=1326 audit(1767001677.572:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17254 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 884.536748][ T30] audit: type=1326 audit(1767001677.572:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17254 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 884.561532][ T30] audit: type=1326 audit(1767001677.572:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17254 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 884.561655][ T795] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 884.592230][ T795] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 884.606911][ T30] audit: type=1326 audit(1767001677.572:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17254 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 884.654220][ T30] audit: type=1326 audit(1767001677.572:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17254 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 884.684180][ T30] audit: type=1326 audit(1767001677.572:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17254 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 884.709604][ T30] audit: type=1326 audit(1767001677.572:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17254 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 884.733181][ T30] audit: type=1326 audit(1767001677.572:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17254 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 884.769151][ T795] usb 7-1: USB disconnect, device number 39 [ 884.801606][ T795] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 884.882044][T17258] netlink: 'syz.5.3126': attribute type 10 has an invalid length. [ 885.116405][ T7826] usb 6-1: Service connection timeout for: 257 [ 885.125797][ T7826] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 885.146126][ T7826] ath9k_htc: Failed to initialize the device [ 885.152536][ T981] usb 6-1: ath9k_htc: USB layer deinitialized [ 885.231471][ T795] usb 5-1: USB disconnect, device number 120 [ 885.697192][ T981] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 885.764174][T17275] xt_CT: No such helper "syz1" [ 885.995752][ T981] usb 6-1: Using ep0 maxpacket: 16 [ 886.002916][ T981] usb 6-1: config 0 has no interfaces? [ 886.018457][ T981] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 886.044900][ T981] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 886.067373][ T981] usb 6-1: Manufacturer: syz [ 886.088912][ T981] usb 6-1: config 0 descriptor?? [ 886.215005][T17294] loop9: detected capacity change from 0 to 7 [ 886.230320][ T6234] Dev loop9: unable to read RDB block 7 [ 886.240645][ T6234] loop9: unable to read partition table [ 886.259010][ T6234] loop9: partition table beyond EOD, truncated [ 886.285392][T17294] Dev loop9: unable to read RDB block 7 [ 886.292673][T17294] loop9: unable to read partition table [ 886.299563][T17294] loop9: partition table beyond EOD, truncated [ 886.310574][T17294] loop_reread_partitions: partition scan of loop9 (被x`) failed (rc=-5) [ 886.373066][T17266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.392115][T17266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.575814][T17301] syzkaller0: entered promiscuous mode [ 886.581614][T17301] syzkaller0: entered allmulticast mode [ 886.606772][T17301] tipc: Enabled bearer , priority 0 [ 886.618280][T17300] tipc: Resetting bearer [ 886.647266][T17300] tipc: Disabling bearer [ 886.666003][ T795] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 886.807786][T17305] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3145'. [ 886.835907][ T795] usb 5-1: Using ep0 maxpacket: 16 [ 886.850503][ T795] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 886.859832][ T795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.882129][ T795] usb 5-1: Product: syz [ 886.895712][ T795] usb 5-1: Manufacturer: syz [ 886.905165][ T795] usb 5-1: SerialNumber: syz [ 886.916780][ T795] usb 5-1: config 0 descriptor?? [ 886.946358][ T7826] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 887.139615][ T7826] usb 3-1: not running at top speed; connect to a high speed hub [ 887.153028][ T7826] usb 3-1: config 4 has an invalid interface number: 27 but max is 0 [ 887.181717][ T7826] usb 3-1: config 4 has no interface number 0 [ 887.190480][T17307] netlink: 'syz.6.3146': attribute type 1 has an invalid length. [ 887.201612][ T7826] usb 3-1: config 4 interface 27 has no altsetting 0 [ 887.212663][T17307] netlink: 'syz.6.3146': attribute type 2 has an invalid length. [ 887.224645][ T7826] usb 3-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 887.234144][ T7826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.244325][ T7826] usb 3-1: Product: syz [ 887.249049][ T7826] usb 3-1: Manufacturer: syz [ 887.260866][ T7826] usb 3-1: SerialNumber: syz [ 887.265956][T17307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3146'. [ 887.370688][ T795] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 887.389133][ T795] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 887.427646][ T795] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 887.452502][ T795] usb 5-1: media controller created [ 887.523189][ T795] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 887.570969][T17303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.581194][T17303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.637971][ T795] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 887.667011][ T795] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 887.842566][ T7826] usb 3-1: USB disconnect, device number 13 [ 887.902382][ T795] usb 5-1: USB disconnect, device number 121 [ 887.980604][ T795] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 888.152666][T17328] binder: 17322:17328 ioctl 4018620d 0 returned -22 [ 888.168011][T17328] binder: 17322:17328 ioctl c0306201 80000080 returned -14 [ 888.960673][T17328] binder: 17322:17328 ioctl d000941e 0 returned -22 [ 889.002605][ T5985] usb 6-1: USB disconnect, device number 49 [ 889.365826][ T5985] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 889.525310][ T5985] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 889.541800][ T5985] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.565942][ T5985] usb 7-1: Product: syz [ 889.570267][ T5985] usb 7-1: Manufacturer: syz [ 889.574939][ T5985] usb 7-1: SerialNumber: syz [ 889.610677][ T5985] usb 7-1: config 0 descriptor?? [ 889.762935][T17358] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3161'. [ 889.777493][T17358] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3161'. [ 889.829185][ T5985] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 890.020317][T17361] netlink: 'syz.4.3162': attribute type 1 has an invalid length. [ 890.037421][T17361] netlink: 'syz.4.3162': attribute type 2 has an invalid length. [ 890.062209][T17361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3162'. [ 890.162297][T17372] netlink: 'syz.5.3165': attribute type 10 has an invalid length. [ 890.180439][ T795] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 890.345673][ T795] usb 3-1: Using ep0 maxpacket: 16 [ 890.372717][ T795] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 890.396334][ T795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.411982][ T795] usb 3-1: Product: syz [ 890.412009][ T795] usb 3-1: Manufacturer: syz [ 890.412029][ T795] usb 3-1: SerialNumber: syz [ 890.425324][ T795] usb 3-1: config 0 descriptor?? [ 890.576477][T17379] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3167'. [ 890.830680][ T795] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 890.842027][ T795] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 890.871969][ T795] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 890.896955][ T795] usb 3-1: media controller created [ 890.930671][ T795] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 890.943924][T17387] tipc: Enabling of bearer rejected, failed to enable media [ 891.006573][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 891.006594][ T30] audit: type=1326 audit(1767001684.082:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.7.3172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 891.093286][ T30] audit: type=1326 audit(1767001684.092:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.7.3172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 891.093350][ T795] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 891.130613][ T795] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 891.179051][T17394] netlink: 188 bytes leftover after parsing attributes in process `syz.7.3172'. [ 891.206914][ T30] audit: type=1326 audit(1767001684.092:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.7.3172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 891.281243][ T30] audit: type=1326 audit(1767001684.092:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.7.3172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 891.346876][ T30] audit: type=1326 audit(1767001684.092:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.7.3172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 891.394717][ T30] audit: type=1326 audit(1767001684.092:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.7.3172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 891.447072][ T30] audit: type=1326 audit(1767001684.092:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.7.3172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 891.451236][ T7826] usb 3-1: USB disconnect, device number 14 [ 891.499769][ T30] audit: type=1326 audit(1767001684.092:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.7.3172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 891.553662][ T30] audit: type=1326 audit(1767001684.172:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.7.3172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 891.585748][ T795] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 891.610875][ T30] audit: type=1326 audit(1767001684.172:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.7.3172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f67567 code=0x7ffc0000 [ 891.660690][ T7826] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 891.747384][ T795] usb 6-1: not running at top speed; connect to a high speed hub [ 891.761247][ T795] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 891.771531][ T795] usb 6-1: config 1 has no interface number 1 [ 891.779256][ T795] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 891.802141][ T795] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 891.832221][ T795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.847617][ T795] usb 6-1: Product: syz [ 891.852237][ T795] usb 6-1: Manufacturer: syz [ 891.857391][ T795] usb 6-1: SerialNumber: syz [ 892.111247][ T795] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 892.163077][ T795] usb 6-1: USB disconnect, device number 50 [ 892.225274][T17404] netlink: 'syz.2.3177': attribute type 8 has an invalid length. [ 892.277222][ T5985] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 892.318445][ T5985] usb 7-1: USB disconnect, device number 40 [ 892.329630][ T8619] udevd[8619]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 892.415517][T17411] fuse: Bad value for 'fd' [ 892.571789][T17414] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3178'. [ 893.425782][ T981] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 893.460711][T17427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3184'. [ 893.528235][T17425] netlink: 'syz.5.3183': attribute type 1 has an invalid length. [ 893.536783][T17425] netlink: 'syz.5.3183': attribute type 2 has an invalid length. [ 893.544658][T17425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3183'. [ 893.585946][ T981] usb 7-1: Using ep0 maxpacket: 8 [ 893.593299][ T981] usb 7-1: config 1 interface 0 has no altsetting 0 [ 893.610974][ T981] usb 7-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40 [ 893.630603][ T981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.630635][ T981] usb 7-1: Product: 扳氹홵觻뀸㇑骃㸠굊笅겲佯게ℹᯱ跈᱕쩡誾䁧큇䅃퀻稣ᥕ⌐玹貟굫䪁顀ዥȠᖍ䂼ﱈ㳛ꕞ풺蠇뤐㥰᧮珏듚柭蛷醢굚볠酠돈샤馾鯑䍃㮼㙑⾄ढʍ [ 893.630664][ T981] usb 7-1: SerialNumber: Е [ 893.876431][ T981] usbhid 7-1:1.0: can't add hid device: -71 [ 893.886860][ T981] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 893.909838][ T981] usb 7-1: USB disconnect, device number 41 [ 894.026337][ T5985] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 894.185744][ T5985] usb 3-1: Using ep0 maxpacket: 16 [ 894.196503][ T5985] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 894.209025][ T5985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.223961][ T5985] usb 3-1: Product: syz [ 894.231846][ T5985] usb 3-1: Manufacturer: syz [ 894.240487][ T5985] usb 3-1: SerialNumber: syz [ 894.256789][ T5985] usb 3-1: config 0 descriptor?? [ 894.573208][T17440] loop9: detected capacity change from 0 to 7 [ 894.585054][ T8619] Dev loop9: unable to read RDB block 7 [ 894.591044][ T8619] loop9: unable to read partition table [ 894.601463][ T8619] loop9: partition table beyond EOD, truncated [ 894.609094][T17440] Dev loop9: unable to read RDB block 7 [ 894.617847][T17440] loop9: unable to read partition table [ 894.650460][T17440] loop9: partition table beyond EOD, truncated [ 894.657399][T17440] loop_reread_partitions: partition scan of loop9 (被x`) failed (rc=-5) [ 894.682849][ T5985] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 894.719821][ T5985] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 894.761989][ T5985] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 894.781597][ T5985] usb 3-1: media controller created [ 894.823987][ T5985] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 894.883939][ T5985] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 894.899177][ T5985] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 895.095054][ T795] usb 3-1: USB disconnect, device number 15 [ 895.144116][ T795] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 895.273725][T17456] netlink: 'syz.4.3195': attribute type 8 has an invalid length. [ 895.338406][T17457] fuse: Bad value for 'fd' [ 895.583949][T17464] Cannot find set identified by id 0 to match [ 895.718398][T17469] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3199'. [ 895.854203][T17482] netlink: 'syz.7.3202': attribute type 3 has an invalid length. [ 896.206407][ T5985] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 896.605762][ T5985] usb 3-1: Using ep0 maxpacket: 32 [ 896.633470][ T5985] usb 3-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config [ 896.693366][ T5985] usb 3-1: too many endpoints for config 0 interface 0 altsetting 128: 40, using maximum allowed: 30 [ 896.742490][ T5985] usb 3-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 40 [ 896.805772][ T5985] usb 3-1: config 0 interface 0 has no altsetting 0 [ 896.815969][ T5985] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 896.825075][ T5985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.896300][T11296] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 896.915264][ T5985] usb 3-1: config 0 descriptor?? [ 897.127265][T11296] usb 6-1: config 0 has an invalid interface number: 23 but max is 0 [ 897.135416][T11296] usb 6-1: config 0 has no interface number 0 [ 897.164261][T11296] usb 6-1: config 0 interface 23 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 897.184554][T11296] usb 6-1: config 0 interface 23 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 897.209977][T11296] usb 6-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 897.230697][T11296] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.245705][T11296] usb 6-1: Product: syz [ 897.257665][T11296] usb 6-1: Manufacturer: syz [ 897.265371][T11296] usb 6-1: SerialNumber: syz [ 897.336706][T17480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.358721][T11296] usb 6-1: config 0 descriptor?? [ 897.364111][T17480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.374085][T17500] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 897.395802][T17500] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 897.417265][T11296] ums-usbat 6-1:0.23: USB Mass Storage device detected [ 897.477321][T17513] xt_CT: No such helper "syz1" [ 897.685822][T11296] ums-usbat 6-1:0.23: probe with driver ums-usbat failed with error -5 [ 897.711434][T11296] usb 6-1: USB disconnect, device number 51 [ 897.902772][ T5985] IPVS: starting estimator thread 0... [ 897.999712][T17527] IPVS: using max 27 ests per chain, 64800 per kthread [ 898.222591][T17530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 898.292479][ T3477] IPVS: stop unused estimator thread 0... [ 898.655753][ T5985] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 898.705942][T11296] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 898.822474][ T5985] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 898.832792][ T5985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.043233][ T5985] usb 6-1: Product: syz [ 899.052077][T11296] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 899.062016][ T5985] usb 6-1: Manufacturer: syz [ 899.069297][T11296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.079078][ T5985] usb 6-1: SerialNumber: syz [ 899.091967][T11296] usb 5-1: config 0 descriptor?? [ 899.097496][ T5985] usb 6-1: config 0 descriptor?? [ 899.115186][T11296] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 899.316488][ T5985] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 899.403224][ T981] usb 3-1: USB disconnect, device number 16 [ 899.569094][T11296] gp8psk: usb in 128 operation failed. [ 899.585428][T11296] gp8psk: usb in 137 operation failed. [ 899.592756][T11296] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 899.603777][T11296] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 899.645041][T11296] usb 5-1: USB disconnect, device number 122 [ 899.759237][T17552] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3224'. [ 900.661309][T17582] netlink: 'syz.2.3236': attribute type 3 has an invalid length. [ 900.807182][ T5985] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 900.847186][ T5985] usb 6-1: USB disconnect, device number 52 [ 900.906078][T11296] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 901.087287][T11296] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 901.098587][T11296] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 901.109300][T11296] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 901.122146][T11296] usb 7-1: config 1 has no interface number 1 [ 901.131233][T11296] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 901.148127][T11296] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 901.158072][T11296] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.167426][T11296] usb 7-1: Product: syz [ 901.174130][T11296] usb 7-1: Manufacturer: syz [ 901.182143][T11296] usb 7-1: SerialNumber: syz [ 901.225783][ T7826] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 901.375761][ T7826] usb 3-1: Using ep0 maxpacket: 16 [ 901.386358][ T7826] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 901.397276][ T7826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.408392][ T7826] usb 3-1: Product: syz [ 901.412650][ T7826] usb 3-1: Manufacturer: syz [ 901.470493][T11296] usb 7-1: USB disconnect, device number 42 [ 901.643092][ T7826] usb 3-1: SerialNumber: syz [ 901.658239][ T7826] usb 3-1: config 0 descriptor?? [ 902.025713][ T795] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 902.162478][ T7826] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 902.225856][ T7826] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 902.245018][ T795] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 902.258566][ T7826] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 902.271312][ T795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.287386][ T7826] usb 3-1: media controller created [ 902.297343][ T795] usb 5-1: Product: syz [ 902.302651][ T795] usb 5-1: Manufacturer: syz [ 902.345811][ T795] usb 5-1: SerialNumber: syz [ 902.453242][ T7826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 902.483714][ T795] usb 5-1: config 0 descriptor?? [ 902.730740][ T7826] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 902.749928][ T7826] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 902.956779][ T5985] usb 3-1: USB disconnect, device number 17 [ 903.083985][ T5985] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 903.252007][T17606] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3243'. [ 904.047128][T17622] netlink: 'syz.6.3247': attribute type 8 has an invalid length. [ 904.195215][T17625] tipc: Enabling of bearer rejected, failed to enable media [ 904.746292][T17631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3251'. [ 904.805384][T17631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3251'. [ 904.817101][ T5985] usb 5-1: USB disconnect, device number 123 [ 904.889714][T17632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3251'. [ 905.486865][ T7826] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 905.655719][ T7826] usb 7-1: Using ep0 maxpacket: 16 [ 905.673946][ T7826] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 905.704066][ T7826] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.728550][ T7826] usb 7-1: Product: syz [ 905.733989][ T7826] usb 7-1: Manufacturer: syz [ 905.746677][ T7826] usb 7-1: SerialNumber: syz [ 905.771077][ T7826] usb 7-1: config 0 descriptor?? [ 906.249006][ T7826] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 906.274755][ T7826] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 906.417206][ T7826] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 906.457549][ T795] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 906.466028][ T5985] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 906.547972][ T7826] usb 7-1: media controller created [ 906.631528][ T7826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 906.716664][ T7826] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 906.725749][ T5985] usb 6-1: Using ep0 maxpacket: 8 [ 906.741386][ T7826] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 906.763492][ T795] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 906.788212][ T5985] usb 6-1: unable to get BOS descriptor or descriptor too short [ 906.811477][ T5985] usb 6-1: config 4 interface 0 has no altsetting 0 [ 906.818444][ T795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.828541][ T795] usb 5-1: Product: syz [ 906.832863][ T795] usb 5-1: Manufacturer: syz [ 906.845231][ T795] usb 5-1: SerialNumber: syz [ 906.853093][ T5985] usb 6-1: string descriptor 0 read error: -22 [ 906.859965][ T5985] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 906.868164][ T795] usb 5-1: config 0 descriptor?? [ 906.869866][ T5985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.921873][ T981] usb 7-1: USB disconnect, device number 43 [ 906.988559][ T5985] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 907.017740][ T5985] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 907.034381][ T981] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 907.048762][ T5985] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 907.071791][ T5985] usb 6-1: media controller created [ 907.111781][ T795] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 907.159907][ T5985] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 907.526008][ T7826] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 907.655712][ T7826] usb 3-1: device descriptor read/64, error -71 [ 907.888721][T17674] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3265'. [ 908.035695][ T7826] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 908.162704][T17676] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3266'. [ 908.185903][ T7826] usb 3-1: device descriptor read/64, error -71 [ 908.303352][ T7826] usb usb3-port1: attempt power cycle [ 908.646035][ T7826] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 908.677590][ T7826] usb 3-1: device descriptor read/8, error -71 [ 908.904834][ T795] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 908.925744][ T7826] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 908.938079][ T795] usb 5-1: USB disconnect, device number 124 [ 908.964784][ T7826] usb 3-1: device descriptor read/8, error -71 [ 909.096320][ T7826] usb usb3-port1: unable to enumerate USB device [ 909.465945][ T5985] usb 6-1: USB disconnect, device number 53 [ 910.125871][T17702] netlink: 'syz.5.3275': attribute type 8 has an invalid length. [ 910.925024][ T795] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 911.145735][ T795] usb 7-1: Using ep0 maxpacket: 8 [ 911.166725][ T795] usb 7-1: unable to get BOS descriptor or descriptor too short [ 911.214633][ T7826] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 911.244579][ T795] usb 7-1: config 4 interface 0 has no altsetting 0 [ 911.342042][ T795] usb 7-1: string descriptor 0 read error: -22 [ 911.355079][ T795] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 911.395686][ T7826] usb 3-1: Using ep0 maxpacket: 32 [ 911.420882][ T795] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.432430][ T7826] usb 3-1: config 9 has an invalid interface number: 37 but max is 0 [ 911.441141][ T7826] usb 3-1: config 9 has no interface number 0 [ 911.452181][ T7826] usb 3-1: config 9 interface 37 has no altsetting 0 [ 911.507735][ T7826] usb 3-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 911.517259][ T7826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.537889][ T7826] usb 3-1: Product: х [ 911.542063][ T7826] usb 3-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣 [ 911.577828][ T795] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 911.595380][ T795] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 911.645964][ T7826] usb 3-1: SerialNumber: syz [ 911.654044][ T795] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 911.671933][ T795] usb 7-1: media controller created [ 911.723419][ T795] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 911.736362][T17724] netlink: 'syz.5.3282': attribute type 8 has an invalid length. [ 912.877640][ T795] zl10353_read_register: readreg error (reg=127, ret==0) [ 913.062858][T17729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 913.376519][ T30] kauditd_printk_skb: 101 callbacks suppressed [ 913.376560][ T30] audit: type=1326 audit(1767001706.462:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17732 comm="syz.5.3286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 913.417652][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3286'. [ 913.476209][ T30] audit: type=1326 audit(1767001706.492:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17732 comm="syz.5.3286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 913.568154][ T30] audit: type=1326 audit(1767001706.492:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17732 comm="syz.5.3286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 913.592929][ T30] audit: type=1326 audit(1767001706.492:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17732 comm="syz.5.3286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 913.616267][ T30] audit: type=1326 audit(1767001706.492:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17732 comm="syz.5.3286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 913.638776][ T30] audit: type=1326 audit(1767001706.492:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17732 comm="syz.5.3286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 913.669662][ T30] audit: type=1326 audit(1767001706.492:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17732 comm="syz.5.3286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 913.700781][ T30] audit: type=1326 audit(1767001706.492:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17732 comm="syz.5.3286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 913.796413][ T30] audit: type=1326 audit(1767001706.492:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17732 comm="syz.5.3286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 913.846861][ T795] usb 7-1: USB disconnect, device number 44 [ 913.853748][ T30] audit: type=1326 audit(1767001706.492:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17732 comm="syz.5.3286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 914.205265][ T7826] gspca_main: spca506-2.14.0 probing 0734:043b [ 914.305821][ T795] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 914.409286][ T7826] usb 3-1: USB disconnect, device number 22 [ 914.516953][ T795] usb 5-1: Using ep0 maxpacket: 8 [ 914.565991][ T6060] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 914.587158][ T795] usb 5-1: unable to get BOS descriptor or descriptor too short [ 914.659002][ T795] usb 5-1: config 4 interface 0 has no altsetting 0 [ 915.121506][ T6060] usb 6-1: Using ep0 maxpacket: 16 [ 915.134996][ T795] usb 5-1: string descriptor 0 read error: -22 [ 915.198824][ T795] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 915.210334][ T6060] usb 6-1: config 1 interface 0 altsetting 2 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 915.238526][ T795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.288981][ T6060] usb 6-1: config 1 interface 0 has no altsetting 0 [ 915.341839][ T6060] usb 6-1: New USB device found, idVendor=093a, idProduct=8001, bcdDevice= 0.40 [ 915.361480][ T6060] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.395455][ T795] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 915.413635][ T6060] usb 6-1: Product: ᰉ [ 915.442004][ T795] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 915.457431][ T6060] usb 6-1: Manufacturer: 뉚딄寰慬䋣鵿䅚彜㈰汰棺厳혔㢸鵴ゔ죡측ࢨ̘駽㦖拆穠䫷뇁胱ꗦ⠀茜胵ᮐ뺮痩滖窇峪螁툮抠㰹♣ꇸ珞힃陑姈ݜ拕㰳쯼䔪㤵律쑯菞愆옂硫襅ꅋ⣸린侈粮跎楚琍啜髬얮嚜帳☘鸅⽋᧢琿舣〪批㴄䦭弈劓䮌 [ 915.495123][ T795] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 915.507962][ T795] usb 5-1: media controller created [ 915.562672][ T6060] usb 6-1: SerialNumber: ◄伊㢓㵙⡐썼綟㳽ꝟ계쒒輁쒿ᚣⳬꅖ羔扄蕓츹흴ㅥ퉅쯶ﴻ㾫坃ꢗᚼ災法⌱祃惙䶥㥞ꞝ荃뉋ㆽጡϼ怜밈慭 [ 915.650755][ T5985] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 915.671677][ T795] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 915.986214][ T5985] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 916.009431][ T5985] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.039781][ T5985] usb 7-1: Product: syz [ 916.044183][ T5985] usb 7-1: Manufacturer: syz [ 916.062050][ T5985] usb 7-1: SerialNumber: syz [ 916.074873][ T5985] usb 7-1: config 0 descriptor?? [ 916.285960][ T6060] usbhid 6-1:1.0: can't add hid device: -71 [ 916.301261][ T5985] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 916.316363][ T6060] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 916.376498][ T6060] usb 6-1: USB disconnect, device number 54 [ 916.455849][T17769] binder: 17768:17769 ioctl 40045701 80000180 returned -22 [ 917.825937][ T981] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 917.896989][T17781] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3298'. [ 917.989495][ T5985] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 918.012855][ T5985] usb 7-1: USB disconnect, device number 45 [ 918.019282][ T981] usb 6-1: Using ep0 maxpacket: 8 [ 918.105821][ T981] usb 6-1: unable to get BOS descriptor or descriptor too short [ 918.119665][ T981] usb 6-1: config 4 interface 0 has no altsetting 0 [ 918.161638][ T981] usb 6-1: string descriptor 0 read error: -22 [ 918.176826][ T981] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 918.194412][ T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.276032][ T981] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 918.295090][ T981] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 918.314740][ T981] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 918.327080][ T981] usb 6-1: media controller created [ 918.378549][ T981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 918.567716][T17785] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3299'. [ 918.672034][ T5985] usb 5-1: USB disconnect, device number 125 [ 918.873098][T17787] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3299'. [ 919.815692][ T795] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 919.984463][T17809] netlink: 'syz.7.3306': attribute type 12 has an invalid length. [ 920.014846][ T795] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 920.032344][ T795] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.040588][T17809] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3306'. [ 920.061474][ T795] usb 7-1: Product: syz [ 920.071970][ T795] usb 7-1: Manufacturer: syz [ 920.086423][ T795] usb 7-1: SerialNumber: syz [ 920.112230][ T795] usb 7-1: config 0 descriptor?? [ 920.176754][ T6060] hid_parser_main: 4086 callbacks suppressed [ 920.176773][ T6060] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 920.203701][ T6060] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 920.212408][ T6060] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 920.235535][ T6060] hid-generic 0003:0004:0000.0016: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 920.486512][T17813] fido_id[17813]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 920.664589][ T6060] usb 6-1: USB disconnect, device number 55 [ 920.792271][T17819] netlink: 'syz.2.3309': attribute type 10 has an invalid length. [ 920.805420][T17819] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3309'. [ 920.815360][T17819] dummy0: entered promiscuous mode [ 920.839446][T17819] bridge0: port 3(dummy0) entered blocking state [ 920.846027][ T795] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 920.958829][T17819] bridge0: port 3(dummy0) entered disabled state [ 920.975241][T17819] dummy0: entered allmulticast mode [ 921.029724][ T795] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 921.043939][ T795] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 921.084786][ T795] usb 5-1: config 0 has no interface number 0 [ 921.115066][ T795] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 921.134642][ T795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.174116][ T795] usb 5-1: Product: syz [ 921.188903][ T795] usb 5-1: Manufacturer: syz [ 921.201682][ T795] usb 5-1: SerialNumber: syz [ 921.222761][ T795] usb 5-1: config 0 descriptor?? [ 921.242083][ T795] hub 5-1:0.31: bad descriptor, ignoring hub [ 921.253857][ T795] hub 5-1:0.31: probe with driver hub failed with error -5 [ 921.305540][ T795] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 921.322913][ T795] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 921.346455][ T795] uvcvideo 5-1:0.31: Failed to create links for entity 6 [ 921.366048][ T795] uvcvideo 5-1:0.31: Failed to register entities (-22). [ 921.576027][ T5985] usb 5-1: USB disconnect, device number 126 [ 921.593318][T17824] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3311'. [ 922.333418][T17843] syzkaller0: entered promiscuous mode [ 922.473507][T17847] netlink: 'syz.4.3320': attribute type 8 has an invalid length. [ 922.653015][ T795] usb 7-1: USB disconnect, device number 46 [ 922.882116][ T7826] IPVS: starting estimator thread 0... [ 922.962181][T17860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3323'. [ 922.995810][T17858] IPVS: using max 37 ests per chain, 88800 per kthread [ 923.165434][T17862] syzkaller0: entered promiscuous mode [ 923.182989][T17862] syzkaller0: entered allmulticast mode [ 923.298323][T17862] tipc: Enabled bearer , priority 0 [ 923.307662][T17861] tipc: Resetting bearer [ 923.334516][T17861] tipc: Disabling bearer [ 923.495791][ T5985] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 923.561230][T17868] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3327'. [ 923.690922][ T5985] usb 5-1: Using ep0 maxpacket: 8 [ 923.714484][ T5985] usb 5-1: unable to get BOS descriptor or descriptor too short [ 923.809311][ T5985] usb 5-1: config 4 interface 0 has no altsetting 0 [ 923.840614][ T5985] usb 5-1: string descriptor 0 read error: -22 [ 923.850367][ T5985] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 923.882537][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.899453][T17873] netlink: 3184 bytes leftover after parsing attributes in process `syz.6.3329'. [ 923.917576][ T5985] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 923.959376][ T5985] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 923.998013][ T5985] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 924.016354][ T5985] usb 5-1: media controller created [ 924.062899][ T5985] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 924.132792][T17875] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3331'. [ 924.319663][T17882] netlink: 'syz.6.3333': attribute type 8 has an invalid length. [ 924.945743][ T981] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 925.112585][ T981] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 925.123541][ T981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.140313][ T981] usb 7-1: Product: syz [ 925.168012][ T981] usb 7-1: Manufacturer: syz [ 925.190859][ T981] usb 7-1: SerialNumber: syz [ 925.211623][ T981] usb 7-1: config 0 descriptor?? [ 925.251065][T17893] Cannot find set identified by id 0 to match [ 925.275905][ T5985] zl10353_read_register: readreg error (reg=127, ret==0) [ 925.719196][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 925.719219][ T30] audit: type=1326 audit(1767001718.802:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17898 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 925.783517][ T30] audit: type=1326 audit(1767001718.802:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17898 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 925.828593][T17902] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3339'. [ 925.960293][ T5985] usb 5-1: USB disconnect, device number 127 [ 926.045803][ T30] audit: type=1326 audit(1767001718.802:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17898 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 926.088674][ T30] audit: type=1326 audit(1767001718.832:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17898 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 926.128706][ T30] audit: type=1326 audit(1767001718.832:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17898 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 926.173019][ T30] audit: type=1326 audit(1767001718.832:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17898 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 926.221879][ T30] audit: type=1326 audit(1767001718.832:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17898 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 926.274810][ T30] audit: type=1326 audit(1767001718.832:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17898 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 926.326027][ T30] audit: type=1326 audit(1767001718.832:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17898 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 926.373752][ T30] audit: type=1326 audit(1767001718.832:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17898 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 926.516105][T17909] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3343'. [ 926.753233][T17914] netlink: 'syz.4.3344': attribute type 8 has an invalid length. [ 926.861593][T17920] delete_channel: no stack [ 927.162166][T17927] netlink: 'syz.4.3347': attribute type 10 has an invalid length. [ 927.176074][T17927] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3347'. [ 927.197404][T17927] dummy0: entered promiscuous mode [ 927.217281][T17927] bridge0: port 3(dummy0) entered blocking state [ 927.225325][T17927] bridge0: port 3(dummy0) entered disabled state [ 927.250064][T17927] dummy0: entered allmulticast mode [ 927.261888][T17927] bridge0: port 3(dummy0) entered blocking state [ 927.268531][T17927] bridge0: port 3(dummy0) entered forwarding state [ 927.616954][ T795] usb 7-1: USB disconnect, device number 47 [ 928.065452][T17948] netlink: 'syz.6.3357': attribute type 8 has an invalid length. [ 928.236061][ T5985] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 928.395732][ T5985] usb 6-1: Using ep0 maxpacket: 8 [ 928.427781][ T5985] usb 6-1: unable to get BOS descriptor or descriptor too short [ 928.460351][ T5985] usb 6-1: config 4 interface 0 has no altsetting 0 [ 928.531969][ T5985] usb 6-1: string descriptor 0 read error: -22 [ 928.538408][ T5985] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 928.547878][ T5985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.573256][ T5985] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 928.605505][ T5985] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 928.636236][ T5985] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 928.659434][ T5985] usb 6-1: media controller created [ 928.733085][ T5985] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 929.546477][ T795] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 929.595833][ T7826] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 929.727509][ T795] usb 7-1: Using ep0 maxpacket: 16 [ 929.739676][ T795] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 929.749258][ T7826] usb 5-1: Using ep0 maxpacket: 16 [ 929.755014][ T795] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.773108][ T7826] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 929.793509][ T7826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.802183][ T795] usb 7-1: Product: syz [ 929.807730][ T7826] usb 5-1: Product: syz [ 929.815700][ T795] usb 7-1: Manufacturer: syz [ 929.869148][ T7826] usb 5-1: Manufacturer: syz [ 929.874556][ T795] usb 7-1: SerialNumber: syz [ 929.882613][ T7826] usb 5-1: SerialNumber: syz [ 929.893184][ T795] usb 7-1: config 0 descriptor?? [ 929.909512][ T7826] usb 5-1: config 0 descriptor?? [ 929.926638][ T5985] zl10353_read_register: readreg error (reg=127, ret==0) [ 930.350685][ T795] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 930.386268][ T795] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 930.400660][ T795] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 930.428456][ T795] usb 7-1: media controller created [ 930.575378][ T795] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 930.656221][ T7826] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 930.667950][ T795] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 930.680676][ T795] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 930.969797][ T795] usb 7-1: USB disconnect, device number 48 [ 931.054666][ T795] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 931.242688][ T5985] usb 6-1: USB disconnect, device number 56 [ 931.500135][T17988] binder: 17980:17988 ioctl c018620c 800002c0 returned -1 [ 931.566332][T17990] netlink: 'syz.6.3372': attribute type 8 has an invalid length. [ 931.797232][T17997] random: crng reseeded on system resumption [ 931.874873][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 931.874893][ T30] audit: type=1400 audit(1767001724.952:1766): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F26F81648AA2A pid=17996 comm="syz.2.3374" [ 932.271440][ T5985] usb 5-1: USB disconnect, device number 2 [ 932.341097][T18005] Cannot find del_set index 2 as target [ 932.587499][T18009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3377'. [ 933.155944][ T7826] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 933.318801][ T7826] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 933.326705][ T7826] usb 3-1: can't read configurations, error -61 [ 933.645882][ T7826] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 933.843476][ T7826] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 933.865761][ T7826] usb 3-1: can't read configurations, error -61 [ 933.873396][ T7826] usb usb3-port1: attempt power cycle [ 934.269777][ T7826] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 934.300102][ T7826] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 934.332523][ T7826] usb 3-1: can't read configurations, error -61 [ 934.476735][ T7826] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 934.514501][ T7826] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 934.602402][ T7826] usb 3-1: can't read configurations, error -61 [ 934.610367][ T7826] usb usb3-port1: unable to enumerate USB device [ 934.658827][T18043] @: renamed from bond_slave_0 [ 935.571805][T18059] lo: entered promiscuous mode [ 935.579061][T18059] tunl0: entered promiscuous mode [ 935.589244][T18059] gre0: entered promiscuous mode [ 935.603308][T18059] gretap0: entered promiscuous mode [ 935.614104][T18059] erspan0: entered promiscuous mode [ 935.626178][T18059] ip_vti0: entered promiscuous mode [ 935.637247][T18059] ip6_vti0: entered promiscuous mode [ 935.646692][T18059] sit0: entered promiscuous mode [ 935.659972][T18059] ip6tnl0: entered promiscuous mode [ 935.708507][T18059] ip6gre0: entered promiscuous mode [ 935.718107][T18059] syz_tun: entered promiscuous mode [ 935.728281][T18059] ip6gretap0: entered promiscuous mode [ 935.842663][T18059] bridge0: entered promiscuous mode [ 935.870806][T18059] vcan0: entered promiscuous mode [ 935.894389][T18059] bond0: entered promiscuous mode [ 935.906601][T18059] bond_slave_0: entered promiscuous mode [ 935.923336][T18059] bond_slave_1: entered promiscuous mode [ 935.942932][T18059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.989265][T18059] team0: entered promiscuous mode [ 936.002074][T18059] team_slave_0: entered promiscuous mode [ 936.022641][T18059] team_slave_1: entered promiscuous mode [ 936.036120][T18059] macvlan0: entered promiscuous mode [ 936.057237][T18059] geneve0: entered promiscuous mode [ 936.077487][T18059] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.103330][T18059] bridge0: port 3(dummy0) entered blocking state [ 936.110203][T18059] bridge0: port 3(dummy0) entered forwarding state [ 936.176208][T18059] nlmon0: entered promiscuous mode [ 936.326372][T18059] caif0: entered promiscuous mode [ 936.331977][T18059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 936.549617][ T3732] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 936.589473][ T3732] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 936.606907][ T3732] bond0: now running without any active interface! [ 936.971293][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.978197][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.285875][ T5985] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 937.690792][ T5985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.730803][ T5985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 937.770063][ T5985] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 937.836017][ T5985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.873540][ T5985] usb 3-1: config 0 descriptor?? [ 938.389342][ T5985] usbhid 3-1:0.0: can't add hid device: -71 [ 938.395874][ T5985] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 938.407156][ T5985] usb 3-1: USB disconnect, device number 27 [ 938.974281][T18091] FAULT_INJECTION: forcing a failure. [ 938.974281][T18091] name failslab, interval 1, probability 0, space 0, times 0 [ 938.991596][T18091] CPU: 1 UID: 0 PID: 18091 Comm: syz.4.3404 Tainted: G L syzkaller #0 PREEMPT(full) [ 938.991633][T18091] Tainted: [L]=SOFTLOCKUP [ 938.991642][T18091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 938.991656][T18091] Call Trace: [ 938.991665][T18091] [ 938.991676][T18091] dump_stack_lvl+0xe8/0x150 [ 938.991723][T18091] should_fail_ex+0x414/0x560 [ 938.991764][T18091] should_failslab+0xa8/0x100 [ 938.991794][T18091] __kmalloc_noprof+0xdf/0x800 [ 938.991816][T18091] ? tomoyo_encode+0x28b/0x550 [ 938.991851][T18091] tomoyo_encode+0x28b/0x550 [ 938.991886][T18091] tomoyo_realpath_from_path+0x58d/0x5d0 [ 938.991929][T18091] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 938.991953][T18091] tomoyo_path_number_perm+0x1e8/0x5a0 [ 938.991981][T18091] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 938.992005][T18091] ? __lock_acquire+0x6b6/0x2cf0 [ 938.992031][T18091] ? get_pid_task+0x20/0x1f0 [ 938.992071][T18091] ? get_pid_task+0x20/0x1f0 [ 938.992119][T18091] ? __fget_files+0x2a/0x420 [ 938.992151][T18091] ? __fget_files+0x3a0/0x420 [ 938.992177][T18091] ? __fget_files+0x2a/0x420 [ 938.992209][T18091] security_file_ioctl_compat+0xcb/0x2d0 [ 938.992234][T18091] __ia32_compat_sys_ioctl+0x128/0x840 [ 938.992260][T18091] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 938.992283][T18091] ? __fget_files+0x3a0/0x420 [ 938.992318][T18091] ? fput+0xa0/0xd0 [ 938.992348][T18091] ? ksys_write+0x22a/0x250 [ 938.992372][T18091] ? __pfx_ksys_write+0x10/0x10 [ 938.992406][T18091] __do_fast_syscall_32+0x1dc/0x560 [ 938.992438][T18091] ? lockdep_hardirqs_on+0x7b/0x110 [ 938.992459][T18091] ? do_fast_syscall_32+0x34/0x80 [ 938.992482][T18091] ? irqentry_exit+0x10f/0x660 [ 938.992508][T18091] do_fast_syscall_32+0x34/0x80 [ 938.992534][T18091] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 938.992561][T18091] RIP: 0023:0xf701d539 [ 938.992581][T18091] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 938.992600][T18091] RSP: 002b:00000000f540d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 938.992624][T18091] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000007a9 [ 938.992639][T18091] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 938.992652][T18091] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 938.992665][T18091] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 938.992678][T18091] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 938.992827][T18091] [ 938.992866][T18091] ERROR: Out of memory at tomoyo_realpath_from_path. [ 939.096455][ T5985] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 939.170856][ T795] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 939.348061][ T5985] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 939.395729][ T5985] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 939.426796][ T5985] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 939.447081][ T5985] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.462027][ T795] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 939.468173][ T5985] usb 7-1: Product: syz [ 939.470617][ T795] usb 6-1: can't read configurations, error -61 [ 939.475913][ T5985] usb 7-1: Manufacturer: syz [ 939.495693][ T5985] usb 7-1: SerialNumber: syz [ 939.524361][ T5985] usb 7-1: config 0 descriptor?? [ 939.566082][ T5985] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input43 [ 939.625904][ T795] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 939.754924][ T5985] usb 7-1: USB disconnect, device number 49 [ 939.818319][ T795] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 939.837887][ T795] usb 6-1: can't read configurations, error -61 [ 939.855363][ T795] usb usb6-port1: attempt power cycle [ 939.935701][T11297] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 940.086080][T11297] usb 5-1: Using ep0 maxpacket: 16 [ 940.112995][T11297] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 940.127779][T11297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.143023][T11297] usb 5-1: Product: syz [ 940.174555][T11297] usb 5-1: Manufacturer: syz [ 940.182524][T11297] usb 5-1: SerialNumber: syz [ 940.203558][T11297] usb 5-1: config 0 descriptor?? [ 940.206368][ T795] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 940.257377][ T795] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 940.275915][ T795] usb 6-1: can't read configurations, error -61 [ 940.285768][ T5985] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 940.446047][ T795] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 940.455777][ T5985] usb 3-1: Using ep0 maxpacket: 8 [ 940.495311][ T795] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 940.511560][ T795] usb 6-1: can't read configurations, error -61 [ 940.538321][ T795] usb usb6-port1: unable to enumerate USB device [ 940.546936][ T5985] usb 3-1: unable to get BOS descriptor or descriptor too short [ 940.632850][T11297] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 940.675728][ T5985] usb 3-1: config 4 interface 0 has no altsetting 0 [ 940.804399][ T5985] usb 3-1: string descriptor 0 read error: -22 [ 940.837887][ T5985] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 940.848481][ T5985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.913433][T11297] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 940.959434][T11297] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 940.968750][ T5985] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 940.999344][T11297] usb 5-1: media controller created [ 941.070976][T11297] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 941.086713][ T5985] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 941.142413][ T5985] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 941.195750][T18099] ------------[ cut here ]------------ [ 941.202385][T18099] usb 5-1: BOGUS control dir, pipe 80000380 doesn't match bRequestType c0 [ 941.212555][T18099] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x105c/0x18d0, CPU#1: syz.2.3405/18099 [ 941.223735][T18099] Modules linked in: [ 941.226151][ T5985] usb 3-1: media controller created [ 941.228930][T18099] CPU: 1 UID: 0 PID: 18099 Comm: syz.2.3405 Tainted: G L syzkaller #0 PREEMPT(full) [ 941.245712][T18099] Tainted: [L]=SOFTLOCKUP [ 941.251688][T18099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 941.263528][T18099] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 941.270023][T18099] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 941.290504][T18099] RSP: 0018:ffffc900043ef740 EFLAGS: 00010246 [ 941.297022][T18099] RAX: 0000000000000000 RBX: ffff88802705da00 RCX: 0000000080000380 [ 941.305392][T18099] RDX: ffff888029cb4d80 RSI: ffffffff8c140a00 RDI: ffffffff8f8ee390 [ 941.313645][T18099] RBP: 1ffff1100b8064dc R08: 00000000000000c0 R09: 0000000000000000 [ 941.321706][T18099] R10: ffffc900043ef840 R11: fffff5200087df14 R12: ffff88806b0ef100 [ 941.329945][T18099] R13: ffff88805c0326e0 R14: 0000000080000380 R15: ffff888029cb4d80 [ 941.338119][T18099] FS: 0000000000000000(0000) GS:ffff888125f21000(0063) knlGS:00000000f549bb40 [ 941.347590][T18099] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 941.354321][T18099] CR2: 000000002d813ffc CR3: 000000004b126000 CR4: 00000000003526f0 [ 941.363860][T18099] DR0: 0000000000000004 DR1: 0000000000000000 DR2: 0000000000000000 [ 941.373962][T18099] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 941.382886][T18099] Call Trace: [ 941.386988][T18099] [ 941.390504][T18099] ? __init_swait_queue_head+0xa9/0x150 [ 941.396744][T18099] usb_start_wait_urb+0x115/0x4f0 [ 941.402033][T18099] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 941.408026][T18099] usb_control_msg+0x232/0x3e0 [ 941.413396][T18099] dtv5100_i2c_msg+0x231/0x2f0 [ 941.418719][T18099] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 941.423740][T18099] __i2c_transfer+0x79a/0x1f00 [ 941.428924][T18099] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 941.434784][T18099] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 941.441192][T18099] ? i2c_transfer+0xc8/0x2d0 [ 941.445958][T18099] i2c_transfer+0x1cc/0x2d0 [ 941.450555][T18099] i2cdev_ioctl_rdwr+0x460/0x740 [ 941.455539][T18099] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 941.461142][T18099] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 941.467240][T18099] ? __fget_files+0x3a0/0x420 [ 941.472045][T18099] ? __fget_files+0x2a/0x420 [ 941.476734][T18099] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 941.482744][T18099] __ia32_compat_sys_ioctl+0x543/0x840 [ 941.488538][T18099] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 941.494697][T18099] ? __se_sys_futex_time32+0x360/0x3e0 [ 941.500776][T18099] ? __pfx_do_sys_openat2+0x10/0x10 [ 941.506275][T18099] ? rcu_is_watching+0x15/0xb0 [ 941.511971][T18099] __do_fast_syscall_32+0x1dc/0x560 [ 941.517675][T18099] ? lockdep_hardirqs_on+0x7b/0x110 [ 941.523007][T18099] ? do_fast_syscall_32+0x34/0x80 [ 941.528320][T18099] ? irqentry_exit+0x10f/0x660 [ 941.533377][T18099] do_fast_syscall_32+0x34/0x80 [ 941.538334][T18099] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 941.544932][T18099] RIP: 0023:0xf70ed539 [ 941.549186][T18099] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 941.570174][T18099] RSP: 002b:00000000f549b55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 941.579276][T18099] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000000000707 [ 941.587744][T18099] RDX: 0000000080000a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 941.596672][T18099] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 941.604854][T18099] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 941.613324][T18099] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 941.621481][T18099] [ 941.624892][T18099] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 941.632511][T18099] CPU: 1 UID: 0 PID: 18099 Comm: syz.2.3405 Tainted: G L syzkaller #0 PREEMPT(full) [ 941.643767][T18099] Tainted: [L]=SOFTLOCKUP [ 941.648107][T18099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 941.658451][T18099] Call Trace: [ 941.662093][T18099] [ 941.665119][T18099] vpanic+0x1e0/0x670 [ 941.669353][T18099] panic+0xb9/0xc0 [ 941.673105][T18099] ? __pfx_panic+0x10/0x10 [ 941.677596][T18099] __warn+0x317/0x4b0 [ 941.681702][T18099] ? usb_submit_urb+0x105c/0x18d0 [ 941.687549][T18099] ? usb_submit_urb+0x105c/0x18d0 [ 941.693045][T18099] __report_bug+0x288/0x500 [ 941.697895][T18099] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 941.704145][T18099] ? usb_submit_urb+0x105c/0x18d0 [ 941.709897][T18099] ? __pfx___report_bug+0x10/0x10 [ 941.715283][T18099] ? usb_submit_urb+0x1121/0x18d0 [ 941.720369][T18099] report_bug_entry+0x19a/0x290 [ 941.725369][T18099] ? usb_submit_urb+0x111c/0x18d0 [ 941.730436][T18099] ? usb_submit_urb+0x1121/0x18d0 [ 941.735551][T18099] handle_bug+0xca/0x200 [ 941.740265][T18099] exc_invalid_op+0x1a/0x50 [ 941.744940][T18099] asm_exc_invalid_op+0x1a/0x20 [ 941.749833][T18099] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 941.755700][T18099] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 941.776028][T18099] RSP: 0018:ffffc900043ef740 EFLAGS: 00010246 [ 941.782427][T18099] RAX: 0000000000000000 RBX: ffff88802705da00 RCX: 0000000080000380 [ 941.790741][T18099] RDX: ffff888029cb4d80 RSI: ffffffff8c140a00 RDI: ffffffff8f8ee390 [ 941.799380][T18099] RBP: 1ffff1100b8064dc R08: 00000000000000c0 R09: 0000000000000000 [ 941.808173][T18099] R10: ffffc900043ef840 R11: fffff5200087df14 R12: ffff88806b0ef100 [ 941.816351][T18099] R13: ffff88805c0326e0 R14: 0000000080000380 R15: ffff888029cb4d80 [ 941.824578][T18099] ? __init_swait_queue_head+0xa9/0x150 [ 941.830274][T18099] usb_start_wait_urb+0x115/0x4f0 [ 941.835459][T18099] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 941.841252][T18099] usb_control_msg+0x232/0x3e0 [ 941.846264][T18099] dtv5100_i2c_msg+0x231/0x2f0 [ 941.851190][T18099] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 941.856219][T18099] __i2c_transfer+0x79a/0x1f00 [ 941.861327][T18099] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 941.867385][T18099] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 941.873267][T18099] ? i2c_transfer+0xc8/0x2d0 [ 941.877923][T18099] i2c_transfer+0x1cc/0x2d0 [ 941.882505][T18099] i2cdev_ioctl_rdwr+0x460/0x740 [ 941.888216][T18099] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 941.893434][T18099] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 941.899160][T18099] ? __fget_files+0x3a0/0x420 [ 941.903914][T18099] ? __fget_files+0x2a/0x420 [ 941.908670][T18099] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 941.914359][T18099] __ia32_compat_sys_ioctl+0x543/0x840 [ 941.920054][T18099] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 941.926373][T18099] ? __se_sys_futex_time32+0x360/0x3e0 [ 941.931940][T18099] ? __pfx_do_sys_openat2+0x10/0x10 [ 941.938005][T18099] ? rcu_is_watching+0x15/0xb0 [ 941.942882][T18099] __do_fast_syscall_32+0x1dc/0x560 [ 941.948900][T18099] ? lockdep_hardirqs_on+0x7b/0x110 [ 941.954407][T18099] ? do_fast_syscall_32+0x34/0x80 [ 941.959665][T18099] ? irqentry_exit+0x10f/0x660 [ 941.964609][T18099] do_fast_syscall_32+0x34/0x80 [ 941.969527][T18099] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 941.976275][T18099] RIP: 0023:0xf70ed539 [ 941.980902][T18099] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 942.002033][T18099] RSP: 002b:00000000f549b55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 942.010583][T18099] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000000000707 [ 942.019028][T18099] RDX: 0000000080000a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 942.027052][T18099] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 942.035422][T18099] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 942.043614][T18099] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 942.051910][T18099] [ 942.055620][T18099] Kernel Offset: disabled [ 942.060080][T18099] Rebooting in 86400 seconds..