last executing test programs: 8m56.762791541s ago: executing program 4 (id=879): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0xce21, 0x814, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xfffbffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x4000010) 8m56.560329921s ago: executing program 4 (id=880): socket(0x2a, 0x2, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x800) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x7, 0x0, 0x1, r3, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r7 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r7) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r8 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r8, &(0x7f0000000180)="01010101", 0x4) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x1b, 0x5, 0x450, 0x2a0, 0x2a0, 0xffffffff, 0xd8, 0x2a0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, &(0x7f0000000280), {[{{@ip={@rand_addr=0x64010100, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'rose0\x00', {0x7f}, {}, 0x21, 0x3, 0x46}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x551279d1], 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @icmp_id=0x64, @icmp_id=0x66}}}}, {{@ip={@multicast2, @empty, 0xffffff00, 0xff, 'batadv_slave_0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x8, 0x3, 0x4}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0xa11, 0x1}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x0, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2, @multicast1, @multicast2, @gre_key=0xffc0, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x5, 0x1, 0x89dc5bc572f76318, 0x2, 0x2, 0x5], 0x5, 0xc}}}, @common=@addrtype={{0x30}, {0x800, 0xb40, 0x0, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @private=0xa010100, @remote, @port=0x4e21, @gre_key=0x3ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) close(r8) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) 8m55.704154935s ago: executing program 4 (id=883): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x38, r2, 0x5, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8e12e13207299b214258a7569c77f6024ada9b1579512891"}]]}, 0x38}, 0x1, 0x0, 0x0, 0x40048}, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) symlink(0x0, &(0x7f0000000000)='./file0\x00') (async) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_TSC_KHZ_vm(r4, 0xaea2, 0xfffffffffffffffb) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x38, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x38}}, 0x2) 8m55.41935162s ago: executing program 4 (id=885): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000100)=0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) rt_sigpending(&(0x7f0000000140), 0x8) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x800038, 0x7, 0x3, 0x180, 0x7ffd, 0x10, 0xf1, 0x1000, 0x1, 0xca0, 0xe1dc, 0x2000000002d, 0x8001, 0x1cda0000, 0x0, 0x400000000000bd9], 0xffff1001, 0x43100}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000500)={0x1, 0x0, [{0x4000, 0x66, &(0x7f0000000480)=""/102}]}) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x80b02, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x359, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) dup3(r5, r4, 0x0) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000380)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES8=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c0001"], 0xdc}}, 0x44) r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x100008000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x9, 0x75, 0x6, 0x36, 0x0, 0x2, 0xb4}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x1, 0x1, 0xa4, 0x5, 0x5}, {0x8000000, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe, 0x7}, {0xf000, 0xd000, 0x10, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0x6, 0xa0, 0xb, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x39, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 8m54.982173936s ago: executing program 4 (id=890): socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x1d, 0x6, 0x6) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x3a0, 0x1, 0x0, 0x1, 0xfffffffa, 0x2, 0xfffeffff}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000300)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BLKSSZGET(r1, 0x1268, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x10000002, 0x8001, 0x0, 0xc, 0x2, 0xfffffe0000000001, 0x2, 0x90fd}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0x20) r5 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x6, 0x470082) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85513, &(0x7f00000002c0)={0x4, 0x4, 0x2665, 0x0, 'syz0\x00', 0x109a7}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @empty}, {0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800083}, r6}}, 0x48) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x7, 0x1}, 0x90) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000040)={0x1, 0x806, 0x0, 0x80000007, 0x2, "6d1714a98b08633c45debea890564b7cdcd0f7", 0x6, 0x3}) r8 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) syz_open_dev$vim2m(&(0x7f0000000380), 0x4, 0x2) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x10, 0x7, 0xa, 0x4a9, 0x9, 0x5211, 0x1000, 0xffffffff, 0x9}}) 8m54.139652822s ago: executing program 4 (id=893): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, &(0x7f0000002000)) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a54000000090a010200000000000000000100000508000540000000400900010073797a30000000000900020073797a3100000000080008400000000008000a400000000108000f400000000908000340000000c2"], 0x7c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20000800) 8m53.240276283s ago: executing program 32 (id=893): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, &(0x7f0000002000)) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a54000000090a010200000000000000000100000508000540000000400900010073797a30000000000900020073797a3100000000080008400000000008000a400000000108000f400000000908000340000000c2"], 0x7c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20000800) 5m51.180178133s ago: executing program 1 (id=1703): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff2746d171ba401633f1000000", @ANYRES32=0x0, @ANYBLOB="02000200000400007824ad7609000100626f6e64000000000c0002800500060201000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000880}, 0x0) (async) socket$netlink(0x10, 0x3, 0xc) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e110b"], 0xec) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r3, 0x8971, &(0x7f0000005600)={'netdevsim0\x00', @ifru_ivalue}) (async) io_setup(0x42, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') syz_open_procfs(0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) read$FUSE(r6, &(0x7f0000000080)={0x2020}, 0xa63) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x20403, 0x104) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r7, &(0x7f00000000c0)="66ec6e", 0x3, 0x5}]) (async) socket(0x22, 0x4, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1201, 0x0) write$dsp(r8, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 5m49.669705871s ago: executing program 1 (id=1709): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) (async) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a60c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xf0}, {&(0x7f0000000100)="1d4ac370cf8c47025bd7a6546c8bd20f3991596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6961cd700b4f8c0f594861c0296ca92cb6c2ef9", 0x3c}, {&(0x7f0000000180)="88e584aac45d6d83e6c2c8857149eb55d2c259a747dbdfc05b7e87150dcc7e40953e657417f2c201284dd4714eb14ce94fb9be03e73d06a982f5502b3ae3a800c03902057e1ec6c9a195d347386118cbfbb67848d7783900dd047aeed9e789b9ea73ca850c5f9dbf67c044564934db01395590d790b885e517196ffa5c6b", 0x7e}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec6247282000000000000000000", 0xd7}, {&(0x7f0000004480)="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", 0xda8}, {&(0x7f0000000500)="f4f6ec3f1f6e4804195e1668ee6a8b994dcc5f47b255f609e705d9fbea0869812c0c3a096c7999643abde2e9c01404f75059df685d52a7b5d59f75dab6f01434874daf57b46d0151c0214ee1d955d8a24b8ce42aa8461222202c0b7e67b10f14040bd14ce1d9b5c123024c0aa559191474c1b44eebe0a40750feb6b9f872bd5f100d8f15dac14e66ca4b6e8bc168f9c7677432cbc268bf49e7b09d1a18cd49ad8bf344bbfde550052881cb7979129c65fc61fbbd6a99f24251b060090a04935c7f7a6f7862714aa4401ec436ba3a64", 0xcf}, {&(0x7f0000001040)="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", 0xeeb}], 0x7) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304}, "0000008e00000003", "03c73c87303a4693f02dcd3ce8b84036", '\x00', "bd0a2746564fb382"}, 0xfffffffffffffed4) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x46) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x28, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1943, 0x1ffffffc}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_io_uring_setup(0x1ba3, 0x0, 0x0, &(0x7f00000004c0)) (async) close(0xffffffffffffffff) (async) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x44e880, 0x0) ftruncate(r4, 0x200004) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x80802, 0x0) 5m49.529131027s ago: executing program 1 (id=1711): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x28, r6, 0xcd3a991b146a25f, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008804}, 0xa4) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) connect$inet6(r8, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xa}}}, 0x24}}, 0x0) 5m46.320918517s ago: executing program 1 (id=1722): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_FD(r3, 0x4c05, r3) dup2(r2, r0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unlink(&(0x7f0000001700)='.\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e20, @empty}, 0x3a5, 0x0, 0x0, 0x0, 0xfffc, &(0x7f0000000000)='veth1_to_hsr\x00', 0x6, 0xcb92070, 0xfffd}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) 5m46.045981023s ago: executing program 1 (id=1723): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect(r0, &(0x7f0000000180)=@ieee802154={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0202}}}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000000007c410757100b2d62b597393a18cde38f64000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000400002400128009000100626f6e64000000001400028004001f00"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) 5m45.915279373s ago: executing program 1 (id=1724): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{&(0x7f0000002200)=@nl=@unspec, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/58, 0x3a}, {&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/122, 0x7a}], 0x3, &(0x7f0000000300)=""/248, 0xf8}, 0x7}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000400)=""/189, 0xbd}, {&(0x7f0000001580)=""/151, 0x97}], 0x3, &(0x7f0000000500)=""/53, 0x35}, 0x88}, {{&(0x7f0000001640)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001b40)=[{&(0x7f00000016c0)=""/69, 0x45}, {&(0x7f0000001740)=""/228, 0xe4}, {&(0x7f0000001840)=""/51, 0x33}, {&(0x7f0000001880)=""/132, 0x84}, {&(0x7f00000034c0)=""/265, 0x109}, {&(0x7f0000001a40)=""/238, 0xee}], 0x6, &(0x7f0000001940)=""/124, 0x7c}, 0xa53}, {{&(0x7f0000001c40)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001cc0)=""/185, 0xb9}, {&(0x7f0000001d80)=""/97, 0x61}, {&(0x7f0000002340)=""/4096, 0x1000}], 0x3, &(0x7f0000001e40)=""/81, 0x51}, 0x4}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001ec0)=""/189, 0xbd}, {&(0x7f0000001f80)=""/242, 0xf2}], 0x2}, 0xfffffffc}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f00000020c0)=""/127, 0x7f}], 0x1, &(0x7f0000002180)=""/69, 0x45}, 0x200}], 0x6, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x181440, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000002300)) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000083c0)="c91443d5daaf04b192358b692f84d66c60492a57cffd585b0068ccde45d94ded1e86d3670791c21f8e0b2153d10d45d37b72ee2fa06ad61b0a9354045a8dae1bd1cfb49f3c11fe54c17eee632d95574681e6c472eb8a1beaf3a4b88561847a0a0f05fa4a26639d7e74a0c1c2790d6a59d4073b1c55539b7c21b8550efbd5f835c56642f4be57d170e36a6bf3a995f418554f0cab342769089d0777b28daad5c0c4ba56a0bd6c0515d9bf488fdcf49a9a7bbfcf5ad78733f8119f2568daefbd0985a9916c0d048e38765cc7bb1c82e0f3c81d98e7179ec782331bc3cfb2caf58a99668420795e6a00ef41dcf5283bbb61ebaedbb7a675be4fb2d11c31f9b76936d1112c68978c73f42e145b094490d748c1456a14c23fe25e2fdaeaaa7dc0d35dcc9bbfe86361f99f4d04090d1e66aa9714ee9f4608ad66c60f500bf06a1b5b90fbe2f6c42c4b5f337393b0bb201473712c48f898c514fff84c46b50d3aaf44578f41d312bb5a73526db7818617dcb938ebdb17f92423ca2cf7ea2c611483e0baff012fd97e28558317049e4fe2d27f72796d7260b33900cd61f984c087d3c54f6aa11e389a49069ef99ca86c279598b42dd3485f09fc7e119f707438498316cf2f2bc8a293eeb1a35635989327d4f6c9ba6b2d5b9b8ee89a1e13d538b954479663223bb704af6a63ee497734410ea43bfdb0ad3708cb7155df2432c44e8468a7b77b807d345c9b94fedadfdeba12f4b6d11d16fd6dd5fff6cf896d0f40785ffca538dae61d8a5ffee814e96628cd945553e788b8d915762ca3b40124149b3c186ddd5f7af5b75f4725444f2f7e54b999c93e8c5fd4d4fbd7a3b3d7e85df3053c866f1dd247cac6912ed8b0e491101ca5a0b999a21014b573ba3996c76065c9d8bebf431f8be6435837193efd6e5a565b2ced30d04355435f166b09f9dc91ee50412d0daf72b28ec14c505cb155de1a46362f140ac2b633fa42b12109f0a29fa8ba271d6fc2a77af3b16032ee46b3ddead76a481ef52f6bd25cab4494681f0abc2ffc60ebb36cffcc058a067fcdae6c9de670cd6fde6eb8086a65fc05df17cf69f654516ba30ee04a1427b40fb8e81fe46787d557046854ad342442bacd781c7a6063892402fb0d765397448991206b28193e20f285e50d9219ace39b311e572ebcd80702164315656e7fa92960d0fd28c6489406f0b3061218417548e7e78b8aaaf5a623eb47c92aebfebd1c78343bc781f184e0122a28f56b18832da5646ee8405fa2fc040ab30377c447b42d0bfdddc65e064ccdf1ad52a94309a819caeb523e22b25d1ba288b7f2c726290d50021b9839c5d3c471aadb08025d97619935a9880942cf653508a0b2c43838e5aada8b84d22042928dd372dedec14672266ddceb0744c7464ab282d7fbfb2767e891832aa25d1425b33a60c6894a8d5292fdd73e05a868b8e50cb1a412d1249a77ccfc3d3eb35a67221f80bb8960fd93ceb74e102f2a6946b50caae3ccb86a8ec441d6e58dbf24b3eb962c8a28cffeded9b7cf4a54f524a1ef49fbdc91e125aad65a54df6a0f10cd8799f48aa144f7aec977b4a347c5c9628c4805ecf71f305adc9e5ca7c1f313f9ea3e99b3590efd94d831e1ff5cd7a26b72281109547facfa3abac2cfc9177b117a3757b778e95b5069236abb25d8fb032c38d296f87388fdd364b491cb828732177a2c6bcaaf831d138c898bb60c0d9d8a02d8b4b8e7efa87d3ed66221ac52e31ba9c2da488b999eaf82994bc8f1ac29d5e60b8b1cdc30a1c9829aca1cd7881c8aaac9ede0f5d8b85538d2b13751cfc6b37587b0223b9f6b6dd9340753106b1eecdf4f63c51cc2c63a1f86235bad7602e115d1e0ed78a6b170b88eb9584d2098b187695627612189998171d245797391b2b79bb690a79dac4b769e3f18c4d49359f7b460d997c03c793f51a830d5b21faed2ae1c3eb0fce0cdadde3c789ec931b6397c2a2fb2eda87756fec031e5f50f07619130f8e39f1e00004a1f204e5d87780542bdedf0b1ca5168779ad7cb2ebf27e0a5d760a2492b4d92eab24f2bc9af0a3e51140c415a6f885d0faa38ee6dcffc41652b28e628b859db0e7a0f961e37c5806df137e68c5316667f36051eb05c971e208721fdb8a49b8c49f85114be9dd7288f4e95c5f6fb8c1bc1bc7d79f32ba5419d90130a0328ba70d10c770a1540718f7d890dba9c39a116623d492275a1268c91149bfe026ca1c6a458449d4004d653f4b0a234eacd1f4da495fd1f936b4b335f64514fc8091b1dab132f599e26cb127e25011efa30a922b5a3e8807db9a00a9cc732fd323708767c905c8a3cd53e2e8d377d3b43cb971cbd0e66e2e47f3d601d49e29941b2ea4d3c8b7f5698e1a633ebba00f6c178d6d04b9f1544f04cd173e2d49f129a8725a647e1a9e798b5581c6a461b585012a302353178188e55f8102a49343c9c370ee505d09e4be8580d95f5bf39267b00e93adb6b52b2029160d78ac271e4e0c70ed835484e80302b93efd599707d4d22c806476fd04d18ebd6a9bf88c11dc2c96041ac8c3e04ac0aa5d2ac6740972717b543fb871884a7a0434a433571fd621977777984ea9c06914be966da9f349cb1ef3a116c49f0c716eae1df118cd3d5b350b917c06d853c1e1514213f5a29071e42eecee264ff20529c53c3a060a18a680ade2a08b4549e6998f06e61e4f4c36d578e9ad83dd38d1eeb100e7ab023edb38426d5165b867b9507a6b644aa0322da335b208105f2e74a9841ea7c629ea20cef740f6364e9d84a4485d3bb6b5f4e14c7764f78b65c0647870638a8f618381ec0823faed0424a448f753a59fb22e5138e0ca537b6935befb99fc6eea2d9457c01345afbbaaf3a7a96a39478b222af322f86730d137c3f570b38c7363bb9a89bb4b3b8979b9afd232927becbc91c8d4a276febe47bacd4a84c0bfdd54e685080f2c3be0b1e37bc6d21b13b7b1bfd507880f6ad7fa39bf99eaf6b7088d758d9383e38326381088e9e3e792f75d682cf61cf1176953960b0e160b2a535495d52c28f14fa45ed7a3f91e219dcd05afdda2b7e6c1b742b29f6c5f62a040a5fe6606433fce7de757ed76372dfc0b1af9af10c0128bcd335eff1c6c9660b0893730c3ef8de6e50dba419b35d1766eb9a5dce4c2fa518f8e3e2a27855e04d06b89e97578a4406ac03f3314575143db5e43ae3d03a7e90a590b4c188a5acbe1cf23cd4cf60ca98248d4e740122a55ac6e463511b4c4cd47040aafc0bed7878348a4caad4d977671cf4ac319773767ee28f8ccc4c9deae531b029eff5345470f20865549b2f2c4089306304e13e42ca37fbca6839bbcd2f10bd20c81d44ab73ad5ffcc55f51b53efb00d3c68d8d8505e005247ba23e86a803b199f36447fd01f192994b2fa27c9db59ae66b56b30c1ae5cd717407068a9b13ca941b82db254f4ecdbd1751a3f8f1061031bb41af5c04a33ffc98509f456830cf3c94c14451f04d84844e41c618e82958710d07daeba666329b914f2cc7c1d34ffbf6b50620b7c78c25c5d82a5aadcc4d824b3b68c34231fa7c0befe5241c447f90111c55848feed9d1ee67f61095ec2c0b4ac82f5cf169201516082a804c9d1775990d430d21bc65877041905caf385918f44191c134e493d960724b28f01e79fbf3b99eac1e75fbc8ab8dcfdd98b573fa6d7e6a6ead6b15ed78e2a8d564f61d8c52be8104306c104146696e16c9e9bff79a5fc1d92326cf0f2ff5e5c5c252773f2bd2c554bc409aaec03055f71d439daebc1d8b06c9ca0e1fe4729e8e6119616e8fb861b1e2694d1df267cbc496ba4a87013c3317a16b4c1e369748507794a20ad06aad20e4dbfc1834d789d2a8e9395ddad33a74c6c7cf54e61e533cae228909536eba8020f0c3845d2063270cae4d8e8dd8cfe3f112c46751444546ced9f6434741656dcda2185be13eebcc0392c256f384fc16353e89cbdeef8fb2e3cadc1ed2142f3b6485dc2d540fe799d027413128f624aaf8bc1933d3a0e6a954931bfc914921dec7ec822a31ebb652d4f312ab4068cedc6203b0de98e60c5f82296a3482132b288ba0a8eabdd8ac40faf145928e7563dbcb14d0625c92b542860993bb0388d8390dae727ae4086d4de1b7fea9d79f4844374bcd67fa5e1a3a28cd6d8da3f171fcf9d13062bb149fde18917c6650cdfa2be8de33b556ad34fad454db13a446e8a7c40167117e884d874c786768975df0b201ea0077ba735d31d65a832dc122d13c6559601b83899af1f14808f55f077ad465ed61378c63abff3ad742691168fe1e31bfd0dbb9f43d364ddf0bb185f69e69110c9eb1ab808354fdd2cf571838d5ec63bac3d70ca40878dc3c3cea26adffd5a197206d7c80d6a86c202338e72f17dc7185e1df0cfefa9475a2156738f90c6410c1698d1a160fd396548323c796ec5dca3cd59e468ff6a14caf34b4fdb16f1c92acb6bff2e859f9de1266dea0d1828598319b40a3edef657be02188fc94490c1da088d3ec2f315d6b5bb2f262764b67ba321379f4c93bb3ef9bc7db0c0e5f1e680ebfa84463e904d5351ecf25d1d22a98f81f7a1fc4c4fee3934b7672661f0bcd94109706644d0fdac4b7933b5db2acf39b98c0a8106a7a757408404a4c299a077379458e2118fb0a53b798adc1b85d3eb20b539e572741b9855e44a545809f897dde06730145b5caefe9db1c321783450d25d38834532c3e372fa92a53ac9cb4330eaaf65fe1b69a66459058e02d20c6641b7d8edfa8e356baaeb011b61208ef36ed33235144c86d6ce65da89d66da06291d4acc05e3136559ab77a7c4ad229c5307b48ed642d96c28cd06c82dedd4a16ed90bceda81292120438fd5c47b7b41b2646fe0899643f896ddb2d11e7311f8a0cbb9bfa38106507e06f35b3052ad6b6a11ac5f0129bedc59d04aee3737ebbf10f97c80f1a4e3f51ac8ac4488ad9e3f685a7c0dd4074b07774f4efe4b9f2cba400ef49f73b12fc7d96d8f3283a1eaf8c003931fc24a9248e201ac31bb49226c37d535592e00308d86ba0765a7eda13b72686101d352fb959598038b8dec44a0f18e5c8ec089912d325880390ce5186d4585df46e5662987c164f0ccfb8f12f6144f91349051d3ffa35ba597d2b5920e279ca8e139dfe2ba9923c0190fd444c8bf12a627618791a8781d6b54470777e6a5dac8cb505ae1e534b0c3af7db010dd602b1459964e1e15a812f3b4c8038e6bc1dc568ba482ee4944582abeeda1ed012391706ddb1e0ce60efd15acde8283d3612de5d0cf76185ad3a1ce89488e1cea4009573b55a2766d100ecefc5d53c99876cfec65daea82f55cf9687ec70e45cfdba9fe69fc3a822c29ff4be34857bdcd4313fb23d1d01d8a79cbd0057eeb5c1c0b39f75d5a753a2e10bd0ebb91dab1312bdf1a984332d566ab56dfd838d285995bec8726c5d1358fe10b0b6aaa99b9d9b08894c1dbd06356e5c693ddebb9d8b306062defb160db9d8f02ae3df59697866f5adeb34c8c5b27b63b09675030f344197b3bff097b996819dec9059aaf5ec1a6c585a86d16528091543a9e6bca4d850b7963fd1e7d981814dedb165c1a6444ec0a21743a4de8845b386ad4e1e9c9f2873f6a353487d9a8f8f56ae1d0f69124ee56b5c2b2a48c78cc6ba6b313b889adf0acfaebb4e2dc71054a4992366a2b6ff1f5972d7d2f0e9e3b17d7fbe931f43871819dc6e6040ba239ebce2cfa424ff7344b8a880040321909dcd16956594f5d99fdd39ea5d7209b906d2601572c56c72db899f986185194fe5aab45f27d9ac12aa8600b3c2728ef2e589a6886d711edf4d7f95b2e10d9adde3009560ad754f9e7a52808720a973dc475f8177fd5b199b69925f03a44a8bd9f3c3369861802ce5ca4b40cb47d19e2e1bda1b054f16b66ac7b7c0e5205112e011d6957f1df50505003544631ff4385d8128d46838338930aebc0496348045a7c05abd7a56e1079947d3eb1c50e4d8be001d03d8973f8f08f2f21a415174173ccb90f7ab615be5036947e164a434c059637bfeebb8b9f2e87b9774a4595c71122c9fac74347488b9a054e2e7b9c45b7b12fcca0fe789db614c70d4149d44e50fb64aabccee7447288a5b865a60c2640171f89afecda2cb18b7ecea214bd32f43d5ff66e90741697d085f3ee9bfd8662a3cc570999bb151090160d3bf5bf1d85e896d66276cba7ed97f341f595b13c02ac2a1352aec7a5980de2c8f9d890951108947b7602dcf2bdd2aef680667572b87aadf7c54338492eae763df73e89e3c438c196da83d98bc65233a242e08894f2390d8714f0abb801d9e5c42f169555284b6cf079005b373e9938db71a93ee5945c2a43a06e3df580d372318b3d203503c6e968206d7db8116cca2f2a1fae7f5b5195bea92914d66516bc3ceb2d9dc4de59d0d52ab80910aba7ebb696c7deaddcf0fedf56e2a88c3496bb79897c6420a0ef1b03ad89c76b24f67ffd41c9227d464565457bb25f0b32c83e676b0a3284f2acbed39c6875871c5e866a8284f12e383f87f12dd9bbe3078c68b3711eaa9bc17a7ac8413a8ef486922eddf43f01625671b7c3d0a4c6c2dc38217b4135c8cb46df7d936aabfd253e95e0816dd1f92b257e2f96d2a259a320756ba77d99b709711326f2ea42def974d60f817a1f6779121dd32a1cb194c7809e4c8fd052ba357323436491ec45a49fa601ed373aadd2199e4483704fb2f4edd7bf2815b552fb84d09094cab9700b5125887ee508570217c16799bc11d9e3658de8d9812f30dc8078bbecaf887a6527686b026eea70229df1e61759adf19c1b96673419decb382ae29bd685c5f32120b2d56d3e97c9ef00a2c0598c2181b8fa53172312590a9549ff55dffb9070b042c74654b2ae56371b2a6bac8e2808a40fd5d6d0af184c035101394e347521467e0ddb962e0d63614cf1461ac7b9d744084e9f6f26c88d515dbb1b7392b8e9384b81f186224d5c09e266682d8044d8afb1bd6483962b03ed6884759d2647b8f174a6695a437a1f1aac3e6a2f8ca658ee8a8ae44a77393cec61a9f335a1e859825e73df4125828fbde19d3695125992ddb2826ffbc6c7cfbfdbae19ba864c4170c79cce408e8b280a7632c855d802029ebac8627fbd6fec1c3bd858411c969ca035992f2ab909c423158dffd0dd5a407b3e0c2d9b180440996e09e15f17b4e42f365371d9dd58c4609455253c44c2ba73f592e360ab5fcccdb6e90ae0c60ada9325c4824242c0d866e7dfbefe091067d5c7ff0432814f733591eb0096659738b34cfa8c6c988ec628f34fe08f31dc0156dc39866412932d045168f4f3a48f24fb3b884be1384845d496c3009626f1c41b0189e95c9055d24eb5a0390596f6ccf50d3727e607875a3b2cf076a277e12ac07ddc59da78ee16e1952706ac6a1a9ade80b867d889789c935d196cc4da67aa35ba80ef2077ee4dd69c5f31a0410f7fd0739303ddcdbff2f53e0a44ec5de0f062e533444bd946959a1d9c25b297b6fc7675ca4add9e24e8ff390e0375f3b15e1d3e8129007d743e384659f191bd23ffe02140fa64d5c6d75937b28d51afcaa9d207f57c878f2f54493025e9eff5b5ce0c997d11c9690262e38e1e83c7f1a0ed3f200d9d0472739d59dea3cc6e8783758e3e3201731cf27211267702594356345449b42fa64b64c6f00a8f26665524fe2208b1a7c5fbdc822ea611c1811526471e4f52ab5e3a43de8fd4eba2fb2796a206e348de9b0be78ded78204dc82d9e9adccbe408d7ff538aab3d663eab189927a9cd597388e8dc5063d2db42cd65415fa32d20288da017c9f94e788dfe7cc3a0f6b6ab06116ed3f72f3c048cb1e51abf308ed7169908d1ad5b7ab3a86a3316d164084f8d88c6f96142d888ccb158efa586015914c116db114aa82c44a55d4c33bd901dc34e820d3120d57def03ea4f01b263913cc02ca586b208506d149ef03a706fd5360a12b83acb7bf97ac1f1f85389d4fbfdcf38551e9dbce760a05e8e4023d85038570d3697b3e7de73aac9c7feb39b6ccd1a775c8ce01b08d7190e28866aa7bb8d0cff0fc45b452fcb6a290f98f4b5ec125224c8a93918b1f2888befba6de3d294ee1f13a9c56e92eaac0b8e6c6905e77a60ea7e1d1ed979b6b2606652e7d75750a065c57c7efb1ef5708719ef04e354bd861b15e0a1cbc7cfe65c8a3d9a2b790260d6e6eb60bd4e0fb3f040dfa27fa00797664122add0750a23a8b20fcd68b6be1e21620dda4bf0561f4c5ed74f41612a0676dcdbf669df3436cbf2ce253e69319e3ab36e6e6314f11e0d0882ee3d7f3d3b3dcfe3cd7f061e301369207545676e09801f9bc4bc4c3dcaf48e5320a4b3211051a7525868a0ac1278ed6fc9531ed89cf4205458acc05d5351bcab7ea50250b6cb4c6fdd0cd96f30cdc9a820f495d0a3e14eb6c493a85a87e3b7fb8e5f23431c3c5359f5802f1fc11ff71c3172c6b57b5587ab38579b79e328792edb7a81d60762bc6c88693a00712f811cab9b075a97535c904396dbd2fa0994ba9c9b06fe9c042cb6860d22844b94863bf7b68a1ab8639e4487b38d48e40da4a98dedd7d73ca4b575bf4c604a364a9247c2ea5e3b127ff42f9bce1d3d37c2428edab1708ebd71ac0e4a408a9c6eb97407a4a8b5e912e2c63fadd1abad9a772a96fc4666f7d2b604adbde6f1136de2adfe38994491ab0f34ff1fd20cb8034ad39aae4c5c0076da2e7a157764b770e1c5f35b6f323ce809b2e92be1345204021d74712368e0ef77056afd85f065bba085793c9b6950d3c3fc6c445afbdd5a80cf7b0bb13055fd486700be1500bdf8771e286a63962e56d4771ed5eefbf111ba7380f02d6f96eed174246820b73bd772689c072bb3d8e43ef96f5466dce5c9392e34b7176821d2f4df3dab4c6ef5e0238ffe61582812fdacc987fbb6d98cad5a2d7af0e4c8dd3f800cd75c38a515d4d4c7118c5f81c6f7504e7ae452370c56c4b7fb4daa65bf26919c12081485d09e9d142965320211f483ed2a0a6836fa2488a878eaf9653b0528c3680b75a1920a25b5c5c17548c7ceb9a1656a0cf6a404aec14f7ed8a1dcf8ed32e1cf94dc2f60b65aa102650b7a22d9e708c606ce8403ceb81434bd9938b2c4e5a8530a156a1df7d143b2da54071ba3e673ce11760f72c32273b7bcd9a48da2a6caeb4b782cf1c3a044c1731f3ad61ce32bbd0b52cbb187cb3ecc1e85a67ffe27cf86769a0d69fe293dd30f060b8a0f26ccd0287d0b8d941ee7410a7c6aa430add67c2dd60db292e24f294ce80b0321aaa4d054a6f5d9981e1d5e859b454f5005be082bd59baca5775eedb7994333c62c452ef7b2893e4d03a28c0e368928b4bdd6e31f52a83cd7e162975405fd128321e0a8e3e77fd93257b0c46b309e16203974382ced818faac3a02e74141e9ea36c4a1b98bd859fafce43b2984d856c832f61b1ca562cee96f5843adc14b35bec1ccdafedd214f1a344345373f3c9eccee8324950a23c3e77d55dbde9a7ac1b7804927affb8b0e1488dcd8919d227bd1f50a35abf25e3f120c25b0dfb4d85b4c2a2c69cf7047c76c45e4e901e7396140496f9a322c2c2ac777a27adff5a6daf32e852b1bac89f1086739a603cf0f6838f792351c08e38ab130e5a83aa5a4f2da19df131770a308d810eed0059a2e5546a2169b9d0119f6df7c18981f4b4f119c76fdaac031ce7551f25678b5c4d8815a7ea9565e63389fca6ea0bcd40e71ac72124113dc0041ce26a0c9979ff76d7f1f2c0cd2c16d8c7a36930b909ed7e2d4adfa8352b12b99bdcbc25b485f652539fab7ac983c1ae925967c15ba2345e45d6bafe13b3e9d7acf1a592422ea09c3a45f7fe24e235bd70b106cdaa665584e74cdaf9f39b804bc6c4e7f0bf572225acd4dfe010081b91c2d5970d4f43d2e1a0e05f84baaf50642991b3704034aed74572e6a4715b79276432d06660b39c989570fc0d5d0071a7c690658caee447370d3295db3b5dc625e697e1ca2675b5430b9969024835c7d001fbce86c5165c4fe8f2d46b883daaa3fbf42dc5cf61209379013896df740b9cc32638358ea8079a33f04197f650471086e67e5cf9779268d7973c73bbbde2f1c11e1a8e2b154aaa8b4b74f8a03f14ceb7afc4ba35e6620b7af89c969021d20cb260c1868f3fa432ce7e509db06001ae6540531b126c1e3a851acbf0a9c1354bece05c094d69d9bd87f99391e23306911383d2082997339daebd67d8a707c9b496a309b7921696f39a07864f31208802db7188881e346b41c34f4129fca9c6a13172a4dabfe791584d240fc03685057d53c08737aa1d486233318eb4545f2e8d18087705b9d3a7658564592f56aea3aee53d66c249988bf353853728553a1577062e24af533f47dc012ae90c5c085babc121be2993c063e203ab949a088041271ac0527c56edd4b7a87e98323a0137cd493aa05fe38d02754a66d89348b119e6200d5919bc366788eb67115fc57c4c1a9dd42c7411d6709ad82de8662a1849445b39beb2ba8f894860e41a054f61337179a9214b0884f3964c95ed2a4ab37de8038566bba76fbaa7502c0460558ff4bf4793ca68d78e50f384a81da4cfa23723747e906b82290e0b8ea07e3404bee0915800d4c3c07f94c43e7aafbc7a44d923de97963d0d1586bee06fc90aadbe5758fb9933ff7df346d62e082223741f5cb26ef953ca654ab983a72b30b296891c9e3f1ed5216b0e588eb25f5d4ccad6f96973cc2d26196bbd37c83266473071ccd84d9e3c74f22621e8bd60afa4bcad6c853c7591fe5d4298a954ea5006f682a7a65aeb26b230f3866a28a58bf532aca8fd5eaec64f442ac510a7df4114f00fd6ff7e02d77f8e72797222556959958c4c4d166c5af18a6e25588cac9871a3d5bb453889ff8d13db22024a997bf97a5afdf698b1deaff3101e27868d2de47b92c403ce82e15f3239d8923e8ca0c01e3781b5dd6121f57d2238dc3ff8a1bde3e371efd33838c552e43588042b360f55d7ca92f11987630364b263428e18601d7bf23f6432b3a9aa2c500cd9ac5f73cbe309443858a2806956b0cdcfc19904567bb1703641017c6199e768410e03d8ba603eb34249d567370202f39639ae8f6d52d9d5dbfc544c5b85ac8187095c63f1f613fe4af179fc5c837e6e0ccc21e62ac22ac045c4ac3b1ca6a4cbdbe29ea465240fc0aed1f0e086d7580bcf81d4e2a4d55a8e3bc57110e7cf1e1895df07974f0686dd2ea2b12bbfd64e7a9d0c62c662f0370e6ed495eeb2ee5029042147a1f2e5fcd6068b06567be893cb80e2cbb5fbb12847313811c13cf685698d5e2175959579e510279b9e959ac2c3f94fec653c6b521f8909d633ccedbc1109285ecbd52d27cd2891eaf354db2c966d1e3086718848433c12658fe7f6fbfef930b963139a63f6c4caee5a1964d3a038dd0db403c0a251d702c07a0fba4a3576ec6668a78e9e26efc6ad83a670a47608bf4207979bf196b3160c95e7ccc6406d46f529d34676b76d72396262e1448df051130a21484e0e977df1f7f0a259ac762eef9506877498b9998e1286d6294cf60b95352e81c3", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x330, 0x0, 0x3, [{{0x0, 0x2, 0x4, 0x100, 0x9, 0x2, {0x3, 0x5, 0x0, 0x8, 0x10001, 0x3, 0xb, 0xdcc, 0x34, 0xc000, 0xffff, r7, 0x0, 0x7f, 0x5}}, {0x3, 0xc, 0x7, 0xfffffffc, 'user_id'}}, {{0x4, 0x3, 0x28000, 0x3, 0x9, 0x10001, {0x6, 0x9, 0x4, 0xb, 0x6, 0x0, 0x6, 0x1, 0x6, 0x8000, 0xde, 0x0, 0x0, 0x8001, 0x80000000}}, {0x1, 0x1, 0x1, 0x32540194, '\x00'}}, {{0x4, 0x0, 0x4, 0x0, 0xfff, 0xf4, {0x4, 0x7, 0x8c, 0xfffffffffffffff9, 0x0, 0x80000000, 0x8, 0x806, 0x5, 0xa000, 0x33c1bc78, 0x0, r8, 0x1ff}}, {0x6, 0xe6, 0x2, 0x7, 'fd'}}, {{0x5, 0x2, 0x10, 0x6, 0x4, 0x4, {0x3, 0x9, 0x5, 0xea, 0x37b, 0x10001, 0x7, 0xc0, 0x0, 0x4000, 0x1, r7, r8, 0x1, 0x7}}, {0x1, 0x8000, 0x2, 0x2, '\'}'}}, {{0x4, 0x3, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x9, 0x3, 0x6, 0x5, 0x2, 0x2, 0x6, 0x7, 0x8000, 0x0, r7, r8, 0x1, 0x3}}, {0x0, 0x7, 0x1, 0x300, '\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r9, &(0x7f0000000100)=""/134, 0x86) write$binfmt_script(r4, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0, 0x0, r4}, 0x68) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r4) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r10, 0x0, 0x201f00) 5m45.509111809s ago: executing program 33 (id=1724): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{&(0x7f0000002200)=@nl=@unspec, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/58, 0x3a}, {&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/122, 0x7a}], 0x3, &(0x7f0000000300)=""/248, 0xf8}, 0x7}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000400)=""/189, 0xbd}, {&(0x7f0000001580)=""/151, 0x97}], 0x3, &(0x7f0000000500)=""/53, 0x35}, 0x88}, {{&(0x7f0000001640)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001b40)=[{&(0x7f00000016c0)=""/69, 0x45}, {&(0x7f0000001740)=""/228, 0xe4}, {&(0x7f0000001840)=""/51, 0x33}, {&(0x7f0000001880)=""/132, 0x84}, {&(0x7f00000034c0)=""/265, 0x109}, {&(0x7f0000001a40)=""/238, 0xee}], 0x6, &(0x7f0000001940)=""/124, 0x7c}, 0xa53}, {{&(0x7f0000001c40)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001cc0)=""/185, 0xb9}, {&(0x7f0000001d80)=""/97, 0x61}, {&(0x7f0000002340)=""/4096, 0x1000}], 0x3, &(0x7f0000001e40)=""/81, 0x51}, 0x4}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001ec0)=""/189, 0xbd}, {&(0x7f0000001f80)=""/242, 0xf2}], 0x2}, 0xfffffffc}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f00000020c0)=""/127, 0x7f}], 0x1, &(0x7f0000002180)=""/69, 0x45}, 0x200}], 0x6, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x181440, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000002300)) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000083c0)="c91443d5daaf04b192358b692f84d66c60492a57cffd585b0068ccde45d94ded1e86d3670791c21f8e0b2153d10d45d37b72ee2fa06ad61b0a9354045a8dae1bd1cfb49f3c11fe54c17eee632d95574681e6c472eb8a1beaf3a4b88561847a0a0f05fa4a26639d7e74a0c1c2790d6a59d4073b1c55539b7c21b8550efbd5f835c56642f4be57d170e36a6bf3a995f418554f0cab342769089d0777b28daad5c0c4ba56a0bd6c0515d9bf488fdcf49a9a7bbfcf5ad78733f8119f2568daefbd0985a9916c0d048e38765cc7bb1c82e0f3c81d98e7179ec782331bc3cfb2caf58a99668420795e6a00ef41dcf5283bbb61ebaedbb7a675be4fb2d11c31f9b76936d1112c68978c73f42e145b094490d748c1456a14c23fe25e2fdaeaaa7dc0d35dcc9bbfe86361f99f4d04090d1e66aa9714ee9f4608ad66c60f500bf06a1b5b90fbe2f6c42c4b5f337393b0bb201473712c48f898c514fff84c46b50d3aaf44578f41d312bb5a73526db7818617dcb938ebdb17f92423ca2cf7ea2c611483e0baff012fd97e28558317049e4fe2d27f72796d7260b33900cd61f984c087d3c54f6aa11e389a49069ef99ca86c279598b42dd3485f09fc7e119f707438498316cf2f2bc8a293eeb1a35635989327d4f6c9ba6b2d5b9b8ee89a1e13d538b954479663223bb704af6a63ee497734410ea43bfdb0ad3708cb7155df2432c44e8468a7b77b807d345c9b94fedadfdeba12f4b6d11d16fd6dd5fff6cf896d0f40785ffca538dae61d8a5ffee814e96628cd945553e788b8d915762ca3b40124149b3c186ddd5f7af5b75f4725444f2f7e54b999c93e8c5fd4d4fbd7a3b3d7e85df3053c866f1dd247cac6912ed8b0e491101ca5a0b999a21014b573ba3996c76065c9d8bebf431f8be6435837193efd6e5a565b2ced30d04355435f166b09f9dc91ee50412d0daf72b28ec14c505cb155de1a46362f140ac2b633fa42b12109f0a29fa8ba271d6fc2a77af3b16032ee46b3ddead76a481ef52f6bd25cab4494681f0abc2ffc60ebb36cffcc058a067fcdae6c9de670cd6fde6eb8086a65fc05df17cf69f654516ba30ee04a1427b40fb8e81fe46787d557046854ad342442bacd781c7a6063892402fb0d765397448991206b28193e20f285e50d9219ace39b311e572ebcd80702164315656e7fa92960d0fd28c6489406f0b3061218417548e7e78b8aaaf5a623eb47c92aebfebd1c78343bc781f184e0122a28f56b18832da5646ee8405fa2fc040ab30377c447b42d0bfdddc65e064ccdf1ad52a94309a819caeb523e22b25d1ba288b7f2c726290d50021b9839c5d3c471aadb08025d97619935a9880942cf653508a0b2c43838e5aada8b84d22042928dd372dedec14672266ddceb0744c7464ab282d7fbfb2767e891832aa25d1425b33a60c6894a8d5292fdd73e05a868b8e50cb1a412d1249a77ccfc3d3eb35a67221f80bb8960fd93ceb74e102f2a6946b50caae3ccb86a8ec441d6e58dbf24b3eb962c8a28cffeded9b7cf4a54f524a1ef49fbdc91e125aad65a54df6a0f10cd8799f48aa144f7aec977b4a347c5c9628c4805ecf71f305adc9e5ca7c1f313f9ea3e99b3590efd94d831e1ff5cd7a26b72281109547facfa3abac2cfc9177b117a3757b778e95b5069236abb25d8fb032c38d296f87388fdd364b491cb828732177a2c6bcaaf831d138c898bb60c0d9d8a02d8b4b8e7efa87d3ed66221ac52e31ba9c2da488b999eaf82994bc8f1ac29d5e60b8b1cdc30a1c9829aca1cd7881c8aaac9ede0f5d8b85538d2b13751cfc6b37587b0223b9f6b6dd9340753106b1eecdf4f63c51cc2c63a1f86235bad7602e115d1e0ed78a6b170b88eb9584d2098b187695627612189998171d245797391b2b79bb690a79dac4b769e3f18c4d49359f7b460d997c03c793f51a830d5b21faed2ae1c3eb0fce0cdadde3c789ec931b6397c2a2fb2eda87756fec031e5f50f07619130f8e39f1e00004a1f204e5d87780542bdedf0b1ca5168779ad7cb2ebf27e0a5d760a2492b4d92eab24f2bc9af0a3e51140c415a6f885d0faa38ee6dcffc41652b28e628b859db0e7a0f961e37c5806df137e68c5316667f36051eb05c971e208721fdb8a49b8c49f85114be9dd7288f4e95c5f6fb8c1bc1bc7d79f32ba5419d90130a0328ba70d10c770a1540718f7d890dba9c39a116623d492275a1268c91149bfe026ca1c6a458449d4004d653f4b0a234eacd1f4da495fd1f936b4b335f64514fc8091b1dab132f599e26cb127e25011efa30a922b5a3e8807db9a00a9cc732fd323708767c905c8a3cd53e2e8d377d3b43cb971cbd0e66e2e47f3d601d49e29941b2ea4d3c8b7f5698e1a633ebba00f6c178d6d04b9f1544f04cd173e2d49f129a8725a647e1a9e798b5581c6a461b585012a302353178188e55f8102a49343c9c370ee505d09e4be8580d95f5bf39267b00e93adb6b52b2029160d78ac271e4e0c70ed835484e80302b93efd599707d4d22c806476fd04d18ebd6a9bf88c11dc2c96041ac8c3e04ac0aa5d2ac6740972717b543fb871884a7a0434a433571fd621977777984ea9c06914be966da9f349cb1ef3a116c49f0c716eae1df118cd3d5b350b917c06d853c1e1514213f5a29071e42eecee264ff20529c53c3a060a18a680ade2a08b4549e6998f06e61e4f4c36d578e9ad83dd38d1eeb100e7ab023edb38426d5165b867b9507a6b644aa0322da335b208105f2e74a9841ea7c629ea20cef740f6364e9d84a4485d3bb6b5f4e14c7764f78b65c0647870638a8f618381ec0823faed0424a448f753a59fb22e5138e0ca537b6935befb99fc6eea2d9457c01345afbbaaf3a7a96a39478b222af322f86730d137c3f570b38c7363bb9a89bb4b3b8979b9afd232927becbc91c8d4a276febe47bacd4a84c0bfdd54e685080f2c3be0b1e37bc6d21b13b7b1bfd507880f6ad7fa39bf99eaf6b7088d758d9383e38326381088e9e3e792f75d682cf61cf1176953960b0e160b2a535495d52c28f14fa45ed7a3f91e219dcd05afdda2b7e6c1b742b29f6c5f62a040a5fe6606433fce7de757ed76372dfc0b1af9af10c0128bcd335eff1c6c9660b0893730c3ef8de6e50dba419b35d1766eb9a5dce4c2fa518f8e3e2a27855e04d06b89e97578a4406ac03f3314575143db5e43ae3d03a7e90a590b4c188a5acbe1cf23cd4cf60ca98248d4e740122a55ac6e463511b4c4cd47040aafc0bed7878348a4caad4d977671cf4ac319773767ee28f8ccc4c9deae531b029eff5345470f20865549b2f2c4089306304e13e42ca37fbca6839bbcd2f10bd20c81d44ab73ad5ffcc55f51b53efb00d3c68d8d8505e005247ba23e86a803b199f36447fd01f192994b2fa27c9db59ae66b56b30c1ae5cd717407068a9b13ca941b82db254f4ecdbd1751a3f8f1061031bb41af5c04a33ffc98509f456830cf3c94c14451f04d84844e41c618e82958710d07daeba666329b914f2cc7c1d34ffbf6b50620b7c78c25c5d82a5aadcc4d824b3b68c34231fa7c0befe5241c447f90111c55848feed9d1ee67f61095ec2c0b4ac82f5cf169201516082a804c9d1775990d430d21bc65877041905caf385918f44191c134e493d960724b28f01e79fbf3b99eac1e75fbc8ab8dcfdd98b573fa6d7e6a6ead6b15ed78e2a8d564f61d8c52be8104306c104146696e16c9e9bff79a5fc1d92326cf0f2ff5e5c5c252773f2bd2c554bc409aaec03055f71d439daebc1d8b06c9ca0e1fe4729e8e6119616e8fb861b1e2694d1df267cbc496ba4a87013c3317a16b4c1e369748507794a20ad06aad20e4dbfc1834d789d2a8e9395ddad33a74c6c7cf54e61e533cae228909536eba8020f0c3845d2063270cae4d8e8dd8cfe3f112c46751444546ced9f6434741656dcda2185be13eebcc0392c256f384fc16353e89cbdeef8fb2e3cadc1ed2142f3b6485dc2d540fe799d027413128f624aaf8bc1933d3a0e6a954931bfc914921dec7ec822a31ebb652d4f312ab4068cedc6203b0de98e60c5f82296a3482132b288ba0a8eabdd8ac40faf145928e7563dbcb14d0625c92b542860993bb0388d8390dae727ae4086d4de1b7fea9d79f4844374bcd67fa5e1a3a28cd6d8da3f171fcf9d13062bb149fde18917c6650cdfa2be8de33b556ad34fad454db13a446e8a7c40167117e884d874c786768975df0b201ea0077ba735d31d65a832dc122d13c6559601b83899af1f14808f55f077ad465ed61378c63abff3ad742691168fe1e31bfd0dbb9f43d364ddf0bb185f69e69110c9eb1ab808354fdd2cf571838d5ec63bac3d70ca40878dc3c3cea26adffd5a197206d7c80d6a86c202338e72f17dc7185e1df0cfefa9475a2156738f90c6410c1698d1a160fd396548323c796ec5dca3cd59e468ff6a14caf34b4fdb16f1c92acb6bff2e859f9de1266dea0d1828598319b40a3edef657be02188fc94490c1da088d3ec2f315d6b5bb2f262764b67ba321379f4c93bb3ef9bc7db0c0e5f1e680ebfa84463e904d5351ecf25d1d22a98f81f7a1fc4c4fee3934b7672661f0bcd94109706644d0fdac4b7933b5db2acf39b98c0a8106a7a757408404a4c299a077379458e2118fb0a53b798adc1b85d3eb20b539e572741b9855e44a545809f897dde06730145b5caefe9db1c321783450d25d38834532c3e372fa92a53ac9cb4330eaaf65fe1b69a66459058e02d20c6641b7d8edfa8e356baaeb011b61208ef36ed33235144c86d6ce65da89d66da06291d4acc05e3136559ab77a7c4ad229c5307b48ed642d96c28cd06c82dedd4a16ed90bceda81292120438fd5c47b7b41b2646fe0899643f896ddb2d11e7311f8a0cbb9bfa38106507e06f35b3052ad6b6a11ac5f0129bedc59d04aee3737ebbf10f97c80f1a4e3f51ac8ac4488ad9e3f685a7c0dd4074b07774f4efe4b9f2cba400ef49f73b12fc7d96d8f3283a1eaf8c003931fc24a9248e201ac31bb49226c37d535592e00308d86ba0765a7eda13b72686101d352fb959598038b8dec44a0f18e5c8ec089912d325880390ce5186d4585df46e5662987c164f0ccfb8f12f6144f91349051d3ffa35ba597d2b5920e279ca8e139dfe2ba9923c0190fd444c8bf12a627618791a8781d6b54470777e6a5dac8cb505ae1e534b0c3af7db010dd602b1459964e1e15a812f3b4c8038e6bc1dc568ba482ee4944582abeeda1ed012391706ddb1e0ce60efd15acde8283d3612de5d0cf76185ad3a1ce89488e1cea4009573b55a2766d100ecefc5d53c99876cfec65daea82f55cf9687ec70e45cfdba9fe69fc3a822c29ff4be34857bdcd4313fb23d1d01d8a79cbd0057eeb5c1c0b39f75d5a753a2e10bd0ebb91dab1312bdf1a984332d566ab56dfd838d285995bec8726c5d1358fe10b0b6aaa99b9d9b08894c1dbd06356e5c693ddebb9d8b306062defb160db9d8f02ae3df59697866f5adeb34c8c5b27b63b09675030f344197b3bff097b996819dec9059aaf5ec1a6c585a86d16528091543a9e6bca4d850b7963fd1e7d981814dedb165c1a6444ec0a21743a4de8845b386ad4e1e9c9f2873f6a353487d9a8f8f56ae1d0f69124ee56b5c2b2a48c78cc6ba6b313b889adf0acfaebb4e2dc71054a4992366a2b6ff1f5972d7d2f0e9e3b17d7fbe931f43871819dc6e6040ba239ebce2cfa424ff7344b8a880040321909dcd16956594f5d99fdd39ea5d7209b906d2601572c56c72db899f986185194fe5aab45f27d9ac12aa8600b3c2728ef2e589a6886d711edf4d7f95b2e10d9adde3009560ad754f9e7a52808720a973dc475f8177fd5b199b69925f03a44a8bd9f3c3369861802ce5ca4b40cb47d19e2e1bda1b054f16b66ac7b7c0e5205112e011d6957f1df50505003544631ff4385d8128d46838338930aebc0496348045a7c05abd7a56e1079947d3eb1c50e4d8be001d03d8973f8f08f2f21a415174173ccb90f7ab615be5036947e164a434c059637bfeebb8b9f2e87b9774a4595c71122c9fac74347488b9a054e2e7b9c45b7b12fcca0fe789db614c70d4149d44e50fb64aabccee7447288a5b865a60c2640171f89afecda2cb18b7ecea214bd32f43d5ff66e90741697d085f3ee9bfd8662a3cc570999bb151090160d3bf5bf1d85e896d66276cba7ed97f341f595b13c02ac2a1352aec7a5980de2c8f9d890951108947b7602dcf2bdd2aef680667572b87aadf7c54338492eae763df73e89e3c438c196da83d98bc65233a242e08894f2390d8714f0abb801d9e5c42f169555284b6cf079005b373e9938db71a93ee5945c2a43a06e3df580d372318b3d203503c6e968206d7db8116cca2f2a1fae7f5b5195bea92914d66516bc3ceb2d9dc4de59d0d52ab80910aba7ebb696c7deaddcf0fedf56e2a88c3496bb79897c6420a0ef1b03ad89c76b24f67ffd41c9227d464565457bb25f0b32c83e676b0a3284f2acbed39c6875871c5e866a8284f12e383f87f12dd9bbe3078c68b3711eaa9bc17a7ac8413a8ef486922eddf43f01625671b7c3d0a4c6c2dc38217b4135c8cb46df7d936aabfd253e95e0816dd1f92b257e2f96d2a259a320756ba77d99b709711326f2ea42def974d60f817a1f6779121dd32a1cb194c7809e4c8fd052ba357323436491ec45a49fa601ed373aadd2199e4483704fb2f4edd7bf2815b552fb84d09094cab9700b5125887ee508570217c16799bc11d9e3658de8d9812f30dc8078bbecaf887a6527686b026eea70229df1e61759adf19c1b96673419decb382ae29bd685c5f32120b2d56d3e97c9ef00a2c0598c2181b8fa53172312590a9549ff55dffb9070b042c74654b2ae56371b2a6bac8e2808a40fd5d6d0af184c035101394e347521467e0ddb962e0d63614cf1461ac7b9d744084e9f6f26c88d515dbb1b7392b8e9384b81f186224d5c09e266682d8044d8afb1bd6483962b03ed6884759d2647b8f174a6695a437a1f1aac3e6a2f8ca658ee8a8ae44a77393cec61a9f335a1e859825e73df4125828fbde19d3695125992ddb2826ffbc6c7cfbfdbae19ba864c4170c79cce408e8b280a7632c855d802029ebac8627fbd6fec1c3bd858411c969ca035992f2ab909c423158dffd0dd5a407b3e0c2d9b180440996e09e15f17b4e42f365371d9dd58c4609455253c44c2ba73f592e360ab5fcccdb6e90ae0c60ada9325c4824242c0d866e7dfbefe091067d5c7ff0432814f733591eb0096659738b34cfa8c6c988ec628f34fe08f31dc0156dc39866412932d045168f4f3a48f24fb3b884be1384845d496c3009626f1c41b0189e95c9055d24eb5a0390596f6ccf50d3727e607875a3b2cf076a277e12ac07ddc59da78ee16e1952706ac6a1a9ade80b867d889789c935d196cc4da67aa35ba80ef2077ee4dd69c5f31a0410f7fd0739303ddcdbff2f53e0a44ec5de0f062e533444bd946959a1d9c25b297b6fc7675ca4add9e24e8ff390e0375f3b15e1d3e8129007d743e384659f191bd23ffe02140fa64d5c6d75937b28d51afcaa9d207f57c878f2f54493025e9eff5b5ce0c997d11c9690262e38e1e83c7f1a0ed3f200d9d0472739d59dea3cc6e8783758e3e3201731cf27211267702594356345449b42fa64b64c6f00a8f26665524fe2208b1a7c5fbdc822ea611c1811526471e4f52ab5e3a43de8fd4eba2fb2796a206e348de9b0be78ded78204dc82d9e9adccbe408d7ff538aab3d663eab189927a9cd597388e8dc5063d2db42cd65415fa32d20288da017c9f94e788dfe7cc3a0f6b6ab06116ed3f72f3c048cb1e51abf308ed7169908d1ad5b7ab3a86a3316d164084f8d88c6f96142d888ccb158efa586015914c116db114aa82c44a55d4c33bd901dc34e820d3120d57def03ea4f01b263913cc02ca586b208506d149ef03a706fd5360a12b83acb7bf97ac1f1f85389d4fbfdcf38551e9dbce760a05e8e4023d85038570d3697b3e7de73aac9c7feb39b6ccd1a775c8ce01b08d7190e28866aa7bb8d0cff0fc45b452fcb6a290f98f4b5ec125224c8a93918b1f2888befba6de3d294ee1f13a9c56e92eaac0b8e6c6905e77a60ea7e1d1ed979b6b2606652e7d75750a065c57c7efb1ef5708719ef04e354bd861b15e0a1cbc7cfe65c8a3d9a2b790260d6e6eb60bd4e0fb3f040dfa27fa00797664122add0750a23a8b20fcd68b6be1e21620dda4bf0561f4c5ed74f41612a0676dcdbf669df3436cbf2ce253e69319e3ab36e6e6314f11e0d0882ee3d7f3d3b3dcfe3cd7f061e301369207545676e09801f9bc4bc4c3dcaf48e5320a4b3211051a7525868a0ac1278ed6fc9531ed89cf4205458acc05d5351bcab7ea50250b6cb4c6fdd0cd96f30cdc9a820f495d0a3e14eb6c493a85a87e3b7fb8e5f23431c3c5359f5802f1fc11ff71c3172c6b57b5587ab38579b79e328792edb7a81d60762bc6c88693a00712f811cab9b075a97535c904396dbd2fa0994ba9c9b06fe9c042cb6860d22844b94863bf7b68a1ab8639e4487b38d48e40da4a98dedd7d73ca4b575bf4c604a364a9247c2ea5e3b127ff42f9bce1d3d37c2428edab1708ebd71ac0e4a408a9c6eb97407a4a8b5e912e2c63fadd1abad9a772a96fc4666f7d2b604adbde6f1136de2adfe38994491ab0f34ff1fd20cb8034ad39aae4c5c0076da2e7a157764b770e1c5f35b6f323ce809b2e92be1345204021d74712368e0ef77056afd85f065bba085793c9b6950d3c3fc6c445afbdd5a80cf7b0bb13055fd486700be1500bdf8771e286a63962e56d4771ed5eefbf111ba7380f02d6f96eed174246820b73bd772689c072bb3d8e43ef96f5466dce5c9392e34b7176821d2f4df3dab4c6ef5e0238ffe61582812fdacc987fbb6d98cad5a2d7af0e4c8dd3f800cd75c38a515d4d4c7118c5f81c6f7504e7ae452370c56c4b7fb4daa65bf26919c12081485d09e9d142965320211f483ed2a0a6836fa2488a878eaf9653b0528c3680b75a1920a25b5c5c17548c7ceb9a1656a0cf6a404aec14f7ed8a1dcf8ed32e1cf94dc2f60b65aa102650b7a22d9e708c606ce8403ceb81434bd9938b2c4e5a8530a156a1df7d143b2da54071ba3e673ce11760f72c32273b7bcd9a48da2a6caeb4b782cf1c3a044c1731f3ad61ce32bbd0b52cbb187cb3ecc1e85a67ffe27cf86769a0d69fe293dd30f060b8a0f26ccd0287d0b8d941ee7410a7c6aa430add67c2dd60db292e24f294ce80b0321aaa4d054a6f5d9981e1d5e859b454f5005be082bd59baca5775eedb7994333c62c452ef7b2893e4d03a28c0e368928b4bdd6e31f52a83cd7e162975405fd128321e0a8e3e77fd93257b0c46b309e16203974382ced818faac3a02e74141e9ea36c4a1b98bd859fafce43b2984d856c832f61b1ca562cee96f5843adc14b35bec1ccdafedd214f1a344345373f3c9eccee8324950a23c3e77d55dbde9a7ac1b7804927affb8b0e1488dcd8919d227bd1f50a35abf25e3f120c25b0dfb4d85b4c2a2c69cf7047c76c45e4e901e7396140496f9a322c2c2ac777a27adff5a6daf32e852b1bac89f1086739a603cf0f6838f792351c08e38ab130e5a83aa5a4f2da19df131770a308d810eed0059a2e5546a2169b9d0119f6df7c18981f4b4f119c76fdaac031ce7551f25678b5c4d8815a7ea9565e63389fca6ea0bcd40e71ac72124113dc0041ce26a0c9979ff76d7f1f2c0cd2c16d8c7a36930b909ed7e2d4adfa8352b12b99bdcbc25b485f652539fab7ac983c1ae925967c15ba2345e45d6bafe13b3e9d7acf1a592422ea09c3a45f7fe24e235bd70b106cdaa665584e74cdaf9f39b804bc6c4e7f0bf572225acd4dfe010081b91c2d5970d4f43d2e1a0e05f84baaf50642991b3704034aed74572e6a4715b79276432d06660b39c989570fc0d5d0071a7c690658caee447370d3295db3b5dc625e697e1ca2675b5430b9969024835c7d001fbce86c5165c4fe8f2d46b883daaa3fbf42dc5cf61209379013896df740b9cc32638358ea8079a33f04197f650471086e67e5cf9779268d7973c73bbbde2f1c11e1a8e2b154aaa8b4b74f8a03f14ceb7afc4ba35e6620b7af89c969021d20cb260c1868f3fa432ce7e509db06001ae6540531b126c1e3a851acbf0a9c1354bece05c094d69d9bd87f99391e23306911383d2082997339daebd67d8a707c9b496a309b7921696f39a07864f31208802db7188881e346b41c34f4129fca9c6a13172a4dabfe791584d240fc03685057d53c08737aa1d486233318eb4545f2e8d18087705b9d3a7658564592f56aea3aee53d66c249988bf353853728553a1577062e24af533f47dc012ae90c5c085babc121be2993c063e203ab949a088041271ac0527c56edd4b7a87e98323a0137cd493aa05fe38d02754a66d89348b119e6200d5919bc366788eb67115fc57c4c1a9dd42c7411d6709ad82de8662a1849445b39beb2ba8f894860e41a054f61337179a9214b0884f3964c95ed2a4ab37de8038566bba76fbaa7502c0460558ff4bf4793ca68d78e50f384a81da4cfa23723747e906b82290e0b8ea07e3404bee0915800d4c3c07f94c43e7aafbc7a44d923de97963d0d1586bee06fc90aadbe5758fb9933ff7df346d62e082223741f5cb26ef953ca654ab983a72b30b296891c9e3f1ed5216b0e588eb25f5d4ccad6f96973cc2d26196bbd37c83266473071ccd84d9e3c74f22621e8bd60afa4bcad6c853c7591fe5d4298a954ea5006f682a7a65aeb26b230f3866a28a58bf532aca8fd5eaec64f442ac510a7df4114f00fd6ff7e02d77f8e72797222556959958c4c4d166c5af18a6e25588cac9871a3d5bb453889ff8d13db22024a997bf97a5afdf698b1deaff3101e27868d2de47b92c403ce82e15f3239d8923e8ca0c01e3781b5dd6121f57d2238dc3ff8a1bde3e371efd33838c552e43588042b360f55d7ca92f11987630364b263428e18601d7bf23f6432b3a9aa2c500cd9ac5f73cbe309443858a2806956b0cdcfc19904567bb1703641017c6199e768410e03d8ba603eb34249d567370202f39639ae8f6d52d9d5dbfc544c5b85ac8187095c63f1f613fe4af179fc5c837e6e0ccc21e62ac22ac045c4ac3b1ca6a4cbdbe29ea465240fc0aed1f0e086d7580bcf81d4e2a4d55a8e3bc57110e7cf1e1895df07974f0686dd2ea2b12bbfd64e7a9d0c62c662f0370e6ed495eeb2ee5029042147a1f2e5fcd6068b06567be893cb80e2cbb5fbb12847313811c13cf685698d5e2175959579e510279b9e959ac2c3f94fec653c6b521f8909d633ccedbc1109285ecbd52d27cd2891eaf354db2c966d1e3086718848433c12658fe7f6fbfef930b963139a63f6c4caee5a1964d3a038dd0db403c0a251d702c07a0fba4a3576ec6668a78e9e26efc6ad83a670a47608bf4207979bf196b3160c95e7ccc6406d46f529d34676b76d72396262e1448df051130a21484e0e977df1f7f0a259ac762eef9506877498b9998e1286d6294cf60b95352e81c3", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x330, 0x0, 0x3, [{{0x0, 0x2, 0x4, 0x100, 0x9, 0x2, {0x3, 0x5, 0x0, 0x8, 0x10001, 0x3, 0xb, 0xdcc, 0x34, 0xc000, 0xffff, r7, 0x0, 0x7f, 0x5}}, {0x3, 0xc, 0x7, 0xfffffffc, 'user_id'}}, {{0x4, 0x3, 0x28000, 0x3, 0x9, 0x10001, {0x6, 0x9, 0x4, 0xb, 0x6, 0x0, 0x6, 0x1, 0x6, 0x8000, 0xde, 0x0, 0x0, 0x8001, 0x80000000}}, {0x1, 0x1, 0x1, 0x32540194, '\x00'}}, {{0x4, 0x0, 0x4, 0x0, 0xfff, 0xf4, {0x4, 0x7, 0x8c, 0xfffffffffffffff9, 0x0, 0x80000000, 0x8, 0x806, 0x5, 0xa000, 0x33c1bc78, 0x0, r8, 0x1ff}}, {0x6, 0xe6, 0x2, 0x7, 'fd'}}, {{0x5, 0x2, 0x10, 0x6, 0x4, 0x4, {0x3, 0x9, 0x5, 0xea, 0x37b, 0x10001, 0x7, 0xc0, 0x0, 0x4000, 0x1, r7, r8, 0x1, 0x7}}, {0x1, 0x8000, 0x2, 0x2, '\'}'}}, {{0x4, 0x3, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x9, 0x3, 0x6, 0x5, 0x2, 0x2, 0x6, 0x7, 0x8000, 0x0, r7, r8, 0x1, 0x3}}, {0x0, 0x7, 0x1, 0x300, '\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r9, &(0x7f0000000100)=""/134, 0x86) write$binfmt_script(r4, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0, 0x0, r4}, 0x68) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r4) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r10, 0x0, 0x201f00) 9.561718674s ago: executing program 3 (id=3206): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0x4001af84, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) openat$nvram(0xffffffffffffff9c, 0x0, 0x40080, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffd, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) (async) dup2(r5, r4) (async) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 9.312780437s ago: executing program 3 (id=3210): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) socket(0x1d, 0x2, 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000200)=0x20022a, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010003bdd32d999000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000f000100000005000e0002000000"], 0x44}}, 0x880) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r6, 0x107, 0x1, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x80000) ioctl$EVIOCGEFFECTS(r8, 0x80044584, &(0x7f0000000380)=""/196) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0x2, &(0x7f0000000040)=0x12, 0x4) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/rcu_stall_count', 0x84003, 0x50) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40, r10, &(0x7f0000000200)='8', 0x1, 0x10000000005971}]) 7.428535429s ago: executing program 3 (id=3217): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x1, 0xdd9f83, 0x1, 0x8, 0x1000001, 0x2, 0x7, 0x2, 0x4013, 0x400007, 0x7f, 0x2b, 0xb763599953cb093b, {0x80001, 0xe}, 0x3}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x73f}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000180)={r6, 0x6}, &(0x7f0000000240)=0x8) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) syz_kvm_setup_cpu$x86(r8, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f00000001c0)="0f01cb363e6464670fae880050000066b91406000066b85eacd44e66ba000000000f3066b90d03000066b8d715691966baa1495ef00f300f01370f01cf0f01c266b9be0200000f320f01c40f20c06635000004000f22c0", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6.884148229s ago: executing program 2 (id=3221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0x1, 0x8, 0x2, 0x1, 0xe9, 0x1}}, {0x6, 0x2, [0x8]}}]}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7f, 0x8, 0xfffd, 0x8, 0x0, 0x8, 0x1000}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8d0}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, 0x10, 0xb, 0x70ad26, 0x4000, {0x3}, [@nested={0x18, 0x1, 0x0, 0x1, [@nested={0x13, 0x74, 0x0, 0x1, [@generic="fa894f", @nested={0x9, 0x12b, 0x0, 0x1, [@generic="8d10413f76"]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48d1}, 0x4040080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 6.783732516s ago: executing program 2 (id=3222): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@upd={0xe0, 0x12, 0x1, 0x70bd26, 0x25dfdbfc, {{'drbg_pr_ctr_aes192\x00'}, '\x00', '\x00', 0x0, 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000002000000010000000000000000010000090900030073797a32000000000900030073797a31000000000900020073797a3000000000a7b939c446db0300000054cbad792eff96365655caa322bce6dc28fe9f899a4ec0d7b9f89da8fa888e8d3f56327f2cf887269b9188010000000000000068013e2464f15f193ed64013dba60ea544d7c1f28e4aa7b5ecd8588b2dbbf85115371def89e775f2b3e49bf4371ec45f1d00"/178], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x801) socket(0x10, 0x5, 0x6) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x2166994bd8d20fda, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000000)={0xc, r2}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000240)={0x1f}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000900)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000640)="01b993d100c457236e125e962ba54d473224f6378649aa61d96bfa410ef54d79b67771aeb2bde3fd912d8287b2bae24a74fb1d1cea6943d9cdc0ec5d15cb8ec4242cef4df9933a1fe86f442cc1de907eef06d108398c4b890673dd13c7f124c4ad003f289997525f8150362cfe83321fe84eec6b659e5a26b3a39db16b55f374444e2377728c4422f40ea7c7b221909791ca9722637303f80c511319681e270ac5563029a656c07ae1639a1d5d085b4bfbd462e05fd31ae3d9b58e1850aa1af7d7c4c88306e678606610733b8e2c06480bc4417f51ccc90f8df2c8bb90fcee95e7a3572b4bd9b81bda24c18d7ccca6a1c77f", 0xf2}, {&(0x7f0000000740)="888ae82bf518176e93c8ad87d332351b9f4454858ee206175e42d5af2124fa1a7438d6f889314ca6eaea18a799a50f88dd859ee0d9b2cd0392e8953cb6e8b5e737a9921aa9ec88291888947bf9cb8f35835093496a7f7d4eafb66bb76b40896ef307216c26d4ae09cd6954e932bcc275721cc9f66365171dc228ea18248a6266d0ff242f086d9aadd3", 0x89}, {&(0x7f0000000800)="e169362f41756cae211ad35aa1eddba46bfd2e4468a5577a353a792b946197d1561073bbde9d6f4dd8fe8d4768b55d611a20d44c623c9ca3df0324b8acc93305f4710bdbe861a8232fe70e4448324193694c3b1b20c24d9d05ccdc3dcd516a396add805691e0a4b69c970d9252ee7ce08f584304a465e6d6d376d7c49abc2f883d72f9257ebfa9ad8a13308a169cacfaa5299673ca5ac7a166383d0ac11097a096c384b5dcc283607bb12172c74ee9a2", 0xb0}, {&(0x7f0000000580)="f4355b3cbb5984dce41293f5692c28d030e9d5bc4b8f3f25075784b05afbcb7fec4b3ea04e01ffedabbfa1b7244a3c404dc5177633cbbdff5356149b79df6a430b20", 0x42}], 0x4, &(0x7f00000008c0)}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ftruncate(r5, 0xffff) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4004014) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f80)) sendmsg$inet(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340), 0x2}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x8701, 0x8000, 0xffffffff, 0x7fffffff, {{0x5, 0x4, 0x2, 0x3, 0x14, 0x62, 0x0, 0x6, 0x0, 0x0, @empty, @multicast2}}}}) socket$inet_udplite(0x2, 0x2, 0x88) 6.679008403s ago: executing program 2 (id=3223): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) r2 = socket(0x6, 0xa, 0x4) r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a"], 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newqdisc={0x390, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x360, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x5fd2, 0x401, 0x0, 0x18, 0x1f, 0xe, 0x1}}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x10001}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x390}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000b80)=ANY=[@ANYBLOB="b80000005500010c2bbd7000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="00010000ff0100000000000000000000000000010800000020000100", @ANYRESDEC=r3, @ANYBLOB="00030300ac1e01010000000000000000000000008edd000020000100", @ANYRES32=0x0, @ANYBLOB="00030300fc0000000000000000000000000000010800000020000100", @ANYRES32=0x0, @ANYBLOB="01000200fc0200000000000000000000000000000800000020000100", @ANYRES32=r6, @ANYBLOB="0100c6098c623e1a5b65c3c7c58e603a468000000000090c"], 0xb8}, 0x1, 0x0, 0x0, 0x20004801}, 0x5) setxattr$incfs_size(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f00000003c0)=0x6e5, 0x8, 0x1) r7 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000140)={0x814, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x49323159}) r8 = socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r9 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r8, 0x1, 0x28, &(0x7f00000000c0)=0x4, 0x4) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000200000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000041414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000200025a729bd700400dbdf250a0000cdff00000102000100080006000000000008000e002ab50000bf0d1d664325bfa5b9c73dc558dc1e42399b94f514eff4e41319a3d0e4a74643ebab5358de0fdedf87208632ad6c19"], 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) readv(r9, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/255, 0xff}, {0x0}], 0x2) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa97c4864ef7a30800490000240064000000879078ac1414bbac14140c8907efe000000d86060000000000001a"], 0x0) 6.587627859s ago: executing program 0 (id=3224): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, r2, 0x331, 0x70bd25, 0x25dfdbfa, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x24048800}, 0x4000000) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001", @ANYRES8=r0, @ANYRESDEC=0x0, @ANYRESOCT=r2], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWPHYS(r3, 0x4004480d, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) close_range(r4, 0xffffffffffffffff, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x8, 0x200000009bc7, 0x8, 0x4, 0x7fffffff], 0x1, 0x0, 0x0, [{}]}, 0x88) 6.104381778s ago: executing program 3 (id=3226): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@mark={0xc}]}, 0x34}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) r3 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$CEC_S_MODE(r3, 0x40046109, 0x0) close(r3) r4 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x4d0401) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000300)=0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r7 = syz_open_dev$usbmon(0x0, 0x7, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3001a}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e27}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="880000001000390424bd7000070000000000000097af04fdaa5a15c39249cc5f7575", @ANYRES32=r7, @ANYRES64=r6], 0x88}}, 0x20040810) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 4.518091811s ago: executing program 3 (id=3228): syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x1, 0x38, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@lsrr={0x83, 0xb, 0xce, [@private=0xa010101, @empty]}, @generic={0x94, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000540)='/sys/power/wakeup_count', 0x0, 0x10a) r1 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331, 0x0, r0}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/222, 0xde}], 0x1}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$packet(0x11, 0x3, 0x300) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x4, 0xa, 0x1, 0x8}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000080)={@remote, @local, @void, {@can={0xc, {{0x2, 0x0, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "84655d568c8f9cf5"}}}}, &(0x7f0000000100)={0x0, 0x2, [0x29a, 0x315, 0x12, 0x6]}) r7 = syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000000)={0x18, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0}) 4.447661061s ago: executing program 0 (id=3229): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbf8, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x8, 0x8001, 0x5, 0x1, 0x101, 0x80000000}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fdb75f0505000200140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="11424279ad57d1535813dab739ab3963b6376a31b067e9e6568377df7eafcaad630511ad37db672a8ffb256bec542e2372900a9319e358477daab7eae08bea83aef8354ff2b1b0fb1ce8a2f262af4227a6aff3f2a35f8cf9d87447f71856a847583cf1f9714d217a0c7c363ceee26c730697900b2e4f737d82cd5b7f8c9f33f740"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x2054) 4.404559709s ago: executing program 5 (id=3230): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b01", @ANYBLOB="d33bdafdaf"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b01", @ANYBLOB="d33bdafdaf"], 0x0) (async) 4.288914294s ago: executing program 0 (id=3231): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r3, 0x500e, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r2, 0x442b3, 0x602a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010101}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0xd, 0x8, 0x2, 0xfffffff7, &(0x7f0000000000)="6bb2"}) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) (async) ioctl$SNDCTL_DSP_NONBLOCK(r3, 0x500e, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r2, 0x442b3, 0x602a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010101}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) (async) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0xd, 0x8, 0x2, 0xfffffff7, &(0x7f0000000000)="6bb2"}) (async) 4.1922691s ago: executing program 0 (id=3232): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = socket(0x10, 0x5, 0x80000) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400680, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000440)=r3) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) r4 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r5 = openat$cgroup_ro(r3, &(0x7f0000000480)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)=[{{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x24}}], 0x20, 0x24000010}}], 0x1, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xb3d) r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r6, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00031e0000000403"], &(0x7f00000002c0)={0x0, 0xf, 0x82, {0x5, 0xf, 0x82, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x6, 0x7, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1, 0xd8, 0xfff4}, @generic={0x6c, 0x10, 0x3, "288baa2af1283279f2102f96fe5bd2a102e210686284d3ec03d07c5a6c0c715a36e93f82bb1c3533d684a7426a14b40824a084b31760a1a700334fc1a4043dcb04a0cb83ba6e0f5a194d6e88e6f0b9fb1030d1cbd8cf1d920077e88ae2e172ccf1ee1947201fecff11"}]}}, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='timers\x00') getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) 3.408353347s ago: executing program 2 (id=3233): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) r4 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x4, 0x10}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x8c}]}, 0x3c}, 0x1, 0x4000000}, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x8000000000000000, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r8}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) sendmsg$alg(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="39fd30b02f54e42ca4bfcc595b08286f11e5b34b0301bfb81bb3021a252ff001", 0x20}, {&(0x7f0000000480)="bc48d506c5cb9e3852257c16cbf4dd5f4fa149d71634089c5ea27fffa53d91255fc6fafe21743f0842b955f5e1b7b0656da8234edecb00a924ca2db8c00732badac6e88b7513edc10599c8f93d33d84bd59e52a96c9b6cc2b6c60bab36b6a164256ae34f425781d91a71c4abbb17e7e408a4b39d710ebc0ec45e83ff3494f802fbcaefbb7ad32440db9f3a962f1e15d40aec177ab1f4fc6f6301ef5b59e001825c7728a74d942f8bc3e33e900b9b677f4ab57829131c59905a0fec3d796b4e08be964b04356b97", 0xc7}, {&(0x7f00000003c0)="41f0b70e381a403a80ee529c5cb883e0e481cf7e7c6a4a31e82c75ec293ec9b4", 0x20}], 0x3, 0x0, 0x0, 0x44081}, 0x20004000) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="080000001f0137f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c909ff0f00000000000087afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x1) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x5}, {}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x15}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x16}, {0xfffc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @mcast1, [0x0, 0xff000000, 0xffff00, 0xffffff00], [0xff, 0xffffffff, 0xffffff00, 0xffffffff], 'bridge_slave_1\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x3a, 0xb, 0x1, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r10, 0x6, 0xe, 0x0, &(0x7f00000001c0)) 3.125289755s ago: executing program 2 (id=3234): r0 = syz_io_uring_setup(0x74d, &(0x7f0000000240)={0x0, 0x59c4, 0x8, 0x5000, 0x3cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) r3 = syz_usb_connect(0x0, 0xff0f, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x4c, 0xac, 0x20, 0x10, 0x458, 0x7005, 0x6d16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfc, 0x0, 0xe9fc732c90d681f3, 0x0, [{{0x9, 0x4, 0xd5, 0x7, 0x0, 0x85, 0xa1, 0xf2}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000900)={0x44, &(0x7f00000003c0)={0x0, 0x17, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.976216654s ago: executing program 5 (id=3235): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0x5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xb, 0x1}) read$FUSE(r5, &(0x7f0000000400)={0x2020}, 0x2020) preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, 0x80000000, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0xc00, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x47f6, 0x0, 0x2, 0x0, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x60000, 0x0) 2.129503831s ago: executing program 0 (id=3237): lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x1) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = geteuid() mount$fuseblk(&(0x7f0000000180), &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200), 0x800, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x1800}}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x37, 0x61, 0x34, 0x35, 0x36, 0x65, 0x66], 0x2d, [0x63, 0x30, 0x64, 0x37], 0x2d, [0x0, 0x31, 0x66, 0x38], 0x2d, [0x35, 0x39, 0x32], 0x2d, [0x33, 0x36, 0x39, 0x3b, 0x39, 0x62, 0x34, 0x62]}}}, {@hash}, {@fowner_lt={'fowner<', r0}}, {@pcr={'pcr', 0x3d, 0x25}}, {@subj_role}, {@hash}, {@dont_hash}, {@euid_gt={'euid>', r3}}, {@obj_type={'obj_type', 0x3d, '}-('}}]}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000440)=[@in6={0xa, 0x4e20, 0xffff, @mcast1, 0xf0000}], 0x1c) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000480)={0x2b, 0x4, 0x0, {0x2, 0xffffffff, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) read$FUSE(r2, &(0x7f00000004c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002500)={0x50, 0x0, r5, {0x7, 0x2b, 0x401, 0x4580, 0xffff, 0x40, 0x6, 0x5, 0x0, 0x0, 0x18c, 0xf}}, 0x50) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a40)={&(0x7f00000025c0)={0x448, 0x0, 0x30, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x411, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x6e7}, @device_b, @device_a, @from_mac, {0x1, 0x10}}, @random="f22dd2e4ea6eb66401d7c73d6eb1364f18cc13ef2340c2529be8543bef9dbd4ab7d2c504dc17dfc57aed56d3e3a70efa826d932c21937c7e5ee3bdd950d644f3a11fc9784cc48999980a031df90038ae32ea1378557c3593b680a1eb13888774e89fdd0179e17b2c8daf4c2328f804b10e21be59438703c90bcbf8c3296147cfa22eafbea1524834ae3f04e3f53d7d25f2df3fe81fbeecb4231df63e327c0bb1992717b3fcea51503470eff4458f6be17906d98a0e07b729e36b5e3376620136be2860e7b0585817daf60b40e168e62fd9a598205cb73749435e9849c1dc6ca4c1b79e559cf3e20aee81ffc2fe504ae52f74a5c64c40591b5d37cea80cc038e6c3958a903a2b6b408d3e73fc8d5e1e7215eb6cab58849e19cb6021d09a35027df7ba7777fc8877310a89e296cc109a724b8a889d0b079c31e4c5e1e5fc4cf4882d51fdd70416ecc7eeb94c0e60fb3be6d7fcdeda9cda82db21569a8a47c507422041600f0a2ca981afe9935bbfc13edd16bf894da0a9ac498e83a8eb37f803ac9f08ead13f76971c6324442036fdf86ecdcf3c7b56ef9f585b7d946c5aff27d0a23587b5052bf6348ca041d7432a6186623448e4db806ac10eded028e6a5b27cfa699600bf468da689335121b38d019b21625b6e1048ef08960a0812479bee8f099725973ff2fc8b737df3696dd22754001a136b9dc09e8b539a9a0ab1f7d254eda89c806e16326d21e5f87c689d6846fc919b84d2aff9517e0468aa2ea7eb1275a2905509b3b4032f2c31127cb5099bcb81bc799692d329cc2e8f5a5d6e30c3e8557c35ce5fbac9324f933be3d841dc494f0e5e71ddd086223a070585a5f72e13a9e0c849523e84b3e993083b7e151f0e3330844fcd7f4569032583f87c0cf6afdcc365657f6f2736e5578c9245f2851933350b65bbf5f60020fe95f77bf09a8d97488840e08938635e9b8e6d93ae5abab6aedc313bbfadb52e8b555fcb9f49263f36c2c657adf8705b01f920ea56c09db8c3d988c210997182f77a83fb5da4cad121fcc0597c9e479aeefd4fc4c0e16f498045562ca71fa86abc26e67983c17c18ce0f55ee10d2fb438ee0991cd94b5bc632ab88254015d980196fdf6ad3266f5c794cdd2ac7d4488944491315d6c5b70dc2ec0c40fdf761c876f2eee95acb526ad7596d789cc2abccf18eaaa7535f388e1bc975287b180100f7a0fc1cbe0571d3e0488adc1d5ec596369463a3180d197f54384ce76b09e4d4ba2e3e3efb0cda86ab2d0cc7ff89cf4c99f29493ee5780387acf6d01b153ed18cb53d887ce20d7170a39215183e3af4d2e5e903361c8966c71e462c2bcaa8efde8e25374d5ce9b1ac5b909dbbc6e9749894b169ea8b509af8dd66c73a13b7b194638f12497f6c9888a02501fdf73beb6a22d787b692b73064c77ec"}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x448}, 0x1, 0x0, 0x0, 0x800}, 0x40000010) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000002ac0)={0x0, 0xc4, "163d5be566d575190b04ef5c45d6a2867cfc4107d40e8adfa8959cfef97d603d6463bb970d58b3f8832e9c632e40643c4fb68dafaad55eec00eb9b3615e636e448d9c78e97ff41bfe0f0ccb85fa7f760c457d7acfd6d482e28cbe3a28154af2b19631770e6757c16f2d8a51db652b404886175727634bb37a1476f94220624616994e402cc9e158788212671bccc82c822945892cc15f256db9ad821d3a5d97ee3a9b029fe93efbe4516df94bc4b9aa96915f7c3bc8f8c5876981537b66b74dcabd14f19"}, &(0x7f0000002bc0)=0xcc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000002c00)={r7, 0x3}, &(0x7f0000002c40)=0x8) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002c80), 0x40100, 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000002cc0)='\x00', &(0x7f0000002d00)='\x00', 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000002d40)={r8, 0x4, 0x30}, &(0x7f0000002d80)=0xc) write$FUSE_NOTIFY_DELETE(r9, &(0x7f0000002dc0)={0x2d, 0x6, 0x0, {0x3, 0x4, 0x4, 0x0, '/+$\xbf'}}, 0x2d) readlink(&(0x7f0000002e00)='./file0\x00', &(0x7f0000002e40)=""/113, 0x71) r10 = dup3(r2, r9, 0x80000) setxattr$incfs_size(&(0x7f0000002ec0)='./file0\x00', &(0x7f0000002f00), &(0x7f0000002f40)=0x81, 0x8, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r9, r2) splice(r10, &(0x7f0000002f80)=0x8000000000000001, r6, &(0x7f0000002fc0)=0x1c8000, 0x9, 0xc) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000003000)={0x0, 0x0, "e508f90a286293488fb9e95f1d32cc5f5c2dcd7e715d06eb144990cc9e60abba58337d48ce2b71ae7ce90799c0e4653dd005149ce39bed02101c36c8c2345c551ef3704a407475ea6b5c6da2958fccec5c9af99208dc0978be4bffe16e4c74ce9af62a647453a58b07463fc561fb5fb52ea5b5e14203278387d0b4cc7cb887040eab4425ca259c828e3ee1412a84348d3b2404066aeeb88acd53ca4f1a020f246c8e2712fe54c9abbfead209449b5296c36474673db04ea819e6467c7e7820642e7fa32298efd8939683b5491a44fa287d967c3908f505652da4104e2b6d6079d4cc3867eca55ad0d17a9a07df9a6b9a5aa7fcd2520638618572092b3f881787", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000004000)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "28931d789dc770"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000005000)={{0x0, 0x4d973be5, 0x1, 0xa8, 0x3, 0xfffffffffffffff8, 0x8, 0x7, 0x6, 0x4, 0x9e, 0x6, 0x10000, 0x8, 0x97}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000050c0)={{0x0, 0x8, 0xeea, 0xae, 0x10000, 0x1000, 0x7, 0x7fffffff, 0x1, 0x13, 0x3, 0x37b5f88, 0x7, 0x1000000000000000, 0x5}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f00000060c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000112340)={0x5d03, [{r11, r12}, {r13}, {r14, r15}], 0x31, "680a9b6f4fdbc9"}) 2.048229368s ago: executing program 0 (id=3238): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x5fb1, &(0x7f0000000040)={0x0, 0xc472, 0x4000, 0x0, 0x256}, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000ff020002000a00000800040001000000", 0x24) getsockname$inet(r2, 0x0, &(0x7f0000002280)) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = syz_io_uring_setup(0x88b, &(0x7f0000000240)={0x0, 0xa5e6, 0x800, 0x2003, 0x276}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x4, 0x0, 0x0, 0xfffffffffffffea4) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x40071, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000300)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r9, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}}) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000280)={0x1, @pix_mp={0xfffffff8, 0x93cf, 0x33565348, 0x0, 0x8, [{0x6, 0x5}, {0x9, 0x5}, {0x8, 0x3}, {0x4, 0x9}, {0x2, 0xb68a}, {0x6, 0x7ff}, {0x3, 0x2}, {0x50ad0a9a}], 0x9, 0x7f, 0x2, 0x2}}) 1.385809005s ago: executing program 3 (id=3242): ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000140)={{0x80, 0x10}, 'port0\x00', 0x8, 0x1b0c63, 0x7fff, 0x3, 0x1ff, 0x7, 0x0, 0x0, 0x3}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x108, 0x0, 0x2a0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x0, 0x0, 'veth0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x33, 0x5, 0x10}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xff, 0xffffff00, 0xff], 0x4e21, 0x4e21, 0x4e21, 0x4e23, 0x7f, 0x401, 0x400, 0x7, 0xe59}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x60) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) syz_usb_connect(0x5, 0x51, &(0x7f0000000140)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63000000000009050300000000000009050cf2000002060209050f0000004000000905"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 1.281765222s ago: executing program 5 (id=3243): syz_usb_connect(0x6, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f00000002c0)=[{0xa, 0x200, 0x0, 0x0}, {0x1c, 0x11811, 0x0, 0x0}], 0x2}) 1.071886449s ago: executing program 6 (id=3244): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x4) fcntl$setsig(r3, 0xa, 0x13) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x2000001, 0x4, 0xc2, 0x53, 0x3d, 0x2, 0x80, 0x41, 0x6b, 0x45, 0x8, 0x2, 0x1}, {0xb, 0xa7f3, 0x8, 0x8, 0x33, 0xff, 0x6, 0x3, 0xe, 0x7, 0x7, 0x6, 0x1}, {0x0, 0x7, 0xd, 0x10, 0x21, 0x9, 0x0, 0xbb, 0x4, 0x1d, 0x0, 0x2, 0xfffffffffffffb97}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x8a, 0x7fffffffffffe, 0x81, 0x105, 0xfffffffffbfffffd, 0x4002004c4, 0x1003, 0x3, 0x8, 0x10, 0x2, 0x4, 0x0, 0x3], 0x10000, 0x2100}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 765.902181ms ago: executing program 6 (id=3245): sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4008001}, 0x2404c004) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000005c0)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f00000003c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f00000002c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f00000000c0)='!+-^}\'\x00', &(0x7f0000000000)='!+-^}\'\x00', &(0x7f00000004c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000002680)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000080)='!+\x01\x00\x88\'\x00sY>[\xcc\x0f\x152\xf6\xa1\xe7\xf4\x93\xcd\x1a\x90\b\x96\xd8E', &(0x7f0000002780)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 671.790966ms ago: executing program 6 (id=3246): r0 = socket$kcm(0x10, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setattr(r1, &(0x7f0000000140)={0x38, 0x0, 0x10000030, 0x1, 0x4, 0x49c, 0x800, 0x75, 0x12, 0x4}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/210, 0xd2}], 0x1}, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 603.554624ms ago: executing program 5 (id=3247): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="8106000000000080"], 0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x46, 0x0, 0x0}) 466.717114ms ago: executing program 5 (id=3248): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000a00)=r0, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x10, 0x7, 0x1534c85b, 0x7, {{0x24, 0x4, 0x3, 0x9, 0x90, 0x66, 0x0, 0x6c, 0x2f, 0x0, @multicast1, @multicast1, {[@end, @cipso={0x86, 0xe, 0x2, [{0x7, 0x8, "16f6d8195383"}]}, @timestamp={0x44, 0x20, 0x33, 0x0, 0x0, [0x101, 0x1000, 0x80000000, 0x4, 0x0, 0x2, 0x1]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0x56, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x7ff}, {@private=0xa010100}, {@rand_addr=0x64010102, 0x3}]}, @timestamp_addr={0x44, 0x2c, 0xc8, 0x1, 0x0, [{@private=0xa010102, 0x2}, {@rand_addr=0x64010101, 0x2}, {@dev={0xac, 0x14, 0x14, 0x19}}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x2}, {@empty, 0xb}]}]}}}}}) r5 = socket(0x10, 0x3, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xaa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=@newsa={0xf0, 0x28, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x8}, {@in=@remote, 0x0, 0x32}, @in=@loopback, {0x4}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 459.490021ms ago: executing program 6 (id=3249): add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) pipe(&(0x7f0000000500)) (async) pipe(&(0x7f0000000500)={0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r0) 296.718533ms ago: executing program 6 (id=3250): statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0xa10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000000)=@filename='./file0\x00', r0, &(0x7f0000000180)={0x4659, 0x800, 0x0, 0x2}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x80002, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x8c012, r1, 0x343e2000) 266.818843ms ago: executing program 5 (id=3251): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x98, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x61, 0x6, "cc253d828e230cdcf896f280778e5008098563c707b735fb2f42f561039605a1a0be5c4ba66f8744a456d62bebbc58c6e6e6804fb79eea4970e3d4a9bf8ca3ba6215d712af2f23f9762ea70c555759b3d4cdb74176e7f4f5eb09546fa9"}]}, @NFT_MSG_DELCHAIN={0x104, 0x5, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_HOOK={0x54, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x344bb19}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5f1d109c}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x272b78c4}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_USERDATA={0x40, 0xc, "ebc0a855e9004830d687b2e747b527b2ae61e802986dfb8f2761a6198616cd610fd1dd6516ba386c68d4b5b18dc42294fe27ca3d2e731e6a4d05eecd"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14}}, 0x1e4}}, 0x4000040) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)={0x84, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x1}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2231}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x24000000}, 0x44044) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) (async) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r5, &(0x7f00000003c0)=[{&(0x7f0000000c80)=""/73, 0x49}], 0x1) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) (async) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io$hid(r6, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x2, 'l'}, @main=@item_012={0x2, 0x0, 0xb, "75c7"}, @local=@item_012={0x1, 0x2, 0x9, 'P'}]}}, 0x0}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc891}, 0x8000) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00ed020000000203"], 0x0, 0x0}, 0x0) (async) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) (async) r8 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r8, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)='[', 0x1}], 0x1}}], 0x2, 0x4008040) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000340)={0x0, 0x2, 0xffffffffffffffff, 0x4}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async) recvmmsg(r10, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) recvmmsg(r10, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/37, 0x25}, {&(0x7f0000003a40)=""/4093, 0xffd}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000600)=""/74, 0x4a}], 0x5}, 0x1801}], 0x1, 0x120, 0x0) r11 = socket$inet(0x2, 0x2, 0x2) connect$inet(r11, &(0x7f0000000100)={0x2, 0x4e23, @private=0xa010101}, 0x10) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000004c0)=0x5ebcd1e) 191.86601ms ago: executing program 6 (id=3252): memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x24, 0x18, 0x9, 0x70bd2b, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0xb}]}, 0x24}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r2) inotify_init() (async) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x80000006) (async) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x80000006) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x42024e}, &(0x7f0000000340), &(0x7f0000000040)) (async) r7 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x42024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000002c00)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x7, &(0x7f0000000100), 0x1, 0x40, 0x1}) (async) syz_io_uring_submit(r8, r9, &(0x7f0000002c00)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x7, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r7, 0x627, 0xc1040000, 0x43, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c1) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) (async) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb4, r12, 0x100, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7f}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x401}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xf001}, {0x8}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r13 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) dup(r13) (async) r14 = dup(r13) write$binfmt_elf64(r14, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x78, 0xa3, 0x23e, 0x3, 0x3e, 0xcd, 0x4000000000001d4, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x1, 0x6, 0x6b1, 0x501}, [{0x1, 0x81, 0xff, 0xff5, 0x100000000, 0x1b8, 0x7, 0x100000000000}], "", ['\x00']}, 0x178) (async) write$binfmt_elf64(r14, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x78, 0xa3, 0x23e, 0x3, 0x3e, 0xcd, 0x4000000000001d4, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x1, 0x6, 0x6b1, 0x501}, [{0x1, 0x81, 0xff, 0xff5, 0x100000000, 0x1b8, 0x7, 0x100000000000}], "", ['\x00']}, 0x178) execveat(r14, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 0s ago: executing program 2 (id=3253): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x0, 0x0}) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) fcntl$setpipe(r2, 0x408, 0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4000000000003) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) socket$can_bcm(0x1d, 0x2, 0x2) syz_io_uring_setup(0x12fa, &(0x7f0000000280)={0x0, 0x509b, 0x1000, 0x2, 0x3aa, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x14, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xffffffff, 0x80000}}]}, {0x3e}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000085}, 0x20040000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x0, 0x0}) (async) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) pipe2(&(0x7f0000000040), 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) fcntl$setpipe(r2, 0x408, 0x7) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4000000000003) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r3) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) syz_io_uring_setup(0x12fa, &(0x7f0000000280)={0x0, 0x509b, 0x1000, 0x2, 0x3aa, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000200)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x14, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xffffffff, 0x80000}}]}, {0x3e}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000085}, 0x20040000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) (async) kernel console output (not intermixed with test programs): attribute type 1 has an invalid length. [ 737.790293][T17516] 8021q: adding VLAN 0 to HW filter on device bond7 [ 737.844884][T17517] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 737.926730][ T5155] Bluetooth: hci5: command tx timeout [ 738.024833][T17400] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 738.071055][T17400] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 738.116536][T17400] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 738.148221][T17400] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 738.155933][ T12] IPVS: stop unused estimator thread 0... [ 738.327950][T15749] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 738.483053][T17400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.501247][T15749] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 738.515100][T15749] usb 1-1: config 0 has no interface number 0 [ 738.527970][T15749] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 738.544874][T17400] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.551766][T15749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.565731][T15749] usb 1-1: Product: syz [ 738.588122][T15749] usb 1-1: Manufacturer: syz [ 738.595069][T15749] usb 1-1: SerialNumber: syz [ 738.605297][ T6116] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.612454][ T6116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.659665][T15749] usb 1-1: config 0 descriptor?? [ 738.691135][ T6116] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.698344][ T6116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.937346][T15749] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 738.986951][T15749] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 739.023219][T17400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.031396][T15749] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 739.049503][T15749] usb 1-1: media controller created [ 739.175747][T15749] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 739.287504][T17400] veth0_vlan: entered promiscuous mode [ 739.293510][T15749] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 739.347557][T17400] veth1_vlan: entered promiscuous mode [ 739.506370][T15749] usb 1-1: USB disconnect, device number 70 [ 739.550899][T17400] veth0_macvtap: entered promiscuous mode [ 739.588214][T17400] veth1_macvtap: entered promiscuous mode [ 739.788892][T17400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.832665][T17400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.984260][ T3666] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.021509][ T3666] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.040804][ T3666] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.055168][ T3666] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.481347][T15749] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 740.716270][T15749] usb 6-1: Using ep0 maxpacket: 32 [ 740.769121][T17589] fuse: Bad value for 'fd' [ 740.779510][T17589] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2806'. [ 740.862771][T17590] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2806'. [ 740.891801][T15749] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.902898][T15749] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.913000][T15749] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 740.922217][T15749] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.955780][T15749] usb 6-1: config 0 descriptor?? [ 740.963345][T15749] hub 6-1:0.0: USB hub found [ 741.205020][T15749] hub 6-1:0.0: 1 port detected [ 741.241322][T17593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.342111][T17593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.433646][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.460637][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.678624][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.691225][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.225213][T15749] hub 6-1:0.0: activate --> -90 [ 743.450673][T15749] usb 6-1-port1: config error [ 743.470252][T15749] usb 6-1-port1: cannot disable (err = -32) [ 743.510405][T15749] hub 6-1:0.0: hub_ext_port_status failed (err = -32) [ 743.528392][T15749] usb 6-1-port1: cannot disable (err = -32) [ 743.787839][T17653] netlink: 'syz.5.2819': attribute type 1 has an invalid length. [ 743.796678][T17653] netlink: 'syz.5.2819': attribute type 2 has an invalid length. [ 743.805165][T17652] netlink: 'syz.5.2819': attribute type 1 has an invalid length. [ 743.816480][T17652] netlink: 'syz.5.2819': attribute type 2 has an invalid length. [ 743.817228][ T129] usb 6-1: USB disconnect, device number 110 [ 744.106266][ T129] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 744.268204][ T129] usb 4-1: Using ep0 maxpacket: 32 [ 744.280939][ T129] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 744.292842][ T129] usb 4-1: config 1 interface 0 has no altsetting 0 [ 744.305916][ T129] usb 4-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.40 [ 744.316368][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.324827][ T129] usb 4-1: Product: syz [ 744.344064][ T129] usb 4-1: Manufacturer: syz [ 744.349553][ T129] usb 4-1: SerialNumber: syz [ 744.607314][ T129] usbhid 4-1:1.0: can't add hid device: -71 [ 744.627662][ T129] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 744.635509][T17672] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2823'. [ 744.793396][ T129] usb 4-1: USB disconnect, device number 44 [ 744.898298][ T5911] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 745.121656][ T6744] udevd[6744]: setting owner of /dev/bus/usb/004/044 to uid=0, gid=0 failed: No such file or directory [ 745.133770][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 745.151495][ T5911] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 745.179349][ T5911] usb 3-1: config 0 has no interface number 0 [ 745.202213][ T5911] usb 3-1: config 0 interface 1 has no altsetting 0 [ 745.233208][ T5911] usb 3-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=ff.7e [ 745.253760][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.263293][ T5911] usb 3-1: Product: syz [ 745.270809][ T5911] usb 3-1: Manufacturer: syz [ 745.283796][ T5911] usb 3-1: SerialNumber: syz [ 745.302453][ T5911] usb 3-1: config 0 descriptor?? [ 745.579079][ T5911] i2c-cp2615 3-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 745.837259][T17695] program syz.2.2823 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 746.030705][ T129] usb 3-1: USB disconnect, device number 61 [ 746.879123][T17711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2832'. [ 747.147933][T17720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.301044][T17720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.356490][T15747] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 747.415590][T17723] netlink: 'syz.0.2835': attribute type 1 has an invalid length. [ 747.453963][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.463116][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.473715][T17723] 8021q: adding VLAN 0 to HW filter on device bond8 [ 747.500243][T17725] bond8: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 747.529636][T17725] bond8: entered allmulticast mode [ 747.549981][T15747] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 747.560279][T15747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.573154][T15747] usb 4-1: Product: syz [ 747.582113][T15747] usb 4-1: Manufacturer: syz [ 747.639435][T15747] usb 4-1: SerialNumber: syz [ 747.660315][T15747] usb 4-1: config 0 descriptor?? [ 747.678701][T15747] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 747.698089][T17723] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 747.958519][T17730] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2837'. [ 747.987122][T17732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2838'. [ 748.027861][T17734] netlink: 'syz.2.2836': attribute type 1 has an invalid length. [ 748.155286][T17727] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 748.189553][T17727] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 748.366591][ T129] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 748.499126][T15747] usb 4-1: USB disconnect, device number 45 [ 748.538845][ T129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 748.563218][ T129] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 748.579894][ T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.603638][ T129] usb 1-1: config 0 descriptor?? [ 748.760309][T17750] binder: 17749:17750 ioctl 400c620e 200000000100 returned -22 [ 749.032999][ T129] hid (null): unknown global tag 0xe [ 749.038634][ T129] hid (null): unknown global tag 0xd [ 749.048444][ T129] elecom 0003:056E:00E6.0030: unknown global tag 0xe [ 749.055544][ T129] elecom 0003:056E:00E6.0030: item 0 0 1 14 parsing failed [ 749.064491][ T129] elecom 0003:056E:00E6.0030: probe with driver elecom failed with error -22 [ 749.186416][T15747] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 749.347288][T15747] usb 3-1: Using ep0 maxpacket: 8 [ 749.354299][T15747] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 749.366344][T15747] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 749.375367][T15747] usb 3-1: config 1 has no interface number 1 [ 749.386277][ T129] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 749.495865][T15747] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 749.552021][T15747] usb 3-1: too many endpoints for config 1 interface 2 altsetting 255: 255, using maximum allowed: 30 [ 749.602260][T15747] usb 3-1: config 1 interface 2 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 749.633612][T15747] usb 3-1: config 1 interface 2 has no altsetting 0 [ 749.650401][T15747] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 749.654201][ T129] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 749.679673][T15747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.690693][T17771] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2848'. [ 749.718753][T15747] usb 3-1: Product: syz [ 749.737458][T15747] usb 3-1: Manufacturer: syz [ 749.742703][T15747] usb 3-1: SerialNumber: syz [ 749.747738][ T129] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 749.810277][ T129] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 749.853830][ T129] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 749.900602][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.009903][T15747] usb 3-1: 0:8 : does not exist [ 750.050662][ T129] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 750.060483][T15747] usb 3-1: USB disconnect, device number 62 [ 750.083226][ T129] usb 4-1: invalid MIDI out EP 0 [ 750.230063][ T6024] udevd[6024]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 750.257681][ T129] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 750.291775][ T129] usb 4-1: USB disconnect, device number 46 [ 750.586426][ T5911] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 750.738294][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.749432][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.760198][ T5911] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 750.769446][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.780871][ T5911] usb 6-1: config 0 descriptor?? [ 751.140433][ T129] usb 1-1: USB disconnect, device number 71 [ 751.195491][ T5911] cm6533_jd 0003:0D8C:0022.0031: unknown main item tag 0x0 [ 751.205481][ T5911] cm6533_jd 0003:0D8C:0022.0031: unknown main item tag 0x0 [ 751.221962][ T5911] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0031/input/input86 [ 751.270008][ T5911] cm6533_jd 0003:0D8C:0022.0031: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 751.416225][ T5925] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 751.566280][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 751.580555][ T5925] usb 4-1: config 8 has an invalid interface number: 134 but max is 0 [ 751.598249][ T5925] usb 4-1: config 8 has no interface number 0 [ 751.613374][ T5925] usb 4-1: config 8 interface 134 has no altsetting 0 [ 751.638082][ T5925] usb 4-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice= 4.15 [ 751.664065][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.676864][ T5925] usb 4-1: Product: syz [ 751.681102][ T5925] usb 4-1: Manufacturer: syz [ 751.685819][ T5925] usb 4-1: SerialNumber: syz [ 751.935027][T17793] netlink: 'syz.3.2855': attribute type 46 has an invalid length. [ 751.950272][T17793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.960693][T17793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.971319][T17793] tmpfs: Unknown parameter 'нJл‹жА вbиЫз]ќІjVО0AЁЋ;0·<¦ arиЪ¶·Ђ±ЛµЧ;оЇГД‚')?Eы¤ч©сиX' [ 751.977488][ T5911] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 751.993106][T17816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2861'. [ 752.038158][ T5925] gspca_main: benq-2.14.0 probing 04a5:3035 [ 752.061803][ T5925] usb 4-1: USB disconnect, device number 47 [ 752.116366][ T5911] usb 1-1: device descriptor read/64, error -71 [ 752.166052][T17821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2862'. [ 752.376350][ T5911] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 752.386474][T15747] usb 6-1: reset high-speed USB device number 111 using dummy_hcd [ 752.486481][T15746] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 752.516317][ T5911] usb 1-1: device descriptor read/64, error -71 [ 752.626831][ T5911] usb usb1-port1: attempt power cycle [ 752.646711][T15746] usb 3-1: Using ep0 maxpacket: 32 [ 752.660108][T15746] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.671005][T15746] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 752.690770][T15746] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 752.709768][T15746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.724870][T15746] usb 3-1: Product: syz [ 752.730447][T15746] usb 3-1: Manufacturer: syz [ 752.735372][T15746] usb 3-1: SerialNumber: syz [ 752.743782][T15746] usb 3-1: config 0 descriptor?? [ 752.765683][T15746] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 752.894070][T17828] vlan2: entered promiscuous mode [ 752.899868][T17828] geneve1: entered promiscuous mode [ 752.905829][T17828] vlan2: entered allmulticast mode [ 752.921321][T17828] geneve1: entered allmulticast mode [ 752.928474][T17828] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2864'. [ 752.978047][ T5911] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 753.018907][ T5911] usb 1-1: device descriptor read/8, error -71 [ 753.073822][T17831] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2866'. [ 753.082984][T17831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2866'. [ 753.092258][T17831] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2866'. [ 753.103503][T17831] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 753.112345][T17831] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 753.133136][T17831] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20004 [ 753.296524][ T5911] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 753.350566][ T5911] usb 1-1: device descriptor read/8, error -71 [ 753.476555][ T5911] usb usb1-port1: unable to enumerate USB device [ 753.550159][T17838] kvm: emulating exchange as write [ 754.047210][T15749] usb 6-1: USB disconnect, device number 111 [ 754.098212][ T5925] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 754.258578][ T5925] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 754.267022][ T5925] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 754.277678][ T5925] usb 4-1: config 8 has no interface number 0 [ 754.283850][ T5925] usb 4-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 754.297163][ T5925] usb 4-1: config 8 interface 177 has no altsetting 0 [ 754.304008][ T5925] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 754.313191][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.329306][ T5925] ir_toy 4-1:8.177: required endpoints not found [ 754.543508][T17847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.564647][T17847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.145098][T15749] usb 3-1: USB disconnect, device number 63 [ 755.316339][ T5925] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 755.468916][ T5925] usb 6-1: New USB device found, idVendor=14cd, idProduct=6116, bcdDevice= 1.4d [ 755.478767][ T5925] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 755.487844][ T5925] usb 6-1: Manufacturer: syz [ 755.495104][ T5925] usb 6-1: config 0 descriptor?? [ 755.526431][T15749] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 755.697232][T15749] usb 3-1: Using ep0 maxpacket: 32 [ 755.704363][T15749] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 755.724212][T15749] usb 3-1: config 0 has no interface number 0 [ 755.731457][ T5911] usb 6-1: USB disconnect, device number 112 [ 755.737741][T15749] usb 3-1: config 0 interface 12 has no altsetting 0 [ 755.760837][T15749] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 755.777872][T15749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.785966][T15749] usb 3-1: Product: syz [ 755.790888][T15749] usb 3-1: Manufacturer: syz [ 755.795499][T15749] usb 3-1: SerialNumber: syz [ 755.802965][T15749] usb 3-1: config 0 descriptor?? [ 756.857066][ T5911] usb 4-1: USB disconnect, device number 48 [ 756.872375][T15749] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 756.892923][T15749] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 756.928761][T15749] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 756.953849][T15749] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 756.990776][T15749] usb 3-1: USB disconnect, device number 64 [ 757.061206][T17896] netlink: 'syz.3.2883': attribute type 4 has an invalid length. [ 757.696220][T15749] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 757.855267][T15749] usb 1-1: device descriptor read/64, error -71 [ 758.096235][T15749] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 758.261925][T15749] usb 1-1: device descriptor read/64, error -71 [ 758.376617][T15749] usb usb1-port1: attempt power cycle [ 758.736339][T15749] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 758.770961][T15749] usb 1-1: device descriptor read/8, error -71 [ 758.801316][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 758.801332][ T30] audit: type=1326 audit(1766749513.783:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17926 comm="syz.2.2893" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b50b8f749 code=0x0 [ 758.909000][T17932] fuse: Unknown parameter '00000000000000000000003яя' [ 758.916333][ T5911] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 759.036360][T15749] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 759.066716][T15749] usb 1-1: device descriptor read/8, error -71 [ 759.096226][ T5911] usb 6-1: Using ep0 maxpacket: 16 [ 759.103301][ T5911] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 759.124418][ T5911] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 759.152623][ T5911] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 759.186638][T15749] usb usb1-port1: unable to enumerate USB device [ 759.193116][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.214575][ T5911] usb 6-1: Product: syz [ 759.222648][ T5911] usb 6-1: Manufacturer: syz [ 759.227554][ T5911] usb 6-1: SerialNumber: syz [ 759.474797][ T5911] usb 6-1: 0:2 : does not exist [ 759.491401][ T5911] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 759.556289][ T5911] usb 6-1: USB disconnect, device number 113 [ 759.576317][T15742] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 759.614850][T17940] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 759.641453][ T6744] udevd[6744]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 759.827064][T15742] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 759.837131][T15742] usb 3-1: config 0 has no interface number 0 [ 759.844143][T15742] usb 3-1: config 0 interface 11 has no altsetting 0 [ 759.856254][T15742] usb 3-1: New USB device found, idVendor=1871, idProduct=0306, bcdDevice=1a.d2 [ 759.875730][T15742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.895527][T15742] usb 3-1: config 0 descriptor?? [ 760.111540][T15742] usb 3-1: string descriptor 0 read error: -71 [ 760.122328][T15742] uvcvideo 3-1:0.11: Found multiple Units with ID 1 [ 760.129625][T15742] uvcvideo 3-1:0.11: Found UVC 0.00 device (1871:0306) [ 760.139133][T15742] uvcvideo 3-1:0.11: No valid video chain found. [ 760.160507][T15742] usb 3-1: USB disconnect, device number 65 [ 760.218266][T17951] binder: 17950:17951 ioctl c0306201 200000000080 returned -14 [ 761.035296][T17971] geneve2: entered promiscuous mode [ 761.040694][T17971] geneve2: entered allmulticast mode [ 761.095120][ T4737] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 761.120936][ T4737] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 761.142904][ T4737] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 761.188765][ T4737] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 761.513968][T17963] fuse: Bad value for 'fd' [ 761.897652][T15749] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 762.076301][T15749] usb 6-1: Using ep0 maxpacket: 32 [ 762.083523][T15749] usb 6-1: config 0 has no interfaces? [ 762.093312][T15749] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 762.119497][T15749] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 762.128943][T15749] usb 6-1: Product: syz [ 762.133185][T15749] usb 6-1: Manufacturer: syz [ 762.138119][T15749] usb 6-1: SerialNumber: syz [ 762.158027][T15749] usb 6-1: config 0 descriptor?? [ 762.644440][T17996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.655139][T17996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.759094][T17996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.916749][T17996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.210833][T15742] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 763.346294][T15742] usb 3-1: device descriptor read/64, error -71 [ 763.666251][T15742] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 763.796227][T15742] usb 3-1: device descriptor read/64, error -71 [ 763.918547][T15742] usb usb3-port1: attempt power cycle [ 764.145118][T18018] binder: 18017:18018 ioctl c0306201 200000000080 returned -14 [ 764.266736][T15742] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 764.310869][T15742] usb 3-1: device descriptor read/8, error -71 [ 764.547658][ T30] audit: type=1326 audit(1766749519.533:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.0.2914" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb107b8f749 code=0x0 [ 764.556308][T15742] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 764.629698][T15742] usb 3-1: device descriptor read/8, error -71 [ 764.758941][T15742] usb usb3-port1: unable to enumerate USB device [ 765.462835][T18040] pim6reg: entered allmulticast mode [ 765.564686][T15742] usb 6-1: USB disconnect, device number 114 [ 765.966253][T15742] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 766.036263][T18054] veth1_to_bond: entered allmulticast mode [ 766.359539][T15742] usb 1-1: not running at top speed; connect to a high speed hub [ 766.453324][T15742] usb 1-1: config index 0 descriptor too short (expected 42708, got 27) [ 766.482544][T15742] usb 1-1: config 187 has too many interfaces: 47, using maximum allowed: 32 [ 766.511154][T15742] usb 1-1: config 187 has an invalid descriptor of length 75, skipping remainder of the config [ 766.635834][T15742] usb 1-1: config 187 has 0 interfaces, different from the descriptor's value: 47 [ 766.676111][T15742] usb 1-1: New USB device found, idVendor=0d8e, idProduct=7812, bcdDevice=c4.f4 [ 766.739068][T15742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.795411][T15742] usb 1-1: Product: syz [ 766.834530][T15742] usb 1-1: Manufacturer: syz [ 766.862128][T15742] usb 1-1: SerialNumber: syz [ 767.149539][T15742] usb 1-1: USB disconnect, device number 80 [ 767.687023][T18064] netlink: 'syz.3.2923': attribute type 12 has an invalid length. [ 767.867533][ T30] audit: type=1326 audit(1766749522.853:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18068 comm="syz.5.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71adf8f749 code=0x7ffc0000 [ 767.975262][T18074] binder: 18070:18074 ioctl c0306201 200000000080 returned -14 [ 767.994802][T18074] binder: BINDER_SET_CONTEXT_MGR already set [ 768.001278][T18074] binder: 18070:18074 ioctl 4018620d 200000000040 returned -16 [ 768.013624][ T30] audit: type=1326 audit(1766749522.853:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18068 comm="syz.5.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f71adf8f749 code=0x7ffc0000 [ 768.125816][ T30] audit: type=1326 audit(1766749522.853:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18068 comm="syz.5.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71adf8f749 code=0x7ffc0000 [ 768.213865][ T30] audit: type=1326 audit(1766749522.943:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18068 comm="syz.5.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f71adf8f749 code=0x7ffc0000 [ 768.303892][ T30] audit: type=1326 audit(1766749522.943:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18068 comm="syz.5.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71adf8f749 code=0x7ffc0000 [ 768.740287][ T30] audit: type=1326 audit(1766749522.943:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18068 comm="syz.5.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f71adf8f749 code=0x7ffc0000 [ 769.095318][T18082] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2927'. [ 769.742671][T18053] veth1_to_bond: left allmulticast mode [ 769.761683][T18088] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2930'. [ 770.529160][T15742] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 770.563038][T18111] binder: 18110:18111 ioctl c0306201 200000000080 returned -14 [ 770.698130][T15742] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 770.721001][T15742] usb 1-1: config 0 has no interface number 0 [ 770.747594][T15742] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 770.774936][T15742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.804187][T15742] usb 1-1: Product: syz [ 770.829837][T15742] usb 1-1: Manufacturer: syz [ 770.849749][T15742] usb 1-1: SerialNumber: syz [ 770.873565][T15742] usb 1-1: config 0 descriptor?? [ 771.149951][T18106] syzkaller0: entered promiscuous mode [ 771.163190][T18106] syzkaller0: entered allmulticast mode [ 771.384055][T15742] usb 1-1: Firmware version (0.0) predates our first public release. [ 771.417315][T15742] usb 1-1: Please update to version 0.2 or newer [ 771.471098][T15742] usb 1-1: Firmware: build [ 771.743870][T17040] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 771.773780][T17040] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 771.786734][T17040] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 771.798069][T17040] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 771.806005][T17040] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 771.951519][T18132] fuse: Bad value for 'user_id' [ 771.981514][T18132] fuse: Bad value for 'user_id' [ 772.095754][T15742] usb 1-1: USB disconnect, device number 81 [ 772.664136][T18133] chnl_net:caif_netlink_parms(): no params data found [ 773.052367][T18133] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.061541][T18133] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.068866][T18133] bridge_slave_0: entered allmulticast mode [ 773.080415][T18133] bridge_slave_0: entered promiscuous mode [ 773.094405][T18133] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.104566][T18133] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.145516][T18133] bridge_slave_1: entered allmulticast mode [ 773.160298][T18133] bridge_slave_1: entered promiscuous mode [ 773.311999][T18133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.329041][T18175] binder: 18174:18175 ioctl c0306201 200000000080 returned -14 [ 773.349314][T18133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.483538][T18133] team0: Port device team_slave_0 added [ 773.537398][T18133] team0: Port device team_slave_1 added [ 773.646354][ T5911] usb 1-1: new low-speed USB device number 82 using dummy_hcd [ 773.669091][T18183] netlink: 'syz.5.2953': attribute type 1 has an invalid length. [ 773.669762][T18133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.678047][T18183] netlink: 'syz.5.2953': attribute type 1 has an invalid length. [ 773.694201][T18183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2953'. [ 773.703505][T18133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.769709][T18133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.830384][ T5911] usb 1-1: config 7 has an invalid interface number: 252 but max is 0 [ 773.843199][T18133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.850408][ T5155] Bluetooth: hci1: command tx timeout [ 773.858085][ T5911] usb 1-1: config 7 has no interface number 0 [ 773.864211][ T5911] usb 1-1: too many endpoints for config 7 interface 252 altsetting 252: 251, using maximum allowed: 30 [ 773.869519][T18133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.875409][ T5911] usb 1-1: config 7 interface 252 altsetting 252 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 773.916286][ T5911] usb 1-1: config 7 interface 252 altsetting 252 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 773.986303][ T5911] usb 1-1: config 7 interface 252 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 774.027097][T18133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.039648][ T5911] usb 1-1: config 7 interface 252 has no altsetting 0 [ 774.095372][ T5911] usb 1-1: string descriptor 0 read error: -22 [ 774.102357][ T5911] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 774.112877][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.269687][T18133] hsr_slave_0: entered promiscuous mode [ 774.319400][T18133] hsr_slave_1: entered promiscuous mode [ 774.343629][T18133] debugfs: 'hsr0' already exists in 'hsr' [ 774.506219][T18133] Cannot create hsr debugfs directory [ 774.586441][T15742] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 774.757252][ T5911] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 774.959205][T15742] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 774.982541][T15742] usb 4-1: config 0 has no interface number 0 [ 775.007996][T15742] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 775.059696][T15742] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 775.106629][ T5911] usb 6-1: Using ep0 maxpacket: 8 [ 775.152852][ T5911] usb 6-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 775.168457][T15742] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 775.186414][ T5911] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 775.198880][T15742] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 775.249891][T15742] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.264569][ T5911] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c1e, bcdDevice= 0.00 [ 775.304411][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 775.325173][T15742] usb 4-1: config 0 descriptor?? [ 775.351393][ T5911] usb 6-1: SerialNumber: syz [ 775.375016][T15742] gspca_main: spca561-2.14.0 probing abcd:cdee [ 775.399071][ T5911] usb 6-1: config 0 descriptor?? [ 775.460622][T18133] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.473277][T18133] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 775.550661][T18177] usb usb8: usbfs: process 18177 (syz.0.2950) did not claim interface 0 before use [ 775.562844][T18177] trusted_key: encrypted_key: insufficient parameters specified [ 775.581821][ T129] usb 1-1: USB disconnect, device number 82 [ 775.600893][T15742] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 775.635288][T15742] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 775.658893][T15742] usb 4-1: MIDIStreaming interface descriptor not found [ 775.757810][T15742] usb 4-1: USB disconnect, device number 50 [ 775.794971][T18133] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.825369][ T5926] udevd[5926]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 775.877449][T18133] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 775.928320][ T5155] Bluetooth: hci1: command tx timeout [ 775.984759][T18133] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.002238][T18133] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 776.120914][T18133] team0: Port device netdevsim0 removed [ 776.182429][T18133] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.223573][T18133] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 776.508575][T18217] fuse: Unknown parameter '' [ 776.627129][T18222] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 776.842070][T18133] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 776.865567][T18133] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 776.876525][T18133] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 776.895086][T18133] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 777.196585][ T5911] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 777.200044][ T5911] usb 6-1: USB disconnect, device number 115 [ 777.343308][T18133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.438395][T18133] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.482850][ T3521] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.490060][ T3521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.657907][ T6063] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.665142][ T6063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.898400][ T129] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 778.006374][ T5155] Bluetooth: hci1: command tx timeout [ 778.065671][ T129] usb 1-1: Using ep0 maxpacket: 16 [ 778.079058][ T129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.161009][ T129] usb 1-1: New USB device found, idVendor=056a, idProduct=006b, bcdDevice= 0.00 [ 778.199004][ T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.224431][T18133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.239910][ T129] usb 1-1: config 0 descriptor?? [ 778.320749][T18242] binder: 18241:18242 ioctl c0306201 200000000080 returned -14 [ 778.585706][T18133] veth0_vlan: entered promiscuous mode [ 778.620121][T18133] veth1_vlan: entered promiscuous mode [ 778.688832][T18133] veth0_macvtap: entered promiscuous mode [ 778.705109][T18133] veth1_macvtap: entered promiscuous mode [ 778.741749][T18133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.769217][T18133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.787181][T15742] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 778.803931][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.823337][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.843725][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.855246][ T129] usb 1-1: USB disconnect, device number 83 [ 778.874139][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.948453][T15742] usb 4-1: Using ep0 maxpacket: 8 [ 778.961673][T15742] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 779.000993][T15742] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 779.035468][T15742] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 779.055429][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.069217][T15742] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 779.086207][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.109800][T15742] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 779.122221][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.130789][T15742] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.139300][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.404240][T18258] fuse: Unknown parameter 'f}' [ 779.522548][T18254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.535485][T18254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.554333][T15742] usb 4-1: usb_control_msg returned -32 [ 779.564310][T15742] usbtmc 4-1:16.0: can't read capabilities [ 779.906068][T18261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.933893][T18245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.937707][T18261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.965996][T18245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.054764][T15742] usb 4-1: USB disconnect, device number 51 [ 780.087467][ T5155] Bluetooth: hci1: command tx timeout [ 780.757763][T18295] binder: 18294:18295 ioctl c0306201 200000000080 returned -14 [ 781.650922][T18311] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 781.659242][T18311] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 781.667779][T18311] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 782.907801][T18334] xt_CT: You must specify a L4 protocol and not use inversions on it [ 783.022074][T18336] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2987'. [ 783.404847][ T5911] IPVS: starting estimator thread 0... [ 783.439943][T18349] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 783.476527][T15749] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 783.525392][T18348] IPVS: using max 39 ests per chain, 93600 per kthread [ 783.676214][T15749] usb 6-1: Using ep0 maxpacket: 32 [ 783.685035][T15749] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 783.700511][T15749] usb 6-1: New USB device found, idVendor=04dd, idProduct=8003, bcdDevice=7d.eb [ 783.716417][T15749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.734646][T15749] usb 6-1: Product: syz [ 783.745107][T15749] usb 6-1: Manufacturer: syz [ 783.751058][T15749] usb 6-1: SerialNumber: syz [ 783.757801][T15749] usb 6-1: config 0 descriptor?? [ 783.840398][T18362] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2996'. [ 783.896327][T15747] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 783.968707][T18342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.977682][T18342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.986216][T18342] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2989'. [ 783.996731][ T5925] usb 6-1: USB disconnect, device number 116 [ 784.046972][T15747] usb 1-1: too many configurations: 255, using maximum allowed: 8 [ 784.057256][T15747] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 784.065641][T15747] usb 1-1: can't read configurations, error -61 [ 784.126300][T15749] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 784.206516][T15747] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 784.296287][T15749] usb 4-1: Using ep0 maxpacket: 16 [ 784.304009][T15749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.315580][T15749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.326012][T15749] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 784.337654][T15749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.347993][T15749] usb 4-1: config 0 descriptor?? [ 784.376997][T15747] usb 1-1: too many configurations: 255, using maximum allowed: 8 [ 784.397844][T15747] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 784.405491][T15747] usb 1-1: can't read configurations, error -61 [ 784.418738][T15747] usb usb1-port1: attempt power cycle [ 784.492508][T18369] fuse: Bad value for 'fd' [ 784.767070][T15749] corsair 0003:1B1C:1B02.0033: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 784.786312][T15747] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 784.842201][T15747] usb 1-1: too many configurations: 255, using maximum allowed: 8 [ 784.859323][T15749] corsair 0003:1B1C:1B02.0033: Failed to get K90 initial state (error -71). [ 784.884703][T15747] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 784.897037][T15749] usb 4-1: USB disconnect, device number 52 [ 784.912374][T15747] usb 1-1: can't read configurations, error -61 [ 785.046404][T15747] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 785.068150][T15747] usb 1-1: too many configurations: 255, using maximum allowed: 8 [ 785.078813][T15747] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 785.088458][T15747] usb 1-1: can't read configurations, error -61 [ 785.095539][T15747] usb usb1-port1: unable to enumerate USB device [ 785.300150][T18392] netlink: 'syz.2.3004': attribute type 32 has an invalid length. [ 786.894157][T18426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.930282][T18426] batman_adv: batadv0: Interface activated: dummy0 [ 786.964835][T18426] batadv0: mtu less than device minimum [ 786.996418][T18426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 787.007926][T18426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 787.019198][T18426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 787.030310][T18426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 787.041420][T18426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 787.052485][T18426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 787.063540][T18426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 787.074615][T18426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 787.085661][T18426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 787.356283][T15749] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 787.385180][T18428] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3014'. [ 787.567574][T15749] usb 6-1: Using ep0 maxpacket: 8 [ 787.575809][T15749] usb 6-1: config 0 has no interfaces? [ 787.583768][T15749] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 787.597354][T15749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.611951][T15749] usb 6-1: Product: syz [ 787.626797][T15749] usb 6-1: Manufacturer: syz [ 787.631542][T15749] usb 6-1: SerialNumber: syz [ 787.658712][T15749] usb 6-1: config 0 descriptor?? [ 787.796293][ T5911] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 787.847880][T18439] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3019'. [ 787.866836][T18438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3019'. [ 787.914167][ T5925] usb 6-1: USB disconnect, device number 117 [ 787.946289][ T5911] usb 3-1: device descriptor read/64, error -71 [ 788.076334][ T129] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 788.149976][T18452] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3022'. [ 788.159513][T18452] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3022'. [ 788.172036][T18452] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3022'. [ 788.186427][ T5911] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 788.201256][T18452] ip6gretap1: entered promiscuous mode [ 788.216862][ T129] usb 1-1: device descriptor read/64, error -71 [ 788.323677][T18454] kvm: MONITOR instruction emulated as NOP! [ 788.329975][T15747] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 788.338229][ T5911] usb 3-1: device descriptor read/64, error -71 [ 788.446768][ T5911] usb usb3-port1: attempt power cycle [ 788.481469][ T129] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 788.500715][T15747] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.513716][T15747] usb 4-1: config 0 interface 0 has no altsetting 0 [ 788.522484][T15747] usb 4-1: New USB device found, idVendor=0463, idProduct=1215, bcdDevice= 0.00 [ 788.532525][T15747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.548149][T15747] usb 4-1: config 0 descriptor?? [ 788.624036][T18459] syzkaller0: entered promiscuous mode [ 788.629946][T18459] syzkaller0: entered allmulticast mode [ 788.646965][ T129] usb 1-1: device descriptor read/64, error -71 [ 788.766467][ T129] usb usb1-port1: attempt power cycle [ 788.787898][ T5911] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 788.817182][ T5911] usb 3-1: device descriptor read/8, error -71 [ 789.056366][ T5911] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 789.087201][ T5911] usb 3-1: device descriptor read/8, error -71 [ 789.128117][ T129] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 789.200281][ T5911] usb usb3-port1: unable to enumerate USB device [ 789.207177][ T129] usb 1-1: device descriptor read/8, error -71 [ 789.265198][ T30] audit: type=1326 audit(1766749544.243:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18473 comm="syz.6.3028" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f237f98f749 code=0x7ff40000 [ 789.460157][ T129] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 789.488904][ T129] usb 1-1: device descriptor read/8, error -71 [ 789.581934][T18450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.591898][T18450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.617703][ T129] usb usb1-port1: unable to enumerate USB device [ 789.740593][T15747] usbhid 4-1:0.0: can't add hid device: -71 [ 789.757039][T15747] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 789.777526][T15747] usb 4-1: USB disconnect, device number 53 [ 790.545556][T18492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3033'. [ 790.566977][T18492] chnl_net:caif_netlink_parms(): no params data found [ 790.639920][T18496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3034'. [ 790.829124][ T30] audit: type=1400 audit(1766749545.813:1105): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=2A97287B pid=18501 comm="syz.3.3036" [ 791.023658][T18507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3037'. [ 791.206473][ T5925] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 791.398257][ T5925] usb 4-1: config 0 has an invalid descriptor of length 151, skipping remainder of the config [ 791.431818][ T5925] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 791.475064][ T5925] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 791.509994][ T5925] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 791.544315][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.565616][ T5925] usb 4-1: Product: syz [ 791.583593][ T5925] usb 4-1: Manufacturer: syz [ 791.598628][ T5925] usb 4-1: SerialNumber: syz [ 791.635978][ T5925] usb 4-1: config 0 descriptor?? [ 792.040197][ T5925] uvcvideo 4-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 792.063738][ T5925] uvcvideo 4-1:0.0: No valid video chain found. [ 792.074299][ T5925] usb 4-1: USB disconnect, device number 54 [ 792.081131][T18530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3044'. [ 792.525040][T18551] tipc: Enabled bearer , priority 0 [ 792.533618][T18551] syzkaller0: entered promiscuous mode [ 792.539208][T18551] syzkaller0: entered allmulticast mode [ 792.547657][T18551] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3050'. [ 792.627303][ T5911] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 792.643698][T18551] tipc: Resetting bearer [ 792.661121][T18550] tipc: Resetting bearer [ 792.687165][T18550] tipc: Disabling bearer [ 792.708093][ T5925] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 792.739290][ T5925] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 792.796256][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 792.805019][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.824247][ T5911] usb 3-1: config 0 has no interfaces? [ 792.830461][ T5911] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 792.840271][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.853367][ T5911] usb 3-1: config 0 descriptor?? [ 792.978352][T15749] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 793.076047][ T5925] usb 3-1: USB disconnect, device number 74 [ 793.136333][T15749] usb 4-1: Using ep0 maxpacket: 8 [ 793.142641][T15749] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 793.151189][T15749] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.161881][T15749] usb 4-1: config 0 has no interface number 0 [ 793.168342][T15749] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 793.179288][ T5911] usb 6-1: new full-speed USB device number 118 using dummy_hcd [ 793.186985][T15749] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 793.197022][T15749] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 793.207708][T15749] usb 4-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 793.218721][T15749] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 793.228740][T15747] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 793.236510][T15749] usb 4-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 793.252594][T15749] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 793.261826][T15749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.269992][T15749] usb 4-1: Product: syz [ 793.274153][T15749] usb 4-1: Manufacturer: syz [ 793.279272][T15749] usb 4-1: SerialNumber: syz [ 793.285826][T15749] usb 4-1: config 0 descriptor?? [ 793.291554][T18561] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 793.298822][T18561] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 793.368642][ T5911] usb 6-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 793.377858][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.388578][ T5911] usb 6-1: config 0 descriptor?? [ 793.419413][T15747] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 793.428585][T15747] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.436751][T15747] usb 1-1: Product: syz [ 793.440939][T15747] usb 1-1: Manufacturer: syz [ 793.445532][T15747] usb 1-1: SerialNumber: syz [ 793.512714][T15749] usb 4-1: NFC: intf ffff88807d5b0000 id ffffffff8e93ee20 [ 793.538791][T15749] nfcmrvl 4-1:0.122: NFC: registered with nci successfully [ 793.551708][T15749] usb 4-1: USB disconnect, device number 55 [ 793.565584][T15749] usb 4-1: NFC: intf ffff88807d5b0000 [ 793.816706][ T5911] chicony 0003:04F2:1236.0035: unknown main item tag 0x0 [ 793.823806][ T5911] chicony 0003:04F2:1236.0035: unknown main item tag 0x0 [ 793.834593][ T5911] chicony 0003:04F2:1236.0035: unknown main item tag 0x0 [ 793.841738][ T5911] chicony 0003:04F2:1236.0035: unknown main item tag 0x0 [ 793.854176][ T5911] chicony 0003:04F2:1236.0035: unknown main item tag 0x0 [ 793.862581][T15747] net_ratelimit: 11 callbacks suppressed [ 793.862595][T15747] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 793.881899][T15747] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 793.893315][ T5911] chicony 0003:04F2:1236.0035: hidraw1: USB HID v1.01 Device [HID 04f2:1236] on usb-dummy_hcd.5-1/input0 [ 793.966444][T15749] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 794.019277][T15745] usb 6-1: USB disconnect, device number 118 [ 794.126586][T15749] usb 3-1: Using ep0 maxpacket: 16 [ 794.133932][T15749] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 794.145790][T15749] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.167287][T15749] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 794.187092][T15749] usb 3-1: config 0 interface 0 has no altsetting 0 [ 794.193788][T15749] usb 3-1: New USB device found, idVendor=fc10, idProduct=00ff, bcdDevice= 0.00 [ 794.203874][T15749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.226761][T15749] usb 3-1: config 0 descriptor?? [ 794.336973][T18588] netlink: 'syz.3.3062': attribute type 1 has an invalid length. [ 794.401805][T18588] bond1: (slave bridge1): making interface the new active one [ 794.410483][T18588] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 794.652851][T18594] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 794.661771][T18592] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3064'. [ 794.679915][T18592] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3064'. [ 794.705479][T18592] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3064'. [ 794.722850][T18592] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3064'. [ 794.734991][T18592] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3064'. [ 794.744562][T18592] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3064'. [ 794.748851][ T30] audit: type=1326 audit(1766749549.733:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18595 comm="syz.5.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71adf8f749 code=0x7ffc0000 [ 794.780199][ T30] audit: type=1326 audit(1766749549.763:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18595 comm="syz.5.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71adf8f749 code=0x7ffc0000 [ 794.804322][ T30] audit: type=1326 audit(1766749549.763:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18595 comm="syz.5.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71adf8f749 code=0x7ffc0000 [ 794.830596][ T30] audit: type=1326 audit(1766749549.763:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18595 comm="syz.5.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71adf8f749 code=0x7ffc0000 [ 794.854265][ T30] audit: type=1326 audit(1766749549.763:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18595 comm="syz.5.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f71adf8f749 code=0x7ffc0000 [ 794.877153][ T30] audit: type=1326 audit(1766749549.763:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18595 comm="syz.5.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71adf8f749 code=0x7ffc0000 [ 794.911221][ T30] audit: type=1326 audit(1766749549.763:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18595 comm="syz.5.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71adf8f749 code=0x7ffc0000 [ 794.934390][ T30] audit: type=1326 audit(1766749549.763:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18595 comm="syz.5.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71adf8f749 code=0x7ffc0000 [ 794.959356][ T30] audit: type=1326 audit(1766749549.763:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18595 comm="syz.5.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71adf8f749 code=0x7ffc0000 [ 794.982430][ T30] audit: type=1326 audit(1766749549.763:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18595 comm="syz.5.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f71adf8f749 code=0x7ffc0000 [ 795.512521][T15747] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 795.788911][T18619] binder: 18618:18619 ioctl 80084504 200000000180 returned -22 [ 795.855193][T18624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3069'. [ 795.871341][T18623] input: syz1 as /devices/virtual/input/input88 [ 795.890882][T18623] input: failed to attach handler leds to device input88, error: -6 [ 796.052115][T18629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3071'. [ 796.415592][T18624] bond2: entered allmulticast mode [ 796.422630][T18624] 8021q: adding VLAN 0 to HW filter on device bond2 [ 796.434771][T18639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 796.556320][T15745] usb 6-1: new full-speed USB device number 119 using dummy_hcd [ 796.730996][T15745] usb 6-1: config 0 has an invalid interface number: 210 but max is 0 [ 796.743507][T15747] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 796.762127][T15745] usb 6-1: config 0 has no interface number 0 [ 796.781470][T15745] usb 6-1: config 0 interface 210 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 796.809353][T15747] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 796.826892][T15745] usb 6-1: config 0 interface 210 has no altsetting 0 [ 796.843445][T15747] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 796.865119][T15745] usb 6-1: New USB device found, idVendor=2013, idProduct=8461, bcdDevice=4d.c4 [ 796.874766][T15749] usbhid 3-1:0.0: can't add hid device: -71 [ 796.881446][T15747] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 796.894772][T15749] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 796.902939][T15745] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.916393][T15745] usb 6-1: Product: syz [ 796.920597][T15745] usb 6-1: Manufacturer: syz [ 796.925204][T15745] usb 6-1: SerialNumber: syz [ 796.930334][T15749] usb 3-1: USB disconnect, device number 75 [ 796.946079][T15745] usb 6-1: config 0 descriptor?? [ 796.967919][T18637] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 797.000519][T15747] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 797.019130][T15745] em28xx 6-1:0.210: New device syz syz @ 12 Mbps (2013:8461, interface 210, class 210) [ 797.055078][T15747] usb 1-1: USB disconnect, device number 92 [ 797.077124][T15745] em28xx 6-1:0.210: Device initialization failed. [ 797.097391][T15745] em28xx 6-1:0.210: Device must be connected to a high-speed USB 2.0 port. [ 797.234385][T18637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.260005][T18637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.354972][T18661] fuse: Unknown parameter '017777777777777777777770xffffffffffffffff' [ 797.536476][ T129] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 797.771126][T18671] fuse: Unknown parameter 'л@' [ 797.929250][T15747] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 797.931422][ T129] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 797.952059][ T129] usb 4-1: config 0 has no interface number 0 [ 797.966055][ T129] usb 4-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 797.980829][ T129] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 797.990646][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.000623][ T129] usb 4-1: Product: syz [ 798.027623][ T129] usb 4-1: Manufacturer: syz [ 798.032444][ T129] usb 4-1: SerialNumber: syz [ 798.040439][ T129] usb 4-1: config 0 descriptor?? [ 798.053238][T18659] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 798.088563][ T129] plusb 4-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 82:e2:d5:76:88:e2 [ 798.108053][T15747] usb 3-1: config 0 has an invalid descriptor of length 233, skipping remainder of the config [ 798.122357][T15747] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 798.180831][T15747] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 798.213611][T15747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.246580][T15747] usb 3-1: config 0 descriptor?? [ 799.452032][ T129] usb 6-1: USB disconnect, device number 119 [ 799.642461][ T129] usb 4-1: USB disconnect, device number 56 [ 799.659470][ T129] plusb 4-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 800.389147][T18702] syzkaller0: entered promiscuous mode [ 800.396782][T18702] syzkaller0: entered allmulticast mode [ 800.432535][T15747] usb 3-1: USB disconnect, device number 76 [ 800.574844][T18704] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 800.599115][T18714] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 800.920584][T18704] bond2 (unregistering): Released all slaves [ 801.710726][T18734] ima: Can not allocate md4 (reason: -2) [ 801.722536][ T30] kauditd_printk_skb: 290 callbacks suppressed [ 801.722554][ T30] audit: type=1800 audit(1766749556.703:1406): pid=18734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3089" name="/" dev="fuse" ino=1 res=0 errno=0 [ 803.086355][T15747] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 803.248997][T15747] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.304986][T15747] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 803.327560][T15747] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 803.336985][T15747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.345078][T15747] usb 3-1: Product: syz [ 803.349729][T15747] usb 3-1: Manufacturer: syz [ 803.354432][T15747] usb 3-1: SerialNumber: syz [ 803.367560][T15747] cdc_mbim 3-1:1.0: skipping garbage [ 803.564294][T18774] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 803.826306][T15749] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 803.976333][T15749] usb 4-1: Using ep0 maxpacket: 8 [ 803.985761][T15749] usb 4-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=7e.68 [ 803.995319][T15749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.003665][T15749] usb 4-1: Product: syz [ 804.008225][T15749] usb 4-1: Manufacturer: syz [ 804.012855][T15749] usb 4-1: SerialNumber: syz [ 804.019551][T15749] usb 4-1: config 0 descriptor?? [ 804.035028][T15749] gspca_main: etoms-2.14.0 probing 102c:6251 [ 804.060861][T15747] cdc_mbim 3-1:1.0: bind() failure [ 804.078866][T15747] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 804.087092][T15747] cdc_ncm 3-1:1.1: bind() failure [ 804.106378][ T129] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 804.115308][T15747] usb 3-1: USB disconnect, device number 77 [ 804.126971][T18790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 804.262014][T15749] usb 4-1: USB disconnect, device number 57 [ 804.276310][ T129] usb 1-1: Using ep0 maxpacket: 8 [ 804.293168][ T129] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 804.324212][ T129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.341130][ T129] usb 1-1: Product: syz [ 804.352987][ T129] usb 1-1: Manufacturer: syz [ 804.364647][ T129] usb 1-1: SerialNumber: syz [ 804.378584][ T129] usb 1-1: config 0 descriptor?? [ 804.390140][ T129] gspca_main: sq930x-2.14.0 probing 2770:930c [ 804.796475][ T129] gspca_sq930x: ucbus_write failed -71 [ 805.026214][ T129] gspca_sq930x: Sensor ov9630 not yet treated [ 805.034732][ T129] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 805.055587][ T129] usb 1-1: USB disconnect, device number 93 [ 805.106344][ T5925] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 805.266434][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 805.273177][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 805.298411][ T5925] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 805.436520][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.470744][ T5925] usb 4-1: Product: syz [ 805.498078][ T5925] usb 4-1: Manufacturer: syz [ 805.503809][ T5925] usb 4-1: SerialNumber: syz [ 805.512254][ T5925] usb 4-1: config 0 descriptor?? [ 805.523307][ T5925] hub 4-1:0.0: bad descriptor, ignoring hub [ 805.533843][ T5925] hub 4-1:0.0: probe with driver hub failed with error -5 [ 805.547777][ T5925] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 806.064005][ T5925] usb 4-1: USB disconnect, device number 58 [ 806.165234][T17040] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 806.176259][T17040] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 806.187588][T17040] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 806.195421][T17040] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 806.203195][T17040] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 806.433947][T11439] vivid-000: reconnect [ 806.721237][T18833] chnl_net:caif_netlink_parms(): no params data found [ 806.936463][ T129] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 807.035383][T18833] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.048577][T18833] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.063922][T18833] bridge_slave_0: entered allmulticast mode [ 807.080608][T18833] bridge_slave_0: entered promiscuous mode [ 807.086260][ T129] usb 4-1: Using ep0 maxpacket: 8 [ 807.094888][ T129] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 807.104133][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.120973][ T129] usb 4-1: Product: syz [ 807.125193][ T129] usb 4-1: Manufacturer: syz [ 807.134113][ T129] usb 4-1: SerialNumber: syz [ 807.139319][T18833] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.147371][ T129] usb 4-1: config 0 descriptor?? [ 807.160981][T18833] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.215911][T18833] bridge_slave_1: entered allmulticast mode [ 807.241234][T18833] bridge_slave_1: entered promiscuous mode [ 807.408858][ T129] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 807.409755][ T129] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 807.410902][ T129] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 807.410982][ T129] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 807.414155][ T129] usb 4-1: USB disconnect, device number 59 [ 807.484991][T18833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.495827][T18833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.561423][T18833] team0: Port device team_slave_0 added [ 807.565114][T18833] team0: Port device team_slave_1 added [ 807.617480][T18833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 807.624575][T18833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.651431][T15745] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 807.666429][T18833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 807.682360][T18833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.690038][T18833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.717077][T18833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.759016][T18833] hsr_slave_0: entered promiscuous mode [ 807.765296][T18833] hsr_slave_1: entered promiscuous mode [ 807.772161][T18833] debugfs: 'hsr0' already exists in 'hsr' [ 807.777960][T18833] Cannot create hsr debugfs directory [ 807.996456][T15745] usb 3-1: device descriptor read/64, error -71 [ 808.247305][T17040] Bluetooth: hci3: command tx timeout [ 808.393330][T18833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 808.439639][T18833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 808.454001][T18833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 808.461436][T15745] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 808.483507][T18833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 808.673125][T18875] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3122'. [ 808.719749][T18833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.753816][T18833] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.782970][ T6063] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.790180][ T6063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.817120][T15745] usb 3-1: device descriptor read/64, error -71 [ 808.838700][ T6115] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.845918][ T6115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.877120][ T129] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 808.890412][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.897039][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.927231][T15745] usb usb3-port1: attempt power cycle [ 808.982395][T18833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 809.038848][T18833] veth0_vlan: entered promiscuous mode [ 809.056105][T18886] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 809.056898][ T129] usb 4-1: Using ep0 maxpacket: 16 [ 809.073322][T18886] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 809.091123][T18833] veth1_vlan: entered promiscuous mode [ 809.092426][ T129] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 809.109245][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 126, changing to 7 [ 809.120826][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57966, setting to 1024 [ 809.138272][ T129] usb 4-1: New USB device found, idVendor=2040, idProduct=4264, bcdDevice=4e.d1 [ 809.148653][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.157712][ T129] usb 4-1: Product: syz [ 809.161445][T18833] veth0_macvtap: entered promiscuous mode [ 809.162007][ T129] usb 4-1: Manufacturer: syz [ 809.168543][T15747] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 809.172685][ T129] usb 4-1: SerialNumber: syz [ 809.189778][T18833] veth1_macvtap: entered promiscuous mode [ 809.196855][ T129] usb 4-1: config 0 descriptor?? [ 809.213777][T18833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.229065][T18833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.244778][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.261107][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.274257][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.284940][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.348953][T15747] usb 6-1: Using ep0 maxpacket: 8 [ 809.368082][T15747] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 809.396468][T15747] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.404558][T15747] usb 6-1: Product: syz [ 809.411229][ T6115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.412768][T15747] usb 6-1: Manufacturer: syz [ 809.441170][ T6115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.444509][T15747] usb 6-1: SerialNumber: syz [ 809.469523][T15747] usb 6-1: config 0 descriptor?? [ 809.490229][T15747] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 809.510689][ T3666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.519446][T15747] dvb-usb: bulk message failed: -22 (2/0) [ 809.525937][ T3666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.548805][T15747] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 809.573922][T15747] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 809.584400][T15747] usb 6-1: media controller created [ 809.623502][T15747] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 809.886394][T15744] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 810.016414][T15745] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 810.038267][T15745] usb 3-1: Using ep0 maxpacket: 8 [ 810.046985][T15745] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.060061][T15744] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 810.070954][T15744] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.071144][T15745] usb 3-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 810.092389][T15744] usb 1-1: config 0 descriptor?? [ 810.104641][T15744] cp210x 1-1:0.0: cp210x converter detected [ 810.110838][T15745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.119963][T15745] usb 3-1: Product: syz [ 810.124250][T15745] usb 3-1: Manufacturer: syz [ 810.129271][T15745] usb 3-1: SerialNumber: syz [ 810.146016][T15745] usb 3-1: config 0 descriptor?? [ 810.160337][T15745] cdc_phonet 3-1:0.0: skipping garbage [ 810.168307][T15745] cdc_phonet 3-1:0.0: invalid descriptor buffer length [ 810.175312][T15745] cdc_phonet 3-1:0.0: probe with driver cdc_phonet failed with error -22 [ 810.189015][ T30] audit: type=1326 audit(1766749565.173:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18872 comm="syz.3.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8792d8f749 code=0x7ffc0000 [ 810.242650][ T30] audit: type=1326 audit(1766749565.173:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18872 comm="syz.3.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8792d8f749 code=0x7ffc0000 [ 810.271035][ T30] audit: type=1326 audit(1766749565.173:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18872 comm="syz.3.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f8792d8f749 code=0x7ffc0000 [ 810.297679][ T30] audit: type=1326 audit(1766749565.173:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18872 comm="syz.3.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8792d8f749 code=0x7ffc0000 [ 810.306850][T15744] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 810.320311][ T30] audit: type=1326 audit(1766749565.173:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18872 comm="syz.3.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8792d8f34b code=0x7ffc0000 [ 810.327383][T17040] Bluetooth: hci3: command tx timeout [ 810.335904][T15744] cp210x 1-1:0.0: querying part number failed [ 810.373089][T15744] usb 1-1: cp210x converter now attached to ttyUSB0 [ 810.386966][T18894] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3127'. [ 810.400554][T18894] netlink: 45 bytes leftover after parsing attributes in process `syz.2.3127'. [ 810.419328][ T129] usb 3-1: USB disconnect, device number 80 [ 810.892183][T18913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.901859][T18913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.202718][T18918] netlink: 'syz.2.3132': attribute type 1 has an invalid length. [ 811.221526][T18918] netlink: 'syz.2.3132': attribute type 2 has an invalid length. [ 811.476362][ T129] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 811.626287][ T129] usb 3-1: Using ep0 maxpacket: 16 [ 811.633529][ T129] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 811.642607][ T129] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 811.654269][ T129] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 811.665263][ T129] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 811.675183][ T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.683799][ T129] usb 3-1: Product: syz [ 811.688695][ T129] usb 3-1: Manufacturer: syz [ 811.693310][ T129] usb 3-1: SerialNumber: syz [ 811.903092][ T129] usb 3-1: 0:2 : does not exist [ 812.009947][T15747] cxusb: set interface failed [ 812.014673][T15747] dvb-usb: bulk message failed: -22 (1/0) [ 812.101551][T15747] DVB: Unable to find symbol mt352_attach() [ 812.108574][ T5925] usb 4-1: USB disconnect, device number 60 [ 812.109239][T15747] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 812.145556][ T129] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 812.276779][T15747] rc_core: IR keymap rc-dvico-portable not found [ 812.291400][T15747] Registered IR keymap rc-empty [ 812.294286][ T6266] usb 3-1: USB disconnect, device number 81 [ 812.308696][T15747] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 812.370783][T15747] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input89 [ 812.393409][T15747] dvb-usb: schedule remote query interval to 100 msecs. [ 812.403355][T15747] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 812.406575][T17040] Bluetooth: hci3: command tx timeout [ 812.420230][T15747] usb 6-1: USB disconnect, device number 120 [ 812.496089][T15747] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 812.671927][ T5925] usb 1-1: USB disconnect, device number 94 [ 812.683564][ T5925] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 812.699127][ T5925] cp210x 1-1:0.0: device disconnected [ 813.158202][ T30] audit: type=1326 audit(1766749568.143:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18940 comm="syz.3.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8792d8f749 code=0x7ffc0000 [ 813.189441][ T30] audit: type=1326 audit(1766749568.163:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18940 comm="syz.3.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8792d8f749 code=0x7ffc0000 [ 813.213744][ T30] audit: type=1326 audit(1766749568.163:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18940 comm="syz.3.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8792d8df90 code=0x7ffc0000 [ 813.237700][ T30] audit: type=1326 audit(1766749568.163:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18940 comm="syz.3.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8792d8f749 code=0x7ffc0000 [ 813.260954][ T30] audit: type=1326 audit(1766749568.163:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18940 comm="syz.3.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8792d8f749 code=0x7ffc0000 [ 813.266682][T18933] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 813.291516][T18933] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 813.298384][T18933] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 813.307599][T18933] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 813.316976][T18933] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 813.323498][T18933] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 813.333275][T18933] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 813.342085][T18933] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 813.349139][T18933] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 813.358128][T18933] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 813.533015][T18949] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3142'. [ 813.602450][T18952] fuse: Bad value for 'fd' [ 813.619245][T18952] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3141'. [ 813.668830][T18952] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3141'. [ 813.678052][T15747] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 813.836466][T15747] usb 3-1: Using ep0 maxpacket: 8 [ 813.848909][T15747] usb 3-1: config 0 has no interfaces? [ 813.874907][T15747] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 813.890331][T18960] netlink: 'syz.5.3146': attribute type 10 has an invalid length. [ 813.923414][T18960] bond0: (slave netdevsim0): Releasing backup interface [ 813.960034][T18960] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 813.977344][T15747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.999585][T15747] usb 3-1: config 0 descriptor?? [ 814.001817][T18960] team0: Failed to send options change via netlink (err -105) [ 814.047474][T18960] team0: Port device netdevsim0 added [ 814.228765][T18935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.237746][T18935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.248091][ T5925] usb 3-1: USB disconnect, device number 82 [ 814.566636][T17040] Bluetooth: hci2: command 0x0406 tx timeout [ 814.706234][T15747] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 814.867181][T15747] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 814.905127][T15747] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.934143][T15747] usb 6-1: Product: syz [ 814.954959][T15747] usb 6-1: Manufacturer: syz [ 814.968924][T15747] usb 6-1: SerialNumber: syz [ 814.992044][T15747] usb 6-1: config 0 descriptor?? [ 815.027122][T15747] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 121 [ 815.356302][T15749] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 815.366822][ T5842] Bluetooth: hci5: command 0x0c1a tx timeout [ 815.372900][ T5155] Bluetooth: hci1: command 0x0c1a tx timeout [ 815.385757][T17040] Bluetooth: hci3: command 0x0c1a tx timeout [ 815.461530][T15747] (null): failure reading functionality [ 815.526573][T15744] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 815.546267][T15749] usb 1-1: Using ep0 maxpacket: 32 [ 815.557287][T15749] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 815.579047][T15749] usb 1-1: config 0 has no interfaces? [ 815.584592][T15749] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 815.626230][T15749] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.637749][T15749] usb 1-1: config 0 descriptor?? [ 815.663039][T15747] i2c i2c-2: failure reading functionality [ 815.685908][T15747] i2c i2c-2: connected i2c-tiny-usb device [ 815.693972][T15744] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 815.726960][T15747] usb 6-1: USB disconnect, device number 121 [ 815.734187][T15744] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 815.777417][T15744] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 815.796208][T15744] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 815.840449][T15744] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 815.873706][T15744] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 815.886197][T15744] usb 3-1: Manufacturer: syz [ 815.937921][T15744] usb 3-1: config 0 descriptor?? [ 816.376487][T15744] rc_core: IR keymap rc-hauppauge not found [ 816.386965][T15744] Registered IR keymap rc-empty [ 816.393652][T15744] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 816.459143][T15744] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 816.504921][T15744] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 816.529473][T15744] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input90 [ 816.559644][T15744] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 816.627034][T15744] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 816.666613][T15744] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 816.686493][T15744] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 816.706415][T15744] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 816.747198][T15744] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 816.776447][T15744] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 816.816797][T15744] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 816.848108][T15744] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 816.876773][T15744] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 816.877182][T19019] input: syz0 as /devices/virtual/input/input91 [ 816.905000][T15744] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 816.926070][T15744] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 816.953847][T15744] usb 3-1: USB disconnect, device number 83 [ 817.381612][T19027] random: crng reseeded on system resumption [ 817.446592][ T5842] Bluetooth: hci5: command 0x0c1a tx timeout [ 817.452658][ T5155] Bluetooth: hci1: command 0x0c1a tx timeout [ 817.459103][T17040] Bluetooth: hci3: command 0x0c1a tx timeout [ 817.466360][T15744] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 817.513020][T19031] fuse: Bad value for 'fd' [ 817.519637][T19030] fuse: Bad value for 'fd' [ 817.628669][T15744] usb 4-1: unable to get BOS descriptor or descriptor too short [ 817.646279][T15744] usb 4-1: not running at top speed; connect to a high speed hub [ 817.656573][T15744] usb 4-1: config 36 has an invalid interface number: 241 but max is 0 [ 817.676053][T15744] usb 4-1: config 36 has no interface number 0 [ 817.683003][T15744] usb 4-1: config 36 interface 241 has no altsetting 0 [ 817.698797][T15744] usb 4-1: New USB device found, idVendor=110a, idProduct=1451, bcdDevice=97.99 [ 817.716340][T15744] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.735123][T15744] usb 4-1: Product: syz [ 817.740289][T15744] usb 4-1: Manufacturer: syz [ 817.755090][T15744] usb 4-1: SerialNumber: syz [ 817.969505][T15744] mxuport 4-1:36.241: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 817.985327][T15744] mxuport 4-1:36.241: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 817.995893][T15744] mxuport 4-1:36.241: probe with driver mxuport failed with error -71 [ 818.011098][T15744] usb 4-1: USB disconnect, device number 61 [ 818.063612][T19035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3168'. [ 818.203458][T19044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3170'. [ 818.348895][ T6266] usb 1-1: USB disconnect, device number 95 [ 818.556317][T15747] usb 3-1: new low-speed USB device number 84 using dummy_hcd [ 818.720413][T15747] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 818.734034][T15747] usb 3-1: config 0 has no interface number 0 [ 818.742303][T15747] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 818.742582][ T6266] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 818.754218][T15747] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 818.778064][T15747] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 818.793745][T15747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.809350][T15747] usb 3-1: config 0 descriptor?? [ 818.840718][T15747] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 818.922401][ T6266] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 818.939150][ T6266] usb 1-1: config 0 has no interface number 0 [ 818.956039][ T6266] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 818.970992][ T6266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.980894][ T6266] usb 1-1: Product: syz [ 818.985672][ T6266] usb 1-1: Manufacturer: syz [ 818.993098][ T6266] usb 1-1: SerialNumber: syz [ 819.000625][ T6266] usb 1-1: config 0 descriptor?? [ 819.015576][T19070] kvm: Disabled LAPIC found during irq injection [ 819.040644][T19050] iowarrior 3-1:0.1: Error -90 while submitting URB [ 819.050880][T15747] usb 3-1: USB disconnect, device number 84 [ 819.418948][ T6266] usb 1-1: Firmware version (0.0) predates our first public release. [ 819.433364][ T6266] usb 1-1: Please update to version 0.2 or newer [ 819.526423][T17040] Bluetooth: hci3: command 0x0c1a tx timeout [ 819.527039][ T5842] Bluetooth: hci5: command 0x0c1a tx timeout [ 819.538767][ T5155] Bluetooth: hci1: command 0x0c1a tx timeout [ 819.688749][T19096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3173'. [ 819.716117][T19098] input: syz1 as /devices/virtual/input/input92 [ 820.337102][T15744] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 820.510979][T19116] openvswitch: netlink: Actions may not be safe on all matching packets [ 820.526724][T15744] usb 3-1: Using ep0 maxpacket: 16 [ 820.541336][T15744] usb 3-1: config 0 has an invalid interface number: 46 but max is 0 [ 820.553736][T15744] usb 3-1: config 0 has no interface number 0 [ 820.581793][T15744] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=cd.0f [ 820.591536][T15744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.600154][T15744] usb 3-1: Product: syz [ 820.606320][T15744] usb 3-1: Manufacturer: syz [ 820.611027][T15744] usb 3-1: SerialNumber: syz [ 820.620236][T15744] usb 3-1: config 0 descriptor?? [ 820.631892][T15744] usb 3-1: active config #0 != 1 ?? [ 820.796216][ T6266] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 820.936282][ T6266] usb 4-1: device descriptor read/64, error -71 [ 820.969425][ T5925] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 821.126268][ T5925] usb 6-1: Using ep0 maxpacket: 32 [ 821.134598][ T5925] usb 6-1: config 120 has an invalid interface number: 207 but max is 0 [ 821.143109][ T5925] usb 6-1: config 120 has no interface number 0 [ 821.151529][ T5925] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=6f.0b [ 821.160826][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.168975][ T5925] usb 6-1: Product: syz [ 821.173176][ T5925] usb 6-1: Manufacturer: syz [ 821.177847][ T6266] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 821.185465][ T5925] usb 6-1: SerialNumber: syz [ 821.195374][ T5925] r8152-cfgselector 6-1: Unknown version 0x0000 [ 821.316489][ T6266] usb 4-1: device descriptor read/64, error -71 [ 821.422773][T15744] usb 1-1: USB disconnect, device number 96 [ 821.425402][ T5925] r8152-cfgselector 6-1: USB disconnect, device number 122 [ 821.439616][ T6266] usb usb4-port1: attempt power cycle [ 821.503832][T19124] openvswitch: netlink: Flow key attr not present in new flow. [ 821.796359][ T6266] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 821.826937][ T6266] usb 4-1: device descriptor read/8, error -71 [ 821.907237][T15744] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 822.066609][ T6266] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 822.066848][T15744] usb 1-1: Using ep0 maxpacket: 16 [ 822.081420][T15744] usb 1-1: config 4 has an invalid interface number: 183 but max is 2 [ 822.091178][T15744] usb 1-1: config 4 has an invalid interface number: 180 but max is 2 [ 822.091655][ T6266] usb 4-1: device descriptor read/8, error -71 [ 822.099451][T15744] usb 1-1: config 4 has no interface number 0 [ 822.099474][T15744] usb 1-1: config 4 has no interface number 1 [ 822.099547][T15744] usb 1-1: config 4 interface 183 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 822.099572][T15744] usb 1-1: config 4 interface 183 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 822.141353][T15744] usb 1-1: config 4 interface 183 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 822.152405][T15744] usb 1-1: config 4 interface 2 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 822.163132][T15744] usb 1-1: config 4 interface 2 altsetting 5 endpoint 0x1 has an invalid bInterval 179, changing to 7 [ 822.174251][T15744] usb 1-1: config 4 interface 2 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 822.184860][T15744] usb 1-1: config 4 interface 2 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 822.195638][T15744] usb 1-1: config 4 interface 2 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 822.207495][T15744] usb 1-1: config 4 interface 2 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 822.217210][ T6266] usb usb4-port1: unable to enumerate USB device [ 822.218252][T15744] usb 1-1: config 4 interface 2 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 822.235544][T15744] usb 1-1: config 4 interface 2 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 822.246206][T15744] usb 1-1: config 4 interface 2 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 822.257213][T15744] usb 1-1: config 4 interface 2 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 822.267891][T15749] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 822.275649][T15744] usb 1-1: config 4 interface 2 altsetting 5 endpoint 0xE has invalid maxpacket 56820, setting to 64 [ 822.286681][T15744] usb 1-1: config 4 interface 180 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 822.297825][T15744] usb 1-1: config 4 interface 180 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 822.308629][T15744] usb 1-1: config 4 interface 180 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 822.319362][T15744] usb 1-1: config 4 interface 2 has no altsetting 0 [ 822.325978][T15744] usb 1-1: config 4 interface 180 has no altsetting 0 [ 822.342501][T15744] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=90.0c [ 822.351649][T15744] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.359723][T15744] usb 1-1: Product: syz [ 822.363886][T15744] usb 1-1: Manufacturer: syz [ 822.369437][T15744] usb 1-1: SerialNumber: syz [ 822.450606][T15749] usb 6-1: config 0 has an invalid interface number: 124 but max is 0 [ 822.462283][T15749] usb 6-1: config 0 has no interface number 0 [ 822.472144][T15749] usb 6-1: config 0 interface 124 altsetting 253 bulk endpoint 0xA has invalid maxpacket 64 [ 822.485810][T15749] usb 6-1: config 0 interface 124 altsetting 253 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 822.497742][T15749] usb 6-1: config 0 interface 124 altsetting 253 endpoint 0x9 has invalid maxpacket 31014, setting to 64 [ 822.509904][T15749] usb 6-1: config 0 interface 124 altsetting 253 has a duplicate endpoint with address 0x9, skipping [ 822.521288][T15749] usb 6-1: config 0 interface 124 altsetting 253 has a duplicate endpoint with address 0x2, skipping [ 822.532712][T15749] usb 6-1: config 0 interface 124 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 64 [ 822.544534][T15749] usb 6-1: config 0 interface 124 altsetting 253 has a duplicate endpoint with address 0x4, skipping [ 822.556471][T15749] usb 6-1: config 0 interface 124 altsetting 253 has a duplicate endpoint with address 0x1, skipping [ 822.568376][T15749] usb 6-1: config 0 interface 124 has no altsetting 0 [ 822.578301][T15749] usb 6-1: New USB device found, idVendor=0bb4, idProduct=0a73, bcdDevice=f8.de [ 822.588253][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 822.595702][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 822.621402][T15749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.631667][T15749] usb 6-1: Product: syz [ 822.636843][T15749] usb 6-1: Manufacturer: syz [ 822.649570][T15744] usb 1-1: USB disconnect, device number 97 [ 822.659027][T15749] usb 6-1: SerialNumber: syz [ 822.673186][T15749] usb 6-1: config 0 descriptor?? [ 822.685912][T19134] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 822.698239][T19134] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 823.153001][ T129] usb 3-1: USB disconnect, device number 85 [ 823.463480][T19155] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 823.546450][ T129] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 823.726302][ T129] usb 3-1: Using ep0 maxpacket: 16 [ 823.745240][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 823.745258][ T30] audit: type=1400 audit(1766749578.723:1453): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D28 pid=19158 comm="syz.0.3198" [ 823.798592][T15744] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 823.824945][ T129] usb 3-1: config 0 interface 0 has no altsetting 0 [ 823.866250][ T129] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 823.875470][ T129] usb 3-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 823.884990][ T129] usb 3-1: Product: syz [ 823.891674][ T129] usb 3-1: Manufacturer: syz [ 823.899770][ T129] usb 3-1: SerialNumber: syz [ 823.920550][ T129] usb 3-1: config 0 descriptor?? [ 823.956256][T15744] usb 4-1: device descriptor read/64, error -71 [ 824.173527][ T129] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 824.195080][ T6744] udevd[6744]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 824.226908][T15744] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 824.366313][T15744] usb 4-1: device descriptor read/64, error -71 [ 824.476620][T15744] usb usb4-port1: attempt power cycle [ 824.691109][T19166] loop1: detected capacity change from 0 to 7 [ 824.836226][ T5925] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 824.876274][T15744] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 824.890079][T19166] Dev loop1: unable to read RDB block 7 [ 824.895947][T19166] loop1: unable to read partition table [ 824.904987][T19166] loop1: partition table beyond EOD, truncated [ 824.906902][T15744] usb 4-1: device descriptor read/8, error -71 [ 824.912537][T19166] loop_reread_partitions: partition scan of loop1 (ъщ) failed (rc=-5) [ 824.966523][T19168] Invalid logical block size (1) [ 824.988546][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.008190][ T5925] usb 1-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 825.017393][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.028617][ T5925] usb 1-1: config 0 descriptor?? [ 825.096290][ T129] usb 6-1: USB disconnect, device number 123 [ 825.176985][T15744] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 825.197220][T15744] usb 4-1: device descriptor read/8, error -71 [ 825.316719][T15744] usb usb4-port1: unable to enumerate USB device [ 825.444277][ T5925] lenovo 0003:17EF:60A3.0036: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.0-1/input0 [ 825.640416][ T5925] usb 1-1: USB disconnect, device number 98 [ 825.729583][T19186] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20004 [ 826.255771][ T5925] usb 3-1: USB disconnect, device number 86 [ 826.436371][ T129] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 826.548681][T19196] fuse: Bad value for 'group_id' [ 826.553952][T19196] fuse: Bad value for 'group_id' [ 826.614187][ T30] audit: type=1326 audit(1766749581.593:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19192 comm="syz.3.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8792d8f749 code=0x7fc00000 [ 826.650435][ T129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.686407][ T129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.706485][ T129] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 826.733993][ T129] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 826.750379][ T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.766853][ T129] usb 1-1: config 0 descriptor?? [ 827.139318][ T30] audit: type=1326 audit(1766749582.123:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19214 comm="syz.5.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71adf8f749 code=0x7ffc0000 [ 827.186932][ T30] audit: type=1326 audit(1766749582.143:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19214 comm="syz.5.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71adf8f749 code=0x7ffc0000 [ 827.240823][ T129] plantronics 0003:047F:FFFF.0037: reserved main item tag 0xe [ 827.252286][ T30] audit: type=1326 audit(1766749582.143:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19214 comm="syz.5.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f71adf8f749 code=0x7ffc0000 [ 827.275036][ T129] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 827.289282][ T30] audit: type=1326 audit(1766749582.143:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19214 comm="syz.5.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71adf8f749 code=0x7ffc0000 [ 827.343178][ T129] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 827.394943][ T30] audit: type=1326 audit(1766749582.143:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19214 comm="syz.5.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71adf8f749 code=0x7ffc0000 [ 827.806364][T15744] usb 1-1: USB disconnect, device number 99 [ 827.844612][T19227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3213'. [ 827.922590][T19222] fido_id[19222]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 827.950240][ T30] audit: type=1326 audit(1766749582.143:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19214 comm="syz.5.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f71adf8f749 code=0x7ffc0000 [ 828.040858][ T30] audit: type=1326 audit(1766749582.143:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19214 comm="syz.5.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71adf8f749 code=0x7ffc0000 [ 828.188117][ T30] audit: type=1326 audit(1766749582.143:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19214 comm="syz.5.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f71adf8f749 code=0x7ffc0000 [ 828.554952][T19231] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3214'. [ 828.848055][ T5925] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 829.006348][ T5925] usb 6-1: Using ep0 maxpacket: 32 [ 829.013496][ T5925] usb 6-1: unable to get BOS descriptor or descriptor too short [ 829.023846][ T5925] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 829.033034][ T5925] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 829.055595][ T5925] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 829.069521][ T5925] usb 6-1: config 128 has no interface number 0 [ 829.075902][ T5925] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 829.089272][ T5925] usb 6-1: config 128 interface 127 has no altsetting 0 [ 829.099776][ T5925] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 829.111431][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.119788][ T5925] usb 6-1: Product: syz [ 829.124057][ T5925] usb 6-1: Manufacturer: syz [ 829.129518][ T5925] usb 6-1: SerialNumber: syz [ 829.142079][T19235] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 829.165395][T19252] netlink: 'syz.2.3221': attribute type 1 has an invalid length. [ 829.221234][T19254] netlink: 'syz.2.3222': attribute type 10 has an invalid length. [ 829.241644][T19254] team0: Port device dummy0 added [ 829.250185][T19254] netlink: 'syz.2.3222': attribute type 10 has an invalid length. [ 829.274856][T19254] team0: Port device dummy0 removed [ 829.284735][T19254] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 829.382387][ T5925] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 829.465385][ T5925] usb 6-1: USB disconnect, device number 124 [ 829.753606][ T6018] udevd[6018]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 829.896280][T15742] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 829.932966][ T5962] hid-generic 3030:30303030:30303030.0038: unknown main item tag 0x3 [ 829.972509][ T5962] hid-generic 3030:30303030:30303030.0038: unknown main item tag 0x0 [ 830.006025][ T5962] hid-generic 3030:30303030:30303030.0038: unknown main item tag 0x0 [ 830.045852][ T5962] hid-generic 3030:30303030:30303030.0038: unknown main item tag 0x0 [ 830.091161][ T5962] hid-generic 3030:30303030:30303030.0038: unknown main item tag 0x0 [ 830.105273][T15742] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 830.120552][T15742] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 830.124867][ T5962] hid-generic 3030:30303030:30303030.0038: unknown main item tag 0x0 [ 830.174374][ T5962] hid-generic 3030:30303030:30303030.0038: unknown main item tag 0x0 [ 830.192530][ T5962] hid-generic 3030:30303030:30303030.0038: unknown main item tag 0x0 [ 830.219692][T19270] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3226'. [ 830.228983][T15742] usb 3-1: config 8 has no interface number 0 [ 830.238104][T15742] usb 3-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 830.246208][ T5962] hid-generic 3030:30303030:30303030.0038: unknown main item tag 0x0 [ 830.287413][T15742] usb 3-1: config 8 interface 177 has no altsetting 0 [ 830.332787][T15742] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 830.336592][T15744] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 830.350970][ T5962] hid-generic 3030:30303030:30303030.0038: hidraw0: HID v303030.30 Device [syz1] on syz0 [ 830.367172][T15742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.480857][T15742] ir_toy 3-1:8.177: required endpoints not found [ 830.506426][T15744] usb 6-1: Using ep0 maxpacket: 8 [ 830.524891][T15744] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=bc.ed [ 830.553493][T15744] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.558498][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 830.558514][ T30] audit: type=1326 audit(1766749585.533:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19259 comm="syz.0.3224" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff05bd8f749 code=0x0 [ 830.601830][T19270] syz.3.3226 (19270): drop_caches: 2 [ 830.658203][T15744] usb 6-1: Product: syz [ 830.718911][T15744] usb 6-1: Manufacturer: syz [ 830.723701][T15744] usb 6-1: SerialNumber: syz [ 830.742235][T15744] usb 6-1: config 0 descriptor?? [ 830.998544][T19267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.013172][T19267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.045264][T15744] usbserial_generic 6-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 831.057765][T15744] usbserial_generic 6-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 831.077940][T15744] usbserial_generic 6-1:0.0: device has no bulk endpoints [ 831.112628][T15744] usb 6-1: USB disconnect, device number 125 [ 831.564220][T19276] ip6gretap0: entered promiscuous mode [ 831.580310][T19276] ip6gretap0: left promiscuous mode [ 831.926400][T15744] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 831.934626][ T5962] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 832.036344][ T5925] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 832.066409][T15744] usb 4-1: device descriptor read/64, error -71 [ 832.088231][ T5962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 832.098102][ T5962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 218, changing to 7 [ 832.109359][ T5962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 9171, setting to 1024 [ 832.122914][ T5962] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 832.132158][ T5962] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.140314][ T5962] usb 6-1: Product: syz [ 832.144607][ T5962] usb 6-1: Manufacturer: syz [ 832.150289][ T5962] usb 6-1: SerialNumber: syz [ 832.158623][ T5962] usb 6-1: config 0 descriptor?? [ 832.168935][ T5962] usb 6-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress af [ 832.206228][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 832.213056][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.223658][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 832.235619][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 832.245371][ T5925] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 832.255636][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 832.272282][ T5925] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 832.281594][ T5925] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 832.289754][ T5925] usb 1-1: Manufacturer: syz [ 832.296720][ T5925] usb 1-1: config 0 descriptor?? [ 832.306321][T15744] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 832.367021][T19281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.381593][T19281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.416903][ T5962] usb 6-1: USB disconnect, device number 126 [ 832.438380][T15744] usb 4-1: device descriptor read/64, error -71 [ 832.473590][ T5926] udevd[5926]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 832.572197][T15749] usb 3-1: USB disconnect, device number 87 [ 832.578929][ T5925] rc_core: IR keymap rc-hauppauge not found [ 832.580627][T15744] usb usb4-port1: attempt power cycle [ 832.585351][ T5925] Registered IR keymap rc-empty [ 832.596110][ T5925] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 832.636539][ T5925] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 832.644597][ T30] audit: type=1326 audit(1766749587.623:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19290 comm="syz.2.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539ad8f749 code=0x7ffc0000 [ 832.657418][ T5925] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 832.670013][ T30] audit: type=1326 audit(1766749587.623:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19290 comm="syz.2.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539ad8f749 code=0x7ffc0000 [ 832.685292][ T5925] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input93 [ 832.703699][ T30] audit: type=1326 audit(1766749587.653:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19290 comm="syz.2.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539ad8f749 code=0x7ffc0000 [ 832.750449][ T5925] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 832.750753][ T30] audit: type=1326 audit(1766749587.653:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19290 comm="syz.2.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539ad8f749 code=0x7ffc0000 [ 832.777194][ T5925] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 832.780935][ T30] audit: type=1326 audit(1766749587.663:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19290 comm="syz.2.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f539ad8f749 code=0x7ffc0000 [ 832.806408][ T5925] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 832.811604][ T30] audit: type=1326 audit(1766749587.663:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19290 comm="syz.2.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539ad8f749 code=0x7ffc0000 [ 832.836395][ T5925] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 832.862028][ T30] audit: type=1326 audit(1766749587.663:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19290 comm="syz.2.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539ad8f749 code=0x7ffc0000 [ 832.866319][ T5925] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 832.886894][ T30] audit: type=1326 audit(1766749587.683:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19290 comm="syz.2.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539ad8f749 code=0x7ffc0000 [ 832.938493][T15744] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 832.946498][ T5925] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 832.967163][T15744] usb 4-1: device descriptor read/8, error -71 [ 832.978184][ T30] audit: type=1326 audit(1766749587.683:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19290 comm="syz.2.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539ad8f749 code=0x7ffc0000 [ 833.019788][ T5925] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 833.071091][ T5925] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 833.096424][ T5925] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 833.117129][ T5925] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 833.138307][ T5925] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 833.146654][ T5925] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 833.180753][ T5925] usb 1-1: USB disconnect, device number 100 [ 833.246363][T15747] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 833.256917][T15744] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 833.304332][T19303] netlink: 'syz.5.3235': attribute type 13 has an invalid length. [ 833.366825][T15744] usb 4-1: device descriptor read/8, error -71 [ 833.426323][T15747] usb 3-1: Using ep0 maxpacket: 16 [ 833.433647][T15747] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 833.441721][T15747] usb 3-1: can't read configurations, error -22 [ 833.496744][T15744] usb usb4-port1: unable to enumerate USB device [ 833.596615][T15747] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 833.608353][T15742] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 833.677952][T19301] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3236'. [ 833.914989][T15747] usb 3-1: Using ep0 maxpacket: 16 [ 834.009382][T15747] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 834.026870][T15747] usb 3-1: can't read configurations, error -22 [ 834.094354][T15747] usb usb3-port1: attempt power cycle [ 834.461807][T19321] delete_channel: no stack [ 834.476297][T15747] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 834.497038][T15747] usb 3-1: Using ep0 maxpacket: 16 [ 834.538203][T15747] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 834.554956][T15747] usb 3-1: can't read configurations, error -22 [ 834.646474][ T129] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 834.646588][ T5962] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 834.693539][T19328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3242'. [ 834.727738][T15747] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 834.799787][T15747] usb 3-1: Using ep0 maxpacket: 16 [ 834.830780][T15747] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 834.859298][ T5962] usb 1-1: Using ep0 maxpacket: 16 [ 834.910545][T15747] usb 3-1: can't read configurations, error -22 [ 834.973204][T15747] usb usb3-port1: unable to enumerate USB device [ 835.002083][ T5962] usb 1-1: config 0 has no interfaces? [ 835.043738][ T5962] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 835.056821][ T5962] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 835.085292][ T5962] usb 1-1: Manufacturer: syz [ 835.106590][T15742] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 835.135195][ T5962] usb 1-1: config 0 descriptor?? [ 835.317644][T15742] usb 4-1: Using ep0 maxpacket: 8 [ 835.330552][T15742] usb 4-1: unable to get BOS descriptor or descriptor too short [ 835.372696][T15742] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 835.390917][T15742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 835.423418][T15742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 835.452606][T19346] netlink: 'syz.6.3246': attribute type 29 has an invalid length. [ 835.453630][T15742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 835.487002][T19350] binder: 19347:19350 ioctl c0306201 200000004a40 returned -14 [ 835.503589][T15742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 835.531967][T15742] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 835.565432][T15742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 835.595638][T15742] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1B, changing to 0xB [ 835.624939][T19353] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3248'. [ 835.634549][T15742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 32767, setting to 64 [ 835.655518][T15742] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 835.673427][T15742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.682226][T15742] usb 4-1: Product: syz [ 835.687043][T15742] usb 4-1: Manufacturer: syz [ 835.696816][T15742] usb 4-1: SerialNumber: syz [ 835.715975][T15742] usb 4-1: config 0 descriptor?? [ 835.739528][T15742] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 835.952930][T15742] usb 4-1: USB disconnect, device number 74 [ 835.974083][ T5926] udevd[5926]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 836.004082][T19362] [ 836.006422][T19362] ====================================================== [ 836.013420][T19362] WARNING: possible circular locking dependency detected [ 836.020433][T19362] syzkaller #0 Tainted: G L [ 836.026393][T19362] ------------------------------------------------------ [ 836.033408][T19362] syz.6.3252/19362 is trying to acquire lock: [ 836.039453][T19362] ffff88806280a0a8 (&ctx->uring_lock){+.+.}-{4:4}, at: io_uring_del_tctx_node+0xf0/0x2c0 [ 836.049257][T19362] [ 836.049257][T19362] but task is already holding lock: [ 836.056607][T19362] ffff8880259579e0 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xb9/0x1400 [ 836.066121][T19362] [ 836.066121][T19362] which lock already depends on the new lock. [ 836.066121][T19362] [ 836.076526][T19362] [ 836.076526][T19362] the existing dependency chain (in reverse order) is: [ 836.085538][T19362] [ 836.085538][T19362] -> #2 (&sig->cred_guard_mutex){+.+.}-{4:4}: [ 836.093773][T19362] __mutex_lock+0x187/0x1350 [ 836.098876][T19362] proc_pid_attr_write+0x547/0x630 [ 836.104488][T19362] vfs_writev+0x4b6/0x960 [ 836.109317][T19362] do_writev+0x14d/0x2d0 [ 836.114062][T19362] do_syscall_64+0xec/0xf80 [ 836.116266][ T129] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 836.119066][T19362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.133069][T19362] [ 836.133069][T19362] -> #1 (sb_writers#3){.+.+}-{0:0}: [ 836.140432][T19362] sb_start_write+0x4d/0x1c0 [ 836.145527][T19362] mnt_want_write+0x41/0x90 [ 836.150533][T19362] path_openat+0xadd/0x3dd0 [ 836.155536][T19362] do_filp_open+0x1fa/0x410 [ 836.160538][T19362] io_openat2+0x3e0/0x5c0 [ 836.165367][T19362] __io_issue_sqe+0x181/0x4b0 [ 836.170544][T19362] io_issue_sqe+0x165/0x1060 [ 836.175639][T19362] io_submit_sqes+0xbf4/0x2140 [ 836.180905][T19362] __se_sys_io_uring_enter+0x2e0/0x2b60 [ 836.186957][T19362] do_syscall_64+0xec/0xf80 [ 836.191973][T19362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.198372][T19362] [ 836.198372][T19362] -> #0 (&ctx->uring_lock){+.+.}-{4:4}: [ 836.206084][T19362] __lock_acquire+0x15a6/0x2cf0 [ 836.211445][T19362] lock_acquire+0x107/0x340 [ 836.216448][T19362] __mutex_lock+0x187/0x1350 [ 836.221538][T19362] io_uring_del_tctx_node+0xf0/0x2c0 [ 836.227322][T19362] io_uring_clean_tctx+0xd4/0x1a0 [ 836.232847][T19362] io_uring_cancel_generic+0x6ca/0x7d0 [ 836.238802][T19362] begin_new_exec+0x10ed/0x2440 [ 836.244155][T19362] load_elf_binary+0x998/0x2740 [ 836.249511][T19362] bprm_execve+0x92e/0x1400 [ 836.254515][T19362] do_execveat_common+0x510/0x6a0 [ 836.260035][T19362] __x64_sys_execveat+0xc4/0xe0 [ 836.265387][T19362] do_syscall_64+0xec/0xf80 [ 836.270386][T19362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.276774][T19362] [ 836.276774][T19362] other info that might help us debug this: [ 836.276774][T19362] [ 836.286978][T19362] Chain exists of: [ 836.286978][T19362] &ctx->uring_lock --> sb_writers#3 --> &sig->cred_guard_mutex [ 836.286978][T19362] [ 836.300428][T19362] Possible unsafe locking scenario: [ 836.300428][T19362] [ 836.307857][T19362] CPU0 CPU1 [ 836.313462][T19362] ---- ---- [ 836.318805][T19362] lock(&sig->cred_guard_mutex); [ 836.323816][T19362] lock(sb_writers#3); [ 836.330559][T19362] lock(&sig->cred_guard_mutex); [ 836.338080][T19362] lock(&ctx->uring_lock); [ 836.342601][T19362] [ 836.342601][T19362] *** DEADLOCK *** [ 836.342601][T19362] [ 836.350731][T19362] 1 lock held by syz.6.3252/19362: [ 836.355816][T19362] #0: ffff8880259579e0 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xb9/0x1400 [ 836.365745][T19362] [ 836.365745][T19362] stack backtrace: [ 836.371723][T19362] CPU: 0 UID: 0 PID: 19362 Comm: syz.6.3252 Tainted: G L syzkaller #0 PREEMPT(full) [ 836.371741][T19362] Tainted: [L]=SOFTLOCKUP [ 836.371745][T19362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 836.371752][T19362] Call Trace: [ 836.371760][T19362] [ 836.371766][T19362] dump_stack_lvl+0xe8/0x150 [ 836.371784][T19362] print_circular_bug+0x2e2/0x300 [ 836.371798][T19362] check_noncircular+0x12e/0x150 [ 836.371812][T19362] __lock_acquire+0x15a6/0x2cf0 [ 836.371826][T19362] ? io_uring_del_tctx_node+0xf0/0x2c0 [ 836.371840][T19362] lock_acquire+0x107/0x340 [ 836.371849][T19362] ? io_uring_del_tctx_node+0xf0/0x2c0 [ 836.371865][T19362] __mutex_lock+0x187/0x1350 [ 836.371877][T19362] ? io_uring_del_tctx_node+0xf0/0x2c0 [ 836.371892][T19362] ? io_uring_del_tctx_node+0xf0/0x2c0 [ 836.371905][T19362] ? __pfx___mutex_lock+0x10/0x10 [ 836.371916][T19362] ? do_raw_spin_unlock+0x122/0x240 [ 836.371930][T19362] ? _raw_spin_unlock+0x28/0x50 [ 836.371943][T19362] ? xa_erase+0xd5/0xf0 [ 836.371955][T19362] io_uring_del_tctx_node+0xf0/0x2c0 [ 836.371970][T19362] io_uring_clean_tctx+0xd4/0x1a0 [ 836.371983][T19362] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 836.371996][T19362] ? lockdep_hardirqs_on+0x7b/0x110 [ 836.372006][T19362] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 836.372020][T19362] ? __percpu_counter_sum+0x1c2/0x1e0 [ 836.372036][T19362] io_uring_cancel_generic+0x6ca/0x7d0 [ 836.372052][T19362] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 836.372067][T19362] ? __pfx_autoremove_wake_function+0x10/0x10 [ 836.372082][T19362] ? io_uring_unreg_ringfd+0x52f/0x540 [ 836.372095][T19362] begin_new_exec+0x10ed/0x2440 [ 836.372118][T19362] ? __pfx_begin_new_exec+0x10/0x10 [ 836.372132][T19362] ? rw_verify_area+0x2a6/0x4d0 [ 836.372146][T19362] ? __kmalloc_noprof+0x43e/0x800 [ 836.372157][T19362] load_elf_binary+0x998/0x2740 [ 836.372175][T19362] ? load_misc_binary+0x110/0xc40 [ 836.372187][T19362] ? lock_acquire+0x107/0x340 [ 836.372200][T19362] ? __pfx_load_elf_binary+0x10/0x10 [ 836.372216][T19362] bprm_execve+0x92e/0x1400 [ 836.372234][T19362] ? __pfx_bprm_execve+0x10/0x10 [ 836.372248][T19362] ? copy_string_kernel+0x25f/0x2a0 [ 836.372263][T19362] do_execveat_common+0x510/0x6a0 [ 836.372275][T19362] __x64_sys_execveat+0xc4/0xe0 [ 836.372285][T19362] do_syscall_64+0xec/0xf80 [ 836.372295][T19362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.372305][T19362] ? trace_irq_disable+0x37/0x100 [ 836.372319][T19362] ? clear_bhb_loop+0x60/0xb0 [ 836.372331][T19362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.372341][T19362] RIP: 0033:0x7f237f98f749 [ 836.372353][T19362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.372362][T19362] RSP: 002b:00007f237dbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 836.372375][T19362] RAX: ffffffffffffffda RBX: 00007f237fbe6090 RCX: 00007f237f98f749 [ 836.372383][T19362] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 836.372390][T19362] RBP: 00007f237fa13f91 R08: 0000000000001000 R09: 0000000000000000 [ 836.372397][T19362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.372403][T19362] R13: 00007f237fbe6128 R14: 00007f237fbe6090 R15: 00007f237fd0fa28 [ 836.372414][T19362] [ 836.743328][T19367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3253'. [ 836.752338][T19367] netlink: 'syz.2.3253': attribute type 7 has an invalid length. [ 836.760144][T19367] netlink: 'syz.2.3253': attribute type 8 has an invalid length. [ 836.767983][T19367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3253'. [ 836.781362][T19367] team0: entered promiscuous mode [ 836.787352][T19367] team_slave_0: entered promiscuous mode [ 836.793137][T19367] team_slave_1: entered promiscuous mode [ 836.802272][T19367] bond0: entered promiscuous mode [ 836.807447][T19367] bond_slave_0: entered promiscuous mode [ 836.813232][T19367] bond_slave_1: entered promiscuous mode [ 836.819210][T19367] dummy0: entered promiscuous mode [ 836.827447][T19367] gretap0: entered promiscuous mode [ 836.833988][T19367] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 836.876223][ T129] usb 6-1: Using ep0 maxpacket: 8 [ 836.882837][ T129] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 836.898950][ T129] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 836.917057][ T129] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 836.928958][ T129] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 836.942192][ T129] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 836.951588][ T129] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.162286][ T129] usb 6-1: GET_CAPABILITIES returned 0 [ 837.169160][ T129] usbtmc 6-1:16.0: can't read capabilities [ 837.369103][T19360] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -90 [ 837.370522][T19371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.386705][T19371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.405310][T15749] usb 6-1: USB disconnect, device number 127 [ 837.894801][ T5962] usb 1-1: USB disconnect, device number 101