last executing test programs: 34m48.537902527s ago: executing program 4 (id=53): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000500000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000010000000000000044000500"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 34m48.370716513s ago: executing program 4 (id=56): fsopen(&(0x7f0000000600)='afs\x00', 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, r1, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f0000002fc0)) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYRES8=0x0, @ANYRES16=r5, @ANYBLOB="010029bd7000fcdbdf258200000008000300", @ANYRES32=r4, @ANYBLOB="8033e64ca1f257936e7549dce8d777457c9854f4e78c950d42cbb7b5320fb28043e084a89ac0a47d73d26105d2b791542e066fee24923b03cb038933370d1cca19e15579eaf738c24312954738f13b5c6d84d36e70188878d2dedb63a5f8d8f2e564d41a12472c37153332aec8b1ea06da26a13693a660e6bc270d325d5e68c70d5f4cba6f8e1f4735f9dcc97f0f3a8209f4b5d95eab59d5a93826b4cffe6e377f4262", @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x401c400) (async) socketpair(0x1f, 0x35dd53483be9d77e, 0x10001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_open_dev$media(&(0x7f0000000080), 0xcfa, 0x2202) (async) r7 = syz_io_uring_setup(0x800231, &(0x7f0000000180)={0x0, 0xc2af, 0x1, 0xfffffffc, 0x40057}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x4, 0x0, @fd_index=0x3, 0xb2, 0x0}) (async) io_uring_enter(r7, 0x7a98, 0xeca6, 0x0, 0x0, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) (async) r11 = userfaultfd(0x801) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) (async) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000951000/0x1000)=nil, 0x1000}, 0x1}) (async) ioctl$UFFDIO_CONTINUE(r11, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000662000/0x2000)=nil, 0x2000}, 0x1}) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="28003c0c93aca738be8476d6b1f46f855502b9d931b61ca99e099f5dbf8109b54d832aadb18815bbc1e51b8cef6734fd077f446d3b8639697202086cb551eed931e0ba070b8d6a39a6ab3d9bfaf6e9e3d9ed18c5b3562bed560000000000000000268d89cbbb2b82", @ANYRES32=r12, @ANYRES8=r0, @ANYBLOB="8ca16cfa36bed0a0408e91fdeb76c5c079cd555967fe7a18c5fac1935fe430ad5e34a97c98292f5e9a215a42266b1645ca3c1d8afbd22dc088f0afa3b4adc1f53b2715b5a66e81a49c85d1218e5fea0b02739cb3fd682bb1966077fd99cd1ca5a77a30fd7ecdc279ed603bf5ef1405706c86e619eb5c982632084f2bfb3f50ad58b70bf6d65c43574444d00dfe91074e769d13e1fde54bdbbf8c57a779f953854bc3acbb7a03edb121de4848583b30080f23efb122f99131bce3ec8b41e61ca510", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000880) (async) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@getchain={0x44, 0x66, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x3, 0xfff1}, {0xd, 0x2}, {0xffff, 0xfff3}}, [{0x8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x40020) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/200, 0xc8}], 0x1}, 0x20c0) (async) socket$kcm(0x1e, 0x4, 0x0) 34m48.164499283s ago: executing program 4 (id=57): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x18}) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1f) add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3010000}}, {}, [@call={0x85, 0x0, 0x0, 0xd0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "34fa8f263bcc16a6f423a1b5cdd0a77ab84e2c3504c9405a14cbff940f2aa75db1473267ae0574391894a3836a00b6f9fa4eb2678a8cb1010904425fe63df6ba", 0x19}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000001540)='asymmetric\x00', &(0x7f0000001580)={'syz', 0x2}, &(0x7f00000015c0)='syz', r6) keyctl$set_timeout(0xf, r6, 0x1ff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x4, 0x0, 0x0, 0x1, 0xd3, &(0x7f0000001380)=""/211, 0x100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x10, 0x8c}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0xb16b}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8916, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) 34m45.23164863s ago: executing program 4 (id=63): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}}, 0x0) r4 = socket(0x1000000010, 0x80802, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) r7 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) mount_setattr(r6, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x10000a, 0x0, 0x80000, {r7}}, 0x20) setns(r3, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) 34m44.263903442s ago: executing program 4 (id=68): r0 = syz_usbip_server_init(0x1) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2087, 0xa01, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x13, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x9, 0x4, 0x1, {0x22, 0x487}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xbd, 0x5, 0x9}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0xec, 0x9, 0x2, 0xff, 0x6}, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x81, 0x84, 0xff}]}, 0x5, [{0x96, &(0x7f00000001c0)=@string={0x96, 0x3, "3714e98648b9d25262763ae3bc90a41d3367dd381cc6239c5ef66a1410e30983d69577899e17a1ed3cc70b6b1d2021daabd0d260833ffa287a965ed157b90c74c15db1aabb66677a76c0910b37c4171f6d033cb236e950ccbbc3c1b667f097e05dccf70ca2e708a167a2e2a90969d1349dc88f24150d4ba711a7f7cd583ec1683fdfa52c8584130d917b547cc94f9ae2b6d73619"}}, {0xfd, &(0x7f0000000280)=@string={0xfd, 0x3, "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"}}, {0x67, &(0x7f0000000380)=@string={0x67, 0x3, "f39d08adbb172f3611ab0cd03e79398020bfe9ba8cc123fc142c7f121dd122d0f6c6b438dc74957b47334cd465986cd32f4e7f0ce780607c61cc8089b9e7ea897c3b45038824b0e47c79d7ca5825bd2902966030df6e93456a535d5a688d33fb92b56d4c11"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x140c}}]}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fadvise64(0xffffffffffffffff, 0x9, 0x4, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000940)=""/114, 0x72}], 0x1) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x810, 0xffffffffffffffff, 0x2) write$usbip_server(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000300000001"], 0x60) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) write$usbip_server(r0, &(0x7f0000000000)=@ret_unlink={{0x4, 0x4, 0x0, 0x1, 0x7}, {0x4ad}}, 0x30) 34m44.038525493s ago: executing program 4 (id=69): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x6) sendmmsg(r0, &(0x7f0000002e00)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x3}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)="7913c245e96222ebccca", 0xa}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x10, 0x10b}], 0x10}}], 0x2, 0x40000050) 34m43.435218572s ago: executing program 32 (id=69): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x6) sendmmsg(r0, &(0x7f0000002e00)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x3}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)="7913c245e96222ebccca", 0xa}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x10, 0x10b}], 0x10}}], 0x2, 0x40000050) 30m25.239302775s ago: executing program 2 (id=854): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000003c00010325bd7000fcffffff0800000008000300d89f0000"], 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000b00)={0x6, 0x1, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)=""/85, 0x55}, {&(0x7f0000000340)=""/176, 0xb0}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000240)=""/13, 0xd}, {&(0x7f0000000840)=""/188, 0xbc}, {&(0x7f0000000980)=""/153, 0x99}], &(0x7f0000000ac0)=[0xfffffffffffffff8, 0x9, 0x400, 0x10001, 0xd]}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x8a4) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) socket$inet6(0xa, 0x80002, 0x88) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r5, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r8, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r7, 0x0, 0x0, 0x2}]) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000140)) ioctl$SNDCTL_DSP_GETIPTR(r6, 0x800c5011, &(0x7f0000000040)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 30m23.620009882s ago: executing program 2 (id=860): r0 = memfd_create(&(0x7f0000000540)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:\xb0]}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x00\x00\x00\x00\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf\xfd\xff\xff\xff\xff\xff\xff\xff\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92\xd2\xf5\xab\x13\xaf?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Qe2|lJ\\\xc4\xb1u~\xa2\xb3\xf4\x1a\f\xf9\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\n\xbdX\xcc\xac\x11l\xd9\x89\x16\x15R\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\x01\x00\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\xfck\xb0\"\xa3M\xe9\x81\x11P\xfd\xff\xff\xff\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\tM\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3&x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\x99\xa1<\x83\xbd\xbb\xd3*5\xe3R\xdb\xbf\xb2-\xf3\xc1\xd2\x8f\xc5T\x05\xd7t\x84n\xbe\xc6-\xa8\xdcT3\x12\xc9\x14\xcbr\x9e\xb2\xcbU\xf7\xbc\xfbR:D\xeb\xc2\x92y9\xca\xca%\bD\x8c?\nI\x10\x7fE\xa2\xdf\xef', 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) lseek(r0, 0x0, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000140)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}, {0x0, 0x4, 0x40000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 30m22.477433894s ago: executing program 2 (id=862): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0x10, 0x80002, 0x0) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310300200000000000400800000008000300", @ANYRES32=r4, @ANYBLOB="0600280003000000070006"], 0x2c}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@mpls_getroute={0x5c, 0x1a, 0x1, 0x70bd2b, 0x25dfdbff, {0x1c, 0x14, 0x10, 0x0, 0xfd, 0x1, 0xfd, 0x5}, [@RTA_DST={0x8, 0x1, {0x4}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x2}, @RTA_DST={0x8, 0x1, {0x9, 0x0, 0x1}}, @RTA_OIF={0x8, 0x4, r4}, @RTA_VIA={0x14, 0x12, {0xa, "0a5bd96c8797ec0321e8587163a6"}}, @RTA_OIF={0x0, 0x4, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x1) 30m22.278116971s ago: executing program 2 (id=865): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003bf000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="6564f2adf20f00dd0f72d5fd0f35baf80c66b83173b88a66efbafc0cb0f8eed15000bad004ec4ac55b070f8c5f78", 0x2e}], 0x1, 0x46, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) unshare(0x62040200) syz_usb_connect(0x3, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201500225e0d008"], 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004508003c00000000000690780a010100ac1414bb00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a085c40a964af1fa56400000907800001d04f989000d5f75fc0d16907cbac1e5050000000d1f46e2dcba0314a96165e0bf6e6c1184a6be2c03514e96bddbd3f2f6"], 0x0) r4 = io_uring_setup(0x49bd, &(0x7f0000000240)={0x0, 0x7b66, 0x400, 0xfffffffc, 0x2b8}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f00000000c0)={0x8, 0xffffffffffffffff, 0x1b, {0xfca4, 0xc}, 0x5}, 0x1) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x4e20, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726fb2cb000000000000303030303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') socket$inet6(0xa, 0x1, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000380)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') modify_ldt$write(0x1, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 30m20.255669262s ago: executing program 2 (id=872): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x0, 0x24044485) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2003, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x1000000, 0xb4d, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @local, 0x5e}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4, 0x1}, 0x1c) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x440c1) sendmmsg$inet(r3, &(0x7f0000000640)=[{{&(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x8}}], 0x1, 0x2000c844) r6 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan1\x00'}) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040), 0xfffffffffffffe82) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r3, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x6000000000000000, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000007400)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4080) 30m19.888965967s ago: executing program 2 (id=875): unshare(0x2c020400) r0 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4882, 0x8, 0x0, 0xf7}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000001140)={[&(0x7f0000000180)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, &(0x7f00000010c0)={[&(0x7f0000001180)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x118, &(0x7f0000000000)=0x4, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x74, 0x0, 0x0, 0x6, &(0x7f0000000040)={0x0, 0x989680}, 0x1, 0x12, 0x1}) unshare(0x52000100) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 30m18.964697711s ago: executing program 33 (id=875): unshare(0x2c020400) r0 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4882, 0x8, 0x0, 0xf7}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000001140)={[&(0x7f0000000180)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, &(0x7f00000010c0)={[&(0x7f0000001180)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x118, &(0x7f0000000000)=0x4, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x74, 0x0, 0x0, 0x6, &(0x7f0000000040)={0x0, 0x989680}, 0x1, 0x12, 0x1}) unshare(0x52000100) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 23m35.304037287s ago: executing program 1 (id=2264): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}], 0x1, 0x400c404) exit(0xfe) sendmmsg$inet6(r1, &(0x7f0000004740)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10001}, 0x1c, 0x0}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000840)="11b1bfad69c9e86215472a62a9773cd45edddf1fe28799b805943daeac8c4c3a22b571b37c290e338dd4b545648fb3ee6693b661eb024687", 0x38}, {&(0x7f00000024c0)="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", 0x628}, {&(0x7f0000000940)="dd09685c6d6d24005d353911c37357e50a5571ce326b2b217c121fbfca79449cba01ca0f7b09761850e4547adf5db2a96f0514", 0x33}, {&(0x7f00000034c0)}, {&(0x7f0000000a40)}, {0x0}, {&(0x7f0000000c00)}], 0x7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000048c0)=ANY=[@ANYBLOB="40000000000000002900000037000000ff0400000000000007180000000304ff00800400000000000000000000000000000000010005020c5f0401002800000000000000"], 0x80}}, {{&(0x7f0000004680)={0xa, 0x4e22, 0x3, @local, 0x7}, 0x1c, &(0x7f0000004700)}}], 0x4, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x24, 0x0, 0x9}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYBLOB="96af969267c32f2c60fcf27a28409a504e431929241379f7feab59d797c35c2fee89decdfb16f80acf034bd5853b0b214e9d2d9f890d6a57f0579081b1e41b0f969a19e2fd56d2c386f04e4580fefc95ac284805eef80a6c0b3b47d97b7b2fb6b7995fced211417b4664b262881754008d6856ee55f6cbfc03959acf73aa43"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r3, &(0x7f0000000000)=""/43, 0x2b) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0xfffffffd, 0x4, 0xfffffffe}, 0x3c) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) 23m34.365096538s ago: executing program 1 (id=2267): r0 = syz_io_uring_setup(0x7747, &(0x7f0000000340)={0x0, 0x5e52, 0x8, 0x2, 0x282}, &(0x7f0000000240), &(0x7f00000003c0)) r1 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x81f, 0x100, 0x0, 0x100016b, 0x0, r0}) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) pselect6(0x81, &(0x7f0000000000)={0xa, 0x7ff, 0x14b, 0xffffffff, 0x8, 0xba4, 0xffffffffffffffff, 0xfffffffffffffff8}, 0x0, &(0x7f00000000c0)={0x6b40, 0x3, 0x0, 0x8, 0x1, 0x4000006, 0x8, 0x8080}, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) recvmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/24, 0x18}, 0x1ff}], 0x1, 0x40000023, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0xfffffffffffffe1d, 0x280000e1, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) recvmmsg(r6, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 23m33.116677286s ago: executing program 1 (id=2271): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000100037040100"/20, @ANYRES32=r2, @ANYBLOB="83000500000000001c0012800b00010067726574617000000c00028008000700ac1414"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x16}, @loopback}}}], 0x20}}], 0x2, 0x4880) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'ecn\x00'}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, 0x0, 0x0) r6 = accept4$unix(r3, 0x0, 0x0, 0x0) r7 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x121000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x2, 0x1, 0x10001000}) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r7, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f00000003c0)={0x1, 0x7, 0x7ff}) ioctl$SNDCTL_SEQ_RESET(r8, 0x5100) r9 = syz_usb_connect(0x1, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r11 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000000)={0x7042ab7c6493c79c}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005040000000600150005"], 0x4c}}, 0x0) syz_usb_disconnect(r9) unshare(0x40400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 23m30.666908117s ago: executing program 1 (id=2275): socket$inet6(0xa, 0x800, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000380)="2eab6d906e08a46fbdfe61aeb0de86179b9f313aa5e141e2ca00586e449dfe00000000006a00000000", 0x29}], 0x1) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc0009058502", @ANYRES8], 0x0) r2 = gettid() r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r7, &(0x7f0000000000)=""/188, 0xbc) socket$nl_generic(0x10, 0x3, 0x10) read$char_usb(r7, &(0x7f0000000100)=""/67, 0x43) socket$nl_netfilter(0x10, 0x3, 0xc) 23m27.169208286s ago: executing program 1 (id=2288): openat$vcsa(0xffffffffffffff9c, 0x0, 0x842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @remote}, 0x1c) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfea7) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000440)=0x100, 0x1002) socket$tipc(0x1e, 0x5, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00"/52, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000a000000000000000000000000000000000000000000080000000000000000000000000000000044000500fc00000000000000000000000080003c00000000000000ffffffff00000000000000000000000000000000000300"/172], 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x20000000000, &(0x7f0000006680)) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f0000000180)={0x50000, 0x108000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r9 = io_uring_setup(0x2fa5, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x227}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000004600), 0xffffffffffffffff) 23m24.095120595s ago: executing program 1 (id=2300): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x8) r1 = syz_io_uring_setup(0x3429, &(0x7f0000000000)={0x0, 0xb46, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd, 0xd4b, 0x0, 0x0, 0x0, 0x1}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x10, &(0x7f0000000100)=0x5, 0x4) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x110) openat$fb0(0xffffffffffffff9c, 0x0, 0x22902, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x24c, 0x0, &(0x7f0000000cc0)="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", 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffff6}, 0x50) r8 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000040)=0x85) r9 = syz_open_pts(r7, 0x141601) fcntl$setstatus(r9, 0x4, 0x102800) write(r9, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040), 0x0) r10 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r10, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socket(0x10, 0x3, 0x0) 23m8.800745108s ago: executing program 34 (id=2300): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x8) r1 = syz_io_uring_setup(0x3429, &(0x7f0000000000)={0x0, 0xb46, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd, 0xd4b, 0x0, 0x0, 0x0, 0x1}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x10, &(0x7f0000000100)=0x5, 0x4) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x110) openat$fb0(0xffffffffffffff9c, 0x0, 0x22902, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x24c, 0x0, &(0x7f0000000cc0)="b44c806748f06309624431ed3373010001000000bf7e47d5fe008c6390009c4ebd873094563683b7ee0fae7a6a53200386ce51def6a4effb9de8b4645c2b9c0614907dac12c6d34a8266e6124b925240080cd4f4e5b5da601596c31f137d2ce6ca74fd87f90ea0be786fe13ac0805807dd6853458eccc84575e9af5fee93c9427fc0bd19ccae5d3bc54f9bdf5cf073b5a597a9df9cb422ce2ab5ff0700000000000093b110a54f32ad69d05a805194380816a626940f4b74417bcc7ebcdf627041732f2eb0e4c6b6ed2449161c8b447829e7110b031b2e42528ed9aacbacae558272260c6b6ab183dd433a628de952e48f76d92cb36789fa2048c18441e99f6d3928bbcba48129e9c76ea7bafde2f322a406679edc8807a1ac048371092e1545d4feae4e5cc5d59840916e65ca94a1543a0ceb72c7342ce4f36d2a0d920d256eb72edc1b5d501eedc374c9ecf7c9ea0f5b494802a0365859c94850e0b20ad984b7b20dec8b6880e17e7638b63daa1d02f17ede128917819041750faee85b9e12f969c2acb24d6bdd83ab595c535fd20eec50cd53db292baaecb91e26df80c19eb88382dec1b5293c061833a33546fc699dcb187b66c91d23bb498494b0d45ad577c4a70f7fc82f5538eb7f3753f8f609377d2b5893d99c69ddc1dce10a0396f20c0a3e9fa981b642abda8753f155a7e0b829359617ade0749518458238ef376274b342c827199a5fa19c09c010e6759a045c5a15c1bdaaf707919ea5950adcad65dc128370ae91022956e9f55eee4a7b3aa2dbf8e2ec52e064d37c372db525ed9ee97aec279340dca0962c14", 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffff6}, 0x50) r8 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000040)=0x85) r9 = syz_open_pts(r7, 0x141601) fcntl$setstatus(r9, 0x4, 0x102800) write(r9, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040), 0x0) r10 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r10, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socket(0x10, 0x3, 0x0) 12m36.61532073s ago: executing program 6 (id=4202): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}], 0x1, 0x400c404) sendmmsg$inet6(r0, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48c0) 12m35.990756663s ago: executing program 6 (id=4204): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r1 = geteuid() fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2000, 0x7ff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x4000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x81, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x800}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@uid_lt={'uid<', r3}}, {@fsmagic={'fsmagic', 0x3d, 0x10}}, {@euid_gt={'euid>', r4}}, {@fowner_lt={'fowner<', r5}}, {@measure}, {@audit}, {@subj_type}, {@uid_gt={'uid>', r6}}]}}, 0x0, 0x0, &(0x7f0000000740)="29ac4cc9cc744eb165a58cd233616b7a8a75c3e690eae3b81557eb6268f75b199005158d9d22580602848b47a75e163b265fbdf9cbf8f236bce8e8380930e0da1ade829470ee381ff240d5949a8d013ed4c6b3fd3b3ba96f49abc62eb17e6096366a0de11b02e12fbfc17db30ad7b185ed9d9b1e66ca2112526ff36674404d832e0b8eded77bdd4a66eda90df5695882224e541c728c382a0ecb242b24040ca1fd87d1d38f1fb49fa530d207cb4a465df6ee8aeca47e7d5459e836c30f1e66bc3c23c0feece1a52af132d151bbb0b4ebe9b78961fd857ca2aa60af23bb242338d810011f") r7 = accept4(r0, 0x0, &(0x7f0000000840), 0x80000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x4000010, r0, 0x10000000) syz_io_uring_submit(0x0, r8, &(0x7f0000002e00)=@IORING_OP_RECVMSG={0xa, 0x4, 0x11, r7, 0x0, &(0x7f0000002dc0)={&(0x7f0000000880)=@rc={0x1f, @none}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/45, 0x2d}, {&(0x7f0000001940)=""/90, 0x5a}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/23, 0x17}, {&(0x7f0000002a00)=""/183, 0xb7}, {&(0x7f0000002ac0)=""/178, 0xb2}, {&(0x7f0000002b80)=""/78, 0x4e}, {&(0x7f0000002c00)=""/86, 0x56}], 0x9, &(0x7f0000002d40)=""/112, 0x70}, 0x0, 0x2100, 0x1, {0x2}}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002e80), r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000004040)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004000)={&(0x7f0000002ec0)={0x113c, r9, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1028, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "bf881a90fc7bd6e32695e5b2547fd7cf31c2d2417c835af6483e2c422617eb1d4030ec9296b8458bead508326ea5be1b6e17c001ced3ae2ba1e54eff83826b12f1fab34a791cd859ba78f18d488c37344372fa4e09de3789299011201473eadad20c7a2bf2a7f6ec5d882c62630999aee13c3bb0dfe51829a7d78d34aee16f12823d28484ce428ddd0a09a1f33ab55f0e6380864821293846d41e1e6f405aa855785ce814cb0d13fef5956fb2a65045c01f007ff20fb410023b1faf827af3d1610fe24153fdb050570bb3cbecaffab7a26287d9e08dafa182b26b948ae6538571fbb1a81ebbfc868e02f103929df528703504708eaedb222ef89665284a1a4be6e61a4185ad419321159550d93dff5a7bcb3ef8fd14aff05efb574bc2d31ca3dbddbd0c8aad4057c449d5b9ece5f41f9e8655c1097a25a4213bba898512344644b401f8b4c1531a51a2cd1f37e01d6c5fa28bdc368dfd8157d7b77de6feeb6286714c4b6febdca2041b2f20ea59016943b812f354f16dfcefd5ea71e0e08d322105f250afbce8bdb19ac37d8830e3d25e9cf7abb1b809771690d91a29e04ce33dfd0134f423e3ee08be7c890239ebf7a5670f1c1e5c514ebe9ed73afe75c808524325015458b882ffbc655794e9e67a1e923a28a7a459568bb008e4ad21c64d9c7ea82334d639cf02f45a67141ce1731536da65fd7a0395ed94b6f91857189572c9a79e8305a0b4e8f498ebd89982e179bdc4168e239e51775042b6182511c35ed518aeaafce97a32bc674a1d6920fb1c3a3398e523eed818f438a90810bb8cb1340d1e92c8327d6c74b3d690c50d0285459c4431e9189eedcc0f58fd6d34e964d15b9ba3f3fc2ffaa622dcb5e47bee8eb3a56403959b4125f6df4182690ad57c52713c6ee95a1caa4059116c3cd24423ad161f4deaafa2dc068acbb5aef212e1f9d19f3d8f3da52ea5a9ada2ed53911a6da1e1c2e7ac767709c07dc040e789187d09be369dbb171741550d6b8800b62c260e32ffb5db52f0788fa035abeb0eade126cef6fa32265085620c1f5280d4a11cf4e0546e1e70931112b9b76eb546fb722eff310a8df29b82f479af689cd8b48349a99e3715a2e008941b56cc6af3e16bff28044e73f55d2b1c2f6602dcb435e6bef93c4a9e7c2c9e40f22070fe92e6cde24244d1ba7ceb19f7cb46fd492bc1b5b48bcd6dfa616602e9dc10ab10f3f89f8721f1738c49a4831ce886ecb7b0b493da48a053e45b1b41e1f5afc28857bc4bb0300143fd6f9afba0cc378688a96bc2238ab6849d8b5854d9ee33908316f83595cad09104f1459925b2abc31b41b57dd6082d2b10857cd61380ac8e5fea1266a901ddaf89a091a62abad6c1aa3b312b606ebf949aaafd01c345fdf8ca31cc1e86bdefe8738cedc3f607e1298e39ab958cd876f07158c739af8bec5c45bec1a241e914385c173f1faa14f393566aae0a9e3d5b82494c8162cdf2ef7770ff2bd984adf256ba155f555039054d3689962b94a6cc6d950fb5660fb9512c406922de19f3df660991607705650f11f403d9c133dfbc48779801920300225f92bbf5695437816e12d3560eeeb265a38c8aa1ccb605559fd4f399f739250d98b01685dd42753599ce1707829c0f5ed0cd9491efd4a553e02c1653c3a4a8ecf30349dd68e0b642e9020a000c3b6ab330a3085c9479c7b3e92fe2cd54e2132fd0bc701311098a0c295b0b3b9fa2d965186ceeadb7caaca778f0afa760f7bd13e1a7168db267cf5809b134eb56132f82d03cedded23dc4988f8b4f93788fbba6d33c70337d34ca67b4959ffe60d742794fed601c739404c0b0bed320ff9d6a65db2c7ed7b7b8c4cb06a9608de670398af02d9d252a0c8453cda9ba8def0595e4e04bd46abcfa8ba10e93f59527722f1bd200f18617ce6e61ede6acb27330bcc3b458ff85f8b074da4a4b032b061bb278bf38473f3f02f27ea71102dbea1a457ed0a77df6a0e4ba43c995322ea616af37da5ce5fd44d67ecfd405eab55874bc704d63b462742229770e6d07204b8eeba6261ec4ff81f4ae143d4a680ce9e85c05c4249ba7e3c67b4b3022d475da3d78ffd7917113fd69a9dde074764d2d9552abfd70192a6de7dbe0a4e88b9b483d3f43ac8b12e8b13d1e53e5851989c53446c005e73513749d0e559d80d0e8b92b2b8ec214f1ee098561e5783a126611f183c0d939ffc6b58571b44a6140894bba643c00066daa4816686955b19662412c6e224531e9bbabd7fc6cd75a977e83e6e6bf6329e779f795618c12675b2f34b35e7b6180d2a3c7f0d2a6bdf515cc5c9824502a2ef6fa14360bf72386dc75e8f90b29f9be6420c3dd054938bc70683c232f82b56a3da98b47b117e8d94a983e6f67db88438fb40738a5e4d9756661babd73de74513d75a653ee71fea66ea9335ba14b38e2143e53c9761c37109066eb9c4dff925ed6585de91c0b1033bccbbf0f3b11afee274e6662af33abf77c08e93ce433699202090f034bcc0ccb3c4f4ff12a2246e6687bc967800755ef9515c52fe787631e43d98d4c50e785804e35dadc5b0c3b423802e783818b407375b218eb66ac3db7d7b791523cfaa4ea08b18108de55e316941012077e622a9aacec7570bf3e6f2310cbf960708bf826fe0ffe3f9dc9fbd35d64beb20d1611a265cc06772cae68c19d4647dcc1935591161559c6fdff7ca8f6bea2e8f112908414b2e612840b5796d38e3d4830c2f2e34a5f6dd2081fce89c4fa9406f8bfbbde6e620a5d8b39dc89c99772759a83cb8627e9927781382763d736361b2e38bcf1d164c4e5d460838011434146382d3d39fc8a81211b2e970045774d183ce590426262e25e47157e95eb6c14d522833986acd48d95ad21972e04863b288a5a2913fb87de3ba740411be5fa60777bcd41cdfc7efe1135bbabfec627900887911a5a06287343dc229dbc56257c8161620fc6c0a3477b97641c56d245af6d42d1d3308550feb04c7ae0f5ff455d306b53f734146220cc30c52594368568f7b61e1cd91fb73b19be5feeedc166fa10a77550341877bd8a37f5d8689852dbc9810c04a61a61cfce02fe05da433ed50b4256c436f655ef4444c93d41527f6629b5182d9a51ce4644917b39b603cc9005830b2706fd931568d8eccaaf2d9198551c5888d1428471b6c7ab572e5deb6c321241bf9967ca6dc01fde2ee7a0d520468f60d9bd9238adb0b3c088d4a9c0cefe3025beeaeaa0c24a39df68fe49f2a4baca0bf8aff8678201741172d493bada29aa890087bd2ee38f76e022554a39b3e693b2dde234d81b4c10c80a82572410bc13a7c4c725b527be657c10c50acc982bc50d698bcfa9d02baf01062e5fe158fb395fad1f7fc54218d293515961c8bcdd37c1439c59e9921843a3e3796dc3c1b9ef3bae5b1eea838625f99216f0a8fa7babf7f8d5e62163242675adb01029b508b435f60d579b7a9e13e614a9fa5546437d6ce161137bd6ae82a3fc4e0d4befd6a5bd4f1b9a500dd41e8d5e872ab28e9d2ba4bd8cc2f40a421731ae57f5756e59e871e9aef6ac5b7fb644445decf0c46d54b2d5c44c5dece1cb6764f275de2d61198244241cf00ab5c0725a5ddf4dd7b7bdebf41d5cf4fe4d8406593295cc683f4e858220898aef0339ab855a1ad9d5f852677ad1fc7214c7f00a6043a89b7fec13c0ecda7cc609267ab7d85009943c5d91b3fa373a08037ec3d411fc211fa1caaefe9416504d4f7d5d462f0aa49b19d345527398975df0e96923af3743d23038aa798f300b57fad7c3ff92a9a0fddc594af995a483823e5fb8c3b5f84c7d3a5bedabbec9792dacfa8842cc8005cf96f7ea87667b6e465bb71904dc13ef5785a1a774a105d334381763b84832d36633a5f4b2865ec2d579cc33fd6b1ffe14d326128bd8c604707e4247ffaa36bac13eff65ed180400b66a5e7dcc2e979cb20c16c418e9dc2a3b9221baf8a8b771dbf7d289371ca5f253449c20fa385e1a6f436ac2d4e2e1a0725dd72a4eb586c42e118497c766c4a50b41b6be90c9d335870be84a01f0e29c5a4234961ef20128d8d1ff5ced8e8f032a76bce7038c7220c8926c73509ed4d7fc524d4e3cd25bfec5da6bc697ae8c8de24ec39ed02ac2c57eb4b46c45ea30b78aed77c99b78f97107c8c3eb886bc41826940b9fde71f9cdc1b9eff11fc0bb59bb3093dbd988b0b4d498ff6947377e6349594bfb8e711c615ebac05787a6e640a05f2e5a6a5e4ddc9c24bd62eb00faef654c7bbb4721a606952012e1931d9539566b9fc5d6046bb8e8807f1e0b51cef767a4a4b7e5bfca606fc9e3355bfa7faf7b548e34926628fcd3058983a58a0d4800da24d5a746b5f361b2ad8fc852a6f5f03763297f815310a90c6f1f7051a5d5bab47518d8a6aafc228809f681665d70f08b07fb02eeb6d409e450ab2fd64d30793c0d9bfb1167ef4649fb81a1119b8f1dd0373f41515bb008804058676dfbc9d649d643a76f6828570528e148b838176ce5886f242a359c9b77071bd727d6b2dc42dd8239df2184e0f3dc94c852d88a215d1ec3683e7b9e0a2f4b93eb46fac36d2a0477edd5b9d0569f37fdfd6d87cbb2c6a6922a9925a77b320022cb103e444199c84209a192201cd4df36f21b1c42ea4d106b5df0d2a3d2fe7b1c7737a11767a614537bce50d8f3447e2adcc4cafc94622cf77475b58a0757b47aabc758b5fb326d8310a655707284acfe24bb5d4170183ddd1dda1a1c3707b7601627258c6fcc6b50948f7f67e3cf1eeaf836662653fd0c64b31f517c3b21ede71e857713db4ef8d4199a8b68d010a87984fc0078d2aae70644b29343e718c3329e4703eed3ba0121779f7bcb036343153b591e6e27ad7425092e238639dbace0581d6d435913a42938f75fcca883c1191cc9c420f500d8ec743af7fa66e040ca135765f2f0ee44125fea5f442076a29c22c01ee715aa78314a49c47fbac265df9c89eb6a1a766576cced5e946c3f9e560cfbd7c921b96353cb0312a9e8d0b05792c63342e6f5dcfeed47ce945db2ef8add32915c580b71fdec3c832561e2bdc5524b381445e06dbb6890e70434d7bf3c1182080915299cd7d16e82f1a53ff7880f1faac29dfbc384fec3d0bf4c59e94a8dbb507be80f823164f04867f852ed1a4cb72dcddaf8b4f2147d7fb1462e5739e18e24f26869838b3a32875e6e59945df382440152f7709e4cfaa5f50684a89b85454d041636d370b2daa014c77282c376e12ed9229cb64ccbb42a561e43d22e56a59e5dce611ea717efcb69a1092ee0ff59fa4d6d02acd40dec1a3e345261e1dbaed673c3381d8573bbaa57d460cf1a0a2e99e520ebfe1fa0a2621b84d3a3be97d491585f92d58990f289ea1b635b757dd3aeb40bff3b9d32ec98039dc56588aa7b40549ff5b9452d68e5c8b3a946dac1c7f5fe865c736fc3960ce9c4a9e0bb22ea16fadafc7288448e48524634fa7a5c5fd64992ed7b9689738e9fc67476f9a32b62951fae671175c167b3adb76660822ed2c8220c530e0fb5d93bbc668db9ef17a3c23ff7f02967c9f78718faa8f3013a442034d5eca4319fb309e30b57c91950c3b41990c49e785716ecfcbdf4beb2bac1bcc081976800323293e3e66d7af9ed1782c62f01695c1d2055780c3af0a3cdb969acc73538419348ab8a5972b3ecffd2dce85408e186912ff1570784f038df8dba2dd4699514ef76adcb27860a63288cb1829510f74dd438abf721b3fbdbf517fa6bf3bc0e70f0cf227ddc8c683f3204a3b4e4ebbfd82ad6fee"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x112763af}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80000001}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @remote, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8000, @mcast2, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @private0, 0x9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb97}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6fc, @mcast1, 0xda}}}}]}]}, 0x113c}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) openat$nullb(0xffffffffffffff9c, &(0x7f0000004080), 0x68002, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r7, 0x40049421, 0x2) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004100), r7) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000004240)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004200)={&(0x7f0000004140)={0xb0, r10, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfe}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x42}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r11 = accept(r0, 0x0, &(0x7f0000004280)) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r12, &(0x7f0000004400)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000043c0)={&(0x7f0000004300)={0x90, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40090}, 0x2000a084) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000004480), r11) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000004540)={&(0x7f0000004440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004500)={&(0x7f00000044c0)={0x24, r13, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000004580)='+(\x00', &(0x7f00000045c0)='fsmagic', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000004600)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r14, &(0x7f0000004640)=@name={0x1e, 0x2, 0x3, {{0x40}, 0x3}}, 0x10) ioctl$SIOCGSTAMP(r14, 0x8906, &(0x7f0000004680)) setxattr$incfs_id(&(0x7f00000046c0)='./file0\x00', &(0x7f0000004700), &(0x7f0000004740)={'0000000000000000000000000000000', 0x32}, 0x20, 0x0) writev(r15, &(0x7f00000059c0)=[{&(0x7f0000004780)="8d36fee20d3c201d9f16d96bb1867df0043152bed8f583ab47fec2f23730a459ace0f6f8447fed428617828b6cd13ee20a950fc62d01deee6005e23d2c25d51c1e63c1ecc38d4b5b1ae85db8178e29c0af21af192b36073181edcbf78bcd842ed83ac460bee3d7bbbd667e103b06750fdaf87ae654454570e47bb3703224f8eb44424e9c1067ff01be77865877cbfa36e23c07e0be57d745704a40f5b882dc049eb51fb90c06", 0xa6}, {&(0x7f0000004840)="812b2128593e6f47e1bc572b1b27eda1ca04df79c57be35a68904377a41a2b453b4ef0581df42b22e103257f3590dbd103ebb9a7f443b0be8a28b8", 0x3b}, {&(0x7f0000004880)="72e41e2575631c838581f63421c06bd3aada3aa4e5df2cba4d973b37be42e034fb", 0x21}, {&(0x7f00000048c0)="62d708441e9b4986657e1a679923f3c7297ed13828345dc500ba61c521db2db7b2944069401e99d8652d5a5d12b85e2bf830c19939257bc45b7178b0e03fabd940ed1eb47b05e30a92d09cc0c1f165a10e548abeba84bbac224d6294cfb1410a01e817196cbc807b93690c26d19274e27db8323b8adde7935cadce340f75cd310d48fe5105c08e44bb79092f88df0564033a23e7f4b456b110838383419d4ebfc8fd1b4dd260", 0xa6}, {&(0x7f0000004980)="5fc655f3db001c67558d5fcd3f19684c123a0b9675eee4e36c4dc10f36d9195994d1a849239fcdeb747c340dbe966fccad49a991dbd4de404986c47bc206f9df82793f2df23715e6848bb87fe589ae260555850859cf8edbdd7aab938e39828f5b872b4b69a0a0e931d17f85e33a1b7bfa80e03cbe692b3e1f95aab7aa34d9f2a4d151b14ea4d29734ec5dffe195023918790640d0e984deb8ee864738626e3f071b3dd0c577f667d846c441b103c617cef1ba60d7cad05295d17bc3ebd7798418d10ddbcd733341318c71c64db279c013564face815ff4f4ef715451fecaec05d8cbd9414580a5e331e1a6f68817a0748c5654a703cbd7b9263e39716646fdd478ab4042e69454a968149250d253a7d523782135a5911586dcb9c39c5b900bc9157aaef12285f170864380651847529c193d267c1aaf745b76fb3174ac6762d24858f19db1bca97c2258a6330e1c005e5f98f7bae1e583d3fc2faff61a1e0da422d4327d35dae07a1595d05fb1e7dfa3476b27087b890f80726fca167e75f9ab18b5cb23fa922d33262466942d3eca585c64436d0741936b3b872dff516b6c2a4ec23e07a75ce630a723b1e837021b1203c178ad56cd9ce6f1d64608a38684432358ade539ff34f23cdfab020b1d734e6def3e8098526c8829acc905f2617a61a7069070b140d3010e7303ac0e34820390e6cfd3fee99f77ce7991f5372144ba3098656af114b1205501e6853c287bd3fdc596645396a2d62b0ee05a689b9a38a780815873dd7ca8aa85579215915ad8bc66720bd4436a715596af994953fef33f01bb16d25ad31689e64676efcd6f9b1a7c62d689ae4c7b210f8eb3def5020cc3aed6a7ccb85aeca9f903a19c9edf2144dc3b815b7411b54626893df147811cbddc0d51055a305753c33bb38d7b30de45a1c37871ee96b59f7de09703bb26f1fc5f3376de55b9ec26b385768a43dbc182af57caf0851acddb505ca5806007d384b87812b75550a9feea2489aa5b463c5137248477fdd13e4ce85a4e4faa47c06388f428ddc1c5bb5e09aae26625f301f20b039f18ff2c61e972f699d2f234f3b76df32743655713d41294b22198ae23d5d695e218064e0e381130a3fcd469f8f4cb827da797b9bbad4763bb72049ccf9d925f12a868c25c19fee7465d0197339485a7c78c7a269c630c9d37a0f9d88b4983a8cee2ba13f954b357accded91e8466acf596aee57a49fc360610776ca2574f4d47c48d23f37967d956f419857e4abf3dd6e174cf49808d68b918553e39a59e458180079a5a7428547e81af05d7927474f75251b6ac91e45a0eea30419769ae40a255c6239b61bd6b99f9497e7fe95b51c8da5e0ff2053bbb01e9d50034f3ebbc0f39bb6e5d319c900a2ffa4065ee22c5b2f2695210762a38c777d19f29424a6e5fb7a613cf1427bf8fc5dd25041c43012bafbff2fd385ab5b3dabee0448c5201b49e4d05c58ea2a1b3848b5ebd18c73bbcfd15cf88adde3134bb16012d7d8335c1ac0141fd368765d561cfc6633c62e1300538b79d0df1daaf58aef05282a6459a6a11bf1f51604f1d458e5b40923aefea9e393da690b4b4893c539c18faddccf12e01dc482a3701dc8fc91bf61b5f64d5849b57ae9bcfe0fbaf0ac71144b2dffa1a171ce4a3ea87fd4f5744712ac150b2a72d3903f8d890c27a58a9b67e58a1dd92371969bd89cf98fd3b500dd25619bc6dda74ed3af1f78463e63c93ccad1467801c7964556dcf9b1662e7cc12b4c1cc64dcc1e3996557c9e1e20725c00b594dd0dcd4ab085433a8022941beef3581dc441244d53b4d7f283302993d2f11bfb133006bd0b33e250db9da3b199013d32d2af458a4b431eb3c5938ef24d08b10823cdb29b3573382162e609307650cc5c29ec85cf6ddd0358b38c100e684ed9cd2bff8fed5343d5b78de7cfe2cc961d9b9d1c083fd617aac7236d071989efb99106a02192128a4bef35683f32b65b205a76ba99d961ca073b9fdd89615cf40518f5b11c1194e8a4446cbc97e01599f2e58c1bc81e2156cbd010dede0f80a654d3fde486dcf4f2e525ca054762d1d2a4e388b78b16265f390e0106adea85d209edd4a91cdee551347ec9ee86586520a83f5db4f65faf2be27e7f0559c8c6b573541d4ff36360bede3d879e6ba99993403ac9e8789658f62631ed844c1aa6d2fd8d6a267ada692a6e77871b282839980d99a0f43f3700b6e3f0fe3b90f2f044c230ce998528940453c1a369a9ede46963d02eb8eeb9fde8ffafae7ce8ad552d36c7d69b198711e9d60fb685dc51c2986184c92b2f53630eaf03537bfc08a7fcb167807d786129f022d30fd958d8a5fdab897253a8bc7ff59d87a0a57b071ae9b74b1a8aca7d41d8176d589c33cd278b17057c713aece0a29399cf4bc1b00a79f3a996980dcd24364890390682e7233f950ec781ceffe8303b78faf3d6c710bea1c7d3a67c0db9a67d01faa2b60f908c2f62278a14069bd350ef7f665f9aa3932049d0cf83408e579bc773f34c6c64dbb0add6f0d032f0e9bb05d30229d38f23b1196e3b8f146ef5ffa615a2952940086ec45b01755e8978a2a4a5fad454f30ade75ab689a848dddb0a5671cb8521e3c51988e9aa7cebee970f1dfd3ebf5ee9a0e30edfc03af3f41237fd24288d790bd4b0b08fae86d3be9ec593fe029bf42ee9374b4cfd82a87555f7a91072d8509e53f8406c5f7b3b448a3f8769ecba5d15705cf4724feee2fa826f07da9e5f157e745e127905a384a4530dae9689aac0bf15832f4fc6e8e20c66a11819f3e9e56281590c5aed7d3d4cefd6c0d30201cc6ecd09baef923d17a241f70d12a368d22410918826d7fddd7c0d21cdf7404130395951523439ba8ef3017cdac07466534a688ac65a8edb4975a37bc9641f2dd12c9bfae825dddd525d61f851b1a750ba6341749d0e951b56397f400bcb38d2afb59f6337d77e06abfbdf76c933c5339759b3a3c3a91c839a0705c2faab0d57f0781907ed871fe087d9d16f8804b7d85993ed4c81956826ca5658301041e5d3faa9e4aa52183c54197aa6163646808535750884468f406e8e17b565db621fa2dc9dc160e1d9bfe8bc8180a5762107cb00f3537348835deecc71f57c57d56474b1e9eaf1c7c31276c222054f760c5ca6d346d76115e244fc19ccfc9cd9d7da7d68b178f960e3e0ff1d407a1fd456618d61a627642ff47a593d707abc0265c214176d98c23935cdab1b5ef3e2ab913312b9e1aab01965e208c5b82d9e7197dc740ef38401f44636601eaeffa60b32929261ca7c87730414db605615f1a78e1e185ca480beae04ce71b5be099fea362b32da71abc1dcd917e7c4e00ad66c2e2c6f6dc95d51b0bbde256913c37c012f72d4a5ac82f676fb8a4eef238a2fa0aaa1f0ca95a583303a86ae162951b98a3a937ad38096295b6a6e24eca3a4f076e38bd0b6e25d623bd037894c69210bd6a6e84186a2b649498c55abd753909ea3b4e166b4a1d7615209bd50e3dea8f2a08062dd8086999b80764ae53560e7994d79a751d5bd7e23ad1364ec726fc4a5ac4bb02a1bbcaab866c05f1c44a8800288c110bfa3d1031bd67ee25c54c0e08296a0c4d8928bccab3b3ed852506f6ca179353bf4d2ce64d9ffdf4ec4142c5a46b86480c1d6904c915be1c474ad0e85bf7a0e335e002ed4377605422b7da24d23034bf6f13c6d3508e58602acedc3e0d7962a775b6b33c3fdf51694a6dbc65de596e19580b9d55323ab3e97279a0c8e8ce0215c430041a76b1b53d8ddac501bdbe147fb5b540c094291c555dde796695c84c30c423072e4cd01d9701920cb196e233b1722296a86210c5754d190512c1bb7e4fed9baa0aaa3d1696cdd84a8c318a35a8c3bf9a2ed58f7ba3087a73b0fb83386535c876430ecb4bdca635fdb771ddfceffddc7dd41c5b3ee81f30427d4a007ccee8cc7dc1c8c9125a81b9dc54df624908c10b2f6444c9f336dafcd493c3857fb1476c27c7d936e4eb59b7455bee2aed5dc0f3baa2f79bc44dc679111c8331d92e1e9734f89ad743ce1e2b5282e5916db9c94052792042bf15f7f9cf85e4f88c65f0e5fd52f6f3db3311d0ae0a58b68ca3d313d15e4dc63d81f5a5e0864cf7c7256a4733ed6486ae29eb5d699b29abf72b3be0d7dc91b70302f3933c242c36a005f5700d4cab84760370b9cf1355393b0f5e6b4db34c0a618c134fa2ba2869c50aa84ec87bb36dcea7cbde553cd2e4b29b9a4863d96209e5cb85b000fd863c3444b57d19f251e937e6846b1f8f599f2c70127dd1d8d8c5622e2b70704cbed016a9eb5bf24407c95ea77ce5c2532aa46f00d742f7e266618e6d0806f2d63f0aa05f641b1895796555c84518d753cddb8bad994fc5c17fe0ab934ebfb5cee0b5b5626b1cdb9cddd8d20314ed656b6747fcdbcfda61d07f06dd458268a352ab71b269b3f66094369830e4db33f7d7af5f04d9ff1992b806bae1605828c77821ec1a4be0fffa1efe4bbb19d3486b94e1d34fd342d34c0cf32292f564cc45b592da9f2d1b4ede2b44020b25cacdb80e5450e61f19cc436ddaf3e490c25ce7dc9cb7e0a0b601a77d92ad63abf9cfa5810386732d0645940ab6674741217c974e0ae50a76dbae52da8b274773964ac1ceab9abbea09f63dae2b7e4e95b50dc1a54795cff0a319ac1ea8e66c73c03822173ef29188cc81f46454cd4eabc07208941ea8f44c9c715d921f8cf84c355283246064b3641f0e39fe24f5185e32c8d9d2e70640b1760f82d49cbbbd51d93c6727acdda5a33ed8e0e7e81cb0e133575aaf6be406d5a84dac3a9981516eff6ebd72b4e47a8374d35aa55e29df0be1afd7cb5d2f004c3626d16bfefb963b17ad74b5a30f49db3f9b92f1bac2997182e454eec6caf15e6a77cbe6e446f0b110c74f2b46f094587d6dc80e6e0317f32f8a53ad06d0c6d6f5072f3a51a627067170574083195bb3c4976fe543c03f5941da55f278dabbdd644a230881648132ae8b17c0e9f2004667b37ae4818e3a4b06d27eee055b90b16a1742d9329181bf4f842116ee72951e5bf0dcf8290a728fb372f24a7103fd39d7950da7c223751a7a25beeb88c1448e84f05abfac05488e0c46401960a4b968e128f08be76cdb9cc9424823621376533f47d86ba9fee9e8c249892607b377910f312ce8b146b42dd705ba8553cae4ee28a020029c17fe6965e244ec8d5543de9e8d78d41ab3f21424c90395a6d8cc999c0be8514c9a9ed4eadd6c657b5871a4e80b2870ca8cc5ae5ef84fbc36c3a6c138cc583aedc18c8319b419ea9d096a484eddf20e969ef7e337275202fc1bbac5f087bf35f533168f2f48f8892cad554ca3bea66e310eea0291bd7f47c5b8ae0ea0b057163b1459f5fee430ba9b891f2b8535debef69ca3f518cee0c34eeb6aba8dad751ddd1732540c2750bddedf235b2ff37e7f958cb66c4f690405d0f421038f7b9fb41f196496871163b9c08348102ce7dad5e6f378eed8ce14fba42c8ec36f1ed72c0a25f290aa8af79fc93204196cdb6681521672ba20e450c818994c4412f39581b60fe284afdfa9c92e4817716f76424f9f946433bbf916a55130c952ecd88badc9331224dcfe9bfa9be79a42a92ee0750d09ec681151f50943110ba08dd8f3108d8b7e0905b997ab904da95f1ed4f6f1cc3f207be1c736cedf078cdf2ba983503865aad9931ee2bf220c67e0ecc1f3ae318b7e2e3ca40e9b98667894d846b06120ca706ce6e69c4612c71718866c973b6d3bd57abd3e0f87bb2fd19c995d3", 0x1000}, {&(0x7f0000005980)="e9fd37f6c6be7a415c25fb1ace7c6c4041db3d46367e3d73a82e7e29fe8b24fc", 0x20}], 0x6) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000005a40)) 12m35.76042288s ago: executing program 6 (id=4206): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xfffffffe) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) ioctl$TIOCGPTPEER(r3, 0x5441, 0x80) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000180)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x3e, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffff4328bbbbbbbb86dd6012100c00083a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa80009078fffc0000"], 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0xca58c30f81b6079f}) 12m34.66535238s ago: executing program 6 (id=4209): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) r2 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r4 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001280)={r3, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e444000000200000000000000000000000fbf3fb7000", [0xe0]}}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r2) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r5) (async) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io$hid(r6, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x2) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0xfea7) (async) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) fremovexattr(r8, &(0x7f0000000180)=@known='security.apparmor\x00') (async) r9 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r9, 0xc00c4809, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xd73, 0x2080, 0xfffffffd, 0x283}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='bond0\x00'}) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) unshare(0x20000400) (async) syz_io_uring_submit(r10, r11, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2}) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0) 12m32.873345497s ago: executing program 6 (id=4213): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x45230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) 12m32.232300901s ago: executing program 6 (id=4215): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="90010000305204009c0012800e000100626f6e640000160000000000"], 0x3c}}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) sync_file_range(r1, 0x0, 0x5, 0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_io_uring_setup(0x497, &(0x7f0000000340)={0x0, 0xf62c, 0x800, 0x3, 0x30c}, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000180)=0xffff0018) ioctl$SOUND_PCM_READ_CHANNELS(r7, 0x80045006, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) close(0x3) close(r2) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000480)="e2b76c12f09a8e33f1f8897f61b68fdaee45997c4acb236723b977b11d5a7aa906fb2bc5a3611e7430674674878c802025606a238a417477e7a00a684bc62aa83aa4787a1d7bc5d2aeabd544cb4b7ae2adcbb079b5ce6b4bd42d433e1bf923e401525ca8faa5aa09672484bb24635b5113141ac4e89b4daad9fc0f750ba90c2c311cbf3486c81e28", 0x88, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) 12m16.550838046s ago: executing program 35 (id=4215): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="90010000305204009c0012800e000100626f6e640000160000000000"], 0x3c}}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) sync_file_range(r1, 0x0, 0x5, 0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_io_uring_setup(0x497, &(0x7f0000000340)={0x0, 0xf62c, 0x800, 0x3, 0x30c}, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000180)=0xffff0018) ioctl$SOUND_PCM_READ_CHANNELS(r7, 0x80045006, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) close(0x3) close(r2) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000480)="e2b76c12f09a8e33f1f8897f61b68fdaee45997c4acb236723b977b11d5a7aa906fb2bc5a3611e7430674674878c802025606a238a417477e7a00a684bc62aa83aa4787a1d7bc5d2aeabd544cb4b7ae2adcbb079b5ce6b4bd42d433e1bf923e401525ca8faa5aa09672484bb24635b5113141ac4e89b4daad9fc0f750ba90c2c311cbf3486c81e28", 0x88, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) 10.910882839s ago: executing program 0 (id=6454): unshare(0x2a020400) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000140)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00efff00000000000000003b00000000000000000200", "90be8b1c5512406c7f000000155cc30cf11d0bc000", [0x4, 0x7]}}) 9.38031849s ago: executing program 0 (id=6456): connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000000100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201"], 0x0) 7.788721344s ago: executing program 8 (id=6464): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f1"], 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f00000001c0)) (async) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f00000001c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) (async) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) sendmmsg$inet(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012) (async) sendmmsg$inet(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000840)={[0x3]}, 0x8, 0x80000) r3 = syz_io_uring_setup(0x100186, &(0x7f0000000080)={0x0, 0xd495, 0x13100, 0x0, 0x1, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup(r7) setsockopt$inet_int(r8, 0x0, 0x3, 0x0, 0x0) getpeername(r6, 0x0, &(0x7f0000000100)) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, &(0x7f0000000100)="440f20c03507000000440f20d835080000000f22d8640f019cdc92000000ea0f0000001300c4e2a58c34b10f20e035000002000f22e066f390c4c1f97f31b9c9020000b8f67f00000f30c4c2059aaaf9ffffff66660f38220d00000000", 0x5d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0xe091}}) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0xe091}}) io_uring_enter(r3, 0x2def, 0x9566, 0x0, 0x0, 0x0) (async) io_uring_enter(r3, 0x2def, 0x9566, 0x0, 0x0, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000240)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r12 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) readv(r12, &(0x7f0000000100)=[{&(0x7f0000000080)=""/60, 0x3c}], 0x1) (async) readv(r12, &(0x7f0000000100)=[{&(0x7f0000000080)=""/60, 0x3c}], 0x1) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x31, 0xdd, 0x5, 0x8000}, {0x8, 0x1, 0x1, 0x9}]}) 7.698914767s ago: executing program 0 (id=6465): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x40042, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r4 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r7, 0x80085504, &(0x7f0000000080)={0x0, 0x7ff}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000000)=0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001700)={0x124, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x90, 0x8, 0x0, 0x1, [{0x4}, {0x14, 0x300, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x10, 0x9, 0x0, 0x1, [{0x4}, {0x4}, {0x4}]}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "181f7ef86ab2ad34833d0e09df81f5c8cf2e9e9443a1dedf7f199de77bdbb66c"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast1}}]}, {0x4}, {0x4}, {0x4}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 7.172208169s ago: executing program 8 (id=6466): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00a1ff10000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 6.321871638s ago: executing program 5 (id=6468): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x98, 0x0, 0x0, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8, 0x11}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) connect$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2245, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x40}, 0x94) unshare(0x8040480) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f0000000140)={0x6, 0x3}) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) fsopen(&(0x7f0000000080)='qnx4\x00', 0x1) io_setup(0x3ff, &(0x7f0000000500)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000002280)={r5, 0x0, 0x0, 0x4}, 0x20) fstat(0xffffffffffffffff, &(0x7f0000001180)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = socket(0x9, 0x3, 0x1) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000020, 0x0, 0x40000000}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r6], 0x30}}, 0x0) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x80000}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 6.120022637s ago: executing program 8 (id=6469): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=']) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x80842) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) read$FUSE(r0, &(0x7f000000cdc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r7 = fsopen(&(0x7f0000000140)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r9, 0xd01c4813, &(0x7f0000000240)={0x2, 0xffffffff, 0xed0, 0x2, 0x9, 0x42}) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r5}, 0x10) lstat(0x0, 0x0) fstat(r2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000009140)="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", 0x2000, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x78, 0x0, 0xfffffffffffffff9, {0xb, 0x4, 0x0, {0x6, 0x100, 0x80, 0x4, 0x9, 0x0, 0xb, 0x0, 0x7fffffff, 0x4000, 0x7, r6, r4, 0x9, 0x100}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r10, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8, 0x80}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40045) 5.967055637s ago: executing program 0 (id=6470): socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x2, 0x0, 0x0, 0xb49, 0x9, 0x401, 0x7d3d, 0x3}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r0, &(0x7f00000001c0), &(0x7f0000000200)=@v3={0x3000000, [{0x10, 0x10000}, {0x7fff, 0x3}]}, 0x18, 0x2) r3 = syz_open_dev$usbmon(0x0, 0x4, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:,:/', 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r5, 0x40045431, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r6, 0x1, 0xea, 0x25dfdbfd, {{}, {0x0, 0x3}, {0x14, 0x19, {0xffea}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x0) epoll_create(0x9) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40202, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r9, 0x40045010, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETTRIGGER(r9, 0x40045010, &(0x7f00000004c0)=0x4) close_range(r8, 0xffffffffffffffff, 0x0) 5.448986844s ago: executing program 3 (id=6474): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x1800) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) socket$can_bcm(0x1d, 0x2, 0x2) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x1, {}, {0x0, 0xea60}, {0x0, 0x0, 0x1, 0x1}, 0x1, @canfd={{}, 0x24, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x60084}, 0x4008804) sendmsg$can_bcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0400000061c1c4d752d0d2020e00000000000000004dce", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000040010000000000000000000000645b5d48da6811cd874f3c107bd10bc8831026d4072dd2c54bd79f35321619c67d39e5f49bae641ed1511200"/80], 0x80}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) (async) sendmsg$can_bcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0400000061c1c4d752d0d2020e00000000000000004dce", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000040010000000000000000000000645b5d48da6811cd874f3c107bd10bc8831026d4072dd2c54bd79f35321619c67d39e5f49bae641ed1511200"/80], 0x80}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) (async) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x20, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050019000000ef701218000000000000000000000000000000000000000200"], 0x0, 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x2}, 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x20, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050019000000ef701218000000000000000000000000000000000000000200"], 0x0, 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x2}, 0x8}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) mremap(&(0x7f0000de1000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000f70000/0x2000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) (async) socket(0x40000000015, 0x5, 0x0) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) fchdir(r6) (async) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x14083, 0x1c7) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) (async) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xff, 0x1c}, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 5.108024564s ago: executing program 5 (id=6475): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) unshare(0x2a020400) (async) ppoll(0x0, 0x0, &(0x7f0000000140)={0x7fffffffffffffff}, 0x0, 0x4a) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 64) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000000280)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) (async) r4 = openat(0xffffffffffffff9c, 0x0, 0x2442, 0x20) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x8000) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, 0x0) fcntl$setlease(r4, 0x400, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendto$inet6(r6, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x7, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) (async) openat$cgroup_netprio_ifpriomap(r4, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r7 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) r8 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) (rerun: 64) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r8, 0xc1105511, &(0x7f00000003c0)={{0x7, 0x0, 0x3, 0x1, 'syz0\x00', 0x9}, 0x3, 0x30, 0x1, 0x0, 0x0, 0x7fff, 'syz0\x00', 0x0}) (async) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000140)={0x6, 0x0, &(0x7f0000000100)=[r7, r7, r7]}, 0x3) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) 4.777981603s ago: executing program 7 (id=6477): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000c00)=0x2) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000480)="c38b", 0x2}], 0x1}}], 0x1, 0x9200000000000000) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x4, 0x0, &(0x7f0000000040)="92de4a4d"}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) memfd_create(&(0x7f00000004c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00My0:\xc3\xad&\xbe\xa4\xd8\x9b\x96@r\x8c\xdc\xc0/j\x8f\x01(p\xbf\x9f\x8c=Q\x06\xa2\x99\xb7\x03?\xebX\xa6\x9d\x8e\xee\x16\xb7Zg\x87\xa3\x93mrEn\xda\xb7\xa1I#\x9eT\xab;\x16\x86\xed[\f\xf2P\x06\x8cjL\x12_0$ \x97)\xaf\x9b3\x06A\xa6A\xca\xd7\xcd\x02R\x8d\xe7\xcd\xee\x96\xac\x16\x0f\x1a\xfc\xca\x15\xf6`V\xa7\xe2R\x9e\xe3\xb4:\xadr\xd1>>*\xac\xabHt\xe3\xbf', 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r7, 0x0) r8 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000002ec0)='./binderfs/binder-control\x00', 0x2, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r9, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x4000010, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close(0x3) ioctl$BINDER_CTL_ADD(r8, 0xc1086201, &(0x7f0000002f00)={'binder1\x00'}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002100df4c2abd700000000000020010000000000100000000140011006e657464657673696d30000000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x240000ef}, 0x0) 4.496326197s ago: executing program 7 (id=6478): unshare(0x24020400) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) syncfs(r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') write$P9_RREAD(r1, &(0x7f0000000100)={0x30, 0x75, 0x1, {0x25, "62b43d2b1b4c6d1b33bb2329501da6ae71603296cfe3772a00a2681c195e1885e2ababaebf"}}, 0x30) read$FUSE(r1, 0x0, 0x0) unshare(0x24020400) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) syncfs(r0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') (async) write$P9_RREAD(r1, &(0x7f0000000100)={0x30, 0x75, 0x1, {0x25, "62b43d2b1b4c6d1b33bb2329501da6ae71603296cfe3772a00a2681c195e1885e2ababaebf"}}, 0x30) (async) read$FUSE(r1, 0x0, 0x0) (async) 4.371419207s ago: executing program 3 (id=6479): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00efff10000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 4.326501892s ago: executing program 7 (id=6480): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x40042, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r4 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r7, 0x80085504, &(0x7f0000000080)={0x0, 0x7ff}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000000)=0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001700)={0x124, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x90, 0x8, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x10, 0x9, 0x0, 0x1, [{0x4, 0x300}, {0x4}, {0x4}]}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "181f7ef86ab2ad34833d0e09df81f5c8cf2e9e9443a1dedf7f199de77bdbb66c"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast1}}]}, {0x4}, {0x4}, {0x4}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 4.167918535s ago: executing program 5 (id=6481): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x446982, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x2, 0xfffffffd, 0x24e}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0xc0, &(0x7f0000000080)=0xffffdffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x20, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r9, 0x0, 0x0, 0x10100, 0x0, 0x0) shutdown(r9, 0x0) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x4c}}, 0x40000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r7, 0x0, 0x0, 0x80000) sendmsg$alg(r10, 0x0, 0x8000000) recvmsg$can_raw(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/90, 0x5a}], 0x1}, 0x40010022) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={'dummy0\x00', 0x12f}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4.165792023s ago: executing program 0 (id=6482): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000000000008500000018000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x40) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c460104028dbe05000000000000020006000400000019000000380000005e020000"], 0x58) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000001400)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x0) close(r3) accept4$unix(r3, &(0x7f0000000100), 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_usb_connect$uac1(0x69a90eab3db9c902, 0xa5, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x4, 0xa0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff7, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x1, 0x3, 0xb}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x82, 0x4, 0x9, 0x10}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x1, 0xc, 0x3, "83b266", "a2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xff, 0xc8, 0x3, {0x7, 0x25, 0x1, 0x0, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x1, 0x8, 0x1, "3a3882"}, @as_header={0x7, 0x24, 0x1, 0x1, 0xc0, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x50, 0x5, 0x8, 0x41, {0x7, 0x25, 0x1, 0x82, 0xfe, 0x7}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 3.099917256s ago: executing program 3 (id=6483): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0xd0, 0x61, 0x52, 0x64, 0x10, 0x403, 0x6010, 0xffab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x54, 0x40, 0xc3, [{{0x9, 0x4, 0x3f, 0x8, 0x0, 0x84, 0x72, 0x59, 0x7}}]}}]}}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x7fffffff, 0x1}, 0xc) syz_emit_ethernet(0x82, &(0x7f0000000740)={@broadcast, @random='\x00\x00B\f\x00', @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @mcast2, [@hopopts={0x11}, @dstopts={0x32, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000440)={'wlan0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x3, "712a47568b2c402e2c5792b5adbbb82e0c1f8ee15ff7a4373a68eb060d768899", "4a3eb3768515948dfab2e1f39f58465d11fafea228a4086797ceab4b73313c93", "2a9b70e21ec29d05eb89d11e2ed69c5ab4272fac74fcaab9925fabaa303bac61", "38e51009894cae17d2b361d9fedae469737f49b6a39d85a1ca87cbbb9b8e4809", "f16f995bdf5e1d0f32a39b81f061d8cf37f3a57c678b2356afda00", "87e20d1a690faf456b2d5369", 0x7afc, 0x3, 0x4, 0x6fa, 0x7ff}}) r2 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r2, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x4, 0x0, {0x0, 0x3}}, 0x80, 0x0}}], 0x2, 0xea) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={r4}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r4, 0x8, 0xfffc, 0x8000, 0x9, 0x6}, &(0x7f00000002c0)=0x14) r5 = socket$isdn(0x22, 0x2, 0x11) r6 = socket$isdn(0x22, 0x2, 0x26) dup3(r5, r6, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000080)={0x1, 0x0, @pic={0x3, 0x2, 0x7, 0xb, 0x6, 0xf3, 0x9, 0xfa, 0x6, 0x7, 0x0, 0x3, 0x7, 0x30, 0x8, 0x8}}) 2.948011175s ago: executing program 8 (id=6484): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') prctl$PR_SET_IO_FLUSHER(0x34, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000300)={0x6, 0x0, [{0x890, 0x0, 0x2}, {0x9ab, 0x0, 0x1}, {0x313, 0x0, 0x7}, {0xa16, 0x0, 0xe4f5}, {0xb16, 0x0, 0xfffffffffffffffb}, {0x4fd, 0x0, 0xfffffffffffffffb}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newtaction={0x274, 0x1e, 0x109, 0x100, 0x0, {}, [{0x140, 0x1, [@m_ctinfo={0x90, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0x64, 0x6, "0bc408e4219bf6823f1b2fa51f5db228cd1d0ed0fd90f572632d4f4351a96b89fa261b46a121e28acbf8d7337a88a5d70e296d0dd8f82da5ec4a702068ab96c075f39365fc28af90f4ecaeb5b4c7b140206bee61483439c84113841a2d6c9f86"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0xac, 0x20, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x80000000}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @TCA_IFE_TYPE={0x6, 0x5, 0xffff}]}, {0x50, 0x6, "35026dd8fc7fcd97acd1f806de68c98b06d9539c66619cafe2c0c542579e547558cd697e12e6371dc21ec0c23b529d0d7a16f2956c7d618bba458a1c30a2e86f3ded4506de7ea6c499c407ed"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}, {0x120, 0x1, [@m_connmark={0x11c, 0x17, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x200, 0x1, 0x7, 0x5}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200000, 0x2, 0x4, 0x100, 0x9}, 0x4}}]}, {0xb4, 0x6, "9c0663ab5c836e1391f89043030182ba65173e9c449b97cc9460faae360d3464a0730fa96d0f7deb5f720ad4e2c5c34964fe0c24072db789abfe8e47d727bf6cc31e79d43a060515f2fde0f701e3ab6b917c09ea5fe4620344de417ae8ecfe2aa88a0a7f805c32d0c2c6e24340429007536d317d889426605d6aa261aa20f303ad7b9e31c10d544b9bff881d37925180a63a835d6151442aa593d33277c5743a61b6d39f0c4330ead540ff0016f34d49"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x274}, 0x1, 0x2b1e}, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) r7 = io_uring_setup(0xe60, &(0x7f0000000000)={0x0, 0x6b7b, 0x1000, 0x0, 0x1bd}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000003080), 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0x96) close(r0) read$FUSE(r1, &(0x7f0000004440)={0x2020}, 0x2020) 1.938700754s ago: executing program 0 (id=6485): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYBLOB="868f54"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, r4, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, &(0x7f0000000480)={0x1, 0xe, 0x0, 0x200000000000, 0x0, 0xc}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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", @ANYRESOCT=r2], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), r5) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="15509b0588b238cf58a9cfe0a131f90f0d0d9426aca284f92bd3483fc1db3c6c0692b65402894d3ec31cd7cd455b12b04c0cc9085f1229ec293ef69ef2c6fcbf5f9186c04d7a1823dce655396ae2349145ed6d233f08d1587e1735f129042c4c5fd89e445585327408", @ANYRES16=r8, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000000000000000000000000000000000000100000000200002000a00000000000001fc010000000000000000000000000000000000000d0001007564703a73797a3000000000"], 0x6c}}, 0x0) r9 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$sock_SIOCGIFBR(r9, 0x8940, &(0x7f00000002c0)=@get={0x1, &(0x7f0000000c80)=""/134, 0x4}) clock_adjtime(0x6, &(0x7f0000000780)={0x5, 0x80, 0xf0, 0x9, 0x112, 0x9, 0x7, 0x6, 0x7ffffffd, 0x2, 0x7, 0x6, 0x7, 0xb, 0xfffffffffffffffd, 0x5, 0xaf, 0x8000000000000001, 0x800, 0xe7f6, 0x5, 0x8, 0x3ff80000, 0xfffffffffffffffc, 0x8000400000000001, 0x80000001}) 1.310019201s ago: executing program 5 (id=6486): r0 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000300)={0x0, 0x3, 0x20, 0x8, 0x101}, &(0x7f0000000400)=0x18) read$FUSE(r0, &(0x7f0000002a40)={0x2020}, 0x2020) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000020c0), 0x2, 0x0) r5 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000008280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f0000006180)="3ea4e4305830d12dd9009ddb857b480e92a48b3e45093694091ed788285937ce7b2473522335a690d828b02ab613f956aecae781037db019ffda49138a514ee99a088fd6a2a0028ea055aef75e65cdadd3589c49eb6088bdec10b6d405a915a037c1f8037e1b9301fe4296ab789db8c69c3636af08fbaffd5106dd3788c626c35510cc0ebafc64e8b300d0ffa3bcea4d2e036bbc8dae2e46312e9a637b3002b8931a66cbc28a30ee3287a18f1d162a5985f7ef467a43a807cb75d34504dce996e2a3f1bb43e867f141ed07ef08e0aea605cb5b10346efd6b41a23ea6741dba1e2416380b330788486bba4e359fc0d094cc5301530c1228fcd0e378e0260dbdd56788ad718cac668467d4c50a9878c501cabe3389dcf76acf0267489de4aec621656bdd3878de387af2a3dfa7dbf460daffbef878ce2536a57b05bc44a1e01ef54cca3ad250298c95a52ae9927030eb1096e00f265283a30b4ede2c934dc62c46929761e230567d2ba5999495a5a0977e3156a44365b177a07cae07864be9765ba56bc7ecb29264e6dad2e41eebfeb1ef4115b923c49a8e0919db1de67b1cc4c2f30a672d64efac91e63d7bbf75784aa49346338b22504452b36266eb5e924d4b215ce5037da7b98f09a8dcd086f36787cdd6fab9ce916d12b7b939f113be8b1872a75aa0d8977fe598227998c8b5fa3be8831006f6071d2522b1c9be03873844b0a6e2ca1489f2391981ed762f743e4bc35fd1ca7158bd995a7b801d8525ce381de5497916d59183636f72e9b58c72179f678d1d4434a1fd39d304c3b62cfca763ee8c6108bdca364a438145775a76462927207a7ae654801635dfe3c1915d2ab57a11675724b17c0becb9b20f95d5beea1dd5a6eb66ea864a7d22bdefdc6e13a2a4a8c7780b4250c92dd9bd99453f24268cedca6963ab64c024e56e6f3ae74cf8d1eb5bc3c7292f5fc7d37b4c48ca981b8f54528dedac99a19c1181698b1982668c49b1a6b55142944a0edf891659ea82570ceefe2ca50a95e7df6496acb6bd979ae4b5b6327a201288b8ddadfe0cb91bdd64e74f06deb0133385f5c9cb6e8e554e4fd29126f550adc440e6d42de1bd3ba0ed5d0ebc91bdaeecc7f253190a21eeb51a14b2d949fe86626a88fd33ccd40379f67de81341d225a116e60770ab972ed872c124cd7c0db88709a48487c1c9fa6442997431b99a1ac224a8523430ddcfd699ad27e16bbb54db40785b869328e8e804ed5fc2f4b3e4548a9e60d5b73b2ac8564e8424e0dd292924feb14fb76ed19b1d76edafb1bd5585717a9eb73a8bef605e3ef3f6f8518faab6559f5b4b7d2c07f73edf67d3780d8b5b2042788e5d2f7c7184a80a1951323632b62101094bd80acfae621e56cef19cd059c9ff72fe564944bf8063137fdc7905cb63489cf8d250bda94f453c94fb2f6f33f972c0ffc4830bc8d7fb98c4ed8ef2fa6e147002d488d97122d579a9b214b09f792279021a20a36a05c74c9a668bbc4ee5bba0d8f7e96fe9a61feb01b7c0537e47894c3e7b5d19ce1568f8d9f49f3adf9c02ac941a3edf68c841f29fbe82450c2bbdcb7270dd2f5722666bd21c0839541c907ff43da0a10a05e47ac636d4f9c59e2abfb00d31621ac3f0455723563e402bd3ec56a2b7e59a82262119b02eedda2baef71a5d5efd2533b7e6fc01d6cae9d514fe63b30fdbd92548760f876f8d77e7fd8500f83e6f4e6290e4df64c73d6ab61737797b05235dea939163cf55f322939014acef81d248baa46e1ffbca5a699f0824988b4313ae222bc8d3a3c1e875054a9494c9beac817179749b5cceabbb7cc40bdb8e18d598b683943a61fe105b868896d78e1e3a802774170ef3c1f339b6d20cfb5a260fa197aad2e18146ef53fa9c783772dc9e251c2140fe89709d007c5343681cdf4569d5f3190c0d799504aa0a9001e26a11708fbe929f63ff691a3a0c7a06125d3b3d13b3241abee4fa8c6d27b26eaa58b454e34fe20128a15cf7f96bfec32904af4b2e04c26bf9393d45b0d66a1a2f15780a67ff34daa1bad27262ec78f27f9ff77157ed5201bf257e1d1d06f2cd3a4cbc02bb9003caebc7e7e9fe7a256de9fc2cce105644c833ee659e3f6d526142d154a881cb70ba8df353a5714bfee5480cf8bff86c62c3a56d45f821d99413f8ea8207a41b7d577e5a1788d051c8c19cc1fc8be844f18227b7eeed330a213a58009c7ea3cfd5c77093b5315c90d36fe15ecd9d9e7e4208aac31abc3928d162449ee68f04aa2aaf5b8711529b97944a873085ed6b59b53b2ef8a397733d5207eb27a81c646eb7079aff7403181b0d658abcdc3445096844b3139ee23cb30f9527b5c84105604e8aa57b32e0470dffa95719415b74ce519ac27b20a38045a9792043d3c5b426deb70b3418d9475c6b85580e7e414c5a9ff35ce7c6fe2f2d5ee8d0aef619d8c2c06e0af87a9bad9dfa2f6ddb57c2e636563a9ee58c8613be2b329f4c16efbe56ae671e712e90712cc4f519276cd7cfa3e421e87ace7e5469665b4345322c77de68639a6f561a0d203d4823d4c3a84f1b2b04c60cd2fe855652c1000b0f5e1bcc2355496522a5046a849d407b5d86123432a41d64b549c1713dc3f0b4a787420c9d3dd3052dbac55dc15ca6584d08bbcc7ece7144fc179d302c5e0833b1f667e0f4110ad9b31f5b7e19e11fc1bf5ea0f9a81806ab5bfa8caff29b84c53c04a85d175c05a74d55b548ae69bb365760ebd841cfd094ce2d7cbf447285f53f5e7cb4ccda0a607c9cf7c3aec55966aca8b8ce33eb30a138c3e4d85e4def697e0e00defa03f2c501010baa3470450bec0acdfcdc7f530584e7c2600ba58722303a11c9387edcfbdc85f1128155374f9844f381c2a8a15bb7df67db46f30b9232d3d6037d86dbbbed316bcc5be6fb3ab78a19c9df2889188c7321ffed7795dfd67f3853e516cbaef5d079aac33cbd2cd920b560945744ae03611257ccc66e9523de5282efbf9871092795c05685cfe8749ff4a4cf42aa19fe4f935a71ba462860f1243824fc2888cccc6866f1c81f05bf993b58621cc8f9c6e72a7db971e1bb40632d75c119acbcdcb88b5f1ed4fa5162da82ea66c21f2064867d86abf308a1c65c0a16879d56e2e76ac4110acca20be3abb731effad3aef7f0da4acb9aed0283111670d5ceeba5a551dff13de90acc9dc3176923ad1791a73eb41a3f5c260e4df26a1b8782fa85e5cbf5c20a62bec97da4096264fafafc9f5dcb9a8ca2990a144d6bd138cddcba35fe3cd2609f0189d37e2d76f6d96ea2ba1d5ec9b42c94f254904cd938ea2004b43a111c2f5b53eca1bdb68f8e84fb5834098ea5dd6388d41c987763c8b2c9733f758dd74ce5eeda6cf28137a4d83a66f05d90fb1c9acb0214eb7e5d0869b201330b6fd1a2948e0ad0af0c4f3deb08fa875223ba27f1d42f63da665eaeac81ea9eca52ae1afaed3f4252976019de7d61059e29c8220e88a2d9a4e6202839c74dda2ae43ee2514b55aa812889e4f8e153f9859af16f130053024a8bac43fad387cd526ef42bea5cad61230bbf89db7946a03101d18dc1ae46d046212ec5285564e65d876283fb937d6e38caaceb5716c8b2628b3a349058fe27fa58d53d6e5a769996217960e50846b2cd1b9fbc686f157e19d69a2050098097d45c2879e89e6fa3c5c79339fa3881fd228c29588befa5eb769a1cc1b67e8426b386ee0e6a80d7dd261b0ffb14b321190f1a390c6a0e8052a750d4cb587720ae43f6ffbd7f9328985b2aece118d4838c2eb55e8592823f74550b5d49377464890903f2650999fecb01fce6f6e51eae4f193bfab5f35b854cb0221e75898f111e94d5861fb15086889a5f804df2f7fd41cd49b663d352c59c6e8455f8287aab47cfba4d860c81ae1f61eb8bba8f18bfec3da3eec80bf39a6ff8d028650da69c108f98cdd8359756ff2b911fa688131121523187f1e449baeb64e332558c9d5ad9794e514a4239fe3277749506d69b3ba9df2c48d0111c526674e1ec144de88c58c93ef06da80e14675d0b14842a1ca644af3d7fd5907a46ae58df07f060088573683d14ab5310d471e139a47f8080fc282f16eae908671f35a9c1a7b2941ec86e85e15207e824437f8f79b173cde14b9fdcb9ecd82b224d45f724df18760a2913d907ed48a696367985713ab99d2416213f9991766161ce075aa6da4a7fba3a47c67d04ad7e669afada886f046363fb03a0cc795e5a1840e419967b1a19f40be8bf2a512015d486d00c4026ea86324b5b541ef8388f070800421c137d8ebe7c9a539b529a4af69165c1a6ea23534ce8efa7efb2ac55969df429f3b32d2f2aecb5087359c1b83224e4cfa2c583a1e147dc0202334a2c953383cc69e3a807299d86358b6f42a499eaa5d5680cd670fb49af6488c7cce6efae45682f98d63371eced65de02a82bf560a335ba630283dd77bd3d15296bc21bc337fc1b6d34d77ea7f681055459447f01b65623218dbadbd1958a249ebb76fea35d56299a017c4d7920fb0433d5769bc5130d8a5ed950f8084ba0036078374b82ad14a232f137214bcaa82ea7fcf7393ff4226aa1effda1d44a6100896ebcffb9414baf53c77c84113ef99f89f9f282b19b0e057893ef9c81399e1db0e3a25549dbdc69895e5eebbc545e468401d18dd20afd2913f89c3c0d95d54d5145f5cf434287e01b73b2646a7dc42e0f64fcdc1f3853aa41a6242c6cbafebfd62d147dce9368259beefe4d28179750893fcbdab5956f582372c1c616db2a23537a353e08e275fece1a7c0c0bd9483160fc643ceed9d687d520e944923f1eeccfe7f2e5e1c5876810efa0deb7f00c8f606ca5c14e3bab922243d013288622cad6667696e6759742376f7546339ad37a9246c98a6500686aaec51e2391285e7bdac34fbd4a1df2147bbee2d56c7189b4aeb3880bbc63e6b922b27133497be09318b064166ee8b5ca1c360dc510592bb3077293ff7e48bbfd2221a8c823eef8e677b51b40c7a8bfed1def9e19af5a418b65567ad9cecf4c16232683740dfceef0bde563a0942db0d77493b2d683d413d9fbd0ac8fca1ecaf6e57fd7ae680a493d8c697d3cc038cfcfc55a9a30152ce450dfec029a4edbd38f10222149a87d358f881847d4daf8b182d6b1313d616a767dbd9d71c7a3ca896021216665fcb2c8fbddb593013118cc8ab5044bd6f99bb278ad871917c9b1684cecb2d0e8babaf33fd98c02d8451aa48f3b2a6d6e9a5d12910c7aff613cbcdda418a76abff697229b47783577d0ce2f0041e1360a10f607612405b9b06180d85617ff9c5993a986b32071cf4c43b97f53eef9311929cb8035ec5c2f65cdc40bd757d612de5b9a7eca6e7e70365dd47256ff9f6e22e91ff22bbbee51e153d5321dc76ee8a664505da2039da1fc87e3727f085a47ce3eb52b95edb41ea295b79752c672348621e4d49c48b7d065d116cd1ebe6203e9ed62a9d3367eec2ed7cf3e4762b5f71c6ab34a953482414b762a455ded6e0ede9e07c3b9915aa51aded822c57a72ee3ed236b7c8c3b26db5092baba5d4d385d1e3c0e0d860da91b33a85c20e30da31b890f85a88a5c105e8aa32d6033beafff9ff510a7c7fa566b86eb473c702fcf08449c581650c42b90843b1baabbe95b476983fc98397abb52450a65505212b25c94a2fe3d64816eb9a76e8e8e945b7dd544aa039e61fc6331d88ee4ba297bf0d59a04c95579b62f316da65064247cc1d45792f1510103708d636c53f201b1dc2004a479bccef0bab9bff46eaaedbaa445417ee040c568ca95e606d9d9431798e91491f48434551cb8d8b4b81b389d43845e04d98dc0edbb74eae8d13ef3f662a26d7e548218952bfb4d697bd5c3700cea776ac3eb0ebae5c101bc341688371e31bda8cf7819ff4fa3a478faf97582d497112e510b2986f4238d3d4219024ac82eddc2dfe6d42dd1652ec09548768cb0a46e475493a75a75c54c47ec1e6265d34a87634e09394c77a41b01f374a79333951eec0423e037e0a5dd3cd12dbcc25fbb028613aa7382bade63c1d300b0a6d021f65fca7905e622eb54bde35d59c169f970e3de01272229e78382c7e87cc052da8b7b2dda1d29bc42fd2b7091feab28c14dd9cca5c8946afd8a466c681025128d3f752a8bfd2a8bc0c1bd89c01ad7803d8fe9ea1247e25d8ec18e0c18b8e6293b85cca5535a075b799519623d98a9bb393df5f17065a7f11142320e3138fae891346ca10040fda33128909b485ca1fa733f7d44e424d8dabe3f38d4249c3cb3f22d10521e536be978ff2dee276098db46b56e782596a68d5144ea1f2dff227956f4f860135ec2e0cee212a51b63c60e775fa2e0a7dbcb6f3d27f09dbaf55343bd2af3aee72ed39e15919d3e5b2bc67710c88a68806f1713313887e72e6af52f7de7009399b81cadfe76bff2b61e53b259218bf854d52644bd8e722e170bf9b109ee819b960b8d9da0d2dacf48083bd8a766d3818eae48ba408e18c63c8b59e282553a71f62083e6a007ffa6ce8ad271b7202da28f1d6be4332f404c1e2b98acc4d783785c1eab14361db6382594a9bbc3304f121f198948c91fe58d96aa6a8e12cc3f46f283e635548d96341fe3052aed45be1970010bb76325873b7902f0f73bf21fbe0a5cef6ec0b50902174c3515c89421a496737024b22db73916c4a41d294b8eec3913421b784a2629132461d4e6d5498a88b87abe2e385df8688b70b075e2139def62c18c60f96c1715e203850155ea7bc8d67e77428e9c96a3edf06d984f29959217633a907e7aa0f9792313fd30c6f767b79981ccbf1bf87942cf082090761f9faf5afb90f56a80908cdf34387d3c9ac4d27321b8b2c64f66eb3bc0f7937b0771b68eee977d5f3682fedb04e51868e4e588eb625a71db0057655af47806eaa6b875304738f1129d95ef85921db8b584af8e389297c8d59eb4f5f784474e5e293f48c5cc45e490878c31d32bcbfc88d51f96eee3cfaaea0e443505825a52603a06aa8cdc8920af575650833e7715dc2205ecba7e304eb121cb0d65609b853974fe9ddee9b9cb9fe4d1c08fed5b2f3d0f51e104635dba4857520e0cf319438659cb765bbbe6bed3a6451a85e3efe32707b2c84d7fbb99cd80b3529605b221b808cf34bfe776607cb4074cb9371306c74f3c38a4b48f8a8da8a02be28a08f5a0da463aa85863ef54276c4f414667d3812deb6b0e882381932585e3d08c6f3c2c13b9987088b345e1216b3d525c99820c0b6688d9c0271f648da1881e58fbf5bc02acf226d9e90a64911ebb27b415f3ff4f7bdeb9fdd5bb1f39a99f909f80af444b902d1bd96562882da6e0ce9efb2adfdcd78803164a5ebacd12d6246571066e8f05a37d9eebbf41a88926b6bcb287f4ef47728ec00bd96ccd72eefd5815fa9e2840a100e08be686e6b664c938a0eaa7588e87d69809af59268f3c4e92a98a663f83481668e0f3ee684a6728fa38c75cf66ac73dcee17dfa5ca94601b1e5ff91215492270e24c4abe4dce8686e99d3c64e7c3f5972152da99388bb59e282a1e300627e542cfea5a390dd11f0c95f52702982c0e8c690c1e7bca2ecffb7287b617090ace76f818fa8a9078978e1e249a7f4fa281fb3174fec950f6b9afaabb3279e22c9c37a4ea1c05df6c49c1b89b2ed23ca3673f388f502edd3edc358549c039eeec6ca4ae3404bbfb688c3d90cbd4a092e035ec48c3bb1ef08e2b1b6326622419356669a8399954dcbeddb197de9fb5407e105d800b6cfa91de41b2eb3ad2ead5487b9c7b11e76f2ad08711b00cb8f3da6794398a961853bdcbde90086ff13d69154442c8caa36d56862581a9f326f85c6722be613caf2329d4ff9734c99016390e793b6ef90c540ad3c7478d7b221a71e0f10575ce5f666e2425903f3c358c4dc5b29133da5027b541898b501cfa144e166d1b1d7470d05aeda051a1cd5bc3bafee7ccf8564682cd728d0dfaa4f731438de2ca3095f105c0bad8f3b039a427729ba1f96238403e3d1c8a2bdf1730253d6c78e42f4dc5a6079e95ea5013a9d335e628ee7d2dd1c7f2d25342b2be5c9fef9fd5eeddc8665c1a39705231538d0f3a19e9c021a7d6d2d1c6b3f4b483e6198ca6d269db9e82746c5ea36c70f29fc98462ecaeed27547de6435a82112b2ec9a8c1e759f82d04810824d97f1ca45071f6ac242b90b218f2c2c9b4cd42b56dbeb5e947a8e8b476749ab8cc7d910fdb17529440107a565737b69440cac0b418858d62fb7af804c5e483faa849a6375ea62581eff9c4dd3ccacdbab7af9fe9b2be75cb2e322c296cb91a792ab424f77ff348d07dfc2a5c5af476cc7c44de169dc1702ddbd5e4d7fb11172d8eab6df3b70c7b66fec5177a533ed44641c291ed9d8cea6832c24c3cd279c9f3bbb355fe47364d23af48cf8a86d27727ab2adf771641ff447291fa9ba99cf5c2cec5c968d565aabe16cd07d752f7d5b2c78e77cbd2dcb2bc151a35207026c98b755eb0e6fdc94628de7653f7a461e0b51f5c089fc4db6deca2243e3e5532bcc279dfccd2651db61565968dfce800e995626a4bf045e3522b996dee4bd10980ede518f4a5d986f41c53f0e2820853337869645c31c41c9563f1c01ce651e916f7472b04929feecd09ff768bdf74f0b40a0c58555f2a390db9bb7990dc31f995ac4bbf1f90271cd4b90ef7fcd096c34040fbd4a74aefdc5a6b8edf38da8084c87564b10e6e2cd7d0ea6849cff02c06e4df741c278f0d29ed6c6c739376e1c262f9d780fec67aeb519cfa669c9d6487ba527e0ccf5012954dbb3ecdbd3f5be1c018784cf83b3bd040e7116be8401e760f82cfc86ac19a18f28c894662f8dd13b1aea577c81bf2447753b57853765eae4353b65475e10c3b36bf0d0dc3199dabff76a06f70b173fac295db1f52100547050f052b9d287155bc8b04435ef35902395ae894bed80080fd3becba14c51da2cf34e2999cdbbf652dc6862e8e65f675b1d7e5da57fbfb497e8111dfe77164372d707a5857325c47afb462f7a38f617d158e8a28fda6d121e532e44b2ca9cef3c34a7a8d748c4edd061b62f6ab7344317b0dbd8ce4836142719a7c0835901236180840246527f3ba39cb64614e95d4af008d281b53853532abdc663051d041af7d1aa9766ab185efb77fcf278f09577e01e507a2034f435b66cab7692a1733d1ad3d5d566396fcacfd1bbdf542e35136a49e2d3cbc21ce157ff051a0c1b636b159f370366565a8ddadaa1502b425ef27a1ff070c52bd17595ee507dc984aeb14d2aba07fe786f3733e3527d5bbfcacfb09d3d5cf94738d1b13d2590b1bb1ea2eb400e9605f90b4b23c125622da85ece62e4493938099a4058e0b3dda2532c6d62bd033ee7a1cd7683620a6501e3ca420f9a64f462bbd4f125d154beff38c8f4a1278f9d6194289234d7e9fd397feb24fe1a8636e334d1342fa590b4578b3c677aae57119bea99ff7a5635b98ee867a282e5f3444b70415c0c33942f041c28589ba0de67d7b7ebe43ec6656f60c82c9d75bc8dac80791cd59a9c576ccf726cc97befcb9aeedf32b9ec6f4aaf043ab9bfc4712ee6bc4906dcd9766658ce56fea361518bb54ccca4bbb82eb64e417a37899ab31736ffddf51f97aa710b29f18ada97a200bd65d655364149db2c41cf32bac2c4bf799bb2356335a4fa01016da72bc7dd99b3f902f8b80a89d19bb04f8c49cdc5a78b17b52d52c06f18baa9839332f3ae59909748cd4dac49c1901f3c2dec64ccb40a49fed1699fe1140f8602384a930fed2ed6f9c120c9e6158aae34d8ec8a4fb0cb7ae19c2865e3939b499b5a08183c342ff4af2b3400980879aaa6e29784e90bfc915b9f31e79b742420952bda798a8b88c77134cc5752630e57fa23f9b174535e3244c9fa475d1b2829fdb768d22d6564e55556fd3750bbb223f3b5748a57c899d324f359c3842fddf8055e1b40588365393b84aa798fcc8b321ba1eeac33d340eda01fdf697e81bb5b55852f6b355a7dd2082cf087949cf9fbbf697af8f81c20f25a1c0b92fcb06dddc50c5d9e989a15a2fb7d0544f1844e3f46711165bab1658615f440b71f93ddb713ba91e8f4d91dd17243082d61cf43fd08861d42f41f1ebc68be633bfcc79b14cdfd7b171ed4b282a926055ce26e7fcf40d1e8e7d05ce6660fdb825dff76d735bce7b43c98e5b6c4763ccff99b45c1439859ccfc61756c298eef7424c465aadcd71455448827e39e5ec21293f2007617fae73b74de8efe349c726a9dac11524720fed5214101b4f26ad6fec2215a54980512a57358545899c6898692d805134d606b3022d16954747d247db0093dbec65fa7d101439ccee58a8790ee0daec0976a743d8f7aabbaf8d9945e95ceede27387e2faebe8d1eae6feedb78cdf016c6c5888e56ab4830b002513f87aed9bb4988784c0debd8f566ea9c8467bab4a52a52de9e262f16ffe222ac1ac6f6d5de557eead4554f03bc8ebd681daa2ae6cf93587d32dcf53a184f5019f0fad0729095a5788b04fc6987064b80c6bba46e36fdd767ca9c6819445e95ec7d60c3f9b2716c206a589e413fd7bf1d8fd3f1245ff54d6db4d7b45f20cb4f6dc8bcde65484d70ac38921f89261d27fc85203b801867850457a3b61fd55e805bd3c40a336bf87101d8914d21c8c968e934ce265cca3efe21d3ae1b78848f7b50a9a2e9b51bfca2ff7e0292ede0aa013af1c09242d6e53f23a216b8ccc64402a46eef3411c06cabb5435b1d2d8ddffc2c3dbbbb0e707e03ae0c518414dc7304dec25084891255011dd133d235e663ff38ee78c9abb93c9f692c5195222c881e35431d638367c7e570c962646424dae41fa2b2af118a93add1e088aaf7e1dd108c7096f4f9868a8af02cc15db7493ef011d320c6d64f6de56a51748e9dc4b7bd1bd515d3e9522a65e87e25477f71a6bddaf7ee5a01d424ac153efaa52f1e56fbef9f66efe5642f7dae41e419a64be65635a088885717942d475daa806ab151b087525446227d0d75a493d5a98486365b3981b3bb77a7c6c6ed44a120a98d0f2d35e8ce83837004c39bf09ac5723b1d7d7392f6e94462e86de853c6841027c697236331e19aa45693b2dbeffea7b00f0b284e49b04935327b9808576b397cb48d6b1960d06058f1cf2d0641d7c99e79dc9d47efd1d5bde85bb51ffe4a687c2d364713ee0ca4981f371c7a418b61118431984324f84f8cdd6e2849c00c1f14b1732a08ffa08d39c312dd809f15c8a651cbec053e870ac04c131946d80a8e684c8f309881f98220d7e532773d4d8304ae53428390ca7914a408030fae3b47619352d8a1edc33856530f806b8efe61bedcbe199aca4dbe79bdacb08b361e31f59c00463071fb19edbc0cb84c59130770fcd17643f7c37c1f54753f40fbeeeee31b22d89944ac6ee913e63145e3e35f804d2cbd08d9f2e278be717872a4fae63d8a8b462f715c3191d394a67a724fab2e4ec31c439fb2fa01295aeb56910fd406316bdfed587c1b42a733542a55793303e59dc23a40bc9b9f5713a3dc21b95b591ac9863f31a4ecd160e7d9b7b2ec2b137e67", 0x2000, &(0x7f0000001ec0)={&(0x7f00000021c0)={0x50, 0x0, 0x8, {0x7, 0x29, 0x9f53, 0x10000008, 0xc0f7, 0x48e, 0x8, 0x8001, 0x0, 0x0, 0x80, 0x101}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000000000)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)={0x20, 0x0, 0x10000000003}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000005040)='./file0\x00', 0x0) syz_fuse_handle_req(r4, &(0x7f0000008400)="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", 0x2000, &(0x7f0000005380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004780)={0x78, 0x0, 0x7, {0x5, 0xc0da, 0x0, {0x6, 0x1, 0x3, 0x32d, 0xc2, 0xffffffffffffff7f, 0x80000001, 0x5, 0xfffffff3, 0x8000, 0x7, 0x0, 0x0, 0x4, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x24060400) socket$nl_sock_diag(0x10, 0x3, 0x4) fsync(r5) file_setattr(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0xfff, 0x245b1f2a, 0x8000, 0x10000}, 0x18, 0x1000) symlinkat(&(0x7f0000000140)='./file0/../file0\x00', r0, &(0x7f0000000180)='./file0/../file0\x00') listen(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000004a80), &(0x7f0000000040)=0x4) ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000004ac0), r0) unshare(0x2000800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9c0000000001010400000000000000000a0000003c0001802c00018014000300fe90000000000000000000000000ffaa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014bd0a91b0aaf88edf000000000000000000008a14000400fe8800000000000000000000000000010c000290270001000000000008000740000000000800068004000380"], 0x9c}}, 0x0) read$FUSE(r0, &(0x7f0000000a00)={0x2020}, 0x2020) 1.084665395s ago: executing program 7 (id=6487): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000000100000000000000ff0f00000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200200000000000000fffffffffffffffffeffffff00000000000000030000000000000000000000000000001ce0ba9b37d3908b6b1a56ea"], 0xb8}}, 0x4004) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), 0x2, 0x0, 0x7}) (async) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1e8}}], 0x1, 0x810) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0xa, 0x4e22, 0xcf, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}, 0x1c, &(0x7f0000000380)=[{0x0}], 0x1}, 0x20000001) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x19) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x6e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={r3, 0x6}, 0x8) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) (async, rerun: 32) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e525b123ffffffffff00000000000000000000000000000000000000000000000200"/112], 0xb8}}, 0x2c000010) 955.485798ms ago: executing program 3 (id=6488): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtclass={0x98, 0x28, 0x400, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xfff2, 0xfff8}, {0x3, 0xb}, {0x2, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x5}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x4}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x44, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x8000, 0x6, 0x3}}, @TCA_HFSC_FSC={0x10, 0x2, {0x32, 0x5, 0x17f}}, @TCA_HFSC_RSC={0x10, 0x1, {0xc, 0x9, 0x70aff61}}, @TCA_HFSC_FSC={0x10, 0x2, {0x1000, 0x5, 0x800}}]}}]}, 0x98}, 0x1, 0xf0ffffffffffff, 0x0, 0x30084880}, 0x840) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) r10 = mq_open(&(0x7f0000000040)='macsec0\x00', 0x800, 0x9a, &(0x7f0000000080)={0x10, 0x2, 0x1, 0x6}) mq_timedsend(r10, &(0x7f00000000c0)="0766883ce93e192667e7f78d1b0ac2aa98d99a", 0x13, 0x6, &(0x7f0000000100)={0x0, 0x3938700}) 767.889561ms ago: executing program 5 (id=6489): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000404000009"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d000000030000000400", @ANYRES32=r1], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) fcntl$dupfd(r0, 0x406, r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) (async) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) sendto$l2tp(r5, &(0x7f0000000040)="52784a0e000071000000c83b", 0xff92, 0x0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r6 = dup3(r4, r3, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0x11, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x6, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x1, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x9], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x35, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x1, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={r8, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x7fffffff]}}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r9, 0x0) (async) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) r11 = accept4(r9, 0x0, 0x0, 0x0) sendto(r11, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) 576.703681ms ago: executing program 3 (id=6490): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000001700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000016c0)={&(0x7f00000000c0)={0x15c4, r1, 0x600, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_TAIL={0xed, 0xf, [@mesh_id={0x72, 0x6}, @dsss={0x3, 0x1, 0xb8}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x0, 0x1, @device_b, 0x9, 0xffffffff, 0x2}}, @prep={0x83, 0x1f, {{}, 0x6e, 0xa8, @broadcast, 0x1, @void, 0x6, 0x8, @device_a, 0x8000000}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0x0, 0x1, 0x9, 0x40}}, @ssid={0x0, 0xc, @random="a692689890574eaf116f6996"}, @random={0xff, 0x8d, "6d26fe5bef3e9069daced05f9716aa90a7122a0f5672a843f57859e8bb32b3d904bdceb78cfca45554c2a9c13eb2f70445cd5752c2e2a1b6dfd6eec779b169d609b0386cac271b1a837dbe2a042b52a62971d150d3793681b0276167e099a3ea0e19df48b540cc574396bf7c58f01226df2348fbe886ef596dcb3c8297ef6dfe6965e2f89c55e1553ee8460cbf"}]}, @NL80211_ATTR_BEACON_TAIL={0xc, 0xf, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE_PROBE_RESP={0xc, 0x7f, [@gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_IE={0x20, 0x2a, [@ht={0x2d, 0x1a, {0x20, 0x0, 0x3, 0x0, {0xed, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0xd, 0x5}}]}, @NL80211_ATTR_PROBE_RESP={0x580, 0x91, "f6fdfb54743c9a7d55e83d8f2badabf8440b57e00b1ff534603f78d883edbecfd58295afd22f9e914ff06a6d2dc45734da735f22b08a5fd1201d34f1cc50a599af3de1834f281119755a3a42715e8b8772d443319ea287d2618f03b264066a82d5616996674e4745322d5d53a9b21cd6b282fc2b7800aebdf773baa3dceeb5bbad26eb1fcf609f333bf32a59c42b11d79e82e0fc897c842f7bfb6ef3fabd4e7252c5c41983bd785a18e6d39b95b9a9a83aafab0b79cd34727bcaa2f1d5806ffa29aa997426d68192e9c4cce7ef9f06535bf7cb2078fcb8f2b9ba8d30db0ad6fb731f392598cc30c28abb27341022327bf4dd3313399c0219623d58a66e5fdd72ce5d17d602cad182b1ab72b246f4a1da24d8b9b0bf13ef59029cb7a0a77f043e0bbe1ac200ad35c9f3b7488b70a4f3d13a025731f024a71313f3013a12dd3e28bfcd42ea835be51641bbcb96e0cb2b418016e0a79e5a1ef6a28580432917f0f41f032c91e1af11f169dcc93518391fe839bcce9095c33d85d59b072c2409493281432a0e55875621663a6832fcc4a9e76e872ba9ee86ec9cd89047ed03866ac4cfa3c7ad53dc3e67d032da44e2c237ffdc29ce7551f06aa075326a5159bfbdd4fbe0d91dddc9a0aea8fd7bc9523d60099d13b9b3546e8cc15e400863a66cf8f66582d6ef6873e43ee21227596d5ea1c66972889e07906986a3dff90f7a1ce1040c376d77aad847fb7004fe113c4425309d6b6594cd7d9b980d3de3a9feedafd08070b6c8925119e45da65427f4e22a9dea9fb60046de7af6feae675d39973e864a8aed2a09bdab091ec9b03ec80acebc96966ca42091b660bf5a1285a40566213f7c6b55e338d874dee015acf1d40f35ff77e338b1d7e47131e1b54d22d609f46ace6ca1bf34548d76400935f07c3e24a5e065da98b458773e9b2c3583a25e58244f0b7bd1ffa061f612d3b84b8f0ddd9813d4654fdbaea0f6d4e43e4b4d440c6045c036c398369ccdd386130475957056f70c511d8b87982162a057b707f80e3089338814f4a2c7b4899acc8fb8449678467e5f6beda2603950062217bbd0f48c2d8b0c5c7feb816c777a8ec823c41bb4b843e644df4ac2c612f5d491ab3f4fdb37e08c6b4e0f855dda24d34904410ac74c902fc54a44d29eead72f32cadd9dbc23c54fcd77a104b125e377806c1333637e9e26c60bd60e4677701f9ea57d9d1aae6d6e6ff213680c320c597946e08af9f82d2a68d392da109680bd2bf5121af41a3ae4e5e6a0d729796c25f116a844f7c1ff5cc566476780777a1b122fa4fef1e8cbe9367ecb9a3209320c01aee3df6f05f6a9d6f0f643e77655fccf3c832de0c4a4b51561cd177dc009fd786b357dc92fd555f9001e0c38d4ffab1d4ea716b3800661d874aceed38a959c1c61ef66955b32210f00907a58fb769d52f97c143a40f4d13caa5473921495e9e44ebbac1d5ba2ddfdc61f60b4d6c9d44d86f8c0fc8dd521b0e58df2bf42db4711f2b5dd6394eb35fbf7106ec5653dcb3f41fba68c9d3bf9a3aa8926e5c544448dd390471045c2ccdf37fd45e4ab345e936171206bd1f648fe0d0746124488ac64c3d51a097f423aec0a8a21a5f0db0a47291760fbb0c1c07c82b7ef8164be749f5593fdbaab1b81c360dd9f8691d7a6bd309df3cee4ec0919716f663131b64226e1eb3b945e8ceb7aeddf8bf4458fd71267cf235cda5bdae2ae64d423fd2247d0df7183a5c4fc568cf9d3fef9330d2cd4815f9f4c35d1958a4d8d954c4109ef275b724df7195b9f1631ebeb89ffc0183e7bba13b6a0d60321b062878d2bb4c22c5fd615270ea543adea4b4b477753e037295b1cf2dd9166763363ec343aeacd49e3f64fb808def3ad387eaf556099934f0900e566961cff299dbfc5f76032cc8384d873ec0bfda7e6460bc376ebe85c005ec81d759c511e4ccbb86abc5e39fd82577d25d8afb83b2749d0ce5807181a"}, @NL80211_ATTR_BEACON_HEAD={0x1bb, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xc}, @device_a, @broadcast, @initial, {0x7, 0x7}, @value=@ver_80211n={0x0, 0x9, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x7fffffff, @default, 0x32, @void, @val={0x1, 0x2, [{0x36}, {0x4}]}, @val={0x3, 0x1, 0x28}, @val={0x4, 0x6, {0x7f, 0x0, 0x1, 0x3}}, @void, @void, @val={0x25, 0x3, {0x1, 0xa9, 0x7}}, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xff}}, @void, [{0xdd, 0x6a, "17c06efd84c6009812b3e0dd39513bb99ed70bd5cdaabb0be678187a4ee46c2c6c41863287847a1879b2aed06821b43b9010344e2a0c0d8075443d1f07a5996a554d399503660a2fc07ce784823195e63a1b1e9d22c4d0c40395e34cda20f6a9493af9c89bb983f1cfd2"}, {0xdd, 0x40, "c01c3691fa654eb517bdbd88852c3cb90668b0fbdc980ce6313452ed79dd4a814664630bda29195aa4d0e1b511b8616b4219cc588e500d172fe06f943b4e54ac"}, {0xdd, 0xb7, "e73fc30983fd0a07eec2c1ae7e7ffe6dc16484931e299645b70474872b5b58eb1747212af8647033327bd62251b47879fcfc187d494dab0df35a1d5dbed8f42a8bddca230c638e3ef0c32b5e81e95445b051fa043c31af522636179cd8dc6341a54375302ae49c15bf2159248a249d8701162bec0df606d7fdc4097ef082485960a72b537c6a7bc9d08291a27ea19f6490f0aac89d340cf2e60c613d48a4655e62b57f0518883e7e1bcc7a8f6bc83c585c26037a9d808c"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x104, 0x80, [@tim={0x5, 0xfe, {0x4, 0x1, 0x3, "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"}}]}, @NL80211_ATTR_PROBE_RESP={0x81f, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x37f, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0xa0, 0x80, [@fast_bss_trans={0x37, 0x89, {0x1, 0x2, "a0f7da1bda108b34da306212288b4eeb", "bece767720fbc91258fbfab9efe39210d750536d8a0c0170f862343191c61570", "e9a40517bd9603c567f9fe6a7c76e1c13b335bf0f5554bf2081a96c847a31723", [{0x4, 0x27, "c35c8a98b4f259ffffa8a0358c80c0f5209659fceb96720ec74562cd7d62ca08eb0577360b8d3a"}, {0x2, 0xc, "ab74072bfd65f490eb9a1f15"}]}}, @peer_mgmt={0x75, 0x6, {0x1, 0xfff2, @val=0xad9d, @void, @void}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @supported_rates={0x1, 0x4, [{0x24}, {0x4, 0x1}, {0x48, 0x1}, {0x16}]}]}]}, 0x15c4}, 0x1, 0x0, 0x0, 0xa000}, 0x4000084) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000001880)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001780)={0x8c, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x249}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfae}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x31d5}]}, 0x8c}}, 0x4000004) r3 = syz_genetlink_get_family_id$team(&(0x7f0000001900), r0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001940)={@local, 0x0}, &(0x7f0000001980)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a40)={'erspan0\x00', &(0x7f00000019c0)={'syztnl1\x00', 0x0, 0x10, 0x7800, 0x4, 0x8001, {{0x16, 0x4, 0x0, 0x1e, 0x58, 0x68, 0x0, 0x7, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x2b, 0x1, [{0x0, 0xa, "8b83272fb641c327"}, {0x2, 0x9, "91424ae30fc9be"}, {0x0, 0x12, "27cf8e045fdbb102030e4edef1aaf81a"}]}, @lsrr={0x83, 0x7, 0x46, [@local]}, @noop, @timestamp={0x44, 0x10, 0xd9, 0x0, 0x4, [0x401, 0x8, 0x2]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001ac0)=0x14) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001d40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b00)={0x1c4, r3, 0x500, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1d0e}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5e4}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000890}, 0x20000000) socket$inet6_sctp(0xa, 0x5, 0x84) openat$uinput(0xffffffffffffff9c, &(0x7f0000001d80), 0x802, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001e00), r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x4c, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf64}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000001) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001fc0)={0x1, 0x58, &(0x7f0000001f40)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002000)={r8, 0x93b8}, 0xc) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000002040)={{0x1, 0x1, 0x18, r0, {0x40}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r9, 0xc0145401, &(0x7f0000002080)={0x1, 0x1, 0x10001, 0x1, 0x101}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) r10 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f00000020c0)={0x0, 0x9}, &(0x7f0000002100)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000002140)={r11, 0x6}, &(0x7f0000002180)=0x8) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x30, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x1}}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) sigaltstack(&(0x7f0000002300)={&(0x7f00000022c0), 0x1}, &(0x7f00000023c0)={&(0x7f0000002340)=""/92, 0x0, 0x5c}) ioctl$SG_GET_REQUEST_TABLE(r9, 0x2286, &(0x7f0000002400)) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000002580)={[0x4, 0xf37b, 0x6, 0x0, 0x5, 0x8, 0x3, 0x5, 0x91f3, 0x8, 0x603, 0xffff, 0x0, 0x5, 0x10000, 0x8], 0x1, 0x4000}) r12 = add_key$keyring(&(0x7f0000002640), &(0x7f0000002680)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$update(0x2, r12, &(0x7f00000026c0)="d66c0285c00ee7971f51a84960527255068117eb44552a0d2994a37fd80d2016160869a36e8774c0ab571436be737db4207655041681d944f77df80e091a3d684ecbc59b58766abb81cf13de3611028a7c67d652f7f3f5f8a4dafbd7180608e3f57fdfbf9bcb82a1c830c2a2b2d13223400ab9cf78fd5a565de6d47a695aac283872ef9dd1cdf4461aa706ed265af55bc6d98e4036ef5a5e72d6bc4af30adaa3444f78645e56f12713f2d79da1fd8490c9563e24ed21050dd4d093885ec9", 0xbe) socket$nl_netfilter(0x10, 0x3, 0xc) 530.279029ms ago: executing program 7 (id=6491): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0xa0000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000003c0)={0x0, 0xd73a, 0x7, {0x4, 0x522d}, 0x6, 0x40}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c00000001040101000000000000000001000400050001000100"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000010401"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000140)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="5a181e9f51242cb3d81414ef4a74", 0xe, 0x90, &(0x7f0000000000)={0x11, 0x1a, r3, 0x1, 0x6}, 0x14) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0414f9f4100009040080000000010200020002000008001f00fdff0000", 0x24) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xff, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x80a0000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xdddd0000, 0xdddd1000, 0x10, 0x3, 0x0, 0x7, 0x4, 0x1, 0x7d, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x3, 0xd, 0x6, 0x3, 0x4f, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0x5, 0x6, 0x5, 0x7f, 0x2e, 0x4b}, {0xa2000, 0x8000000, 0xb, 0x6, 0x3, 0x6e, 0x1, 0xff, 0xc, 0x90, 0x1, 0xfa}, {0x8000000, 0x4000, 0x8, 0x4, 0x3, 0x5, 0x0, 0xa, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x7b, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x1}, 0x0, 0x0, 0x4000, 0x300, 0x5, 0x3000, 0xe6e78c00, [0x0, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x8b0, 0x0, 0x1000000001}]}) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="3664f30fc737c4c235a89898370000b9730a0000b800700000ba000000000f3066f30f090fc7ba47000000660fc4175b66b8da008ed80fc7399a00380000150165f30fa7e0", 0x45}], 0x1, 0x20, &(0x7f00000001c0), 0x0) 431.261141ms ago: executing program 8 (id=6492): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x61}}], 0x1, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="0f0000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x6}, 0x94) (async) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x900) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x60, r3, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040}, 0x44000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2810, 0x3a00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2b, 0x0, @loopback, @multicast1}}}}) 303.873657ms ago: executing program 5 (id=6493): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) msgctl$MSG_STAT(0x0, 0xb, 0x0) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dri(0x0, 0xd21, 0x4000) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="071100001000010029a57000ff9ddf2e00000000", @ANYRES32=0x0, @ANYBLOB="00000000201a0100140003006e657464657673696d300000000000000c0016800800018004000c800500110006000000"], 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0) (async) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000300)={&(0x7f0000000180)=[0x0], 0x1, r7}) (async) r8 = msgget$private(0x0, 0x4a0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r8, 0x2, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) (async) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="02000200a800060024001280fe000100626f6e64000000001400028005000c000d0000000500010001000000"], 0x44}}, 0x24008040) (async) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) (async) msgsnd(r8, &(0x7f0000000440)=ANY=[], 0xe3, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xfffffffffffffffe, 0x7fffffffffffffff, 0x9, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0xffff1000, 0x4284}) 198.91249ms ago: executing program 7 (id=6494): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000090a010400000000000000000700000008000a40000000030900020073797a31000000000900010073797a3000000000080005400000000c08000340000000080800074000000031080006400000000008000f"], 0x84}}, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/32, 0x20}], 0x2) sendfile(r0, r0, 0x0, 0x200000) 129.837076ms ago: executing program 3 (id=6495): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000003a000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x40) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c460104028dbe05000000000000020006000400000019000000380000005e020000"], 0x58) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000001400)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x0) close(r3) accept4$unix(r3, &(0x7f0000000100), 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_usb_connect$uac1(0x69a90eab3db9c902, 0xa5, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x4, 0xa0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff7, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x1, 0x3, 0xb}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x82, 0x4, 0x9, 0x10}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x1, 0xc, 0x3, "83b266", "a2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xff, 0xc8, 0x3, {0x7, 0x25, 0x1, 0x0, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x1, 0x8, 0x1, "3a3882"}, @as_header={0x7, 0x24, 0x1, 0x1, 0xc0, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x50, 0x5, 0x8, 0x41, {0x7, 0x25, 0x1, 0x82, 0xfe, 0x7}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 8 (id=6496): syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9143c"], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000300), 0x401, 0x20c02) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0xf, 0x141582) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, &(0x7f0000000180)={0x2, 0x101, "fcbe77926ba13c2fd2c3c5176944283cd4231af4c97698c925ff81e0ef938e06", 0x6, 0x81, 0xfffffffe, 0x1, 0x4c}) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) rseq(&(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x5, 0x1, 0x4, 0x8}, 0x6}, 0x20, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(0x0, 0x0) ioctl$FS_IOC_GETVERSION(r10, 0xc040ff0b, &(0x7f0000000180)) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0x0, 0xd4, 0x0, 0x85, 0x7, 0x4f}, {0x5000, 0x80a0000, 0xd, 0x9, 0x8, 0x3, 0x9, 0xb, 0x5, 0xd, 0x3, 0xc0}, {0xdddd0000, 0xdddd1000, 0x10, 0x3, 0x0, 0x7, 0x4, 0x1, 0x7d, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x3, 0xd, 0x6, 0x3, 0x4f, 0x1}, {0x54000, 0x50000, 0x0, 0x1, 0x3, 0x9, 0x5, 0x6, 0x5, 0x7f, 0x7, 0x4b}, {0xa2000, 0x8000000, 0xb, 0x6, 0x2, 0x6e, 0x1, 0xfe, 0xc, 0x90, 0x1, 0xfa}, {0x8000000, 0x4000, 0x8, 0x4, 0x3, 0x9, 0xfc, 0xa, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x7b, 0x2, 0x4}, {0xeeef0000, 0x5}, {0x8000000, 0x1}, 0x0, 0x0, 0x4000, 0x300, 0x5, 0x3000, 0xe6e78c00, [0x0, 0x401, 0x7, 0xc5]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYRES32=r3, @ANYBLOB="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", @ANYBLOB="01002dbd7000fbdbdf25440000000c0099001c0000006a00000008000d00fffeffff0400080108009f0000000000050019010800000008009f00000000000800a1000400000008002201d8030000"], 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x4004001) kernel console output (not intermixed with test programs): 3800][ T10] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1937.875958][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1937.888356][ T10] usb 6-1: Product: syz [ 1937.894866][ T10] usb 6-1: Manufacturer: syz [ 1937.901522][ T10] usb 6-1: SerialNumber: syz [ 1937.912884][ T10] usb 6-1: config 0 descriptor?? [ 1937.997074][ T10] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1938.211374][ T10] gspca_sq930x: reg_r 001f failed -32 [ 1938.304737][ T10] sq930x 6-1:0.0: probe with driver sq930x failed with error -32 [ 1938.485965][ T9438] usb 6-1: USB disconnect, device number 120 [ 1939.264403][T24041] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1939.275379][T24041] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1939.289372][T24041] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1939.313550][T24041] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1939.323460][T24041] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1939.407625][ T10] usb 4-1: USB disconnect, device number 115 [ 1939.414395][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1939.575731][T10588] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5648'. [ 1939.674313][T10595] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5649'. [ 1940.171015][T10597] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5648'. [ 1940.730463][T10649] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1941.446567][T15451] Bluetooth: hci5: command tx timeout [ 1941.578003][T10596] chnl_net:caif_netlink_parms(): no params data found [ 1942.177082][T10722] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5653'. [ 1942.225805][T10722] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5653'. [ 1942.494130][T10596] bridge0: port 1(bridge_slave_0) entered blocking state [ 1942.504540][ T5921] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1942.526340][T10596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1942.543520][T10596] bridge_slave_0: entered allmulticast mode [ 1942.561146][T10596] bridge_slave_0: entered promiscuous mode [ 1942.687000][T10596] bridge0: port 2(bridge_slave_1) entered blocking state [ 1942.717219][T10596] bridge0: port 2(bridge_slave_1) entered disabled state [ 1942.726904][ T5921] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1942.744566][ T5921] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1942.769106][T10596] bridge_slave_1: entered allmulticast mode [ 1942.774926][ T5921] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1942.856495][T10760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1942.884858][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1942.914775][T10596] bridge_slave_1: entered promiscuous mode [ 1942.936589][T10722] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1942.955279][ T5921] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1943.055939][T10771] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5655'. [ 1943.227500][T10721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1943.309293][T10721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1943.473270][T10596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1943.532016][T10596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1943.542297][T15451] Bluetooth: hci5: command tx timeout [ 1943.749836][T10596] team0: Port device team_slave_0 added [ 1943.796379][T10596] team0: Port device team_slave_1 added [ 1944.047850][T10596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1944.073022][T10596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1944.140483][T10596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1944.234716][T10596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1944.259043][T10596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1944.321739][T10596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1944.542168][ T5677] bridge_slave_1: left allmulticast mode [ 1944.555204][ T5677] bridge_slave_1: left promiscuous mode [ 1944.586856][ T5677] bridge0: port 2(bridge_slave_1) entered disabled state [ 1944.625709][ T5677] bridge_slave_0: left allmulticast mode [ 1944.631386][ T5677] bridge_slave_0: left promiscuous mode [ 1944.665415][ T5677] bridge0: port 1(bridge_slave_0) entered disabled state [ 1944.985142][ T5954] usb 6-1: USB disconnect, device number 121 [ 1945.129193][T10886] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5659'. [ 1945.504413][ T5954] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1945.604482][T15451] Bluetooth: hci5: command tx timeout [ 1945.684842][ T5954] usb 6-1: Using ep0 maxpacket: 32 [ 1945.700357][ T5954] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1945.716871][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1945.737313][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1945.754435][ T5954] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1945.785229][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1945.804516][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1945.838097][ T5954] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1945.854669][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.863007][ T5954] usb 6-1: Product: syz [ 1945.883282][ T5954] usb 6-1: Manufacturer: syz [ 1945.888593][ T5954] usb 6-1: SerialNumber: syz [ 1945.908212][ T5954] usb 6-1: config 0 descriptor?? [ 1945.980980][T10912] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1946.122831][T10919] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5663'. [ 1946.146670][T10886] vivid-000: disconnect [ 1947.259587][ T5954] usb 6-1: USB disconnect, device number 122 [ 1947.417172][T10941] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1947.568696][ T5677] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1947.693492][T15451] Bluetooth: hci5: command tx timeout [ 1947.823094][ T5677] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 1948.182750][ T5677] bond10 (unregistering): (slave bridge4): Releasing backup interface [ 1948.198569][ T5677] bridge4 (unregistering): left promiscuous mode [ 1949.991280][ T5677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1950.016694][T10964] xt_hashlimit: size too large, truncated to 1048576 [ 1950.025113][ T5677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1950.034990][ T5677] bond0 (unregistering): Released all slaves [ 1950.227751][T10967] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1950.923929][ T5677] bond1 (unregistering): Released all slaves [ 1951.694462][ T5954] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 1951.782811][T10985] netlink: 'syz.5.5674': attribute type 1 has an invalid length. [ 1951.843472][T10987] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5674'. [ 1951.862662][ T5954] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1951.912480][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1951.930351][ T5954] usb 1-1: Product: syz [ 1951.946187][ T5954] usb 1-1: Manufacturer: syz [ 1951.996448][ T5954] usb 1-1: SerialNumber: syz [ 1952.040105][ T5954] usb 1-1: config 0 descriptor?? [ 1952.073208][ T5954] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1952.171439][T10996] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5675'. [ 1952.514526][ T5954] gspca_sq930x: reg_r 001f failed -32 [ 1952.520089][ T5954] sq930x 1-1:0.0: probe with driver sq930x failed with error -32 [ 1952.696210][ T5677] bond2 (unregistering): Released all slaves [ 1952.832840][ T5677] bond3 (unregistering): Released all slaves [ 1952.857763][ T5954] usb 1-1: USB disconnect, device number 24 [ 1952.901883][ T5677] bond4 (unregistering): Released all slaves [ 1952.982772][ T5677] bond5 (unregistering): Released all slaves [ 1953.016801][ T5677] bond6 (unregistering): Released all slaves [ 1953.074047][ T5677] bond7 (unregistering): Released all slaves [ 1953.150999][ T5677] bond8 (unregistering): Released all slaves [ 1953.420947][ T5677] bond9 (unregistering): Released all slaves [ 1953.938379][ T5677] bond10 (unregistering): Released all slaves [ 1953.969244][ T5677] bond11 (unregistering): Released all slaves [ 1953.998334][ T5677] bond12 (unregistering): Released all slaves [ 1954.023482][ T5677] bond13 (unregistering): Released all slaves [ 1954.082367][T10596] hsr_slave_0: entered promiscuous mode [ 1954.103933][T10596] hsr_slave_1: entered promiscuous mode [ 1954.179166][T10596] debugfs: 'hsr0' already exists in 'hsr' [ 1954.201726][T10596] Cannot create hsr debugfs directory [ 1954.275822][T10985] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1954.475881][T11027] libceph: resolve 'c' (ret=-3): failed [ 1954.563404][ T5677] tipc: Disabling bearer [ 1954.597936][ T5677] tipc: Left network mode [ 1955.483687][ T5921] usb 6-1: new full-speed USB device number 123 using dummy_hcd [ 1955.662523][ T5921] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1955.674067][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.721103][ T5921] usb 6-1: Product: syz [ 1955.741196][ T5921] usb 6-1: Manufacturer: syz [ 1955.753172][ T5921] usb 6-1: SerialNumber: syz [ 1955.791141][ T5921] usb 6-1: config 0 descriptor?? [ 1955.831043][ T5921] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1955.862621][ T5677] hsr_slave_0: left promiscuous mode [ 1955.877697][ T5677] hsr_slave_1: left promiscuous mode [ 1955.895199][ T5677] veth1_vlan: left allmulticast mode [ 1956.041679][ T5921] gspca_sq930x: reg_r 001f failed -32 [ 1956.084451][ T5921] sq930x 6-1:0.0: probe with driver sq930x failed with error -32 [ 1956.170508][ T5677] team0 (unregistering): Port device batadv0 removed [ 1956.226826][ T10] usb 6-1: USB disconnect, device number 123 [ 1957.201676][T11194] netlink: 'syz.7.5689': attribute type 1 has an invalid length. [ 1957.263096][T11196] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5688'. [ 1957.324552][T11200] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5689'. [ 1958.005186][T11204] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5690'. [ 1959.661650][T11217] netlink: 'syz.5.5693': attribute type 3 has an invalid length. [ 1959.674416][T11217] netlink: 'syz.5.5693': attribute type 3 has an invalid length. [ 1959.822117][ T5677] team0 (unregistering): Port device team_slave_1 removed [ 1959.928505][ T5677] team0 (unregistering): Port device team_slave_0 removed [ 1960.194432][ T10] usb 6-1: new full-speed USB device number 124 using dummy_hcd [ 1960.389828][ T10] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1960.400489][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1960.424584][ T10] usb 6-1: Product: syz [ 1960.428929][ T10] usb 6-1: Manufacturer: syz [ 1960.433563][ T10] usb 6-1: SerialNumber: syz [ 1960.458667][ T10] usb 6-1: config 0 descriptor?? [ 1960.488193][ T10] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1960.686217][ T10] gspca_sq930x: reg_r 001f failed -32 [ 1960.691745][ T10] sq930x 6-1:0.0: probe with driver sq930x failed with error -32 [ 1960.847338][ T5954] usb 6-1: USB disconnect, device number 124 [ 1961.052221][T11194] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1961.394649][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 1961.394671][ T29] audit: type=1326 audit(1770721102.333:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.7.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd2f9af79 code=0x7ffc0000 [ 1961.462952][ T29] audit: type=1326 audit(1770721102.333:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.7.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fafd2f9af79 code=0x7ffc0000 [ 1961.502319][T10596] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1961.510314][ T29] audit: type=1326 audit(1770721102.333:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.7.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd2f9af79 code=0x7ffc0000 [ 1961.568524][T10596] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1961.616976][ T29] audit: type=1326 audit(1770721102.333:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.7.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fafd2f9af79 code=0x7ffc0000 [ 1961.698110][T10596] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1961.740371][T11292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1961.766293][T11288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1961.787037][T10596] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1961.852327][T11294] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5701'. [ 1961.862032][ T29] audit: type=1326 audit(1770721102.333:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.7.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd2f9af79 code=0x7ffc0000 [ 1961.886185][ T29] audit: type=1326 audit(1770721102.333:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.7.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fafd2f9af79 code=0x7ffc0000 [ 1961.910126][ T29] audit: type=1326 audit(1770721102.333:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.7.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd2f9af79 code=0x7ffc0000 [ 1961.959221][ T29] audit: type=1326 audit(1770721102.333:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.7.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fafd2f9af79 code=0x7ffc0000 [ 1961.982884][ T29] audit: type=1326 audit(1770721102.333:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.7.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd2f9af79 code=0x7ffc0000 [ 1962.118870][ T29] audit: type=1326 audit(1770721102.333:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.7.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fafd2f9af79 code=0x7ffc0000 [ 1963.062169][T10596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1963.389558][T10596] 8021q: adding VLAN 0 to HW filter on device team0 [ 1963.430482][ T5678] bridge0: port 1(bridge_slave_0) entered blocking state [ 1963.437688][ T5678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1963.531348][ T5677] bridge0: port 2(bridge_slave_1) entered blocking state [ 1963.538578][ T5677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1964.121562][T10596] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1964.144350][T10596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1964.364989][T10596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1964.643650][T10596] veth0_vlan: entered promiscuous mode [ 1964.682384][T10596] veth1_vlan: entered promiscuous mode [ 1964.759689][T10596] veth0_macvtap: entered promiscuous mode [ 1964.787229][T10596] veth1_macvtap: entered promiscuous mode [ 1964.822446][T11335] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5705'. [ 1964.937140][T10596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1964.989880][T10596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1965.151676][ T1330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1965.202567][ T1330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1965.216847][ T1330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1965.281057][ T1330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1965.421871][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1965.456411][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1965.542550][ T5674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1965.590424][ T5674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1965.677881][T11351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5706'. [ 1965.829344][T11360] netlink: 'syz.5.5707': attribute type 1 has an invalid length. [ 1965.963543][T11364] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5707'. [ 1966.325478][T11361] Invalid logical block size (1) [ 1966.618375][T11360] bond10: entered promiscuous mode [ 1966.681669][T11360] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1966.745934][T11364] bond10: entered allmulticast mode [ 1967.494747][ T5921] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1967.664595][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 1967.797576][ T5921] usb 1-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=93.52 [ 1967.819343][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.838583][ T5921] usb 1-1: Product: syz [ 1967.849796][ T5921] usb 1-1: Manufacturer: syz [ 1967.907496][ T5921] usb 1-1: SerialNumber: syz [ 1967.933871][ T5921] usb 1-1: config 0 descriptor?? [ 1968.167433][ T9438] usb 1-1: USB disconnect, device number 25 [ 1968.863838][T11445] netlink: 348 bytes leftover after parsing attributes in process `syz.0.5714'. [ 1969.122932][T11453] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5715'. [ 1969.506042][T11453] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5715'. [ 1969.606643][T11462] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5716'. [ 1970.745518][T11473] xt_TCPMSS: Only works on TCP SYN packets [ 1971.984042][ T10] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1972.164941][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1972.195137][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1972.214821][ T10] usb 4-1: config 0 has an invalid interface number: 165 but max is 0 [ 1972.250652][ T10] usb 4-1: config 0 has no interface number 0 [ 1972.269684][ T10] usb 4-1: config 0 interface 165 has no altsetting 0 [ 1972.365352][ T10] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=9b.2e [ 1972.421927][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1972.453463][ T10] usb 4-1: Product: syz [ 1972.467578][ T10] usb 4-1: Manufacturer: syz [ 1972.480992][ T10] usb 4-1: SerialNumber: syz [ 1972.507925][ T10] usb 4-1: config 0 descriptor?? [ 1972.872751][T11504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1972.891240][T11504] vivid-002: disconnect [ 1973.284508][ T1226] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1973.571098][ T1226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1973.624435][ T1226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1973.729999][ T1226] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1973.773831][ T1226] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1973.795832][ T1226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.825639][T11520] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5725'. [ 1973.837313][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1973.837329][ T29] audit: type=1400 audit(1770721114.803:1355): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="s" pid=11518 comm="syz.7.5725" [ 1973.869625][ T1226] usb 1-1: config 0 descriptor?? [ 1974.666678][T11531] xt_hashlimit: size too large, truncated to 1048576 [ 1976.165770][ T1226] plantronics 0003:047F:FFFF.0058: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1976.403695][ T1226] usb 1-1: USB disconnect, device number 26 [ 1976.761447][T11556] fido_id[11556]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1977.716955][ T10] comedi comedi5: Wrong number of endpoints [ 1977.722931][ T10] ni6501 4-1:0.165: driver 'ni6501' failed to auto-configure device. [ 1977.845387][T11503] vivid-002: reconnect [ 1977.873567][ T9437] usb 4-1: USB disconnect, device number 116 [ 1978.840318][T11596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5735'. [ 1978.860351][T11596] syzkaller1: entered promiscuous mode [ 1978.866086][T11596] syzkaller1: entered allmulticast mode [ 1979.005518][ T5954] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1979.214213][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1979.226659][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1979.238855][ T5954] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1979.251751][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1979.293607][T11661] usb usb8: usbfs: process 11661 (syz.0.5741) did not claim interface 0 before use [ 1979.304455][T11661] usb usb8: selecting invalid altsetting 2047 [ 1979.335047][ T5954] usb 4-1: config 0 descriptor?? [ 1980.804798][ T9437] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1980.944948][ T9437] usb 6-1: device descriptor read/64, error -71 [ 1981.129298][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.136487][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1981.202711][ T9437] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1981.297418][ T5954] usbhid 4-1:0.0: can't add hid device: -71 [ 1981.306136][ T5954] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1981.355231][ T5954] usb 4-1: USB disconnect, device number 117 [ 1981.361321][ T9437] usb 6-1: device descriptor read/64, error -71 [ 1981.505967][ T9437] usb usb6-port1: attempt power cycle [ 1981.864364][ T9437] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1981.933841][ T9437] usb 6-1: device descriptor read/8, error -71 [ 1982.214394][ T9437] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1982.283923][ T9437] usb 6-1: device descriptor read/8, error -71 [ 1982.312075][T11786] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5748'. [ 1982.476431][T11786] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5748'. [ 1982.531368][ T9437] usb usb6-port1: unable to enumerate USB device [ 1982.980008][T11793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5749'. [ 1982.994172][T11793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5749'. [ 1983.541092][T11817] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5753'. [ 1983.667284][T11824] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5753'. [ 1983.700823][T11826] Invalid argument reading file caps for ./file0 [ 1984.790966][T11858] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5761'. [ 1984.803389][T11858] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5761'. [ 1985.573488][T11902] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5765'. [ 1985.992007][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5767'. [ 1986.136732][T11936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5767'. [ 1987.035344][T11962] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5771'. [ 1987.729347][ T5921] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1987.788419][T11981] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1987.800650][T11978] fuse: Bad value for 'user_id' [ 1987.807688][T11978] fuse: Bad value for 'user_id' [ 1987.926201][ T5921] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1987.970953][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1988.032893][ T5921] usb 1-1: Product: syz [ 1988.050533][ T5921] usb 1-1: Manufacturer: syz [ 1988.067247][ T5921] usb 1-1: SerialNumber: syz [ 1988.347222][T15451] Bluetooth: hci2: command 0x0406 tx timeout [ 1988.469808][T11996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5777'. [ 1988.498758][T11996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5777'. [ 1989.106400][ T5921] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1989.180322][ T5921] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1989.197509][ T5921] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1989.210566][ T5921] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1989.223701][ T5921] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1989.297808][ T5921] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1989.466905][ T5921] usb 1-1: USB disconnect, device number 27 [ 1990.152085][T12033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5783'. [ 1990.465828][T12041] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5784'. [ 1990.736315][T12049] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5787'. [ 1990.930360][T12051] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5787'. [ 1991.416725][T12051] bond11: (slave bridge22): Enslaving as an active interface with an up link [ 1991.618297][T12078] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1991.804529][T10348] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1992.020845][T10348] usb 4-1: Using ep0 maxpacket: 32 [ 1992.075014][T10348] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1992.117385][T10348] usb 4-1: config 0 has an invalid interface number: 236 but max is 0 [ 1992.159563][T10348] usb 4-1: config 0 has no interface number 0 [ 1992.204357][T10348] usb 4-1: config 0 interface 236 has no altsetting 0 [ 1992.211708][T12099] : renamed from vlan0 (while UP) [ 1992.234988][T10348] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0113, bcdDevice=d5.e8 [ 1992.284349][T10348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1992.333040][T10348] usb 4-1: Product: syz [ 1992.357854][T10348] usb 4-1: Manufacturer: syz [ 1992.364923][T10348] usb 4-1: SerialNumber: syz [ 1992.406780][T10348] usb 4-1: config 0 descriptor?? [ 1992.682180][T12107] libceph: resolve 'c' (ret=-3): failed [ 1994.318369][T12133] netlink: 'syz.0.5796': attribute type 1 has an invalid length. [ 1994.472890][T12133] bond11: entered promiscuous mode [ 1994.509538][T12133] bond11: entered allmulticast mode [ 1994.537895][T12133] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1995.131045][T12178] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5799'. [ 1995.232969][T12179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5798'. [ 1995.322704][T12179] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5798'. [ 1995.586085][T12187] libceph: resolve 'c' (ret=-3): failed [ 1995.703780][T10348] kvaser_usb 4-1:0.236: error -ENODEV: Cannot get usb endpoint(s) [ 1995.739981][T10348] usb 4-1: USB disconnect, device number 118 [ 1996.453480][T12210] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5802'. [ 1998.240644][T12246] fuse: Unknown parameter '%򤐅-Z֡9)8pF[ iR!i0mmZ4Szr' [ 1998.848447][T12255] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5812'. [ 1999.959616][T12267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5814'. [ 2000.047911][T12267] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5814'. [ 2000.060305][T12267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5814'. [ 2000.069978][T12267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5814'. [ 2000.143068][T10348] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 2000.370841][T10348] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2000.408424][T10348] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2000.422931][T10348] usb 6-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 2000.443092][T10348] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2000.483244][T10348] usb 6-1: config 0 descriptor?? [ 2000.745637][T12283] syzkaller0: entered promiscuous mode [ 2000.751367][T12283] syzkaller0: entered allmulticast mode [ 2000.760676][T12283] tipc: Started in network mode [ 2000.794403][T12283] tipc: Node identity , cluster identity 4711 [ 2000.818082][T12283] tipc: Failed to obtain node identity [ 2000.836321][T12283] tipc: Enabling of bearer rejected, failed to enable media [ 2001.458323][T10348] usbhid 6-1:0.0: can't add hid device: -71 [ 2001.482869][T10348] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2001.567131][T10348] usb 6-1: USB disconnect, device number 3 [ 2001.616090][T12309] tipc: Enabling of bearer rejected, already enabled [ 2002.210017][T12320] tipc: Enabling of bearer rejected, failed to enable media [ 2002.580229][T12328] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5822'. [ 2003.044652][ T10] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 2003.236022][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 2003.247848][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2003.344389][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2003.434775][ T10] usb 4-1: config 1 has no interface number 1 [ 2003.452040][ T10] usb 4-1: config 1 interface 2 has no altsetting 0 [ 2003.466641][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2003.484353][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.514826][ T10] usb 4-1: Product: syz [ 2003.519061][ T10] usb 4-1: Manufacturer: syz [ 2003.554190][ T10] usb 4-1: SerialNumber: syz [ 2003.642021][T12335] netlink: 'syz.0.5824': attribute type 10 has an invalid length. [ 2003.864812][ T10] usb 4-1: selecting invalid altsetting 0 [ 2003.881699][ T10] usb 4-1: failed to enable PITCH for EP 0x82 [ 2003.908750][ T10] usb 4-1: selecting invalid altsetting 0 [ 2004.006687][ T10] usb 4-1: USB disconnect, device number 119 [ 2004.173540][T12359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2004.192623][ T1164] udevd[1164]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2004.304565][T12335] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 2004.684848][T12385] netlink: 'syz.7.5828': attribute type 10 has an invalid length. [ 2004.698491][T12385] 8021q: adding VLAN 0 to HW filter on device team0 [ 2004.734403][ T5921] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2004.763873][T12385] bond0: (slave team0): Enslaving as an active interface with an up link [ 2004.984461][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 2005.019571][ T5921] usb 1-1: config 0 has an invalid interface number: 213 but max is 1 [ 2005.033138][ T5921] usb 1-1: config 0 has no interface number 1 [ 2005.064611][ T5921] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2005.087063][ T5921] usb 1-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 2005.118778][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.165371][ T5921] usb 1-1: Product: syz [ 2005.169606][ T5921] usb 1-1: Manufacturer: syz [ 2005.203569][ T5921] usb 1-1: SerialNumber: syz [ 2005.213246][ T5921] usb 1-1: config 0 descriptor?? [ 2006.371122][T12428] input: syz0 as /devices/virtual/input/input84 [ 2006.458209][T12429] SET target dimension over the limit! [ 2006.737688][ T10] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 2006.810433][T12439] netlink: 'syz.7.5838': attribute type 1 has an invalid length. [ 2006.837822][ T5921] usb 1-1: selecting invalid altsetting 0 [ 2006.844107][ T5921] usb 1-1: Could not set interface, error -22 [ 2006.906523][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 2006.916459][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2006.925782][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2006.944848][ T10] usb 4-1: config 1 has no interface number 1 [ 2006.951021][ T10] usb 4-1: config 1 interface 2 has no altsetting 0 [ 2006.960454][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2006.970303][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2006.979363][ T10] usb 4-1: Product: syz [ 2006.984011][ T10] usb 4-1: Manufacturer: syz [ 2007.110199][ T5921] usb 1-1: USB disconnect, device number 28 [ 2007.128479][T12439] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2007.167378][ T10] usb 4-1: SerialNumber: syz [ 2007.199368][T12440] macvlan2: entered promiscuous mode [ 2007.232490][T12440] macvlan2: entered allmulticast mode [ 2007.244856][T12440] bond2: entered allmulticast mode [ 2007.254334][T12440] bond2: entered promiscuous mode [ 2007.264620][T12440] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2007.277589][T12440] team0: Port device macvlan2 added [ 2007.427892][ T10] usb 4-1: selecting invalid altsetting 0 [ 2007.437775][ T10] usb 4-1: failed to enable PITCH for EP 0x82 [ 2007.454918][ T10] usb 4-1: selecting invalid altsetting 0 [ 2007.583148][ T10] usb 4-1: USB disconnect, device number 120 [ 2007.783949][ T1164] udevd[1164]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2007.886700][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5843'. [ 2008.019947][T12536] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5839'. [ 2008.469105][T12555] netlink: 'syz.5.5844': attribute type 8 has an invalid length. [ 2008.929021][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5852'. [ 2008.946400][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5852'. [ 2009.591477][ T10] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 2009.794767][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 2009.823302][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2009.834369][ T5921] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2009.843034][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2009.854342][ T10] usb 4-1: config 1 has no interface number 1 [ 2009.860501][ T10] usb 4-1: config 1 interface 2 has no altsetting 0 [ 2009.875713][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2009.885416][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2009.983283][T12637] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 2010.020031][ T10] usb 4-1: Product: syz [ 2010.034166][ T10] usb 4-1: Manufacturer: syz [ 2010.051480][ T10] usb 4-1: SerialNumber: syz [ 2010.085358][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 2010.095972][ T5921] usb 1-1: config 0 has no interfaces? [ 2010.104658][ T5921] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2010.123800][ T5921] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2010.145687][ T5921] usb 1-1: Manufacturer: syz [ 2010.169246][ T5921] usb 1-1: config 0 descriptor?? [ 2010.470050][ T10] usb 4-1: selecting invalid altsetting 0 [ 2010.482044][ T10] usb 4-1: failed to enable PITCH for EP 0x82 [ 2010.494171][ T10] usb 4-1: selecting invalid altsetting 0 [ 2010.539593][ T10] usb 4-1: USB disconnect, device number 121 [ 2010.677883][ T1164] udevd[1164]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2011.339835][T12688] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2012.068921][T12711] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5866'. [ 2012.116534][T12712] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5866'. [ 2012.478023][ T5954] usb 1-1: USB disconnect, device number 29 [ 2012.522789][T12720] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5867'. [ 2012.792340][T12733] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5868'. [ 2015.025578][T12747] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5871'. [ 2015.554407][ T5921] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 2015.746990][ T5921] usb 6-1: config 0 has an invalid interface number: 216 but max is 0 [ 2015.780884][ T5921] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 2015.847364][ T5921] usb 6-1: config 0 has no interface number 0 [ 2015.867059][ T5921] usb 6-1: config 0 interface 216 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2016.145967][ T5921] usb 6-1: config 0 interface 216 has no altsetting 0 [ 2016.166848][ T5921] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 2016.187813][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.237079][ T5921] usb 6-1: config 0 descriptor?? [ 2016.338582][T12773] tipc: Started in network mode [ 2016.343553][T12773] tipc: Node identity 00000000400000000000000000000001, cluster identity 4711 [ 2016.367347][T12773] tipc: Enabling of bearer rejected, failed to enable media [ 2016.461624][T12762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2016.482112][T12762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2016.603996][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5877'. [ 2016.665868][T12762] PKCS8: Unsupported PKCS#8 version [ 2016.702520][T12730] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2017.914200][T12809] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5883'. [ 2018.004388][ T10] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 2018.164462][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 2018.174877][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 2018.184125][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2018.204361][ T10] usb 4-1: Product: syz [ 2018.208611][ T10] usb 4-1: Manufacturer: syz [ 2018.226246][ T10] usb 4-1: SerialNumber: syz [ 2018.267069][ T10] usb 4-1: config 0 descriptor?? [ 2018.317735][ T5921] usb 6-1: string descriptor 0 read error: -71 [ 2018.419730][ T5921] usb 6-1: USB disconnect, device number 4 [ 2018.476732][ T10] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 2018.528376][ T10] usb write operation failed. (-71) [ 2018.539943][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2018.582883][ T10] dvbdev: DVB: registering new adapter (Terratec H7) [ 2018.589815][ T10] usb 4-1: media controller created [ 2018.600333][ T10] usb read operation failed. (-71) [ 2018.614842][ T10] usb write operation failed. (-71) [ 2018.681388][ T10] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 2018.808776][ T10] usb 4-1: USB disconnect, device number 122 [ 2019.261220][T12860] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 2019.366062][T12866] FAULT_INJECTION: forcing a failure. [ 2019.366062][T12866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2019.404657][T12866] CPU: 1 UID: 0 PID: 12866 Comm: syz.8.5890 Tainted: G L syzkaller #0 PREEMPT(full) [ 2019.404690][T12866] Tainted: [L]=SOFTLOCKUP [ 2019.404698][T12866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2019.404711][T12866] Call Trace: [ 2019.404720][T12866] [ 2019.404729][T12866] dump_stack_lvl+0xe8/0x150 [ 2019.404764][T12866] should_fail_ex+0x412/0x560 [ 2019.404797][T12866] _copy_from_iter+0x1d3/0x1670 [ 2019.404835][T12866] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 2019.404870][T12866] ? __pfx__copy_from_iter+0x10/0x10 [ 2019.404897][T12866] ? __build_skb_around+0x22d/0x3c0 [ 2019.404922][T12866] ? __alloc_skb+0x193/0x390 [ 2019.404945][T12866] ? netlink_sendmsg+0x650/0xb40 [ 2019.404965][T12866] ? skb_put+0x11b/0x210 [ 2019.404991][T12866] netlink_sendmsg+0x6c0/0xb40 [ 2019.405019][T12866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2019.405042][T12866] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2019.405068][T12866] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2019.405087][T12866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2019.405106][T12866] ____sys_sendmsg+0xa68/0xad0 [ 2019.405132][T12866] ? __might_fault+0xaf/0x130 [ 2019.405162][T12866] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2019.405194][T12866] ? import_iovec+0x73/0xa0 [ 2019.405214][T12866] ___sys_sendmsg+0x2a5/0x360 [ 2019.405238][T12866] ? __lock_acquire+0x6b5/0x2cf0 [ 2019.405266][T12866] ? __pfx____sys_sendmsg+0x10/0x10 [ 2019.405319][T12866] ? __fget_files+0x2a/0x420 [ 2019.405336][T12866] ? __fget_files+0x3a0/0x420 [ 2019.405361][T12866] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2019.405396][T12866] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2019.405429][T12866] ? __pfx_ksys_write+0x10/0x10 [ 2019.405461][T12866] do_syscall_64+0xe2/0xf80 [ 2019.405482][T12866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2019.405498][T12866] ? trace_irq_disable+0x37/0x100 [ 2019.405513][T12866] ? clear_bhb_loop+0x60/0xb0 [ 2019.405533][T12866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2019.405550][T12866] RIP: 0033:0x7fd3c159af79 [ 2019.405566][T12866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2019.405581][T12866] RSP: 002b:00007fd3c2412028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2019.405600][T12866] RAX: ffffffffffffffda RBX: 00007fd3c1815fa0 RCX: 00007fd3c159af79 [ 2019.405612][T12866] RDX: 0000000004040800 RSI: 0000200000000500 RDI: 0000000000000003 [ 2019.405624][T12866] RBP: 00007fd3c2412090 R08: 0000000000000000 R09: 0000000000000000 [ 2019.405635][T12866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2019.405645][T12866] R13: 00007fd3c1816038 R14: 00007fd3c1815fa0 R15: 00007fd3c193fa48 [ 2019.405670][T12866] [ 2020.158614][T12880] IPVS: set_ctl: invalid protocol: 177 255.255.255.255:20001 [ 2020.186388][ T29] audit: type=1326 audit(1770721161.143:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.8.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c159af79 code=0x7ffc0000 [ 2020.241921][ T29] audit: type=1326 audit(1770721161.143:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.8.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c159af79 code=0x7ffc0000 [ 2020.420030][ T29] audit: type=1326 audit(1770721161.143:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.8.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd3c155b84e code=0x7ffc0000 [ 2020.513343][ T29] audit: type=1326 audit(1770721161.143:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.8.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c159af79 code=0x7ffc0000 [ 2020.779662][ T29] audit: type=1326 audit(1770721161.143:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.8.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c159af79 code=0x7ffc0000 [ 2020.814377][ T5954] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 2020.828671][T12889] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5894'. [ 2020.847373][ T29] audit: type=1326 audit(1770721161.153:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.8.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fd3c159af79 code=0x7ffc0000 [ 2020.899516][ T29] audit: type=1326 audit(1770721161.153:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.8.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c159af79 code=0x7ffc0000 [ 2020.998257][ T5954] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2021.007104][ T5954] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2021.033644][ T29] audit: type=1326 audit(1770721161.153:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.8.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c159af79 code=0x7ffc0000 [ 2021.088581][ T5954] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2021.120227][ T5954] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2021.136814][ T5954] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2021.154817][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2021.164670][ T5954] usb 6-1: Product: syz [ 2021.170169][ T5954] usb 6-1: Manufacturer: syz [ 2021.202127][ T5954] usb 6-1: SerialNumber: syz [ 2021.231339][ T29] audit: type=1326 audit(1770721162.183:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12895 comm="syz.7.5897" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafd2f9af79 code=0x0 [ 2021.308872][T12904] syz_tun: entered allmulticast mode [ 2021.344406][T12904] syz_tun: left allmulticast mode [ 2021.607872][T12910] libceph: resolve 'c' (ret=-3): failed [ 2021.743509][ T5954] usb 6-1: 0:2 : does not exist [ 2021.840918][ T5954] usb 6-1: USB disconnect, device number 5 [ 2023.013183][T12946] KVM: debugfs: duplicate directory 12946-5 [ 2023.096947][T12950] fuse: Bad value for 'fd' [ 2023.108417][T12950] ipip0: entered promiscuous mode [ 2023.154428][T12950] ipip0: entered allmulticast mode [ 2023.993197][T12963] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 2024.015092][T12964] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 2024.023919][T12964] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2024.204582][T12967] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2024.393868][T12977] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5906'. [ 2024.407780][T12978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5905'. [ 2024.502525][T12978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5905'. [ 2027.161987][T13061] FAULT_INJECTION: forcing a failure. [ 2027.161987][T13061] name failslab, interval 1, probability 0, space 0, times 0 [ 2027.228344][T13061] CPU: 1 UID: 0 PID: 13061 Comm: syz.5.5916 Tainted: G L syzkaller #0 PREEMPT(full) [ 2027.228378][T13061] Tainted: [L]=SOFTLOCKUP [ 2027.228392][T13061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2027.228402][T13061] Call Trace: [ 2027.228410][T13061] [ 2027.228418][T13061] dump_stack_lvl+0xe8/0x150 [ 2027.228468][T13061] should_fail_ex+0x412/0x560 [ 2027.228503][T13061] should_failslab+0xa8/0x100 [ 2027.228529][T13061] __kmalloc_noprof+0xde/0x7e0 [ 2027.228561][T13061] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 2027.228595][T13061] ? rcu_is_watching+0x15/0xb0 [ 2027.228633][T13061] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 2027.228686][T13061] genl_family_rcv_msg_doit+0xd9/0x330 [ 2027.228720][T13061] ? __asan_memcpy+0x40/0x70 [ 2027.228753][T13061] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2027.228787][T13061] ? __pfx___mutex_lock+0x10/0x10 [ 2027.228815][T13061] ? __pfx_genl_get_cmd+0x10/0x10 [ 2027.228843][T13061] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 2027.228878][T13061] ? __dev_queue_xmit+0x274/0x3850 [ 2027.228908][T13061] genl_rcv_msg+0x61c/0x7a0 [ 2027.228945][T13061] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2027.228975][T13061] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 2027.229010][T13061] ? __pfx_ref_tracker_free+0x10/0x10 [ 2027.229048][T13061] netlink_rcv_skb+0x232/0x4b0 [ 2027.229076][T13061] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2027.229109][T13061] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2027.229132][T13061] ? genl_rcv+0x19/0x40 [ 2027.229181][T13061] ? down_read+0x272/0x2e0 [ 2027.229207][T13061] ? genl_rcv+0xd/0x40 [ 2027.229239][T13061] genl_rcv+0x28/0x40 [ 2027.229267][T13061] netlink_unicast+0x80f/0x9b0 [ 2027.229300][T13061] ? __pfx_netlink_unicast+0x10/0x10 [ 2027.229322][T13061] ? __alloc_skb+0x193/0x390 [ 2027.229351][T13061] ? netlink_sendmsg+0x650/0xb40 [ 2027.229375][T13061] ? skb_put+0x11b/0x210 [ 2027.229408][T13061] netlink_sendmsg+0x813/0xb40 [ 2027.229445][T13061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2027.229476][T13061] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2027.229509][T13061] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2027.229533][T13061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2027.229559][T13061] ____sys_sendmsg+0xa68/0xad0 [ 2027.229591][T13061] ? __might_fault+0xaf/0x130 [ 2027.229627][T13061] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2027.229675][T13061] ? import_iovec+0x73/0xa0 [ 2027.229702][T13061] ___sys_sendmsg+0x2a5/0x360 [ 2027.229733][T13061] ? __lock_acquire+0x6b5/0x2cf0 [ 2027.229769][T13061] ? __pfx____sys_sendmsg+0x10/0x10 [ 2027.229841][T13061] ? __fget_files+0x2a/0x420 [ 2027.229863][T13061] ? __fget_files+0x3a0/0x420 [ 2027.229896][T13061] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2027.229932][T13061] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2027.229974][T13061] ? __pfx_ksys_write+0x10/0x10 [ 2027.230017][T13061] do_syscall_64+0xe2/0xf80 [ 2027.230052][T13061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2027.230073][T13061] ? trace_irq_disable+0x37/0x100 [ 2027.230092][T13061] ? clear_bhb_loop+0x60/0xb0 [ 2027.230118][T13061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2027.230140][T13061] RIP: 0033:0x7f7fd719af79 [ 2027.230160][T13061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2027.230178][T13061] RSP: 002b:00007f7fd7f83028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2027.230200][T13061] RAX: ffffffffffffffda RBX: 00007f7fd7415fa0 RCX: 00007f7fd719af79 [ 2027.230215][T13061] RDX: 0000000004040800 RSI: 0000200000000500 RDI: 0000000000000003 [ 2027.230230][T13061] RBP: 00007f7fd7f83090 R08: 0000000000000000 R09: 0000000000000000 [ 2027.230244][T13061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2027.230256][T13061] R13: 00007f7fd7416038 R14: 00007f7fd7415fa0 R15: 00007f7fd753fa48 [ 2027.230292][T13061] [ 2027.941345][T13074] program syz.0.5918 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2027.985157][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5919'. [ 2027.994073][T13075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5919'. [ 2028.084649][T10348] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 2028.267065][T10348] usb 6-1: config 0 has no interfaces? [ 2028.289300][T10348] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2028.313225][T10348] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2028.340657][T10348] usb 6-1: config 0 descriptor?? [ 2028.443249][T13116] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2030.756115][T13164] FAULT_INJECTION: forcing a failure. [ 2030.756115][T13164] name failslab, interval 1, probability 0, space 0, times 0 [ 2030.810444][T13164] CPU: 1 UID: 0 PID: 13164 Comm: syz.3.5930 Tainted: G L syzkaller #0 PREEMPT(full) [ 2030.810469][T13164] Tainted: [L]=SOFTLOCKUP [ 2030.810474][T13164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2030.810484][T13164] Call Trace: [ 2030.810490][T13164] [ 2030.810497][T13164] dump_stack_lvl+0xe8/0x150 [ 2030.810521][T13164] should_fail_ex+0x412/0x560 [ 2030.810545][T13164] should_failslab+0xa8/0x100 [ 2030.810562][T13164] __kmalloc_cache_noprof+0x83/0x6e0 [ 2030.810585][T13164] ? mpi_alloc+0x52/0x140 [ 2030.810610][T13164] mpi_alloc+0x52/0x140 [ 2030.810632][T13164] dh_compute_value+0x95/0x390 [ 2030.810647][T13164] ? __keyctl_dh_compute+0x6b4/0xd10 [ 2030.810664][T13164] ? __pfx_dh_compute_value+0x10/0x10 [ 2030.810677][T13164] ? trace_kmalloc+0x1f/0xb0 [ 2030.810697][T13164] ? __kmalloc_noprof+0x42d/0x7e0 [ 2030.810716][T13164] ? __phys_addr+0xd3/0x180 [ 2030.810734][T13164] ? __keyctl_dh_compute+0x6b4/0xd10 [ 2030.810751][T13164] __keyctl_dh_compute+0x81b/0xd10 [ 2030.810773][T13164] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 2030.810796][T13164] ? __might_fault+0xaf/0x130 [ 2030.810833][T13164] keyctl_dh_compute+0x124/0x180 [ 2030.810850][T13164] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 2030.810876][T13164] __se_sys_keyctl+0x44c/0x9e0 [ 2030.810896][T13164] ? __pfx___se_sys_keyctl+0x10/0x10 [ 2030.810918][T13164] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2030.810940][T13164] ? __fget_files+0x3a0/0x420 [ 2030.810959][T13164] ? fput+0xa0/0xd0 [ 2030.810976][T13164] ? ksys_write+0x242/0x270 [ 2030.810998][T13164] ? __pfx_ksys_write+0x10/0x10 [ 2030.811021][T13164] ? __x64_sys_keyctl+0x20/0xc0 [ 2030.811042][T13164] do_syscall_64+0xe2/0xf80 [ 2030.811059][T13164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2030.811073][T13164] ? trace_irq_disable+0x37/0x100 [ 2030.811091][T13164] ? clear_bhb_loop+0x60/0xb0 [ 2030.811110][T13164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2030.811124][T13164] RIP: 0033:0x7f8d7779af79 [ 2030.811138][T13164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2030.811150][T13164] RSP: 002b:00007f8d786e0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 2030.811166][T13164] RAX: ffffffffffffffda RBX: 00007f8d77a15fa0 RCX: 00007f8d7779af79 [ 2030.811177][T13164] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000017 [ 2030.811187][T13164] RBP: 00007f8d786e0090 R08: 0000200000000280 R09: 0000000000000000 [ 2030.811196][T13164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2030.811205][T13164] R13: 00007f8d77a16038 R14: 00007f8d77a15fa0 R15: 00007f8d77b3fa48 [ 2030.811227][T13164] [ 2031.763236][T13175] tipc: Enabled bearer , priority 0 [ 2031.771099][T13175] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 2031.778712][T13175] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 2031.859483][ T9437] usb 6-1: USB disconnect, device number 6 [ 2032.021387][T13175] tipc: Resetting bearer [ 2032.187507][T13187] tipc: New replicast peer: 255.255.255.255 [ 2032.194966][T13187] tipc: Enabled bearer , priority 10 [ 2033.179832][T13203] xt_hashlimit: size too large, truncated to 1048576 [ 2033.483509][ T1226] tipc: Node number set to 1073741825 [ 2034.054389][ T5954] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2034.204508][ T5954] usb 6-1: Using ep0 maxpacket: 16 [ 2034.253894][ T5954] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2034.266866][ T5954] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2034.337406][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2034.377017][ T5954] usb 6-1: config 0 descriptor?? [ 2034.868605][ T5954] hid (null): global environment stack underflow [ 2034.898481][ T5954] hid (null): unknown global tag 0xc [ 2034.927025][ T5954] hid (null): report_id 25068 is invalid [ 2034.945485][ T5954] hid (null): report_id 0 is invalid [ 2034.974643][ T5954] hid (null): global environment stack overflow [ 2035.114784][T13237] xt_hashlimit: size too large, truncated to 1048576 [ 2035.197790][ T5954] hid (null): unknown global tag 0xc [ 2035.203156][ T5954] hid (null): unknown global tag 0x58 [ 2035.361949][ T5954] usb 6-1: USB disconnect, device number 7 [ 2036.306499][T13266] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5943'. [ 2036.807390][T13273] tipc: Started in network mode [ 2037.045558][T13273] tipc: Node identity faadc1629fe7, cluster identity 4711 [ 2037.073595][T13273] tipc: Enabled bearer , priority 0 [ 2037.091918][T13274] syzkaller0: entered promiscuous mode [ 2037.100383][T13274] syzkaller0: entered allmulticast mode [ 2037.155795][T13281] tipc: Enabled bearer , priority 0 [ 2037.184839][T13281] syzkaller0: entered promiscuous mode [ 2037.201720][T13281] syzkaller0: entered allmulticast mode [ 2037.258404][T13274] tipc: Resetting bearer [ 2037.358976][T13274] tipc: Disabling bearer [ 2037.534355][T10348] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 2037.584662][ T9437] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 2037.684781][T10348] usb 6-1: Using ep0 maxpacket: 32 [ 2037.692786][T10348] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2037.724199][T10348] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2037.754377][ T9437] usb 1-1: Using ep0 maxpacket: 16 [ 2037.794704][T10348] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2037.824209][T10348] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2037.869585][T10348] usb 6-1: config 0 descriptor?? [ 2037.880919][ T9437] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 2037.907145][ T9437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.941428][ T9437] usb 1-1: Product: syz [ 2037.953317][ T9437] usb 1-1: Manufacturer: syz [ 2037.973239][ T9437] usb 1-1: SerialNumber: syz [ 2038.158968][T13281] tipc: Resetting bearer [ 2038.307929][T13280] tipc: Resetting bearer [ 2038.311301][T10348] usbhid 6-1:0.0: can't add hid device: -71 [ 2038.330537][ T9437] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 2038.341491][T10348] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2038.380353][T10348] usb 6-1: USB disconnect, device number 8 [ 2038.396956][T13280] tipc: Disabling bearer [ 2038.431544][ T9437] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2038.483761][ T9437] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 2038.549345][ T9437] usb 1-1: media controller created [ 2038.634597][ T9437] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2038.954715][ T9437] zl10353_read_register: readreg error (reg=127, ret==-110) [ 2039.139780][ T9437] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 2039.448034][T13360] xt_hashlimit: size too large, truncated to 1048576 [ 2040.978523][ T9437] usb 1-1: USB disconnect, device number 30 [ 2041.414418][ T9437] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 2041.594423][ T9437] usb 4-1: Using ep0 maxpacket: 8 [ 2041.604282][ T9437] usb 4-1: config 8 has an invalid interface number: 188 but max is 0 [ 2041.613787][ T9437] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2041.634404][ T9437] usb 4-1: config 8 has no interface number 0 [ 2041.674636][ T9437] usb 4-1: config 8 interface 188 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2041.822472][ T1226] IPVS: starting estimator thread 0... [ 2041.862240][ T9437] usb 4-1: config 8 interface 188 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2041.917077][T13402] IPVS: using max 39 ests per chain, 93600 per kthread [ 2041.934175][ T9437] usb 4-1: config 8 interface 188 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2041.995446][ T9437] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 2042.036450][ T9437] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2042.065787][ T9437] usb 4-1: Product: syz [ 2042.069984][ T9437] usb 4-1: Manufacturer: syz [ 2042.086772][ T9437] usb 4-1: SerialNumber: syz [ 2042.361323][ T9437] vmk80xx 4-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 2042.425510][T13415] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5962'. [ 2042.486389][ T9437] usb 4-1: USB disconnect, device number 123 [ 2042.570106][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.585460][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2042.783332][T13436] bridge10: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 2042.811517][T13437] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5964'. [ 2042.909388][T13437] netlink: 'syz.0.5964': attribute type 2 has an invalid length. [ 2042.924884][T13437] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5964'. [ 2042.959626][T13441] tipc: Enabling of bearer rejected, already enabled [ 2044.194350][ T5921] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2044.370036][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 2044.381673][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 2044.437525][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 2044.498681][ T5921] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 2044.516069][ T5921] usb 1-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 2044.524551][ T5921] usb 1-1: Product: syz [ 2044.532329][ T5921] usb 1-1: Manufacturer: syz [ 2044.539168][ T5921] usb 1-1: SerialNumber: syz [ 2044.561756][ T5921] usb 1-1: config 0 descriptor?? [ 2044.606765][ T5921] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2044.837778][ T5674] usb 1-1: Failed to submit usb control message: -71 [ 2044.840342][ T5921] usb 1-1: USB disconnect, device number 31 [ 2044.845814][ T5674] usb 1-1: unable to send the bmi data to the device: -71 [ 2044.866698][ T5674] usb 1-1: unable to get target info from device [ 2044.873365][ T5674] usb 1-1: could not get target info (-71) [ 2044.881538][ T5674] usb 1-1: could not probe fw (-71) [ 2045.266530][T13499] tipc: Enabled bearer , priority 0 [ 2045.274069][T13499] syzkaller0: entered promiscuous mode [ 2045.280610][T13499] syzkaller0: entered allmulticast mode [ 2045.314960][T13499] tipc: Resetting bearer [ 2045.325684][T13498] tipc: Resetting bearer [ 2045.362854][T13498] tipc: Disabling bearer [ 2045.464603][ T5921] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 2045.647364][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2045.658412][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2045.677781][T13521] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 2045.693463][ T5921] usb 4-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 2045.706731][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2045.733584][ T5921] usb 4-1: config 0 descriptor?? [ 2045.741187][T13494] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2045.957557][T13494] xt_bpf: check failed: parse error [ 2046.186590][T13531] program syz.0.5980 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2046.774492][ T5921] usbhid 4-1:0.0: can't add hid device: -71 [ 2046.805150][ T5921] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2046.888687][ T5921] usb 4-1: USB disconnect, device number 124 [ 2046.992164][T13547] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5984'. [ 2047.023825][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5984'. [ 2047.825348][T13568] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5986'. [ 2048.012097][T13567] program syz.5.5986 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2048.444401][T13567] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2049.349528][T13575] tipc: Enabling of bearer rejected, already enabled [ 2049.723883][T13592] loop2: detected capacity change from 0 to 7 [ 2049.967802][T13592] Dev loop2: unable to read RDB block 7 [ 2049.974619][T13592] loop2: AHDI p1 p2 p3 [ 2050.147182][T13592] loop2: partition table partially beyond EOD, truncated [ 2050.216075][T13592] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2050.234042][T13592] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2050.480068][T13631] libceph: resolve 'c' (ret=-3): failed [ 2050.866686][T13655] netlink: 'syz.3.5995': attribute type 1 has an invalid length. [ 2051.209592][T13686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5995'. [ 2051.312746][T13655] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2051.342107][T13655] bond2: (slave bond3): making interface the new active one [ 2051.388836][T13655] bond2: (slave bond3): Enslaving as an active interface with an up link [ 2051.484990][T13673] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 2051.563048][T13686] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2052.859299][T13764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6000'. [ 2052.885060][T13764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6000'. [ 2052.954830][T13764] netlink: 'syz.3.6000': attribute type 11 has an invalid length. [ 2053.091013][T13764] netlink: 'syz.3.6000': attribute type 12 has an invalid length. [ 2053.155961][ T5921] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 2053.349296][ T5921] usb 6-1: Using ep0 maxpacket: 32 [ 2053.362094][ T5921] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2053.376460][ T5921] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2053.436990][T13796] tipc: New replicast peer: 255.255.255.255 [ 2053.443797][T13796] tipc: Enabled bearer , priority 10 [ 2053.447849][ T5921] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2053.474608][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2053.577259][ T5921] usb 6-1: config 0 descriptor?? [ 2053.603096][ T5921] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2054.324986][ T9438] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2054.445259][T10348] tipc: Node number set to 1699397986 [ 2054.623771][ T9438] usb 1-1: Using ep0 maxpacket: 32 [ 2054.640252][ T9438] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2054.652250][ T9438] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2054.684823][ T9438] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2054.710723][ T9438] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2054.745748][ T9438] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2054.756308][ T9438] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.767858][ T9438] usb 1-1: Product: syz [ 2054.773474][ T9438] usb 1-1: Manufacturer: syz [ 2054.780286][ T9438] usb 1-1: SerialNumber: syz [ 2055.109284][ T9438] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 2055.119800][ T9438] usb 1-1: 2:1 : invalid channels 0 [ 2055.273963][ T9438] usb 1-1: USB disconnect, device number 32 [ 2055.670739][T13842] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 2056.278799][ T5921] usb 6-1: USB disconnect, device number 9 [ 2056.402942][T13868] libceph: resolve 'c' (ret=-3): failed [ 2057.460736][T13880] netlink: 'syz.3.6013': attribute type 5 has an invalid length. [ 2058.085770][T13920] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2058.095908][T13921] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2058.312718][T13891] netlink: 'syz.3.6015': attribute type 3 has an invalid length. [ 2058.320920][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6015'. [ 2058.511576][T13931] bond13: option arp_interval: invalid value (18446744073709547520) [ 2058.519909][T13931] bond13: option arp_interval: allowed values 0 - 2147483647 [ 2058.531105][T13931] bond13 (unregistering): Released all slaves [ 2058.587778][ T9437] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2058.789154][ T9437] usb 4-1: Using ep0 maxpacket: 16 [ 2058.802694][ T9437] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2058.831069][ T9437] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2058.907372][T14017] tipc: Enabling of bearer rejected, already enabled [ 2058.995060][ T9437] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 2059.007644][ T9437] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2059.044367][ T9437] usb 4-1: Product: syz [ 2059.052077][ T9437] usb 4-1: Manufacturer: syz [ 2059.062885][ T9437] usb 4-1: SerialNumber: syz [ 2059.244664][ T9437] usb 4-1: config 0 descriptor?? [ 2059.354418][ T5921] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 2059.550491][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 2059.701738][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2059.840754][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2059.873926][ T5921] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2059.928526][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2059.960041][ T5921] usb 1-1: config 0 descriptor?? [ 2059.995437][ T5921] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2060.738541][ T9437] usb 4-1: USB disconnect, device number 125 [ 2061.209733][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 2061.368952][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 2061.396137][ T10] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2061.421936][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2061.477337][ T10] usb 6-1: Product: syz [ 2061.485413][ T10] usb 6-1: Manufacturer: syz [ 2061.490093][ T10] usb 6-1: SerialNumber: syz [ 2061.502184][ T10] r8152-cfgselector 6-1: Unknown version 0x0000 [ 2061.509770][ T10] r8152-cfgselector 6-1: config 0 descriptor?? [ 2061.964841][T14054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6024'. [ 2061.991165][T14054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6024'. [ 2062.035017][T14054] binder: BINDER_SET_CONTEXT_MGR already set [ 2062.041149][T14054] binder: 14053:14054 ioctl 4018620d 200000004a80 returned -16 [ 2062.108433][T14079] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6027'. [ 2062.267460][T14079] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6027'. [ 2062.553837][ T9438] usb 1-1: USB disconnect, device number 33 [ 2062.922567][T14093] CUSE: unknown device info "H" [ 2062.948293][T14093] CUSE: unknown device info "$" [ 2062.953215][T14093] CUSE: unknown device info "Ae-p" [ 2062.968465][T14093] CUSE: unknown device info "%" [ 2062.977209][T14093] CUSE: unknown device info "" [ 2063.011181][T14093] CUSE: unknown device info "" [ 2063.037950][T14093] CUSE: unknown device info "$" [ 2063.063997][T14093] CUSE: unknown device info "" [ 2063.074669][T14093] CUSE: unknown device info "" [ 2063.081257][T14093] CUSE: unknown device info "р" [ 2063.088612][T14093] CUSE: unknown device info "" [ 2063.095784][T14093] CUSE: unknown device info "" [ 2063.101752][T14093] CUSE: zero length info key specified [ 2063.678634][T14115] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 2063.841370][ T8758] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2063.855692][ T8758] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2063.868724][ T8758] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2063.877376][ T8758] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2063.885327][ T8758] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2064.051451][ T10] r8152-cfgselector 6-1: Unknown version 0x0000 [ 2064.060829][ T10] r8152-cfgselector 6-1: bad CDC descriptors [ 2064.165982][ T10] r8152-cfgselector 6-1: USB disconnect, device number 10 [ 2064.694531][T14169] tipc: Enabling of bearer rejected, already enabled [ 2065.088302][T14124] chnl_net:caif_netlink_parms(): no params data found [ 2065.155515][T15451] Bluetooth: hci5: command 0x0406 tx timeout [ 2065.278908][T14212] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6035'. [ 2065.585862][ T5678] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2065.629171][ T5678] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2065.908798][T14124] bridge0: port 1(bridge_slave_0) entered blocking state [ 2065.940646][T14124] bridge0: port 1(bridge_slave_0) entered disabled state [ 2065.966716][T14124] bridge_slave_0: entered allmulticast mode [ 2066.011413][T24041] Bluetooth: hci0: command tx timeout [ 2066.038118][T14124] bridge_slave_0: entered promiscuous mode [ 2066.071453][T14124] bridge0: port 2(bridge_slave_1) entered blocking state [ 2066.079936][T14124] bridge0: port 2(bridge_slave_1) entered disabled state [ 2066.094729][T14124] bridge_slave_1: entered allmulticast mode [ 2066.112105][T14124] bridge_slave_1: entered promiscuous mode [ 2066.240538][ T5678] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2066.274310][ T5678] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2066.768955][ T5678] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2066.804605][ T5678] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2066.857657][T14124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2067.171639][T14124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2067.257647][T14295] netlink: 'syz.7.6038': attribute type 5 has an invalid length. [ 2067.520459][ T5678] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2067.554935][ T5678] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2067.692708][T14124] team0: Port device team_slave_0 added [ 2067.868066][T14124] team0: Port device team_slave_1 added [ 2068.089711][T24041] Bluetooth: hci0: command tx timeout [ 2068.249090][T14124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2068.279011][T14124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2068.335650][T14124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2068.388467][T14124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2068.398514][T14124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2068.436452][T14124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2068.995236][ T9438] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 2069.344373][ T9437] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 2069.494366][ T9437] usb 6-1: Using ep0 maxpacket: 16 [ 2069.503192][ T9437] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 2069.511756][ T9437] usb 6-1: config 0 has no interface number 0 [ 2069.523292][ T9437] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 2069.589330][ T9437] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2069.643231][ T9437] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2069.652560][ T9437] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2069.702832][ T9437] usb 6-1: Product: syz [ 2069.735542][ T9437] usb 6-1: Manufacturer: syz [ 2069.776609][ T9437] usb 6-1: SerialNumber: syz [ 2069.817530][ T9437] usb 6-1: config 0 descriptor?? [ 2069.848046][T14384] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2069.873173][T14384] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2070.164477][T24041] Bluetooth: hci0: command tx timeout [ 2070.178993][T14384] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2070.211663][T14384] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2070.432075][T14408] libceph: resolve 'c' (ret=-3): failed [ 2070.890383][T14413] xt_hashlimit: size too large, truncated to 1048576 [ 2071.038871][ T5678] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 2071.113417][ T5678] bridge1 (unregistering): left promiscuous mode [ 2071.130453][ T5678] bridge1 (unregistering): left allmulticast mode [ 2072.109796][ T9437] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 2072.244553][T24041] Bluetooth: hci0: command tx timeout [ 2072.743280][ T9437] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2072.758788][ T5678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2072.767623][ T9437] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 2072.788491][ T9437] asix 6-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 2072.799092][ T5678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2072.800827][ T9437] asix 6-1:0.251: probe with driver asix failed with error -5 [ 2072.824811][ T5678] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2072.832747][ T9437] usb 6-1: USB disconnect, device number 11 [ 2072.854439][ T5678] bond0 (unregistering): Released all slaves [ 2073.012544][ T5678] bond1 (unregistering): Released all slaves [ 2073.031434][ T5678] bond2 (unregistering): Released all slaves [ 2073.048400][ T5678] bond3 (unregistering): Released all slaves [ 2073.222027][ T5678] bond4 (unregistering): Released all slaves [ 2073.237656][ T5678] bond5 (unregistering): Released all slaves [ 2073.252928][ T5678] bond6 (unregistering): Released all slaves [ 2073.546183][ T5678] bond7 (unregistering): Released all slaves [ 2073.578583][ T5678] bond8 (unregistering): Released all slaves [ 2073.809321][ T5678] bond9 (unregistering): Released all slaves [ 2073.834283][ T5678] bond10 (unregistering): Released all slaves [ 2074.058275][ T5678] bond11 (unregistering): Released all slaves [ 2074.076811][ T5678] bond12 (unregistering): Released all slaves [ 2074.240873][T14124] hsr_slave_0: entered promiscuous mode [ 2074.307004][T14124] hsr_slave_1: entered promiscuous mode [ 2074.332810][T14124] debugfs: 'hsr0' already exists in 'hsr' [ 2074.338786][T14124] Cannot create hsr debugfs directory [ 2074.346023][ T5678] tipc: Disabling bearer [ 2074.354156][ T5678] tipc: Disabling bearer [ 2074.412390][ T5678] tipc: Left network mode [ 2074.434790][T14470] syzkaller1: entered promiscuous mode [ 2074.440331][T14470] syzkaller1: entered allmulticast mode [ 2074.744898][ T9437] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 2074.941020][ T9437] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2074.988748][ T9437] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2075.025283][ T9437] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2075.067208][ T9437] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2075.087525][ T9437] usb 4-1: SerialNumber: syz [ 2075.346614][ T9437] usb 4-1: 0:2 : does not exist [ 2075.437282][ T9437] usb 4-1: USB disconnect, device number 127 [ 2075.489661][T32653] udevd[32653]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2075.542421][ T5678] hsr_slave_0: left promiscuous mode [ 2075.570168][ T5678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2075.606506][ T5678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2075.625695][ T5678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2075.633143][ T5678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2075.680872][ T5678] veth1_macvtap: left promiscuous mode [ 2075.687700][ T5678] veth0_macvtap: left promiscuous mode [ 2075.693540][ T5678] veth0_vlan: left promiscuous mode [ 2077.094332][ T9438] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 2077.348919][ T9438] usb 6-1: Using ep0 maxpacket: 32 [ 2077.390267][ T9438] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2077.404559][ T9438] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2077.434332][ T9438] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2077.474002][ T9438] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2077.517349][ T9438] usb 6-1: config 0 descriptor?? [ 2077.529977][ T9438] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2077.597718][ T5678] team0 (unregistering): Port device team_slave_1 removed [ 2077.659547][ T5678] team0 (unregistering): Port device team_slave_0 removed [ 2078.003102][T14614] netlink: 'syz.7.6059': attribute type 1 has an invalid length. [ 2078.101086][T14615] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6059'. [ 2078.331440][T14624] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 2078.963149][T14614] bond3: entered promiscuous mode [ 2078.979118][T14614] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2078.987960][T14615] bond3: entered allmulticast mode [ 2079.009474][T14622] bond3: (slave bridge4): making interface the new active one [ 2079.017568][T14622] bridge4: entered promiscuous mode [ 2079.025058][T14622] bridge4: entered allmulticast mode [ 2079.033099][T14622] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 2079.511817][ T5678] IPVS: stop unused estimator thread 0... [ 2079.566699][T14695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6062'. [ 2079.898949][ T9438] usb 6-1: USB disconnect, device number 12 [ 2079.923480][T14714] netlink: 'syz.7.6065': attribute type 4 has an invalid length. [ 2080.220996][T14744] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6066'. [ 2080.468759][ T9438] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 2080.930240][T14124] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2081.227567][T14124] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2081.420749][T14124] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2081.447341][T14124] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2081.904387][ T9438] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 2081.934326][T10348] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 2081.961960][T14124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2082.006925][T14124] 8021q: adding VLAN 0 to HW filter on device team0 [ 2082.039388][ T5678] bridge0: port 1(bridge_slave_0) entered blocking state [ 2082.046623][ T5678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2082.085761][ T9438] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2082.100829][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 2082.108047][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2082.119402][T10348] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2082.130569][ T9438] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2082.164417][T10348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2082.180756][ T9438] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2082.194013][T10348] usb 4-1: Product: syz [ 2082.200156][T10348] usb 4-1: Manufacturer: syz [ 2082.206812][ T9438] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2082.218274][T10348] usb 4-1: SerialNumber: syz [ 2082.233062][T10348] usb 4-1: config 0 descriptor?? [ 2082.240238][ T9438] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2082.290140][ T9438] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2082.306388][ T9438] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2082.337864][ T9438] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2082.366895][T14124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2082.374030][ T9438] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2082.414153][ T9438] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2082.459322][ T9438] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2082.476686][T10348] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2082.485458][ T9438] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2082.514008][T14124] veth0_vlan: entered promiscuous mode [ 2082.526799][ T9438] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2082.563551][ T9438] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2082.578361][T14124] veth1_vlan: entered promiscuous mode [ 2082.595955][ T9438] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2082.630236][ T9438] usb 6-1: string descriptor 0 read error: -22 [ 2082.638308][ T9438] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2082.662258][ T9438] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2082.675268][T14124] veth0_macvtap: entered promiscuous mode [ 2082.711383][T14124] veth1_macvtap: entered promiscuous mode [ 2082.718467][ T9438] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2083.098359][T14124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2083.179327][T14124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2083.289147][T14793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2083.337415][T14793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2083.450032][ T5677] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2083.480914][ T5677] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2083.549223][ T5677] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2083.574418][ T5677] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2083.600056][T14848] netlink: 76 bytes leftover after parsing attributes in process `syz.7.6073'. [ 2083.645710][T14848] netlink: 'syz.7.6073': attribute type 1 has an invalid length. [ 2083.801402][T14848] bond4: entered promiscuous mode [ 2083.859988][T14848] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2084.025355][T14879] bond4: (slave bridge5): making interface the new active one [ 2084.041206][T14879] bridge5: entered promiscuous mode [ 2084.083389][T14879] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 2084.144143][T10348] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2084.265307][T10348] usb 4-1: USB disconnect, device number 2 [ 2084.470937][ T5675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2084.509975][ T5675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2084.585259][ T5675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2084.603538][ T5675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2085.468765][ T9437] usb 6-1: USB disconnect, device number 14 [ 2085.650410][T14938] tipc: Enabling of bearer rejected, failed to enable media [ 2085.704977][T14943] syzkaller0: entered promiscuous mode [ 2085.710488][T14943] syzkaller0: entered allmulticast mode [ 2085.754710][T14975] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6079'. [ 2086.036538][T14979] libceph: resolve 'c' (ret=-3): failed [ 2086.523961][T15451] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2086.536736][T15451] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2086.571057][T15451] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2086.594754][T15451] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2086.604783][T15451] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2086.751230][ T1583] vivid-000: reconnect [ 2087.542894][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6082'. [ 2087.877007][T14990] chnl_net:caif_netlink_parms(): no params data found [ 2088.623836][T14990] bridge0: port 1(bridge_slave_0) entered blocking state [ 2088.640656][T14990] bridge0: port 1(bridge_slave_0) entered disabled state [ 2088.654376][T14990] bridge_slave_0: entered allmulticast mode [ 2088.741295][T24041] Bluetooth: hci4: command tx timeout [ 2088.759488][T14990] bridge_slave_0: entered promiscuous mode [ 2088.770284][T14990] bridge0: port 2(bridge_slave_1) entered blocking state [ 2088.781557][T14990] bridge0: port 2(bridge_slave_1) entered disabled state [ 2088.815666][T14990] bridge_slave_1: entered allmulticast mode [ 2088.828076][T14990] bridge_slave_1: entered promiscuous mode [ 2088.884575][ T1226] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 2089.136037][ T1226] usb 1-1: Using ep0 maxpacket: 16 [ 2089.156045][ T1226] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2089.178045][ T1226] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2089.211480][ T1226] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 2089.225291][ T1226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2089.242219][T14990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2089.245123][ T1226] usb 1-1: Product: syz [ 2089.273599][ T1226] usb 1-1: Manufacturer: syz [ 2089.278710][ T1226] usb 1-1: SerialNumber: syz [ 2089.285234][T14990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2089.337241][ T1226] usb 1-1: config 0 descriptor?? [ 2089.393377][T14990] team0: Port device team_slave_0 added [ 2089.412061][T14990] team0: Port device team_slave_1 added [ 2089.472215][T14990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2089.484552][T14990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2089.515443][T14990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2089.531249][T14990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2089.539219][T14990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2089.574700][T30786] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 2089.607073][T14990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2089.618806][T15132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6085'. [ 2089.634936][T15132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2089.644073][T15132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2089.714124][T14990] hsr_slave_0: entered promiscuous mode [ 2089.721295][T14990] hsr_slave_1: entered promiscuous mode [ 2089.729535][T14990] debugfs: 'hsr0' already exists in 'hsr' [ 2089.735771][T14990] Cannot create hsr debugfs directory [ 2089.746787][T30786] usb 4-1: Using ep0 maxpacket: 16 [ 2089.767274][T30786] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 2089.777553][T30786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2089.786590][T30786] usb 4-1: Product: syz [ 2089.794505][T30786] usb 4-1: Manufacturer: syz [ 2089.799176][T30786] usb 4-1: SerialNumber: syz [ 2089.826799][T30786] usb 4-1: config 0 descriptor?? [ 2089.846101][T15242] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6088'. [ 2089.856097][T30786] hub 4-1:0.0: bad descriptor, ignoring hub [ 2089.862066][T30786] hub 4-1:0.0: probe with driver hub failed with error -5 [ 2089.958476][T15242] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6088'. [ 2090.159727][T15335] FAULT_INJECTION: forcing a failure. [ 2090.159727][T15335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2090.198213][T15335] CPU: 1 UID: 0 PID: 15335 Comm: syz.8.6089 Tainted: G L syzkaller #0 PREEMPT(full) [ 2090.198244][T15335] Tainted: [L]=SOFTLOCKUP [ 2090.198251][T15335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2090.198263][T15335] Call Trace: [ 2090.198270][T15335] [ 2090.198279][T15335] dump_stack_lvl+0xe8/0x150 [ 2090.198308][T15335] should_fail_ex+0x412/0x560 [ 2090.198337][T15335] _copy_to_user+0x31/0xb0 [ 2090.198357][T15335] simple_read_from_buffer+0xe1/0x170 [ 2090.198380][T15335] proc_fail_nth_read+0x1bb/0x230 [ 2090.198408][T15335] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2090.198434][T15335] ? rw_verify_area+0x2a6/0x4d0 [ 2090.198458][T15335] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2090.198483][T15335] vfs_read+0x20c/0xa70 [ 2090.198504][T15335] ? fdget_pos+0x246/0x320 [ 2090.198527][T15335] ? __pfx___mutex_lock+0x10/0x10 [ 2090.198551][T15335] ? __pfx_vfs_read+0x10/0x10 [ 2090.198575][T15335] ? __fget_files+0x2a/0x420 [ 2090.198605][T15335] ? __fget_files+0x3a0/0x420 [ 2090.198621][T15335] ? __fget_files+0x2a/0x420 [ 2090.198647][T15335] ksys_read+0x150/0x270 [ 2090.198673][T15335] ? __pfx_ksys_read+0x10/0x10 [ 2090.198706][T15335] do_syscall_64+0xe2/0xf80 [ 2090.198727][T15335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2090.198743][T15335] ? trace_irq_disable+0x37/0x100 [ 2090.198759][T15335] ? clear_bhb_loop+0x60/0xb0 [ 2090.198780][T15335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2090.198797][T15335] RIP: 0033:0x7fd3c155b84e [ 2090.198813][T15335] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2090.198829][T15335] RSP: 002b:00007fd3c2411fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2090.198850][T15335] RAX: ffffffffffffffda RBX: 00007fd3c24126c0 RCX: 00007fd3c155b84e [ 2090.198864][T15335] RDX: 000000000000000f RSI: 00007fd3c24120a0 RDI: 0000000000000005 [ 2090.198875][T15335] RBP: 00007fd3c2412090 R08: 0000000000000000 R09: 0000000000000000 [ 2090.198886][T15335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2090.198896][T15335] R13: 00007fd3c1816038 R14: 00007fd3c1815fa0 R15: 00007fd3c193fa48 [ 2090.198925][T15335] [ 2090.426827][T14990] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2090.804570][T24041] Bluetooth: hci4: command tx timeout [ 2090.879042][T14990] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2091.125407][T14990] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2091.253277][T14990] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2091.659890][ T1226] usb 1-1: USB disconnect, device number 34 [ 2091.823998][T15383] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6092'. [ 2092.202942][T14990] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2092.270520][T14990] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2092.359784][T14990] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2092.390393][T14990] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2092.835049][ T5921] usb 4-1: USB disconnect, device number 3 [ 2092.889941][T24041] Bluetooth: hci4: command tx timeout [ 2092.938428][T14990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2093.031132][T14990] 8021q: adding VLAN 0 to HW filter on device team0 [ 2093.070363][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state [ 2093.077547][ T1330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2093.110657][T15413] libceph: resolve 'c' (ret=-3): failed [ 2093.217317][ T1330] bridge0: port 2(bridge_slave_1) entered blocking state [ 2093.224532][ T1330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2093.466938][T14990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2093.608962][T14990] veth0_vlan: entered promiscuous mode [ 2093.673024][T14990] veth1_vlan: entered promiscuous mode [ 2093.748469][T14990] veth0_macvtap: entered promiscuous mode [ 2093.762199][T15420] tipc: Enabling of bearer rejected, already enabled [ 2093.821039][T14990] veth1_macvtap: entered promiscuous mode [ 2093.914178][T14990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2093.957997][T14990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2093.994892][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2094.013944][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2094.040472][T15429] usb usb8: usbfs: process 15429 (syz.0.6096) did not claim interface 0 before use [ 2094.067250][T15429] usb usb8: selecting invalid altsetting 2047 [ 2094.135379][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2094.301506][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2094.658196][ T5675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2094.856012][ T5675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2094.974752][T24041] Bluetooth: hci4: command tx timeout [ 2094.989280][ T5675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2095.012644][ T5675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2095.333075][T15444] netlink: 'syz.3.6099': attribute type 1 has an invalid length. [ 2095.451763][T15469] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6099'. [ 2095.532705][T15444] bond4: entered promiscuous mode [ 2095.542760][T15444] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2095.597426][T15469] bond4: entered allmulticast mode [ 2095.758507][T15444] bond4: (slave bridge2): making interface the new active one [ 2095.772633][T15444] bridge2: entered promiscuous mode [ 2095.779532][T15444] bridge2: entered allmulticast mode [ 2095.786706][T15444] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 2095.973773][T15503] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2097.639182][T15552] tipc: Enabling of bearer rejected, already enabled [ 2098.055331][T15560] netlink: 'syz.0.6111': attribute type 1 has an invalid length. [ 2098.100263][T15560] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6111'. [ 2098.128074][T15560] bond_slave_1: entered promiscuous mode [ 2098.145711][T15560] bond_slave_1: entered allmulticast mode [ 2098.817958][T15568] syzkaller0: mtu greater than device maximum [ 2099.464398][ T5921] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 2099.640051][ T5921] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 2099.652146][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2099.663795][ T5921] usb 4-1: Product: syz [ 2099.671664][ T5921] usb 4-1: Manufacturer: syz [ 2099.685323][ T5921] usb 4-1: SerialNumber: syz [ 2099.716883][ T5921] usb 4-1: config 0 descriptor?? [ 2099.741633][ T5921] gspca_main: sq930x-2.14.0 probing 2770:930c [ 2099.941446][ T5921] gspca_sq930x: reg_r 001f failed -32 [ 2100.032718][ T5921] sq930x 4-1:0.0: probe with driver sq930x failed with error -32 [ 2100.054538][ T5921] usb 4-1: USB disconnect, device number 4 [ 2100.451705][T15627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2100.480674][T15627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2100.905274][T30786] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 2100.986672][T15646] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6124'. [ 2101.076960][T30786] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2101.085918][T30786] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2101.096141][T30786] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2101.112451][T30786] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2101.129062][T30786] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2101.138612][T30786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2101.153197][T30786] usb 1-1: Product: syz [ 2101.160464][T30786] usb 1-1: Manufacturer: syz [ 2101.166845][T30786] usb 1-1: SerialNumber: syz [ 2101.698065][T30786] usb 1-1: 0:2 : does not exist [ 2101.709448][T15665] netlink: 'syz.5.6126': attribute type 1 has an invalid length. [ 2101.759814][T30786] usb 1-1: USB disconnect, device number 35 [ 2101.768898][T15665] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6126'. [ 2101.894526][T32653] udevd[32653]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2102.405077][T15691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2102.433819][T15691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2102.460090][T15695] netlink: 'syz.7.6128': attribute type 1 has an invalid length. [ 2102.489719][T15691] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6129'. [ 2102.567311][ T1226] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2102.716652][ T1226] usb 1-1: device descriptor read/64, error -71 [ 2102.889641][T15702] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2102.964156][T15702] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 2103.034385][ T5921] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 2103.226897][ T5921] usb 6-1: not running at top speed; connect to a high speed hub [ 2103.236514][ T5921] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2103.246793][ T5921] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2103.256671][ T5921] usb 6-1: config 1 has no interface number 1 [ 2103.262866][ T5921] usb 6-1: config 1 interface 2 has no altsetting 0 [ 2103.272870][ T5921] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2103.282252][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2103.291706][ T5921] usb 6-1: Product: syz [ 2103.310340][ T5921] usb 6-1: Manufacturer: syz [ 2103.315203][ T5921] usb 6-1: SerialNumber: syz [ 2103.478515][T15695] bond5: (slave gretap1): making interface the new active one [ 2103.490879][T15695] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 2103.590982][ T5921] usb 6-1: selecting invalid altsetting 0 [ 2103.631951][ T5921] usb 6-1: failed to enable PITCH for EP 0x82 [ 2103.647659][T15713] macvlan3: entered promiscuous mode [ 2103.653280][T15713] macvlan3: entered allmulticast mode [ 2103.659955][T15713] bond5: entered promiscuous mode [ 2103.667072][ T5921] usb 6-1: selecting invalid altsetting 0 [ 2103.673796][T15713] gretap1: entered promiscuous mode [ 2103.719238][ T5921] usb 6-1: USB disconnect, device number 15 [ 2103.727610][T15713] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 2103.833914][ T579] udevd[579]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2103.850421][ T1226] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 2103.858553][T15713] bond5: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 2103.875796][T15713] bond5: left promiscuous mode [ 2103.880639][T15713] gretap1: left promiscuous mode [ 2104.016040][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.022562][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2104.049067][ T1226] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 2104.059446][ T1226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2104.068269][ T1226] usb 1-1: Product: syz [ 2104.096543][ T1226] usb 1-1: Manufacturer: syz [ 2104.107694][ T1226] usb 1-1: SerialNumber: syz [ 2104.132550][ T1226] usb 1-1: config 0 descriptor?? [ 2104.168995][ T1226] gspca_main: sq930x-2.14.0 probing 2770:930c [ 2104.441595][ T1226] gspca_sq930x: reg_r 001f failed -71 [ 2104.461615][ T1226] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 2104.477235][ T1226] usb 1-1: USB disconnect, device number 37 [ 2105.514175][T15858] geneve2: entered promiscuous mode [ 2105.625395][T15858] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6140'. [ 2107.944381][T30786] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2108.104488][T30786] usb 1-1: Using ep0 maxpacket: 16 [ 2108.115690][T30786] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 2108.125251][T30786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2108.133402][T30786] usb 1-1: Product: syz [ 2108.138140][T30786] usb 1-1: Manufacturer: syz [ 2108.142844][T30786] usb 1-1: SerialNumber: syz [ 2108.153684][T30786] usb 1-1: config 0 descriptor?? [ 2108.164102][T30786] hub 1-1:0.0: bad descriptor, ignoring hub [ 2108.170899][T30786] hub 1-1:0.0: probe with driver hub failed with error -5 [ 2109.174430][ T5954] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 2109.334453][ T5954] usb 6-1: Using ep0 maxpacket: 8 [ 2109.343594][ T5954] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2109.355915][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 2109.374947][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2109.398429][ T5954] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2109.422810][ T5954] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2109.451603][ T5954] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2109.477291][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2109.511162][ T5954] usb 6-1: config 0 descriptor?? [ 2110.048306][ T5921] usb 6-1: USB disconnect, device number 16 [ 2110.291126][T15968] libceph: resolve 'c' (ret=-3): failed [ 2110.700968][T15977] libceph: resolve 'c' (ret=-3): failed [ 2111.214679][ T5921] usb 1-1: USB disconnect, device number 38 [ 2111.355004][T15994] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6156'. [ 2112.265077][ T1226] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 2112.517191][ T1226] usb 1-1: not running at top speed; connect to a high speed hub [ 2112.565092][ T1226] usb 1-1: config 11 has an invalid interface number: 217 but max is 0 [ 2112.584520][ T1226] usb 1-1: config 11 has no interface number 0 [ 2112.601826][ T1226] usb 1-1: config 11 interface 217 has no altsetting 0 [ 2112.638951][ T1226] usb 1-1: New USB device found, idVendor=06cd, idProduct=0103, bcdDevice= d.63 [ 2112.664295][ T1226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2112.691303][ T1226] usb 1-1: Product: syz [ 2112.704387][ T1226] usb 1-1: Manufacturer: syz [ 2112.730942][ T1226] usb 1-1: SerialNumber: syz [ 2112.978812][ T1226] hub 1-1:11.217: bad descriptor, ignoring hub [ 2112.999264][ T1226] hub 1-1:11.217: probe with driver hub failed with error -5 [ 2113.023668][ T1226] keyspan 1-1:11.217: Keyspan - (without firmware) converter detected [ 2113.107588][ T1226] usb 1-1: USB disconnect, device number 39 [ 2113.129096][ T1226] keyspan 1-1:11.217: device disconnected [ 2114.199981][T16054] usb usb8: usbfs: process 16054 (syz.3.6165) did not claim interface 0 before use [ 2114.210883][T16054] usb usb8: selecting invalid altsetting 2047 [ 2118.435607][T16083] netlink: 'syz.7.6173': attribute type 11 has an invalid length. [ 2118.804414][ T5921] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 2119.206252][ T5921] usb 6-1: Using ep0 maxpacket: 32 [ 2119.218142][ T5921] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2119.343673][ T5921] usb 6-1: config 0 has no interface number 0 [ 2119.398206][ T5921] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 2119.514345][ T5921] usb 6-1: config 0 interface 1 has no altsetting 0 [ 2119.592540][T16111] netlink: 'syz.7.6176': attribute type 33 has an invalid length. [ 2119.808550][ T5921] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 2119.889462][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2119.946367][ T5921] usb 6-1: Product: syz [ 2119.962152][ T5921] usb 6-1: Manufacturer: syz [ 2119.973943][ T5921] usb 6-1: SerialNumber: syz [ 2120.013884][ T5921] usb 6-1: config 0 descriptor?? [ 2120.457941][ T5921] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 2120.525687][ T5921] cx231xx 6-1:0.1: Not found matching IAD interface [ 2120.558055][ T5921] usb 6-1: USB disconnect, device number 17 [ 2121.584417][T30786] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2121.996463][T30786] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2122.005907][T30786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2122.017133][T30786] usb 1-1: config 0 descriptor?? [ 2122.245760][T30786] usb 1-1: Cannot set MAC address [ 2122.267112][T30786] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2122.333224][T30786] usb 1-1: USB disconnect, device number 40 [ 2123.134501][ T5921] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 2123.316647][ T5921] usb 6-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 2123.359212][ T5921] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2123.393958][ T5921] usb 6-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 2123.407559][T16181] loop2: detected capacity change from 0 to 7 [ 2123.414950][T16181] Dev loop2: unable to read RDB block 7 [ 2123.420562][T16181] loop2: unable to read partition table [ 2123.436990][T16181] loop2: partition table beyond EOD, truncated [ 2123.468681][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2123.512108][T16181] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2123.520584][ T5921] usb 6-1: config 0 descriptor?? [ 2123.570862][ T5921] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2124.527159][ T5921] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 2124.880492][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 2124.980160][ T5921] usb 4-1: config 162 has an invalid interface number: 85 but max is 0 [ 2124.989140][ T5921] usb 4-1: config 162 has no interface number 0 [ 2124.996016][ T5921] usb 4-1: config 162 interface 85 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 2125.050682][ T5921] usb 4-1: config 162 interface 85 has no altsetting 0 [ 2125.064782][T16214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6190'. [ 2125.087539][ T5921] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0200, bcdDevice=19.dd [ 2125.096973][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2125.117817][ T5921] usb 4-1: Product: syz [ 2125.169729][ T5921] usb 4-1: Manufacturer: syz [ 2125.182960][ T5921] usb 4-1: SerialNumber: syz [ 2125.492267][ T5921] cp210x 4-1:162.85: cp210x converter detected [ 2125.528775][ T5921] cp210x 4-1:162.85: failed to get vendor val 0x370b size 1: -71 [ 2125.600180][ T5921] cp210x 4-1:162.85: querying part number failed [ 2125.661457][ T5921] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2125.732301][ T5921] usb 4-1: USB disconnect, device number 5 [ 2125.769061][ T1226] usb 6-1: USB disconnect, device number 18 [ 2125.791601][ T5921] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2125.854123][ T5921] cp210x 4-1:162.85: device disconnected [ 2125.910885][T16234] netlink: 'syz.0.6191': attribute type 12 has an invalid length. [ 2126.097986][T16246] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2126.158391][T16246] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6193'. [ 2126.667200][T16312] netlink: 'syz.8.6199': attribute type 4 has an invalid length. [ 2126.873529][T30786] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 2127.035159][T16320] IPv6: NLM_F_CREATE should be specified when creating new route [ 2127.042991][T30786] usb 4-1: device descriptor read/64, error -71 [ 2127.059556][T16320] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2127.066868][T16320] IPv6: NLM_F_CREATE should be set when creating new route [ 2127.074091][T16320] IPv6: NLM_F_CREATE should be set when creating new route [ 2127.254052][T16324] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6201'. [ 2127.362255][T30786] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2127.416397][T16333] libceph: resolve 'c' (ret=-3): failed [ 2127.785964][T30786] usb 4-1: device descriptor read/64, error -71 [ 2127.826704][T16338] usb usb8: usbfs: process 16338 (syz.7.6203) did not claim interface 0 before use [ 2127.836422][T16338] usb usb8: selecting invalid altsetting 2047 [ 2127.957493][T30786] usb usb4-port1: attempt power cycle [ 2128.345529][T30786] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2128.375011][T30786] usb 4-1: device descriptor read/8, error -71 [ 2128.654382][T30786] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2128.694548][T30786] usb 4-1: device descriptor read/8, error -71 [ 2128.864687][T30786] usb usb4-port1: unable to enumerate USB device [ 2129.454425][T16359] kAFS: unable to lookup cell '' [ 2129.475180][T16359] kAFS: unable to lookup cell '(,c' [ 2129.504347][ T1226] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2129.695338][ T1226] usb 6-1: Using ep0 maxpacket: 8 [ 2129.718057][ T1226] usb 6-1: config 1 interface 0 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2129.741670][ T1226] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2129.763784][ T1226] usb 6-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.40 [ 2129.773231][ T1226] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2129.794414][ T1226] usb 6-1: Product: ఌ [ 2129.798644][ T1226] usb 6-1: Manufacturer: 貽ퟧ眨紫Ր璻姨ﬡ伩뇃鏎似燻머⥇⨐䣚籂溙뫠鸁ͷ㗟耦梨⑚ᄀ愒ᲜZ싛舀䆜֟脘㌓䪯㵒泞硎䵯舤㑁䨭犁Ϩ௷૪䚻뀾쎛犂多Ἂ誖ⓦ条 [ 2129.865404][T16370] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 2129.871902][ T1226] usb 6-1: SerialNumber: å끉澠ꂜ勲样⏾䉔뿗皸購ᴉ碽٘퀍厄沭姑䁕 [ 2130.135198][T16380] binder: 16371:16380 ioctl 4018620d 0 returned -22 [ 2130.147825][T16380] binder: 16371:16380 ioctl c018620c 200000000380 returned -1 [ 2130.246750][T16382] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2130.339225][ T1226] usbhid 6-1:1.0: can't add hid device: -71 [ 2130.353326][ T1226] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 2130.375264][ T1226] usb 6-1: USB disconnect, device number 19 [ 2130.906486][T16407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6213'. [ 2131.276087][T16417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6216'. [ 2131.444717][ T5954] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 2131.584335][ T5954] usb 6-1: device descriptor read/64, error -71 [ 2132.147814][ T5954] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 2132.244101][T16430] usb usb8: usbfs: process 16430 (syz.8.6217) did not claim interface 0 before use [ 2132.276219][T16430] usb usb8: selecting invalid altsetting 2047 [ 2132.307050][ T5954] usb 6-1: device descriptor read/64, error -71 [ 2132.444670][ T5954] usb usb6-port1: attempt power cycle [ 2132.784376][ T5954] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 2132.823350][ T5954] usb 6-1: device descriptor read/8, error -71 [ 2133.074356][ T5954] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 2133.109334][ T5954] usb 6-1: device descriptor read/8, error -71 [ 2133.236214][ T5954] usb usb6-port1: unable to enumerate USB device [ 2133.270349][T16457] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6224'. [ 2133.292963][T16457] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6224'. [ 2133.401255][T16457] netlink: 156 bytes leftover after parsing attributes in process `syz.7.6224'. [ 2134.428674][T16483] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2134.774415][ T5954] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2134.955322][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2134.968477][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2134.978769][ T5954] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 2134.989709][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2135.021965][ T5954] usb 1-1: config 0 descriptor?? [ 2135.948206][ T5954] hid-led 0003:27B8:01ED.005A: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 2136.021846][ T5954] hid-led 0003:27B8:01ED.005A: ThingM blink(1) v1 initialized [ 2136.147771][T16487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2136.159746][T16487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2136.203673][ T5921] usb 1-1: USB disconnect, device number 41 [ 2136.625788][ T5921] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2136.789149][ T5921] usb 4-1: device descriptor read/64, error -71 [ 2136.815321][T16559] loop2: detected capacity change from 0 to 7 [ 2136.825265][T16559] Dev loop2: unable to read RDB block 7 [ 2136.836786][T16559] loop2: unable to read partition table [ 2136.854841][T16559] loop2: partition table beyond EOD, truncated [ 2136.885007][T16559] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2137.046139][ T5921] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 2137.194995][ T5921] usb 4-1: device descriptor read/64, error -71 [ 2137.304757][ T5921] usb usb4-port1: attempt power cycle [ 2137.635453][T16585] netlink: 'syz.5.6243': attribute type 8 has an invalid length. [ 2137.643726][T16585] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6243'. [ 2137.664358][ T5921] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2137.672425][T16585] bond0: entered promiscuous mode [ 2137.681855][T16585] bond_slave_0: entered promiscuous mode [ 2137.689459][T16585] bond_slave_1: entered promiscuous mode [ 2137.698046][ T5921] usb 4-1: device descriptor read/8, error -71 [ 2137.711329][T16585] gretap0: entered promiscuous mode [ 2137.745904][T16585] hsr1: entered promiscuous mode [ 2137.944554][ T5921] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2137.975193][ T5921] usb 4-1: device descriptor read/8, error -71 [ 2138.084583][ T5921] usb usb4-port1: unable to enumerate USB device [ 2138.934432][ T9438] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 2139.134150][T16657] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2139.165866][ T9438] usb 6-1: Using ep0 maxpacket: 16 [ 2139.173118][ T9438] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 2139.181752][ T9438] usb 6-1: config 0 has no interface number 0 [ 2139.189162][ T9438] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2139.210798][ T9438] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2139.226940][ T9438] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2139.247747][ T9438] usb 6-1: Product: syz [ 2139.260072][ T9438] usb 6-1: SerialNumber: syz [ 2139.280266][ T9438] usb 6-1: config 0 descriptor?? [ 2139.298203][ T9438] usbhid 6-1:0.8: couldn't find an input interrupt endpoint [ 2139.603200][ T9438] usb 6-1: USB disconnect, device number 24 [ 2139.701749][T16670] macvtap1: entered allmulticast mode [ 2139.712205][T16670] veth0_macvtap: entered allmulticast mode [ 2140.279885][T16710] usb usb8: usbfs: process 16710 (syz.3.6251) did not claim interface 0 before use [ 2140.494871][T16710] usb usb8: selecting invalid altsetting 2047 [ 2140.701147][T16738] tipc: Started in network mode [ 2140.706357][T16738] tipc: Node identity ac14140f, cluster identity 4711 [ 2140.713869][T16738] tipc: New replicast peer: 255.255.255.255 [ 2140.720725][T16738] tipc: Enabled bearer , priority 10 [ 2141.847761][ T10] tipc: Node number set to 2886997007 [ 2142.590417][T16764] fuse: Unknown parameter '017777777777777777777770x000000000000000700000000000000000005ң[nS8m 7d' [ 2144.022827][T16821] IPVS: Error joining to the multicast group [ 2144.059720][T16827] loop2: detected capacity change from 0 to 7 [ 2144.076286][T16827] Dev loop2: unable to read RDB block 7 [ 2144.095191][T16827] loop2: unable to read partition table [ 2144.112357][T16827] loop2: partition table beyond EOD, truncated [ 2144.124108][T16827] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2144.785994][T16849] usb usb8: usbfs: process 16849 (syz.5.6269) did not claim interface 0 before use [ 2144.816314][T16849] usb usb8: selecting invalid altsetting 2047 [ 2145.524433][T16862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6273'. [ 2145.768254][T16868] FAULT_INJECTION: forcing a failure. [ 2145.768254][T16868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2145.806603][T16868] CPU: 1 UID: 0 PID: 16868 Comm: syz.8.6274 Tainted: G L syzkaller #0 PREEMPT(full) [ 2145.806638][T16868] Tainted: [L]=SOFTLOCKUP [ 2145.806646][T16868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2145.806659][T16868] Call Trace: [ 2145.806669][T16868] [ 2145.806677][T16868] dump_stack_lvl+0xe8/0x150 [ 2145.806709][T16868] should_fail_ex+0x412/0x560 [ 2145.806743][T16868] _copy_from_user+0x2d/0xb0 [ 2145.806774][T16868] do_set_thread_area+0xad/0x6e0 [ 2145.806807][T16868] ? __pfx_do_set_thread_area+0x10/0x10 [ 2145.806845][T16868] arch_ptrace+0x26e/0x410 [ 2145.806866][T16868] __se_sys_ptrace+0x150/0x3b0 [ 2145.806896][T16868] ? __pfx___se_sys_ptrace+0x10/0x10 [ 2145.806934][T16868] do_syscall_64+0xe2/0xf80 [ 2145.806963][T16868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2145.806984][T16868] ? trace_irq_disable+0x37/0x100 [ 2145.807002][T16868] ? clear_bhb_loop+0x60/0xb0 [ 2145.807026][T16868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2145.807050][T16868] RIP: 0033:0x7fd3c159af79 [ 2145.807069][T16868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2145.807087][T16868] RSP: 002b:00007fd3c2412028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 2145.807109][T16868] RAX: ffffffffffffffda RBX: 00007fd3c1815fa0 RCX: 00007fd3c159af79 [ 2145.807124][T16868] RDX: 0000000000000008 RSI: 0000000000000567 RDI: 000000000000001a [ 2145.807136][T16868] RBP: 00007fd3c2412090 R08: 0000000000000000 R09: 0000000000000000 [ 2145.807149][T16868] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2145.807163][T16868] R13: 00007fd3c1816038 R14: 00007fd3c1815fa0 R15: 00007fd3c193fa48 [ 2145.807196][T16868] [ 2146.265453][T16886] loop2: detected capacity change from 0 to 7 [ 2146.296860][T16886] Dev loop2: unable to read RDB block 7 [ 2146.374595][T16886] loop2: unable to read partition table [ 2146.400092][T16886] loop2: partition table beyond EOD, truncated [ 2146.426304][T16886] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2146.723967][T16901] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6281'. [ 2147.377954][T16930] FAULT_INJECTION: forcing a failure. [ 2147.377954][T16930] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2147.405608][T16930] CPU: 0 UID: 0 PID: 16930 Comm: syz.0.6287 Tainted: G L syzkaller #0 PREEMPT(full) [ 2147.405643][T16930] Tainted: [L]=SOFTLOCKUP [ 2147.405651][T16930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2147.405664][T16930] Call Trace: [ 2147.405672][T16930] [ 2147.405682][T16930] dump_stack_lvl+0xe8/0x150 [ 2147.405716][T16930] should_fail_ex+0x412/0x560 [ 2147.405751][T16930] prepare_alloc_pages+0x22a/0x650 [ 2147.405784][T16930] __alloc_frozen_pages_noprof+0x12f/0x380 [ 2147.405812][T16930] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2147.405840][T16930] ? __pfx_policy_nodemask+0x10/0x10 [ 2147.405861][T16930] ? unwind_next_frame+0xa5/0x23c0 [ 2147.405895][T16930] alloc_pages_mpol+0x232/0x4a0 [ 2147.405925][T16930] alloc_pages_noprof+0xa8/0x190 [ 2147.405950][T16930] __pud_alloc+0x3a/0x6e0 [ 2147.405985][T16930] handle_mm_fault+0x1fe0/0x32a0 [ 2147.406021][T16930] ? mt_find+0x186/0x630 [ 2147.406048][T16930] ? __pfx_mt_find+0x10/0x10 [ 2147.406076][T16930] ? handle_mm_fault+0xee/0x32a0 [ 2147.406113][T16930] ? __pfx_handle_mm_fault+0x10/0x10 [ 2147.406157][T16930] ? __lock_acquire+0x6b5/0x2cf0 [ 2147.406193][T16930] ? lock_mm_and_find_vma+0xa7/0x340 [ 2147.406229][T16930] do_user_addr_fault+0x75b/0x1360 [ 2147.406268][T16930] exc_page_fault+0x6a/0xc0 [ 2147.406307][T16930] asm_exc_page_fault+0x26/0x30 [ 2147.406329][T16930] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 2147.406362][T16930] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 2147.406384][T16930] RSP: 0018:ffffc9000c08fcd8 EFLAGS: 00050212 [ 2147.406404][T16930] RAX: 00007ffffffff001 RBX: 0000000000000010 RCX: 0000000000000010 [ 2147.406419][T16930] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc9000c08fd60 [ 2147.406433][T16930] RBP: ffffc9000c08fde0 R08: ffffc9000c08fd6f R09: 1ffff92001811fad [ 2147.406450][T16930] R10: dffffc0000000000 R11: fffff52001811fae R12: 0000200000000000 [ 2147.406470][T16930] R13: ffffc9000c08fd60 R14: ffffc9000c08fd60 R15: 0000200000000000 [ 2147.406506][T16930] _copy_from_user+0x7a/0xb0 [ 2147.406529][T16930] do_set_thread_area+0xad/0x6e0 [ 2147.406558][T16930] ? __pfx_do_set_thread_area+0x10/0x10 [ 2147.406590][T16930] arch_ptrace+0x26e/0x410 [ 2147.406617][T16930] __se_sys_ptrace+0x150/0x3b0 [ 2147.406643][T16930] ? __pfx___se_sys_ptrace+0x10/0x10 [ 2147.406678][T16930] do_syscall_64+0xe2/0xf80 [ 2147.406703][T16930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2147.406723][T16930] ? trace_irq_disable+0x37/0x100 [ 2147.406742][T16930] ? clear_bhb_loop+0x60/0xb0 [ 2147.406768][T16930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2147.406793][T16930] RIP: 0033:0x7efc8c99af79 [ 2147.406812][T16930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2147.406830][T16930] RSP: 002b:00007efc8d850028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 2147.406850][T16930] RAX: ffffffffffffffda RBX: 00007efc8cc15fa0 RCX: 00007efc8c99af79 [ 2147.406866][T16930] RDX: 0000000000000008 RSI: 00000000000000be RDI: 000000000000001a [ 2147.406879][T16930] RBP: 00007efc8d850090 R08: 0000000000000000 R09: 0000000000000000 [ 2147.406893][T16930] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2147.406907][T16930] R13: 00007efc8cc16038 R14: 00007efc8cc15fa0 R15: 00007efc8cd3fa48 [ 2147.406941][T16930] [ 2148.071297][T16947] fuse: Unknown parameter '017777777777777777777770x000000000000000700000000000000000005ң[nS8m 7d' [ 2148.464460][T30786] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 2148.658368][T30786] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2148.672929][T30786] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2148.686388][T30786] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2148.866024][T30786] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2148.928785][T30786] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2149.020717][T30786] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2149.033860][T30786] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2149.072971][T30786] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2149.126416][T30786] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2149.157294][T30786] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2149.188891][T30786] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2149.196642][T30786] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2149.229995][T30786] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2149.267669][T30786] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2149.301337][T30786] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2149.333987][T30786] usb 6-1: string descriptor 0 read error: -22 [ 2149.340554][T30786] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2149.352295][T30786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2149.399791][T30786] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2149.781261][T16941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2149.819058][T16941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2150.606924][T16998] usb usb8: usbfs: process 16998 (syz.8.6297) did not claim interface 0 before use [ 2150.616686][T16998] usb usb8: selecting invalid altsetting 2047 [ 2150.865887][T17001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2151.595435][T17015] binder: 17013:17015 unknown command 1077961494 [ 2151.604664][T17015] binder: 17013:17015 ioctl c0306201 200000000100 returned -22 [ 2151.705263][T17021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6304'. [ 2151.994952][T30786] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2152.016974][ T5954] usb 6-1: USB disconnect, device number 25 [ 2152.174332][T30786] usb 4-1: Using ep0 maxpacket: 16 [ 2152.183308][T30786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2152.307051][T30786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2152.332762][T30786] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 2152.352728][T30786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2152.372718][T30786] usb 4-1: config 0 descriptor?? [ 2152.576528][ T1226] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2152.744649][ T1226] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 2152.755831][ T1226] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2152.783935][ T1226] usb 6-1: Product: syz [ 2152.793391][ T1226] usb 6-1: Manufacturer: syz [ 2152.803238][ T1226] usb 6-1: SerialNumber: syz [ 2152.827000][ T1226] usb 6-1: config 0 descriptor?? [ 2152.895561][T17072] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6311'. [ 2152.936211][T30786] gt683r_led 0003:1770:FF00.005B: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.3-1/input0 [ 2152.998883][ T1226] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 2154.750950][ T1226] usb 4-1: USB disconnect, device number 14 [ 2154.772110][ T10] gt683r_led 0003:1770:FF00.005B: failed to send set report request: -19 [ 2154.792974][ T10] gt683r_led 0003:1770:FF00.005B: failed to send set report request: -19 [ 2154.981277][T17126] loop2: detected capacity change from 0 to 7 [ 2154.991724][T17126] Dev loop2: unable to read RDB block 7 [ 2154.997662][T17126] loop2: unable to read partition table [ 2155.006369][T17126] loop2: partition table beyond EOD, truncated [ 2155.013736][T17126] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2155.045963][ T5193] Dev loop2: unable to read RDB block 7 [ 2155.051821][ T5193] loop2: unable to read partition table [ 2155.058512][ T5193] loop2: partition table beyond EOD, truncated [ 2155.222029][ T5954] usb 6-1: USB disconnect, device number 26 [ 2155.614697][ T10] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 2155.776434][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2155.784862][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2155.813577][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2155.828355][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2155.840212][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2155.866405][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2155.877060][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2155.902881][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2155.927068][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2155.938821][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2155.970346][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2155.978185][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2155.978360][ T5954] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2155.990657][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2156.037473][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2156.049195][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2156.210286][ T5954] usb 6-1: device descriptor read/64, error -71 [ 2156.222227][ T10] usb 4-1: string descriptor 0 read error: -22 [ 2156.249590][ T10] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2156.277649][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2156.338287][ T10] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2156.454361][ T5954] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 2156.604364][ T5954] usb 6-1: device descriptor read/64, error -71 [ 2156.676233][T17136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2156.685666][T17136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2156.726925][ T5954] usb usb6-port1: attempt power cycle [ 2157.104388][ T5954] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2157.136534][ T5954] usb 6-1: device descriptor read/8, error -71 [ 2157.194312][T30786] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 2157.394534][T30786] usb 1-1: Using ep0 maxpacket: 32 [ 2157.399776][ T5954] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2157.414660][T30786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2157.492207][T30786] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2157.518915][T30786] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2157.534866][ T5954] usb 6-1: device descriptor read/8, error -71 [ 2157.554949][T30786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2157.592791][T30786] usb 1-1: config 0 descriptor?? [ 2157.638539][T30786] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2157.655085][ T5954] usb usb6-port1: unable to enumerate USB device [ 2157.857172][ T5954] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2158.004648][ T5954] usb 6-1: device descriptor read/64, error -71 [ 2158.394333][ T5954] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2158.524566][ T5954] usb 6-1: device descriptor read/64, error -71 [ 2158.634665][ T5954] usb usb6-port1: attempt power cycle [ 2158.982772][ T1226] usb 4-1: USB disconnect, device number 15 [ 2159.477407][T17294] netlink: 'syz.8.6337': attribute type 10 has an invalid length. [ 2159.487106][T17294] 8021q: adding VLAN 0 to HW filter on device team0 [ 2159.496172][T17294] bond0: (slave team0): Enslaving as an active interface with an up link [ 2159.544541][T17298] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6339'. [ 2159.672238][T17308] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6341'. [ 2159.681988][T17308] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6341'. [ 2159.804047][ T1226] usb 1-1: USB disconnect, device number 42 [ 2159.988615][T17363] netlink: 'syz.8.6345': attribute type 1 has an invalid length. [ 2160.009628][T17363] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6345'. [ 2160.124507][ T10] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2160.208141][T17374] libceph: resolve 'c' (ret=-3): failed [ 2160.297830][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2160.309503][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2160.320757][ T10] usb 6-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 2160.336473][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2160.351141][ T10] usb 6-1: config 0 descriptor?? [ 2160.904347][T17382] libceph: resolve 'c' (ret=-3): failed [ 2161.855121][ T1226] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 2161.878630][T17393] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6350'. [ 2162.088051][ T1226] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2162.096403][ T1226] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2162.124512][ T1226] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2162.145962][ T1226] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2162.410459][ T1226] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2162.458276][ T1226] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2162.470581][ T1226] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2162.527343][ T1226] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2162.572197][ T1226] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2162.651741][ T1226] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2162.685183][ T1226] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2162.692672][ T1226] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2162.719113][ T1226] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2162.752737][ T1226] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2162.777202][ T1226] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2162.810531][ T1226] usb 1-1: string descriptor 0 read error: -22 [ 2162.817166][ T1226] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2162.833839][ T1226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2162.895648][ T1226] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2163.254831][T17384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2163.263917][T17384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2163.775296][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 2163.790984][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2163.855954][ T10] usb 6-1: USB disconnect, device number 34 [ 2164.101596][T17448] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6355'. [ 2164.145348][T17448] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6355'. [ 2164.625158][T17490] libceph: resolve 'c' (ret=-3): failed [ 2164.718295][T17492] xt_hashlimit: size too large, truncated to 1048576 [ 2165.436453][ T10] usb 1-1: USB disconnect, device number 43 [ 2165.571777][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.578252][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2165.906113][T17517] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6362'. [ 2167.564334][ T1226] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2167.804451][ T1226] usb 6-1: Using ep0 maxpacket: 32 [ 2167.975593][ T1226] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2168.006880][ T1226] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2168.054982][ T1226] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2168.074499][ T1226] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2168.269633][ T1226] usb 6-1: config 0 descriptor?? [ 2168.324119][ T1226] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2168.763807][T17558] loop2: detected capacity change from 0 to 7 [ 2168.772103][T17558] Dev loop2: unable to read RDB block 7 [ 2168.778327][T17558] loop2: unable to read partition table [ 2168.809818][T17558] loop2: partition table beyond EOD, truncated [ 2168.831831][T17558] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2170.022805][T17582] netlink: 'syz.0.6375': attribute type 11 has an invalid length. [ 2170.031929][T17582] netlink: 448 bytes leftover after parsing attributes in process `syz.0.6375'. [ 2170.115596][ T10] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 2170.368540][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2170.376481][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2170.408187][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2170.470765][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2170.507475][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2170.536683][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2170.554728][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2170.573258][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2170.624309][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2170.689266][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2170.718914][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2170.736988][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2170.773789][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2170.805100][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2170.834520][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2170.898907][T17639] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 2170.925274][ T10] usb 4-1: string descriptor 0 read error: -22 [ 2170.939969][T30786] usb 6-1: USB disconnect, device number 35 [ 2170.942527][ T10] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2170.975357][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2171.048533][ T10] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2171.121739][T17662] loop2: detected capacity change from 0 to 7 [ 2171.140430][T17662] Dev loop2: unable to read RDB block 7 [ 2171.147130][T17662] loop2: unable to read partition table [ 2171.153311][T17662] loop2: partition table beyond EOD, truncated [ 2171.163631][T17662] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2171.186483][ T5193] Dev loop2: unable to read RDB block 7 [ 2171.194126][ T5193] loop2: unable to read partition table [ 2171.206578][ T5193] loop2: partition table beyond EOD, truncated [ 2171.379145][T17672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2171.404048][T17672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2171.695448][ T10] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 2171.858376][ T10] usb 1-1: device descriptor read/64, error -71 [ 2172.144386][ T10] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 2172.474385][ T10] usb 1-1: device descriptor read/64, error -71 [ 2172.595257][ T10] usb usb1-port1: attempt power cycle [ 2172.964865][ T10] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 2172.989371][ T10] usb 1-1: device descriptor read/8, error -71 [ 2173.244338][ T10] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 2173.275046][ T10] usb 1-1: device descriptor read/8, error -71 [ 2173.396088][ T10] usb usb1-port1: unable to enumerate USB device [ 2173.690497][ T10] usb 4-1: USB disconnect, device number 16 [ 2173.819244][T17713] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6386'. [ 2174.111898][T17734] libceph: resolve 'c' (ret=-3): failed [ 2174.179122][T17735] usb usb8: usbfs: process 17735 (syz.7.6388) did not claim interface 0 before use [ 2174.191108][T17735] usb usb8: selecting invalid altsetting 2047 [ 2174.389011][T17743] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 2174.439912][T17745] loop7: detected capacity change from 0 to 4 [ 2174.639054][T17753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6394'. [ 2176.055228][T17786] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6398'. [ 2176.218263][ T1226] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 2176.460408][ T1226] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2176.471386][ T1226] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2176.570663][ T1226] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2176.615562][ T1226] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2176.652173][ T1226] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2176.677329][ T1226] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2176.687813][ T1226] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2176.702568][ T1226] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2176.725635][ T1226] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2176.737304][ T1226] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2176.737949][T17791] tipc: Enabled bearer , priority 0 [ 2176.803678][T17794] syzkaller0: entered promiscuous mode [ 2176.835935][ T1226] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2176.845435][T17794] syzkaller0: entered allmulticast mode [ 2176.869659][ T1226] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2176.905845][ T1226] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2176.959305][ T1226] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2177.001126][ T1226] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2177.022388][T17794] tipc: Resetting bearer [ 2177.077003][ T1226] usb 4-1: string descriptor 0 read error: -22 [ 2177.092749][ T1226] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2177.114360][ T1226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2177.166031][T17794] tipc: Disabling bearer [ 2177.177906][ T1226] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2177.545781][T17777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2177.572434][T17777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2177.742627][T17838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2178.214331][T10348] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2178.441631][T10348] usb 1-1: Using ep0 maxpacket: 32 [ 2178.469801][T10348] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2178.480373][T10348] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2178.536013][T10348] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2178.596662][T10348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2178.669180][T10348] usb 1-1: config 0 descriptor?? [ 2178.721067][T17861] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6408'. [ 2178.731873][T10348] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2179.745355][T30786] usb 4-1: USB disconnect, device number 17 [ 2180.424705][T30786] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2180.524325][ T10] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2180.600524][T30786] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2180.614953][T30786] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2180.625454][T30786] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2180.637391][T30786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2180.658645][T30786] usb 4-1: SerialNumber: syz [ 2180.694367][ T10] usb 6-1: device descriptor read/64, error -71 [ 2180.902068][T30786] usb 4-1: invalid UAC_HEADER (v1) [ 2180.949092][ T10] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2180.985171][T30786] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2181.037067][T30786] usb 4-1: USB disconnect, device number 18 [ 2181.063990][T32653] udevd[32653]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2181.104108][ T9437] usb 1-1: USB disconnect, device number 48 [ 2181.108457][ T10] usb 6-1: device descriptor read/64, error -71 [ 2181.266156][ T10] usb usb6-port1: attempt power cycle [ 2181.519474][T17980] xt_hashlimit: size too large, truncated to 1048576 [ 2181.528661][T17980] xt_hashlimit: max too large, truncated to 1048576 [ 2181.557842][T17980] usb usb8: usbfs: process 17980 (syz.0.6418) did not claim interface 0 before use [ 2181.574564][T17980] usb usb8: selecting invalid altsetting 2047 [ 2181.650964][ T10] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2181.678937][ T10] usb 6-1: device descriptor read/8, error -71 [ 2181.935114][ T10] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2181.972601][ T10] usb 6-1: device descriptor read/8, error -71 [ 2182.062470][T17999] xt_hashlimit: size too large, truncated to 1048576 [ 2182.095367][ T10] usb usb6-port1: unable to enumerate USB device [ 2182.329146][T18005] netlink: 212892 bytes leftover after parsing attributes in process `syz.7.6422'. [ 2183.824519][ T9437] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2183.987028][ T9437] usb 6-1: Using ep0 maxpacket: 8 [ 2184.016979][ T9437] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2184.039372][ T9437] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 2184.051662][ T9437] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 2184.066525][ T9437] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 2184.081588][ T9437] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2184.102415][ T9437] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2184.132826][ T9437] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 2184.146579][ T9437] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2184.158233][ T9437] usb 6-1: Product: syz [ 2184.168437][ T9437] usb 6-1: Manufacturer: syz [ 2184.181091][ T9437] usb 6-1: SerialNumber: syz [ 2184.216123][ T9437] usb 6-1: config 0 descriptor?? [ 2184.228579][T18027] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2184.771148][T18091] syzkaller0: entered promiscuous mode [ 2184.780330][T18091] syzkaller0: entered allmulticast mode [ 2185.385843][T18103] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2185.687150][ T9437] rc_core: IR keymap rc-snapstream-firefly not found [ 2185.696393][ T9437] Registered IR keymap rc-empty [ 2185.731497][ T9437] rc rc0: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2185.813179][ T9437] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input86 [ 2185.863356][T18110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6433'. [ 2185.963104][ T9437] input: syz syz mouse as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input87 [ 2186.478806][T10348] usb 6-1: USB disconnect, device number 40 [ 2186.478849][ C1] ati_remote 6-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 2187.145974][T18156] nftables ruleset with unbound chain [ 2187.189590][T18159] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2188.047850][T15451] Bluetooth: hci0: command 0x0406 tx timeout [ 2188.260349][T18211] xt_hashlimit: size too large, truncated to 1048576 [ 2189.247476][T18232] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6446'. [ 2189.736529][T18271] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 2189.754522][ T1226] IPVS: starting estimator thread 0... [ 2189.885588][T18272] IPVS: using max 39 ests per chain, 93600 per kthread [ 2190.639758][T18305] tipc: Enabling of bearer rejected, already enabled [ 2192.890109][ T9437] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2193.058117][ T9437] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2193.088519][ T9437] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2193.123019][ T9437] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2193.143588][ T9437] usb 1-1: config 1 has no interface number 1 [ 2193.161015][ T9437] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2193.207375][ T9437] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2193.227818][ T9437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2193.249293][ T9437] usb 1-1: Product: syz [ 2193.260314][ T9437] usb 1-1: Manufacturer: syz [ 2193.274487][ T9437] usb 1-1: SerialNumber: syz [ 2193.559878][ T9437] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 2193.585239][ T9437] usb 1-1: MIDIStreaming interface descriptor not found [ 2193.599566][T18350] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6460'. [ 2193.725049][ T9437] usb 1-1: USB disconnect, device number 49 [ 2193.841664][ T579] udevd[579]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2193.884095][T18374] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6462'. [ 2193.980272][T18376] xt_hashlimit: size too large, truncated to 1048576 [ 2194.758338][T18413] usb usb8: usbfs: process 18413 (syz.0.6465) did not claim interface 0 before use [ 2194.769939][T18413] usb usb8: selecting invalid altsetting 2047 [ 2194.913257][T18417] netlink: 'syz.8.6466': attribute type 1 has an invalid length. [ 2195.007395][T18437] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6466'. [ 2195.022820][T18417] bond7: entered promiscuous mode [ 2195.049845][T18417] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2195.139785][T18437] bond7: entered allmulticast mode [ 2195.476739][ T29] audit: type=1800 audit(1770721336.443:1365): pid=18454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6467" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 2195.751480][T18456] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 2195.816805][T18459] cifs: Unknown parameter 'fd' [ 2196.102787][T18469] libceph: resolve 'c' (ret=-3): failed [ 2196.346471][T18476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6473'. [ 2197.595415][T18506] netlink: 'syz.3.6479': attribute type 1 has an invalid length. [ 2197.715457][T18519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6479'. [ 2197.752090][T18506] bond5: entered promiscuous mode [ 2197.822497][T18506] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2197.859388][T18554] usb usb8: usbfs: process 18554 (syz.7.6480) did not claim interface 0 before use [ 2197.870614][T18554] usb usb8: selecting invalid altsetting 2047 [ 2197.899452][T18519] bond5: entered allmulticast mode [ 2198.316726][ T1226] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 2198.552832][ T1226] usb 1-1: not running at top speed; connect to a high speed hub [ 2198.562016][ T1226] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2198.574761][ T1226] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2198.592330][ T1226] usb 1-1: config 1 has no interface number 1 [ 2198.724329][ T1226] usb 1-1: config 1 interface 2 has no altsetting 0 [ 2198.864499][ T1226] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2198.873570][ T1226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2198.934685][ T1226] usb 1-1: Product: syz [ 2198.952872][ T1226] usb 1-1: Manufacturer: syz [ 2198.985823][ T1226] usb 1-1: SerialNumber: syz [ 2199.186415][T18575] netlink: 'syz.8.6484': attribute type 6 has an invalid length. [ 2199.194398][T18575] netlink: 'syz.8.6484': attribute type 7 has an invalid length. [ 2199.215152][T18575] netlink: 'syz.8.6484': attribute type 8 has an invalid length. [ 2199.300914][ T1226] usb 1-1: selecting invalid altsetting 0 [ 2199.321141][ T1226] usb 1-1: failed to enable PITCH for EP 0x82 [ 2199.331211][ T1226] usb 1-1: selecting invalid altsetting 0 [ 2199.334700][ T5921] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2199.565889][ T1226] usb 1-1: USB disconnect, device number 50 [ 2199.577600][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 2199.632160][ T5921] usb 4-1: config 6 has an invalid interface number: 63 but max is 0 [ 2199.689712][ T5921] usb 4-1: config 6 has no interface number 0 [ 2199.748033][ T5921] usb 4-1: config 6 interface 63 has no altsetting 0 [ 2199.884973][ T5921] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=ff.ab [ 2199.907846][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2199.927114][ T5921] usb 4-1: Product: syz [ 2199.931295][ T5921] usb 4-1: Manufacturer: syz [ 2199.951122][ T5921] usb 4-1: SerialNumber: syz [ 2200.183112][ T29] audit: type=1326 audit(1770721341.143:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.3.6483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7779af79 code=0x7ffc0000 [ 2200.260917][T18563] delete_channel: no stack [ 2200.267101][T18562] delete_channel: no stack [ 2200.292700][ T579] udevd[579]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2200.302545][ T5921] ftdi_sio 4-1:6.63: FTDI USB Serial Device converter detected [ 2200.331925][ T29] audit: type=1326 audit(1770721341.143:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.3.6483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7779af79 code=0x7ffc0000 [ 2200.405925][ T5921] ftdi_sio ttyUSB0: unknown device type: 0xffab [ 2200.463617][ T5921] usb 4-1: USB disconnect, device number 19 [ 2200.490435][ T29] audit: type=1326 audit(1770721341.183:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.3.6483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d7779af79 code=0x7ffc0000 [ 2200.525598][ T5921] ftdi_sio 4-1:6.63: device disconnected [ 2200.640868][ T29] audit: type=1326 audit(1770721341.183:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.3.6483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7779af79 code=0x7ffc0000 [ 2200.694395][ T29] audit: type=1326 audit(1770721341.193:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.3.6483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7779af79 code=0x7ffc0000 [ 2200.824830][ T1226] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2200.844305][ T29] audit: type=1326 audit(1770721341.193:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.3.6483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d7779af79 code=0x7ffc0000 [ 2200.911693][T18642] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6486'. [ 2200.960425][ T29] audit: type=1326 audit(1770721341.223:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.3.6483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7779af79 code=0x7ffc0000 [ 2200.994273][ T1226] usb 1-1: device descriptor read/64, error -71 [ 2201.042579][ T29] audit: type=1326 audit(1770721341.223:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.3.6483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d7779af79 code=0x7ffc0000 [ 2201.086841][T18652] netlink: 'syz.3.6488': attribute type 1 has an invalid length. [ 2201.104987][ T29] audit: type=1326 audit(1770721341.223:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.3.6483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7779af79 code=0x7ffc0000 [ 2201.173420][ T29] audit: type=1326 audit(1770721341.223:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.3.6483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f8d7779af79 code=0x7ffc0000 [ 2201.264624][ T1226] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2201.282194][T18665] binder: BINDER_SET_CONTEXT_MGR already set [ 2201.295470][ T29] audit: type=1326 audit(1770721341.223:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.3.6483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7779af79 code=0x7ffc0000 [ 2201.347533][T18665] binder: 18658:18665 ioctl 4018620d 200000004a80 returned -16 [ 2201.384823][ T29] audit: type=1326 audit(1770721341.223:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.3.6483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d7779af79 code=0x7ffc0000 [ 2201.424904][ T1226] usb 1-1: device descriptor read/64, error -71 [ 2201.503762][T18675] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6491'. [ 2201.544347][ T1226] usb usb1-port1: attempt power cycle [ 2201.897509][ T1226] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 2201.945306][ T1226] usb 1-1: device descriptor read/8, error -71 [ 2202.044683][ T5921] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 2202.194445][ T1226] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2202.217222][ T5921] usb 4-1: not running at top speed; connect to a high speed hub [ 2202.226725][ T5921] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2202.245160][ T1226] usb 1-1: device descriptor read/8, error -71 [ 2202.245674][ T5921] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2202.274300][ T5921] usb 4-1: config 1 has no interface number 1 [ 2202.280475][ T5921] usb 4-1: config 1 interface 2 has no altsetting 0 [ 2202.311904][ T5921] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2202.328053][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2202.344523][ T5921] usb 4-1: Product: syz [ 2202.354308][ T5921] usb 4-1: Manufacturer: syz [ 2202.364298][ T5921] usb 4-1: SerialNumber: syz [ 2202.384651][ T1226] usb usb1-port1: unable to enumerate USB device [ 2202.632459][ T5921] usb 4-1: selecting invalid altsetting 0 [ 2202.655911][ T5921] usb 4-1: failed to enable PITCH for EP 0x82 [ 2202.674284][ T5921] usb 4-1: selecting invalid altsetting 0 [ 2202.761391][ T5921] usb 4-1: USB disconnect, device number 20 [ 2202.831009][ T1164] udevd[1164]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2203.129211][T18765] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2203.718319][T30786] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2204.004454][T30786] usb 1-1: Using ep0 maxpacket: 32 [ 2204.024080][T30786] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 2204.044330][T30786] usb 1-1: config 0 has no interface number 0 [ 2204.050490][T30786] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2204.084005][T30786] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2204.106373][T30786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2204.133936][T30786] usb 1-1: Product: syz [ 2204.152915][T30786] usb 1-1: Manufacturer: syz [ 2204.164270][T30786] usb 1-1: SerialNumber: syz [ 2204.192358][T30786] usb 1-1: config 0 descriptor?? [ 2204.205460][T18782] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2204.441505][T18782] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2204.719461][T30786] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2204.748764][T30786] asix 1-1:0.188: probe with driver asix failed with error -61 [ 2205.454061][T18832] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2205.778376][ T10] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 2206.026849][ T10] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 2206.045828][ T10] usb 4-1: config 0 has no interface number 0 [ 2206.067517][ T10] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 2206.101523][ T10] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2206.128034][ T10] usb 4-1: config 0 interface 113 has no altsetting 0 [ 2206.150381][ T10] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 2206.160300][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2206.182059][ T10] usb 4-1: Product: syz [ 2206.194525][ T10] usb 4-1: Manufacturer: syz [ 2206.235757][ T10] usb 4-1: SerialNumber: syz [ 2206.253914][ T10] usb 4-1: config 0 descriptor?? [ 2206.285043][ C0] usb 4-1: NFC: Urb failure (status -71) [ 2206.293404][ T10] usb 4-1: NFC: Unable to get FW version [ 2206.307722][ T10] pn533_usb 4-1:0.113: probe with driver pn533_usb failed with error -90 [ 2207.425159][ T10] usb 1-1: USB disconnect, device number 55 [ 2208.168614][T30786] usb 4-1: USB disconnect, device number 21 [ 2213.604404][T15451] Bluetooth: hci4: command 0x0406 tx timeout [ 2226.893260][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2226.899753][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2288.328385][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.334945][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2349.769041][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2349.775535][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2411.208737][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2411.215550][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2472.648652][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2472.657443][ T1302] ieee802154 phy1 wpan1: encryption failed: -22