last executing test programs: 8m57.154312497s ago: executing program 4 (id=1383): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c020000190001000000000001000000fe8800000000000000000000000001010000000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000004000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000084010500ac1414aa000000000000000000000000000000003300000000000000ffffffff0000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003300000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa0000000033000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff20010000000000000000000000000002000000006c00000002000000640101010000000000000000000000000000000004000000000000000200000008000000ff01000000000000000000000000000100000000330000"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 8m57.094273652s ago: executing program 4 (id=1384): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[], 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) getdents64(r7, &(0x7f00000000c0)=""/55, 0x37) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) lseek(r7, 0x3, 0x0) shutdown(r3, 0x2) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) 8m55.210053716s ago: executing program 4 (id=1389): r0 = socket(0x80000000000000a, 0x2, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f00000000c0)) (async) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) (async) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[], 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) (async) r3 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) (async) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x90, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x24004000, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) 8m53.844532325s ago: executing program 4 (id=1392): mmap(&(0x7f0000c7b000/0x3000)=nil, 0x3000, 0x2, 0x40010, 0xffffffffffffffff, 0x1000000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000000002, 0x0) r1 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd1, 0xaf, 0xb6, 0x40, 0x24cf, 0x59e4, 0x943, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x21, 0x0, 0x0, 0x8, 0x6, 0x50}}]}}]}}, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x112) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) 8m52.083833598s ago: executing program 4 (id=1397): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0xfffffffffffffffe) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r4 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SLAVE_FORCE(r4, 0x706, 0x73) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) close(r3) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02\\\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 8m51.635797556s ago: executing program 4 (id=1400): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x4a040000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1c8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x40, 0x107, 0x70bd2b, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x9c}, @nested={0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048090}, 0xc000) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400"], 0x2c}}, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r8, 0x303, 0x80000000, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, 0x0) 8m51.349747868s ago: executing program 32 (id=1400): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x4a040000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1c8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x40, 0x107, 0x70bd2b, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x9c}, @nested={0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048090}, 0xc000) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400"], 0x2c}}, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r8, 0x303, 0x80000000, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, 0x0) 7.659656219s ago: executing program 5 (id=3813): r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x100) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB='\x00\x00r\a\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x0, 0x6}}, './file1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r5, &(0x7f0000000100)="ab", 0xffe0, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r6) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r7 = syz_usb_connect(0x5, 0x2d, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) shutdown(r3, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002280)=[{&(0x7f0000000300)=""/146, 0x92}], 0x1, 0x10001, 0xfffffffc) syz_open_dev$audion(&(0x7f0000000180), 0x6, 0x8c4201) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x81) socket$inet(0x10, 0x80000, 0x0) unshare(0x2a020400) 7.104437141s ago: executing program 2 (id=3818): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000000000007112180000000000bc201000210000009500000000000000159bb11d55cd54f795ebc6c48b7ee57df364594defe47aa18c81fbb86c6042dbf743a90b61bae3a57ba478e003fe723b194058bc41fc8c6082cee0dce6c4e98c8804a03eb15abe991b86e1c207e4b9c2e545253ec3e0a8800fd697685e0d14ef22ee60615176aa2972a57268ec0127b3869d981e769df4fd0f63d8bde942339d7e8fa10c87b5562d7cd8a361f5801b6e29c575dac7f00846c103fa144116db9a8a8850b0715c590a250c52c2b47c7a4176a8c5e2702c9ad3df0cc0"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) write$binfmt_register(r3, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237) socket(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_FLUSH(r2, 0x0, 0x480c4) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = dup(r4) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40603d07, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', 0x0, 0x0, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000100)={r6}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x5}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x20, 0xa7e, 0x400070}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x8000, 0x100077}, {@remote, 0x4e20, 0x3, 0x8, 0x200}}, 0x44) 6.707708547s ago: executing program 1 (id=3819): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x2, 0x6, @local}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x1004, 0x0, 0xa, 0x410}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x41004) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="a1080124", @ANYRES16=r7, @ANYBLOB="000828bd7000fddbdf250d0000003400018008000100", @ANYRES32=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x80) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) syz_usb_connect(0x0, 0x12, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xc, 0xfff3}}}, 0x24}}, 0x0) 5.748391662s ago: executing program 3 (id=3820): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x87c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xf, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x84c, 0x2, [@TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x10000, 0x6, 0x7, 0xb, 0xfffffffe, 0x0, 0x80, 0x10000, 0x4, 0x2, 0xd2, 0xffffffff, 0x6, 0x0, 0x0, 0x4, 0x7, 0x38fd, 0x10001, 0x7fff, 0x1, 0x9, 0xbbc6, 0x64b0, 0xfffffffa, 0x1c, 0x1e, 0x3, 0x9, 0x10000, 0x988, 0x4, 0x6, 0x10000, 0x756e, 0x8000, 0x10000, 0x3, 0x3ada, 0x401, 0x0, 0x1bc, 0x4, 0x9, 0x80000001, 0x3, 0x100, 0x2f2, 0x475f, 0xf970, 0xf7b, 0xf, 0x2707, 0x8, 0x6, 0x1000, 0x4, 0x10001, 0x5, 0x0, 0x5, 0x8, 0x101, 0x8001, 0x1, 0xffffff81, 0x2, 0xef, 0x80, 0x7, 0x8, 0x9, 0x9, 0x3ff000, 0xde49, 0x0, 0x5, 0x4, 0xa99, 0x2, 0x200, 0x8, 0x2, 0x36d000, 0x5, 0x2, 0x0, 0x101, 0x58, 0x0, 0xde5, 0xfff, 0x0, 0x1aa8, 0x9, 0x2, 0xf, 0x400, 0x200, 0x1, 0x4, 0x2, 0x0, 0x401, 0x1ff, 0x5, 0x1, 0x5, 0xfffffffa, 0x5, 0x3, 0x5, 0x3, 0x2, 0x1ac, 0xdd64, 0x8001, 0x5, 0x3, 0xffff, 0xfffffff8, 0x7, 0x8, 0x1000, 0x1, 0x8, 0x40000005, 0xb08, 0xa, 0xfe7f, 0xfffffff5, 0x6, 0x7, 0xff, 0x2, 0x101, 0x2, 0x1, 0x7ff, 0x1, 0x4, 0x6, 0x4, 0x7, 0x2, 0x4, 0x1, 0x4, 0x8, 0x6, 0x4, 0xab1, 0x74f1, 0x9, 0x4a, 0x2, 0x7d2, 0x8c8a, 0xc, 0x5, 0xf6, 0x5, 0x8, 0x7f, 0x0, 0x0, 0x9c, 0x1, 0x1, 0xfffffbff, 0x5, 0x80000001, 0x10, 0x8000, 0x0, 0x0, 0xd, 0x3, 0x4, 0x6, 0x2, 0x3, 0x7, 0xfffff843, 0x6, 0x6, 0x9, 0x9, 0xffffff93, 0xd, 0xfff, 0x4, 0x80000001, 0xf93, 0x6, 0xd, 0xd, 0x7, 0x9, 0x4, 0x7fffffff, 0x5, 0xe92e, 0x2, 0x8, 0x0, 0x2, 0x2, 0xd, 0x2, 0x80, 0x4, 0x90, 0xfffffbff, 0xb0bb, 0x4, 0xc0, 0x19fa, 0x2b, 0xfffffeff, 0x6, 0x7, 0x2, 0x8, 0x0, 0x9, 0x4, 0x4, 0x4, 0xfffff000, 0x7, 0x3dbc4d99, 0x4e, 0xcef, 0x80000000, 0x400, 0x7, 0x6103, 0xf, 0x5, 0x5, 0x40, 0x5, 0x6, 0x7, 0x6, 0xe9c8, 0x1a0, 0x3fe, 0x10001, 0x8000, 0x5, 0x1000, 0x4, 0xb13]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x9, 0x80, 0x7, 0x10, 0x8000, 0x0, 0x9, 0x2000000, 0x800004, 0x5, 0x7, 0x6, 0x8, 0xb48, 0x5, 0x9, 0x101, 0xa, 0x3, 0x5, 0xfff, 0x7, 0x10000000, 0xffffffff, 0x1d3e, 0x4, 0x22, 0xfffffffd, 0x80000000, 0x8, 0xffffffff, 0x200, 0x7fff, 0x20009, 0x5, 0x1, 0xfff, 0x402, 0x0, 0x0, 0x3d0, 0x3, 0x78b5, 0x8, 0x5, 0x9d, 0x5, 0x40, 0xf9e, 0x8, 0xfffffffd, 0xb, 0x6, 0x3, 0x8, 0x8, 0x800, 0x0, 0x3, 0xaa, 0x9, 0x4, 0x9, 0xfffffff9, 0x8, 0x7, 0x6, 0xffe, 0x800, 0x1, 0x6, 0x2, 0x81, 0x81, 0x5, 0x200, 0x401, 0x9464, 0x1, 0x7fff, 0x2, 0x9, 0x5a, 0x1a, 0x5fd, 0x81, 0x1, 0x7fffffff, 0x2, 0xf8c, 0x4, 0x6, 0x2, 0x0, 0x1, 0x6, 0xab99, 0xe, 0x1, 0x2, 0x3ff, 0x6, 0xb, 0x7f1, 0x7fffffff, 0x3, 0x40, 0x7, 0x1, 0x15, 0x1, 0x7fffffff, 0x1, 0x6, 0x3, 0x91, 0x0, 0x9, 0x4, 0x3, 0xffffff0d, 0xe, 0x7, 0xdc, 0x8, 0x80000001, 0xb, 0x6, 0x8, 0x0, 0x2f, 0xe1, 0x10000, 0x0, 0x1407, 0x9, 0x5, 0x8, 0x81, 0x1, 0x9, 0x2, 0x10000, 0x9, 0x8, 0x5, 0x3, 0x0, 0x8000, 0x4, 0x7, 0x3, 0x400, 0x2, 0x6, 0x5, 0x4e38211e, 0x0, 0xa959, 0x67, 0x400, 0x1000, 0xaf, 0xfffffff9, 0x30cfd753, 0xe0, 0x4, 0x1, 0x800, 0x9, 0x4, 0x400, 0x39a, 0x2, 0x1ff, 0x1, 0x7fff, 0xffffffff, 0x40, 0x9742393, 0x0, 0x4ef5, 0x6, 0x80000001, 0xffff0fb7, 0x1, 0x0, 0x1, 0x0, 0xe, 0x3, 0x0, 0x5000, 0x4, 0xb14, 0x6, 0xf864eed, 0xc5, 0x8, 0x7, 0x125, 0x40, 0x2, 0x3ff, 0x9, 0x10000, 0x101, 0xc, 0x0, 0x9, 0x800, 0x7, 0x4, 0x3, 0x0, 0xf34a, 0x9, 0x18, 0x3ff, 0x1, 0xde, 0x0, 0x2, 0x77f, 0x0, 0x5, 0xcd0c, 0x0, 0x3, 0x0, 0x8, 0x4, 0x3ff, 0x4, 0x1, 0x1, 0x100, 0x5553, 0x4, 0xfffffffe, 0x25f76613, 0xffffffff, 0xc7, 0x4, 0x1000, 0xf0, 0x3, 0x1, 0x7f, 0x3, 0x7fff, 0x5, 0x3, 0x101, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x6, 0x8, 0x8, 0x4, {0x6, 0x0, 0xb, 0x2, 0x8, 0x1}, {0x4, 0x2, 0x30, 0x1, 0x7, 0x3}, 0xb, 0x5}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0x0, 0x4, 0x49, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x7bce, 0x10, 0x4, 0xf08}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) r10 = mq_open(&(0x7f0000000040)='$R\x00^e\xb61\xb9\xc7/<\x85-\x8a\xcb\x01\x80\x00\x00\x00\x00\x00\x00', 0x842, 0xf8, 0x0) lseek(r10, 0x3, 0x3) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r9, 0x0, 0x0, 0x80) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x74, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x6, 0x5, 0x11, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8, 0x8000, 0x0, 0x800}}) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r13}}, 0x24}}, 0x0) 5.264827059s ago: executing program 2 (id=3824): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xc) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) accept4(r1, 0x0, 0x0, 0x800) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) getsockopt$sock_int(r4, 0x1, 0x4, 0x0, &(0x7f0000000180)) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000740)="660fd3a148d50000c423756d68039cf2450f2ba4b00080000036470f07410f01c5460f0170e4b96f3c40000f320f07c4c1305dab00000000c4617853e8", 0x3d}], 0x1, 0x88, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$FIBMAP(r4, 0x1, &(0x7f00000001c0)=0x7) syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x103182) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x0, 0x2, 0x0, 0xe, 0x5, 0x6}, &(0x7f00000000c0)=0x20) syz_usb_connect(0x4, 0x43, &(0x7f0000000240)=ANY=[], 0x0) 4.819657695s ago: executing program 3 (id=3825): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000480)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x4}}}}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x4b, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x4, @remote, 0x7}, {0xa, 0x0, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x48) syz_emit_ethernet(0x1df, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e22, 0x86fa, @remote, 0x20000000}}, 0x7, 0x1}, 0x90) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x100, 0x0) syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r7, 0x40046103, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"}) fanotify_init(0x200, 0x0) 4.66127394s ago: executing program 2 (id=3826): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000fc000000000000000000000000000000000000000000001800000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008400050000000000000000000000000000000000000000003200000000000000ac14141d000000000000000000000000000000000000ff00000000000000000001000000ff010000000000000000000000000001000000003c00000002000000fe8000000000000000000000000000100000000000000000000000000300000000000000"], 0x13c}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000fc000000000000000000000000000000000000000000001800000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008400050000000000000000000000000000000000000000003200000000000000ac14141d000000000000000000000000000000000000ff00000000000000000001000000ff010000000000000000000000000001000000003c00000002000000fe8000000000000000000000000000100000000000000000000000000300000000000000"], 0x13c}}, 0x0) socket(0xa, 0x3, 0x3a) (async) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14}}, 0xcc}}, 0x0) 4.619989761s ago: executing program 5 (id=3827): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5207, 0x0) syz_io_uring_setup(0x2c4a, &(0x7f00000002c0)={0x0, 0xdfe1, 0x800, 0x401, 0x13f}, 0x0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[], 0x1cb) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)=0x4) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRESDEC=r5, @ANYRES32=r5, @ANYRESDEC=r5, @ANYBLOB="2c8a1b4b70b849db65761e8f2400fcd73bbf397ee779c5bed640282e4e9eff4ac7fb4af76e369c723b079efad7f3772f5d7dbb24a604e1b05b1baf1a9e88235751b4777c733d14bc14de19b0d72e7a2b9c64b49eab7f306ab1e513c8de4b655d88e049e63318caade2f6dec95a4f58948dc556bc847ec617833fab0d9ce8724f748c201ebc43aa48870f4ee27826f3ea821704a8f8a195e1121aa1dc53c6"], 0x9c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 4.519554465s ago: executing program 5 (id=3828): syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) unshare(0x2040400) syz_80211_join_ibss(&(0x7f00000000c0)='wlan1\x00', &(0x7f0000000100)=@random="10", 0x1, 0x2) r2 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="202100000001"], 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f0000000000)=0x8000000) write$vhost_msg_v2(r9, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000340)=""/177, 0x1f, 0x0, 0x2, 0x3}}, 0x48) write$vhost_msg(r9, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfff2) ioctl$EVIOCGMASK(r8, 0x5b04, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0x4}, {0x0, 0x10}, {0xe, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 4.228473643s ago: executing program 2 (id=3829): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) lseek(r0, 0x40008, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x10, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xc21}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40440e4}, 0x40000) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100)=0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x1, 0x5}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r3, 0x331, 0x70bd25, 0x25dfdbfa, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048800}, 0x4000000) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x10) 4.056687281s ago: executing program 2 (id=3830): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x100) socket$inet6_tcp(0xa, 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0xc40, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c00000012003700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001d"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) r4 = socket(0x1, 0x803, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x20, 0xa, 0x4, "118816fc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x320}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3f, r6}]}, 0x3c}}, 0x4000000) r7 = syz_io_uring_setup(0x9e, &(0x7f0000000300)={0x0, 0x5867, 0x800, 0x0, 0x1bd}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)=""/216, 0xd8}, {0x0}], 0x2, 0x0, 0x1}) io_uring_enter(r7, 0x100847c0, 0x0, 0x1, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), &(0x7f00000002c0)=@v3={0x1000000, [{0x1, 0x9}, {0x2, 0xffffffc0}]}, 0x18, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r10, 0xc0505510, &(0x7f0000000140)={0x2, 0x40000000000009a, 0x0, 0x6, &(0x7f0000001600)}) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) dup(r0) syz_usb_connect(0x0, 0x57, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102882333404f17318af4390102030109024500013f06400409044207000e0100010a240107000105ff0103020707240501"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 3.500385751s ago: executing program 5 (id=3832): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="320200007d01000005f1000000000400000000000000040000000000000000000000000000000000000000000000000000001f00046e6f6465767b6376666f7825ffffff81020200000042000000bc920000003800704a86cec602007dfa673effeb09b5351f5bde0540"], 0x232) 3.379527836s ago: executing program 1 (id=3833): unshare(0x62040200) (async) unshare(0x62040200) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) r0 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [0x8, 0x3, 0x3, 0x1, 0x8b37]}, &(0x7f0000000200)=0x54) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000a40)={&(0x7f00000005c0)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x2}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000640)="15773c3b656c4102a4d10d4db06e7215f7eea414844045f395bf8fead961658d3e0809e25fd8a10a60069ec3d3bf52c841fad31958b22520a4983d3cea8ac2a0773026d8ea16622e96d1a5bcb973f50f45e876f042cfb4be3ba45ae8b304b27cbecd050008fe1c07b71bf234d09b53b4437800ee33d8a7", 0x77}, {&(0x7f00000006c0)="e0709d9e0107a861a722b91db48edd51e1df7031486077c70f7d62330c78df45a58b63c4cc25a94f3f42a40635cd6b1ca1fd76fe31ffa633b36ffaef44a937efbe53c72195bc6fa9792a54c14b133d37722423cc1ee2e0ab0ad97287df97c5a27a8765594af970c052e7958233d54b3667f4812f5002277b863499028129220f110bf65252ac236058e53650ba260bee13da210937962bb1a4fe5aef0969de4afbc32f012549e31519279be8786c64835dac454eb9a332e62cd9cf135d53769e6fd45e94aad2095a6d001407561862c62428e2b9ae231ecbeab107bb7090076a4338", 0xe2}], 0x2, &(0x7f0000000800)=[{0x70, 0x109, 0x55b7, "b35b094b1e583f7de9ae66ec232cd1734b6e5aec7c94869117eaeeb42089a48c80b91d3ad88d6e1aadabfe78f1650ed87e0e114f1681702afd667b1792b8a314d7c05e5462a52b39ea1555856a28d9af00ab01eb785f9fa35a1a8a73097624"}, {0xa0, 0x119, 0x5, "76f284fbe5c3c983f839645b6bac15781d74a0bb9f406552e7be1f619875b8ccc7858090efbf04cbd3d238baa3a6dce2b382670d04c7881a862455213bd33e7b1b7e1a7c80d855d5cb2bc6b0c60f3f42dfab1a65d72b25fd89f8085ca3a73679be3d36a94eb9c9ccb7cfd473405f56508b1eb13b663f7cd7c0cf38add5c70cd90f85f908a452ed3e30c39a5a064f1e49"}, {0xe0, 0x10f, 0x7f, "ac2d22f13946af4ae15cd5c4419a125401b8171ff40e6c8ae6ff90c513af54c095ed38b6388e87f15d742e4e21314e60b078847ddc41cf1eae1e81ce8e54f9c607c43fdebba120717b6ba7c6537e2b5963ae2a56f1cd71789ff97403b4ee79eb6792774b72156d537913c3d9c44c0caa5570a3ab1f544465da56f512e3700074d9cedf22f0fdba464602043278900e5fa33d7cee9932a1228d66be35cb7905eb299d95218bea712660cce91ed7f5cdce4b8f948a8e59b58ca1a4a474b7acd7d18938961fd9a54e94ed"}, {0x40, 0x1, 0x4, "694e0a749d9ed0e919cede4a5aa7da61d879ad2dc3465c91ce83e32f91920c17c6ff1b740de3c55b25d5"}], 0x230}, 0x2008084) 3.324337743s ago: executing program 5 (id=3834): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x700, 0x7800, 0xfffffffa, 0x6, {{0xa, 0x4, 0x0, 0xe, 0x28, 0x67, 0x0, 0xfa, 0x2f, 0x0, @rand_addr=0x64010100, @loopback, {[@lsrr={0x83, 0xf, 0xf0, [@dev={0xac, 0x14, 0x14, 0x15}, @multicast2, @remote]}, @ra={0x94, 0x4}]}}}}}) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000040)="e77b86167051bbe1876e2545ff252251c0c8a4d7aa4bd9411639c2d4f1f6804f3b1e6018a8334d972ca84bd8b70410394522333eaf2307843c821c9d5dc8527cc4909e47daad4e7f", 0x48}, {&(0x7f00000000c0)="51b31ac188a4d45628682b2302efafed921288dfa49d3f8a13c11121864d3a5bd4153613a946cde7a17c9407c0448e6156e35100d170c85db480a00b48ce2c9984ac7eddb0d5c856ea0a12e47653bc09384178c8cbc82d755eaa97deec79fda55ff50ddc9e6770e22603dd0028ee8c", 0x6f}, {&(0x7f0000000140)="7b879613fbfd2382c2ce98ea247fc98daa661f9297b67d78a38c9e1d664175baf6998cd896eefcb4328743a2d24f0f567bb0e5d95a40b65a48135f34b6492ba744d70bbbdb86848c78ccc2fe8587a6e58ace7b2962c6798fa41a77534b6bce8f550a06f0ee7270106ed4e43bd167f76adeaa2dd55defc8f3a03f79f325e8e9cc5e8120078bf7c1a1c0ea334d2cf189b4d2fa62d70d96dc2b58487ce77886c40df9166f3861f8455b70cf31ff757265e053191c8a7b1a796d27772aea53b46a099dd0b7e4c3e3b98ac6f01fd9789d13432721e1a7a68b2cde8c6951b606b16ec4ad5ec45169189eacb0a284fb2e9fa03f", 0xf0}, {&(0x7f0000000240)="12a3c5107ff6273b8ae9f43ba0d4566a818ab60d72a12f59b2933888f3d507e85078cc1f31211a62e0b269a70755be69f809d7d7fc6f588b57cbf7655b842b443931883af3fd16551376291affc4a1b60ae71857dd6b2f7234c8a14b7ef0aea4b8853a3c5a17a729c88a7d1fdb7007999fcef4ee9a1ddeda0a5d4069aa6f287f89abaf3e77a7f84add41382714e9108e3113c6aca57f2b18a1434c83cc5a044fbd8134c5d5c8a7ffe41e59d922281ae1dd5d23062de73ad0ea0dbe85e9304bd638dc39a29134b1e66bc24a645c61a2553bea93c3acbabfa4d3362c6b6e1ad715da180193dc924a2da1f516fb", 0xec}, {&(0x7f0000000340)="e57246ed65da2d0ce4db2657658886360298a89181cad0b39234e9c0b2281ea0d92c9db68622a17c7576e5be0972b47e9c38682c33a17a6274e714ea1cd9f3a777b0ad2c4dbf3d6ae88f79361626e50693324ff4e2eae0e6ab47610439dd2350f472ae8f32d2d2e99052b9d61e27db620826ec0d1b34dd931dfff7b492c60686c19fb5a8bcfe28af924e47540bca41909a30554b6c9126bbfc414cd3fa5f43fb001677", 0xa3}], 0x5, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @private=0xa010100, @remote}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@noop, @generic={0x82, 0xa, "426b63601c22b6fa"}, @generic={0x88, 0x9, "fad54f1e3bda0b"}, @lsrr={0x83, 0x7, 0x5f, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}], 0x98}, 0x0) r2 = accept$inet(r0, 0x0, &(0x7f0000000640)) setsockopt$inet_mreq(r2, 0x0, 0x3, &(0x7f0000000680)={@broadcast, @remote}, 0x8) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f00000006c0)={0x2c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x1, 'none\x00', 0x29, 0x2, 0x53}, 0x2c) flistxattr(r0, &(0x7f0000000700)=""/140, 0x8c) preadv(r2, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/137, 0x89}], 0x1, 0x2, 0x8001) r3 = syz_open_dev$usbfs(&(0x7f00000008c0), 0xfffffffffffffffc, 0x88002) ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, &(0x7f0000000900)=0x8) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000940)={0x0, 0x0, 0x7, 0x4, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, 0x10) sendfile(r0, r2, &(0x7f0000000980)=0x8, 0x9) r4 = syz_open_dev$sndpcmp(&(0x7f00000009c0), 0x8000, 0x201c0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0x80184132, &(0x7f0000000a00)) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000001, 0x11, 0xffffffffffffffff, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x20010, 0xffffffffffffffff, 0x10000000) r7 = open$dir(&(0x7f0000000a40)='./file0\x00', 0x1, 0x2) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000b00)=@IORING_OP_LINKAT={0x27, 0x10, 0x0, r7, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='./file0\x00', 0xffffffffffffffff, 0x600, 0x0, {0x0, r8}}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000b40), 0x20000, 0x0) r10 = epoll_create1(0x80000) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000b80)={0x8ebe, r10, 0x1}) mq_open(&(0x7f0000000bc0)='syztnl2\x00', 0x40, 0x84, &(0x7f0000000c00)={0x0, 0x8, 0x5, 0x7}) sendmsg$IPSET_CMD_GET_BYNAME(r11, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, 0xe, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x240000d0) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f0000002040)={&(0x7f0000003000)={[{&(0x7f0000000d40)="cae3427154a8c7fe981417bed18be06fdf8ec7abc3c6a5800e49a04f9d69ecd4a853ef3629e92a3ae218ddb7136bd1d1e20d460c7efafa27f13bfa1845f654ee7fdad6d3cdbbc86dbd1b49d350a31d9f3e1dd93f330d209b43bcca7269a76226c63c8ccbaec25ddb4e9430", 0x6b, 0x2}, {&(0x7f0000000dc0)="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", 0x1000, 0x2}, {&(0x7f0000001dc0)="888812c0b20ced62cb61326b3e15fb3ed52affe0a3b6896084bdf643138180d4507f014d20a18a0f2492660ba51ccbd182b8dfd9d8ff79b76662dc5655a1dfb9ba4e394afdf2871c16e0090514f522f0919252568068642dd7107b03c93f490a0c10653869bf61705aed3dddb0a62dd2896c5d4a9c8fd5bb585ff56bb3b579b346efb5931f6c091920b40163db128c1f68b30419f9f604c75819d0f77b0c166fa1a800db56898661953eaec101884e5f49f3beca721bce0436dfb227cfb1", 0xbe, 0x3}, {&(0x7f0000001e80)="5996e852dcbd72d7610800c5b2bfe945f5ca0f45ab2f690223a05268ccb881a32a5c02f1a60223bd09ff11e68861e3dbee5f7febc22d7086c3078aad2311a577a2c87948f1239d880f166bfa527445da745c0793729dbf922398a6b83351097158ac7a6337c6090b9eaf7ed07cd7d05957d7ed7a4e2affd35ff6f2897fd0721460e2a1217310a2d6abb45baebbbc5f23908c3650d6358ce0", 0x98, 0x1}, {&(0x7f0000001f40)="4f65b24f81780c3dfad03ee7047bbdc266f366df5b72a5eba4c1e4d489ecc6266c5722c7321cdd8ddd3e64ff3e10ab7130524c2c00e222dfab3da2b58f1074ac5a9079632e03ad3f59178acd24027a283785c8060ce40897061212c0fb1c6611bad2d27d8e7e3a3f40cd3ff6a0c099c2f592613d7d4a3ed4604b24d16772e9a842ba4e865ab92f9bf15469b3fc0ca838b06f114b75014c71050be966a3eff344b05450da3706b36468567480b17fba862eb79c3cfb25e0a2ffa1ad94387956809f9187bd9f3837814ca1bc937d04af8dd558debb3158a2", 0xd7, 0x2}]}, 0x5, 0x3}, 0x1) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r11) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r11, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x600d2c9b9cd69bcc}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x24, r12, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x41}, @val={0x8, 0x3, r13}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) r14 = add_key$user(&(0x7f0000002200), &(0x7f0000002240)={'syz', 0x3}, &(0x7f0000002280)="62e8e6a35e48bf01b00894aa5ef1a10439ce44e6f07ff5568ff815e8ba433f2af0d2d5251047180396eb2d7230be6f260d89f6ccbfe36882a7febba8415467badce0f8fc1c5d8f3de90ba72e4f86d10d05f944d874d52b7257612f54e2cf9f158599634ca93b8a6f048d0cd415b1bdca75d66f88295202b577a9fdbe255c2ad58d731de5d03f93fcd620011c157cbed5864e", 0x92, 0x0) keyctl$dh_compute(0x17, &(0x7f0000002340)={0x0, 0x0, r14}, &(0x7f0000002380)=""/25, 0x19, &(0x7f0000002440)={&(0x7f00000023c0)={'hmac(sha1-avx2)\x00'}, &(0x7f0000002400)="595196f45f7c8d3c73ae354bde10ae7be5ad5a2c04a375ccfe9c41fbf86476ef727cdd334f", 0x25}) 2.785838497s ago: executing program 3 (id=3835): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0, 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x2b, 0x7, '\x00', [@enc_lim={0x4, 0x1, 0x74}]}}}], 0x20}}], 0x2, 0x4000001) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r7 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='name', &(0x7f00000000c0)='\x00\x1f\"\f\x00\x00\"\x00\x04\x00\x00', 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7fffffff) 2.649090961s ago: executing program 5 (id=3836): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x8000, 0x2}) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[], 0x0) 1.935555196s ago: executing program 1 (id=3840): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0xfffffffffffffffe}]}}}]}, 0x4c}}, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 1.696367258s ago: executing program 1 (id=3841): sched_setattr(0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.67896213s ago: executing program 0 (id=3842): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)=0x0) sched_setattr(r2, &(0x7f00000000c0)={0x38, 0x0, 0x20, 0x6, 0x1000, 0x6, 0xffffffffffffffff, 0xffffffffffffff8a, 0x492, 0x7}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r1, 0x6, 0x7, 0x9}) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) sendmsg$nl_generic(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x11c, 0x32, 0x208, 0x70bd2d, 0x25dfdbfe, {0x19}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x4}, @nested={0x14, 0x133, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0x8, 0x11d, 0x0, 0x0, @fd=r3}]}, @typed={0x18, 0x25, 0x0, 0x0, @binary="3c34c8c9868c88ba6ca60ed2863936bcfc3979e1"}, @typed={0x8, 0xc1, 0x0, 0x0, @uid=r4}, @typed={0x14, 0x32, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="4c9809259fab939c31baf490ecbba6b9a68e89a798bc5b1de2e26972bf7382fac1117d7d9c178e50b58cb747f4922bd09873819760b8bfdcc2956e40ab27ffe8c3c43a8358f5e3bcdc93ee7dee262c930f0baf69722bea835926406de0be677dcd723798051630388ad7de1d99d2e69b7a35c2e0524ae6bd288b2584534949b06281cdac43f683751a5020903b460568d0ca191657ad5578014df0c651c722b70560531ccc204023ce7cfab28acba1ecb8b62a1de4"]}, 0x11c}, 0x1, 0x0, 0x0, 0x34044001}, 0x1) utimes(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={{0x77359400}, {0x77359400}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000001440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001400)={&(0x7f0000000500)={0xeec, r6, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2f}}}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xe}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3c}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x200000}, @NL80211_ATTR_HE_OBSS_PD={0x70, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xf}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "382280488f9534e5"}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x10}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "a91ba93c7b2cd5ef"}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x14}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x13}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "b7889afc0e40112f"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "a05710bd2f3e3dbd"}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x9}]}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2df}], @beacon=[@NL80211_ATTR_BEACON_TAIL={0xa6, 0xf, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @random={0xf9, 0x93, "d8e0312ab9dcf76219ac1c611b690ba6d0a52cc9d9180b443dd011d3d2fb3f061af6d49deb818868f51e8c24d6cccc189480f7d076ec19ab161cc4195243c6e521d5390e994521ec2d85918b9b48dd59a6ea7fe8d0b84033e92bd11b91003f66594739dccb331fe0c4098fe176c9a2dfab9f90f3fda6315a182b9006d5681475e9bc9fca359918f04defc7bb301b6ea980aa5a"}, @chsw_timing={0x68, 0x4, {0x5, 0x8}}, @ibss={0x6, 0x2, 0xff88}]}, @NL80211_ATTR_IE_PROBE_RESP={0x99, 0x7f, [@peer_mgmt={0x75, 0x8, {0x0, 0x5, @val=0x10, @val=0x16, @void}}, @tim={0x5, 0x89, {0x36, 0xf1, 0x8, "a79a6704c9c0d148fe4e228da584af1ca2fa7f13647d38bc2acbcf2f10c14964545e00033aff58fe06bb2de834efb703bd80b9391e65dc9b209a05f673e8b3cb61bd96ffaccb60849c1ded990617659c05ded926121081b2329e95c395826fc271d3c8999f01bec87bbcba307576c821158a6c0db37a7b2b95b4ede69cfa9bda9bd302ba0c92"}}]}, @NL80211_ATTR_BEACON_HEAD={0x1cb, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5d3}, @device_b, @device_b, @from_mac=@broadcast, {0xb, 0xd}, @value=@ver_80211n={0x0, 0x15e, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0xde0, @random=0xbd4c, 0x210, @void, @val={0x1, 0x7, [{0x4}, {0x6, 0x1}, {0x2, 0x1}, {0x30, 0x1}, {0x36, 0x1}, {0x48}, {0x48}]}, @val={0x3, 0x1, 0xb7}, @void, @val={0x6, 0x2, 0x867}, @void, @val={0x25, 0x3, {0x1, 0xe, 0xfd}}, @val={0x2a, 0x1, {0x1}}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x2, 0x12, 0x1ff}}, [{0xdd, 0x4a, "61875cc11e33844534528e7de6169210a6a082fe0dec86b9d0dc9695a15abe8cc9c474f2a7183f8b1d651a7c0195108d65ff810a31a78e703e67fc82eb1e4b0b12f06e8545eb61aa6fc8"}, {0xdd, 0x87, "232d23d2789d748155ab2e803955c00361d0e3ef916e0990e4f8735d94c27ba9d0d2426e17a0fc9440cd51d55ea9ba3203a41deb7117dc83f1d23453acf7d1e526eac868ea97882e730da2bae5ad2db6bad08961fb50282430b14eb0ab71ff7ad626ce4c019173c74298cc2ab5427020d22208b3de06cd4a9342c3e79daa930458b9d0cf7c829b"}, {0xdd, 0xb, "4419b965fe56c9d4b18a94"}, {0xdd, 0x93, "f03e31d8568588f24652120a0d10c88622f12ad9988c07e37b9beb5d915ddcb6076ee5b9758e298903bcdcebc5dcbbc1226e849e325949abcf4b82c8aa5e02b8460beb956cfc309b98cea73f95253289a7c40aeba10238699a9c27f201055fe457ba9ef1f09a9a17aeb4cd7bd461424ede8b62683844920fb199a3ecf38d28e08e0926aaaccf0aadeafecb7ec92d420b4af08b"}]}}, @NL80211_ATTR_BEACON_HEAD={0x30e, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast, {0xb, 0x5}}, 0x9, @random=0x8, 0x5800, @val={0x0, 0xe, @random="f17c108815ff1a4666699f2da021"}, @void, @void, @val={0x4, 0x6, {0xf9, 0xff, 0x6, 0x9}}, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x9d, 0x7c, 0x5}}, @val={0x2d, 0x1a, {0x1, 0x2, 0x5, 0x0, {0xffffffffffffffff, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x6, 0x2, 0x50}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2, 0x6, 0x69}}, @val={0x76, 0x6, {0x2, 0xff, 0xc, 0x4}}, [{0xdd, 0xbc, "beac4bb87979431309314a615e73a9d5786a0ebc181239c5b58e5b87a994dd2253827fd88bc3ca46c27968f402656e59b9301ebf32286573132cab8313a6d6333f4293c96e6bc7306fb732ce4064b902883bd756f8117ae968945a72087cc82f2bff17c3c2df6f92a8891262e3d126eb58f657da61564e9df2c06672dcd23157ca2b2393a22a20343a664c1c88ae25ad466bcabba6a141b1eeffd93290e99279347102103ddb319356a2e357c2f20f4061faf4238aeaa271a9e12152"}, {0xdd, 0x69, "71dd083313b65db524457c2056c1aff30dc3f282a9c0c839bbe74a41c34820120e2617838a430516c559c1ceea2444901ec99bf2ae42845a93ed5a60d8b190c3bd9ffa16f510e438d8c725d7bc9af9169117fe0d8091703a22a8f0235ad9eaf158473588d2d19daf90"}, {0xdd, 0x8d, "dd3e0ffc12ff8640d3a5230dcc4d9adb2352347125b1685c97e6e47367ab7fe9d6023ebab1acb44df56c84e1b8ac7f3f47ce5bab206c27687778e1421872bbea425859ea23c43b21f0f6817274ecfad292240fd39c398ec783eeac454a98272461d710979cc4c54c8ec95fd295ce3d7cfb931a158e6194b0fd2fc2bf42c99d20b7502d0f38d7276465fd34e465"}, {0xdd, 0x85, "fa18b0f33cc389d2b7c3806e7299ebe59dfead1ee4425fa050232211f97e372b35ef6612e23b933b938c940032263422b4c698cb8054596898df1b9a963b2ce58ea01bfabbc76b5e32f3b176f5a954a33bdaf2d334220b71de8402a10c3313fae5ac6f536d7898cbd4b4ed732caacc4653d24df8592703feb98755a891d374833728cbc9e6"}, {0xdd, 0x57, "d1a0112fd923ffa1bf170526813cdbfa77a27ca04e4edc5f049542e5795ef76dc66eaf97ebeaf6e19ebb7731238a7ae48089b1a7f7a7cd4394d7367b3ea54314acb3c0c734ed55efd5f893688dcd584dfaab5420597744"}]}}, @NL80211_ATTR_IE={0x84, 0x2a, [@random={0xa8, 0x7e, "0cbc604d1d9ec938eaa90eaaac28d623102933185d3a38eeea27446cc68def63d751cc3e9b4c331a63340d121e6033ff5ec2702f04e90f66f2437a44574c5fca54b3e31413584e054ee234cd46ef32ff66b39d5811fff15669a57411aff1391e84a880af5c5bb6bc8fe81c962220d7caa68181da64b03c551f273b3927e6"}]}, @NL80211_ATTR_PROBE_RESP={0x422, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x4b, 0x80, [@random={0x9, 0x36, "858369be4b207640f20cf6fb89eeb9075c8f21ff7c57c577d49f74d390acb9236f7c6bd309f8762bc21cf8f65d71f00d752b2ee5bc79"}, @supported_rates={0x1, 0x7, [{0xb, 0x1}, {0x18, 0x1}, {0x60, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0xb, 0x1}, {0x24}]}, @chsw_timing={0x68, 0x4, {0x4, 0x4}}]}, @NL80211_ATTR_BEACON_HEAD={0x1ad, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1f}, @device_a, @device_a, @random="945e5c243533", {0xb, 0x4}}, 0x2e6, @default, 0x1000, @void, @void, @void, @void, @val={0x6, 0x2, 0xfff7}, @val={0x5, 0x4, {0x8, 0x29, 0x0, "8f"}}, @val={0x25, 0x3, {0x1, 0xb5, 0xa4}}, @val={0x2a, 0x1, {0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x0, 0xaf, 0x81}}, @val={0x2d, 0x1a, {0x0, 0x2, 0x4, 0x0, {0x95b5, 0xaf, 0x0, 0xf, 0x0, 0x1, 0x0, 0x2}, 0x400, 0x5bf2, 0x69}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xd0, "6086157601b7f209ebc69d6c1adfe8d487c228d6212c062c67b6bfe4dc726e68b14c8e21ddec7ea0c16f47411254b30d9ce0c9f6176b255328196a8d407e650522f6faf9fa8c01fdbb1c696fa5a205de408bb09aa4a81296df3fcccd5968f7b0cfb7c6d9fefac77ff4d8b54a10f9fed95cc961b52b754c38783fd38c9db4873eeca032ea4de0eca2c5303b6216e3c66717558b19ca638cefbd93c44e6e063d1cd0edb3eecd11686b4e4d0fe4e140fc351f6721df77901a55f7f8e71c54a6484716f589ae3ff145e875e1abb9a0323d3e"}, {0xdd, 0x75, "f77ad81b8353b30467a7b72dcade5fe3393881fb80f5202a207a7cda5a26b5cb04ea2a2fa09f6021a24d81d137f925a0a46e85884d9cb6d1ab01a020f9b1ef4180905f9e3d08a6c6efc0665475a73341710f80369ac3a60ec6740efea0ae525ce2e8f6e74e3cba72765506ffeba6b2ad98206efa0b"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0xfb, 0x7f, [@erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xc0, 0x9, @broadcast, 0x3, @value=@device_b, 0x0, 0x4, @device_a, 0xebd8}}, @preq={0x82, 0x8e, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x6, 0x8, 0x9, @broadcast, 0xfffffe26, @value, 0x3, 0x1, 0xa, [{{}, @broadcast, 0x8}, {{0x1, 0x0, 0x1}, @device_b, 0xc}, {{}, @device_b}, {{}, @device_a, 0x3}, {{0x1, 0x0, 0x1}, @broadcast}, {{0x1}, @device_b, 0x3}, {{0x0, 0x0, 0x1}, @device_b, 0xfff}, {{0x0, 0x0, 0x1}, @device_b, 0x5}, {{0x1}, @device_b, 0x3}, {{0x1}, @device_a, 0xd}]}}, @rann={0x7e, 0x15, {{0x0, 0x8}, 0x2, 0x5, @device_b, 0x1, 0x1, 0x6}}, @supported_rates={0x1, 0x3, [{0x3}, {0x5, 0x1}, {0xc, 0x1}]}, @prep={0x83, 0x1f, {{}, 0x1, 0x80, @broadcast, 0x8, @void, 0x9, 0x6, @device_b, 0x4000400}}]}, @NL80211_ATTR_IE={0x25, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x38, 0x8}}, @ht={0x2d, 0x1a, {0x4000, 0x1, 0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x300, 0x8, 0x8}}]}]]}, 0xeec}, 0x1, 0x0, 0x0, 0x4000000}, 0x8084) ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f00000014c0)={0x0, 0x4, 0xa3, '\x00', &(0x7f0000001480)=0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001580)={0x9, &(0x7f0000001500)=[{0x6d2, 0x4, 0xc7, 0x2}, {0x6, 0x2, 0x70, 0x4}, {0x7, 0x1c, 0x5, 0x8}, {0x184f, 0x7, 0x78, 0xd1d}, {0x4, 0x7, 0x1, 0xffffffff}, {0x2, 0x85, 0x8, 0xf8}, {0x1, 0x4, 0x5, 0x8}, {0xfff, 0x8, 0x0, 0x2}, {0x10, 0x8, 0x20, 0x1}]}) r7 = openat$mice(0xffffffffffffff9c, &(0x7f00000015c0), 0x600500) read$FUSE(r7, &(0x7f0000001600)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r0, &(0x7f0000003640)={0x18, 0x0, 0x0, {0xc}}, 0x18) syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffe00) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r9, &(0x7f0000003740)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003700)={&(0x7f00000036c0)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x1c}}, 0x10) mkdirat(r3, &(0x7f0000003780)='./file0\x00', 0xd0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003800)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003840)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000039c0)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003980)={&(0x7f00000038c0)={0x84, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xb8, 0x74}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffff3, 0x9}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x69}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x67}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xe}]}, 0x84}, 0x1, 0x0, 0x0, 0x20}, 0xc4) ioctl$TIOCGICOUNT(r7, 0x545d, 0x0) setsockopt$sock_int(r7, 0x1, 0xb, &(0x7f0000003a00)=0x3af, 0x4) r13 = syz_open_dev$rtc(&(0x7f0000003a40), 0xfff, 0xa0806) ioctl$RTC_UIE_OFF(r13, 0x7004) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003a80), 0x2, 0x0) write$FUSE_LSEEK(r14, &(0x7f0000003ac0)={0x18, 0x0, r8, {0x2}}, 0x18) 1.500277359s ago: executing program 0 (id=3843): unshare(0x22020600) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x344b, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000800001f000006060400180000008cdb25", 0x39}], 0x1) 1.280535519s ago: executing program 0 (id=3844): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="320200007d01000005f1000000000400000000000000040000000000000000000000000000000000000000000000000000001f00046e6f6465767b6376666f7825ffffff810202000000fd000000bc920000003800704a86cec602007dfa673effeb09b5351f5bde0540"], 0x232) 1.126951466s ago: executing program 0 (id=3845): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000040)="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", &(0x7f0000000140)=""/122}, 0x20) (async) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000200)={{r0}, "f41a64588c9858afcb7a65406472baa3d458d91edf586045a70bdd1ea7cee09f9804eec17de9e6436de0f2ef6365424603a1f3ac77c9bfc20e73ecfc481a0bdee108036e03699de033fefee41aef2d3d6106d1b8b632dcc926ce8b5068ad982c70da9a8b99682854e946a8b8691cc9ae43a2bde9cc568d4afba3dc47f8def6184e5a16ed1611fbccdbacc622305c19e4896903b09fba21974f13640a9759f330da86718649fbe98c820afdf52aed3ad72929a5856c5a78f12cfa8688f960854f1044f7ace0605bf380479c6e445419ac9d5a364b39ba72ffcb0b5f8f41f66d5c341b40b6b03a13f0db0c0e7f65755c9c2487a8303b7aa4af08bde500025c450fa277ce5363cbfd4967f4945ac0f1f3aa57765e5513a16fb77991c1e1cf3b1acaf2d49a1e5003ec50ca2d5e1a7ef25b192c56aa135959a1f52b04b08a262f1deae004bb2ce8f8f51f770c41feabd217731ec204060b7d6190136bc81a47e6b2f51881f7d19771f5762d76e4bcfe141610a3fdb76c912e1f562838441a60e060cfd3586512018480f0cd373c8f9c282516561cb81aca8d8f7c96ecb9d9174217e15ba6dd189d51b761f57afcfadfc60381537bfeeacd637b7ceaed44b4305664cc7f7352d50324e65c8d98ce1e9edc0f709ac95120f865281bd5d5a68b000ac3714f58004526e740d5cd20e5c2c7c8c1bc4dbf416199245a702256dbe002fb6872aa823055a71025941f8c44cf8fe4dd62abb0d48541b99994b57177389416c6891b0d2fc2c33c6221bfdb11340013a846ca77dca53a72dd76ba0acf2f022642519b722bb53ed7e99670fa3fa5e8892ee964676663f96dc1482e3b0499c4bfb10c8d831b919e642d2c0a79ab2c8d0289874ef1a0d72af7b69c820a958c8bdeb3ae1492be355677728c371b28a77fa2276370c605dddcc0478f63ba3385aaa706061f598bbb84686ec27a94d1d3c9448079e72c5f944b7a1add3080ca65a778f2735cee079852f6b865c392a5add1f905a76e3d5d1f2c916ee2006ae0c6fd95f45ecab0b66732f43204c79cf7d7e719ee4ddb53099f00487f8fe9312a7c1bbaf99b43be468b5d83b0dd7b1f4c05ce3dd2919c50079cb01f02528fa6143e2f1433eda7a25cb5e69cad1adc51dfbb8daec363e35259687d363c2d2c1f6b532a6d6fdc620b2d8de04e62b983c98a34a45ec366d843a26730e287f15356fb42022d98d16032baca2ff6b6283cc296c58bb86a0882ecd82f320d1ba7bdcc5a7a67a7cc7b5be810f0da164881cae024137ee6f7e004bea5178ef76d9d90e7a54ed69c8c08672bf3eed6d1e0be9ba5b9df57c11b25c9235f9639e5f8822e43af19b97b3999fadffef60640f14854143cc879bd899670145b98c7714ce09d07ac058e32c8d800d4505ea4ad813c193cfa7dee22ab4a7a82cb81f5c170c8f181760f1afffb49f3b86ba6f0b8a9740ae52b0a431e3c4c1742a814efd9ff9bcabfd37c5b32095105ef250bc1977c90ea5dc5b31a3f85ceb7f8c2551b0fb883ef83dde0c6511f13bbe4987f50bd0b094d12e1321bec29bc9ca46dc7b13abe850f5ea98c2f0cd16de908984a785577a77e98258b26e090438135b8fc84c98b6c99b3fb2adc51428615b2af9c6b952eda83cf005a8e10ee97f2378e4b63b88d028c990f263ac13793523074e3ef788edd97d08d8ed70585f16fce8fed5b981a0ef9a03e7e9e08cda8a8e5b4fefa671103fbd9703d1b4202888a9ab628edbddd7352e9a0c7a72c6b9d282f49b11039fe84fbc5ae2ba7b695389f06b22c1eeb3ce5f74dc1a424f429caa4053e50e96384eb5dc2553f539b78e376524db7210b95daf4d44ad2823692983a1fdafb0aa73ec22d706da57561da788e620e529c30797dfacb23c2480f9d4f7f6d60f4494d137f20e75ac5fab59efb66c48398c7cf4df53a788ffced14886c7be32fca4a62183aa45b6378c9019e6dbdf0a5496a7aa7064e92d6549f5ace38e6deea9f9831e467be796f88d89fb526d86f1a2dd2a8c25afaee222bc7fdec51a220c56e99c67110cc16cdb485fd2710d6f597a4c5766ae133931290bc70d6e6242a98bfe312c056d19065ca37091150958114e70b160ecfcf5654d8e4e8be5d709b8b913e353ea75476fc1fae9f0d705cce47d8a97ed68f6ca11485c734befd6493f489fdffa9d88bb02c19653f19f2ee049b7735e1e5b22e0ddc0ebb8d3473c2744853f71253e9ee319dc3900bcc03ad95b7a26d5788dcc9da75fbd73e3ada4ddec0b3001e6c93baf44811e4f35917d24bef55b5ba15050096f674c4f5fe92b3d26b7450714458da6682d21b29619fae24f71fa34afde3fa78d8bfaad353a35ce3fc66e0e70b92631346f09425298530a83305ae50b5d3ea9b5a36daf8b3700a71ee6aebdeb20f6ddb213d17f1ba89f510e876a9584b816f76a2fdc0566b10196f3f0ff93d1de879591e39704db4581bdc261c886f7e5a0acdbb411b79902702451d807c39f1919ecfb0e2e8d380b095ffe6ee49cc38ca41639d36e0e63260a1d1b13651375c6e5ff930ec8b4d262eccf3804f21170ea378ca2fcb2232e8c2d8a30296de47e5e18b9f4af851be15bf0e799c3610d585a6d28ff944f0fca9f532f747c8dc6cdb84a278051db26d77d9e1ff0bdf9e3c0463e17c986d060ebefe1d109bd8b939a573c855d64a0f3dd875e400898d80e64b382c25390508aec29bbe891f02c6e20d2b53671e4e21844ce2066b3698965964065d87d58eff3175a9f3919d7d53c2d0d5bb456054eb78f319358e09b63a39d3ed87fcd80e529f5e366d25da33d8c193f0ddd2ee6cfe5fc42901beb8aa8aa0436c7b4fadbe943e859b37067bbf4e6cd63cd47a5693e1d09f69961d72f0283e94eb80c0fb78e0d52422d15a6d80b4bbdc04e10f18223408f60956397577acbb1890017289ec5c62334a5965b26462e26edf33dd9466d533837e43ec8a0dadec16b437e0772fe10f1c865a990adb6c4f7dd91ccfafa7e3fe6d06c37acff047b2fb4726b6fecd52706bdb6cd58808de48148f140e96fead2001ac02b988d0ba9fecd480a46491d744b09aea2d54819fd4d03a6acae9c911d5b16f31762c8c594fbed605c863f58c5b5f99c1c71e36b703ed1efaa699ba82594947f4e2e7533769c7d16cb2b92549ea0aa7eba1035a277e91ae530acef338b33f0d5a64447e7dd6a58d68b59298405202200cfd2598919632a67fc14042e3bdc3b5436b0c2a100440c1d82eb0308c9441aada85885dcedb4e01c7a1fe126a9b5e1933b9d117d8003c4b7b830cd9799f19107896486fb4caa391e920acfa3911bb4f2780823bd3e03c79acee1eb0df655a85c3616c07479f7eb484e8c35f0261c0b285418854a7a51abe3db905908e165e0ed775b02027a3215b4156a2891a799f37cfed25aa20eceb8c5943dab83196e3d950055066189f807873ca9db650ed03bf1386646556257aa2ca630fdac6bbcbe466793f08f835d3614f0be6156204344099cca6bc72bc67ce9b9313a0c84157665890baa08cdcdc902742fcc962215fefa8752e834073b7bed48c10d7a1fa4ffd9779660a608a02f8f58604b31d8c34098c4396bbf2f59c902e55503f735867b646e1e85fece1d9fc0638839ba980ae7738e33bc397a2c8d6fd9faf50b1c8d1cc3e0decaad96bf0191e69f00a383dc81ace3140d310f7361fe197de4038beacf256a240d0a8aa1d11f30282ff807fcef1a336519546dc8afe757f60a3342684910df3c13c0f84a9fbcd56dc3998851fb4474cec5ddc3f3323cdcb42ffec4ec3f99c8251878c8fcc1f69eeaaafecb41426c5da13fd532e53b858eaf97ec56c735d581e62d0b4d3ff9772790bf3d833c18f5e366986bbf47cfa174ed93986cddfa11622d58505874c7bdc3191c1c0c9ee5a20e060743f79b15c348cd4d40d13bc491dfcf6ce5710ad2188be5622ad536a8174c306c05a1e6107c1597c910e7c25f5d0aa794ebfdf149637c70fd299bda05b982d3420c8b4b246aec05ecc85b3279a193b3e634128501be1cc93e703f0d62b30838b6a807ef958cfb101305d3b5ed518f4cad169439eb6e122d9c1fefb74f05e63cc50d5e96cf540a4330f94c22aa9762b94207095dd519f7391ca3e9340b74bde0a993d4cd0247fd92f56d9b295974b90bca12780d11c4379c57c11a79eea791ebe2568c908790e889e8a154739d88832e25b9cd1e2d8a01b49fcdf861ff89ee0720a75cf923c5078099909374298040f579029dc4fbe50bad8f4b22605af8e3cccf572f014a6bfb6eac257a3a23e6070477814c0f12427d24225c110d2d0d081614df4d2b3778597981cdd7838d1fab3cbfff52e7fb113a76fde9543bdbfc27767ec0a26aeb02a4b67d813f124f9eb53cec1fca544da88ab8ac0eee5a3d00f48bf7ed6f9e625a8f2a435e253ee6da4978debf58276eedfd3641ebc9144ea19aeb0bcc705d3cc0b31624d1a65b2bbd147c2b932aee5722ec340dc8f423a628cb1ef2bc3396bdbf14fc443930f5f7fc43888e3052d65ef8e6fe46793a1cc64c98b64cc985e9fb3b421bafd3abd9af58db9ef66cf85dafc7c90881f0ae438dd0edac7283727d0575701bf7e2363182ceb601d828e1fca60922db1a21e28ec8ae5f16c33d05d001d8993bac442761fa231e0c458853e0f7e946a66d6766cca6819736d9aa76878490e21500892356e2bee33511621f36926f1908b71509e079707633a86f3722897ffece0f5ac74e4d4e197fc6c7457a28be1bc0c28a2014c44da4cc80e3aae0279665d7f97d4ab2fc0cd0617178f841b6ee3ff1451884cd46331ab57e70a568a37475b64739be287159492fd6f9cdb9c0b931b04fb0abac14ae905678b6de5f494338c90c590b7dc549ecb15305313554da88437c8346a3a900250a20962fe8634a08fa042a2f177e558935ccd0f371481d58de3b8f9afaef9585a0ac4503b7b1ba1afa01ce2348dae09a3fa38bd15796fcbe9ccfd11631a630bf6fa5ace5f444a39c2838b54b3c0371ba19294b4a27a43974e0fcb6ce16098c1f0052c218eb71d0632f47c1eb044539afbce0a6c89401964581d2f8eb12e0d0c613dc7e5b430ba9efa2994a993370ca65ff4646343307852d7e0931cb1247310ad8d6e5d88fd6141cb7e63cc453facb421c5dccf2bd2294ba98241a8a77bff422f540be943fca0067c1cf1cac11ece16fcaa4d158a079ddfb63af9b759a1498cfc7f08954b8bc656fbf417ec2fb3ad9eb7c66431b1bf7d3fbd4d7eab3387ec9c5d4aec2a3939fd3f4db9191b23d7df27903c988cd8ed650705ae5dd3e7db9093085023d3e30320b237dafe1eab6a7f401b143c7335aea9dee18b305f1c971a60f8cebd7129f06abf8f2c5f0d71e3df9c94daff88344ed2ba1e29172d211889c27f6e2bf253562e65514c4a8806d6ee52b056d4b2fc8b34ae8f52fe61568e532d622405313ce1981a24d64092a6dd1a6d2ae4cce7b014c3e7509d48bc961d1dfd1293c5c16361ba0b0c9c23093b545653d40612ad6c0692cca8a2f5cf96ad581f22bc6c454774e14a9bb1157717d26a32944575fe5269ed3091ed6c90d258263251839ec03e22078ac0ace76e9b2d83e18868f35f37d66d836223961939738df966c60012332b26dbbf55222adaf455f2b375d97045a81cfc539f4266ef86088b7f7846ee171034c16c784a3f5bfc70239078edff6fee973bb633e5b8dff65485a8a6812168cae1366fa61ce73b7035e5752921d1c67699eff65861c94701e62f3f9d3cfe0e68ef"}) (async) write$binfmt_elf64(r0, &(0x7f0000001200)={{0x7f, 0x45, 0x4c, 0x46, 0xfe, 0xa9, 0x8, 0x8, 0x1, 0x3, 0x3, 0x8, 0x2d0, 0x40, 0x266, 0x2, 0x101, 0x38, 0x1, 0x1, 0x670, 0x9}, [{0x1, 0x2, 0x1, 0x7, 0x400, 0x3, 0x0, 0x7c22}], "2e0c07e85a2697ffc8defe8526b5e6e2f1b674de6a53c999920f3e306ef7c57c5d99183901c6efdb58", ['\x00', '\x00', '\x00']}, 0x3a1) (async) r1 = syz_open_dev$ndb(&(0x7f00000015c0), 0x0, 0x5) ioctl$BLKGETNRZONES(r1, 0x80041285, &(0x7f0000001600)=0x2) (async) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000001640)={{0x1, 0x8000}, 0x100, './file0\x00'}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000017c0), r0) (async) getsockname$packet(r0, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001840)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001880)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000018c0)={'batadv_slave_1\x00', 0x0}) (async) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000001900)={@local, 0x0}, &(0x7f0000001940)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001980)={'vcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000019c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000001b00)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a00)={0xb0, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) (async) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r9, 0x5456, &(0x7f0000001b40)={0xfb23, 0x6, 0x5, 0x62, 0x1a, "592bf15a42904ffe633e967b0009e8b83ce8f0"}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000001b80)=r0, 0x4) r10 = syz_open_dev$vcsn(&(0x7f0000001bc0), 0xf, 0x80000) ioctl$FS_IOC_ENABLE_VERITY(r10, 0x40806685, &(0x7f0000001d00)={0x1, 0x3, 0x1000, 0x6f, &(0x7f0000001c00)="ea2557559a5e970e09a3833c443de13b587c88484bf1751dcc5e40455a0f0813859f611ff94e0bf18cd1fa8d62686ed68c765f33789f5ffa56a56db85f53b1f23cb4dc578392c7d9022fbc145e220abd90b426e59c9eaa70d105f37695220e3e7a0010ddc1391f3a7adb7d26f5e6eb", 0x42, 0x0, &(0x7f0000001c80)="71671e859e1b5b3016a36fb77e8367dcaa04617b66db1095f4099b1255df2631bb6da5a1403eb0aa463f67790567d5d820ccf270bd067b48617f67273f7fb4c1da4e"}) (async) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000001d80)) (async) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000001dc0)={0x8, 0x8000, 0x6, 0x7fff, 0x10, 0x9}) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x2c}}, 0x4001) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001f00)={0x0, @initdev, @private}, &(0x7f0000001f40)=0xc) (async) sendmsg$IPSET_CMD_TEST(r10, &(0x7f00000020c0)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002080)={&(0x7f0000001fc0)={0xc0, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_ADT={0x90, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffffff7f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xe}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x88}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3ff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x38}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0x80}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000004}, 0x24004000) (async) ioctl$SNDRV_PCM_IOCTL_LINK(r0, 0x40044160, &(0x7f0000002100)=0x72f4b8e2) (async) memfd_create(&(0x7f0000002140)='syz2\x00', 0x2) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000021c0), r10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000002280)={&(0x7f0000002180), 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x30, r11, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5ab4, 0x12}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x185}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 1.068632043s ago: executing program 3 (id=3846): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f00000027c0)=0x3, 0x4) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x3, 0x7, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x20, 0x7800, 0x0, 0x8}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x40, 0x700, 0x6, 0x401, {{0x6, 0x4, 0x0, 0x3b, 0x18, 0x65, 0x0, 0x8, 0x29, 0x0, @broadcast, @multicast2, {[@noop]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x200, 0x2000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_PHYS_PORT_ID={0x2, 0x22, "a994f9cdb68322fdd29132a57829d771e5"}]}, 0x38}}, 0x0) 1.057691956s ago: executing program 3 (id=3847): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf25010000000000e5000b0000000014001462726f6164636173742d6c"], 0x30}}, 0x8040) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000f7ffffff00000000fdffffff1801000020786c2500000000002020"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/18]) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)={0x38, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x802}, 0x4008084) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r2}, 0x14) listen(0xffffffffffffffff, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x7fffffffffe, &(0x7f0000006680)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000640)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7}]}) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x80000010}) epoll_pwait2(r6, &(0x7f0000000000)=[{}], 0xf7, 0x0, 0x0, 0x0) 1.036783111s ago: executing program 0 (id=3848): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000000053ee4f6aac6000000000100000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000845}, 0x10) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r2 = accept4(r0, 0x0, 0x0, 0x80000) socket$packet(0x11, 0x0, 0x300) setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000600)="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", 0x1000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360", 0x41}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 968.238676ms ago: executing program 1 (id=3849): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32, @ANYBLOB="71e79fd800000000140012800c"], 0x3c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb0001a800000000000000000032fcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000) 956.339372ms ago: executing program 0 (id=3850): unshare(0x22020600) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x45) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000b0800034000000000080004400000003005000200070000002c0001800a00010072656469720000001c00028008000140000071a9080002400000000e08000240000000090900010073797a30"], 0x100}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000040)={0xcf13, "dd6dffa7a007dea2fe218743326a04bc1b5850bf559f93f6ca6b7036418a2332", 0x2, 0x1}) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = dup2(r5, r8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYBLOB="22000100fa"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f0000000140)={r7, 0x2}, 0x8) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800b000100697036746e6c00003800028014000200fe8000000000000000000000000000aa08000100", @ANYBLOB="040013001400030017"], 0x68}}, 0x20008804) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000700)={0x0, 0x9, 0x3, 0x9, 0x6, 0x0, 0x9, 0x9, {0x0, @in6={{0xa, 0x4e21, 0xfffffffd, @empty, 0x6}}, 0x5, 0x6, 0x3, 0x0, 0xd}}, &(0x7f0000000300)=0xb0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000e40)=[{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000003800)="e2ec972d9df4e28c479e6dc07a7b8fc715dfd63e644002581808a989da3031e0e32f176d1d04625dbfbbe73773cab7b9991dead26d3bef13c1f8243b6a8dc44d4aeaf407339c7ebcdeb87b2f70ef725a843e47b26d0a400cb9c5d779f1b28ae13c5ddd8742776a1dd3e717a4562978d02df96ffe79c9acfee68aed122d08a7c022d207733f0ff1db02d934d8828ab66b3491fb5e6dcea7ce9c1f983ef95c4415886e8c3ec8500ae25544f82a2d31f3cba5f40415b077c55815fb3a7813ad7f3c86b70dbce49d1c2a0d24d11172a1b76d79eb41a898d65672798f25ab06f05a96f55e1c856a70aee17c3fc629eafc36c10b2a9b771b14b926cd0888546633e8e57ee1e87dfbff8ee734b9b35029685573c7a4114c376f7a73ee16a4bb898198a4b67646390b06d54fae49b5765e9c014452ffbafe9ef89f554d71e7afa6a6aa44300177feb98450c1862d9ea4af2eb68a5c4bf13e1c426f4051d897d899274d3733ec583ac9e06d45c5ed6c0c7c3d742852b56f41e86b81c570791f2eaa3d32569bb320b17a6ba1da75757ced2c7859887b4554cbe3026c33e853162e3f5dde26fb0d712f8fe5827d81ce8ad6b66402278e4dc46742eda351649defe81a61df9b2dc5cae478e8a2a10462a7385e7210a0ab1e586d349996930ee096ed1f34fc9e326727cf2abd6919917db8e512ebd520f001b6f303394385a1b08b1e276a40e6b3ddf6aade7194e97fbc14a64a7c2e0ada5f6d9d717b4d8fb89c5be27288b65457021d1d3991b2cde7064b91bb2575d5ee6c5c7b2858180c0750de1d33df1c2f0d8c297948a6639b85c586b2ecf0bf6b243e030e4c7cbd068f65f57422ccf09877f3788e32ffcfb6dfbe99125329ef6317092abc7acb38864e6e76463cad1e585769238c454bc8408057b092f862f6cb7386858ded697f62d399b1e67bf0c5a472704c886861be4aec6382871db1b7636542bfdf39d0f23b4259487c8841463e856bd507deac0b76397b42451193310c959dc343ad25e6892bf175d54006323373b291987d2675996d42b81978d5a030302dc6949ed18b053929bcb24256015e8e7d407f440d1b98c999dab84f1b36e6dab8f2a722a3caaae4ba342854c9b8b5c2e71b523b8da55ab389aece832af52f3f98aab5f38f042b5c0cb2528116bc6a330bf2c6ebd73a954bce7ac81969a1275aa803458e02cd31a30d19ece5d4d53d4c0dbbff0dda64f1bf42b51edc773fb83d883faffead72bdcd83792294eccea5d95d4235c34f1ae7cf04e5d4e23ef271571268c185e4a116b167075738a2a727cdeb843e123d2b0690713e6115317b21ef64ae69cbd7a20f23833c1cae6be9eb4fbd7c88bfa716b728ae66c4bafd6998f3f4acbd7260717bef58aaec8343e9cdc0b54f3daf4e005cfea8dfa14d998eae78c77e759ae95a5eed8370f77757fc9c3da15d557a204f0dd4c3007316447e8fab52e5826de75f7f36b881f4192fb763aba59c6b90c545ce0d8cf2939a646a63d31a5550ecd221b33b4a77cd0280c827976768d4725da995a915f2c43e5736ad6beafef5002f5cdb45d6eca2335a4f55055053e2b623ec4deeb7b4646814dfb09dbaaa2c7a5b691c8e1b2528a793cb97ba5aa57841b07b59c41815354709c1bc1236d86a8edc5b2238ae2118b4fe6efffd818cb168e87f26db381af448f70ecb65d0f9d0bbcf44ba6b85e5602d05caf31567f2e1689b8e82cebc9690469dcf00f47a7af654f82e65269ef5a372d855c0021781f2093ba0f2d3a0eba24f7a0f5d5346433ca72eb1d3f6af8f5a92133d011ec550e6d7593446c26f0a8ea92fba61defd8097266c5c92671d4089b45c8304fb815ac32f785d99fb78fe93874b3c4c016fe84a90774e71bf82613399cd97dd1665b3d276616b8ef5f364efa3a3b0f9555efc06a6fe62e2bf66c7341b3fb6c52aab6a42031bc82575208e3bbd69402a0df8f8768680cdd00723df092d21c9a197b80de6ba1fb51da53ce9a9529cc30b2f640f990845dcd766766b974c0473f5c704fcc442c871a6f0b2773b815526c8a801c61ab435192234f525ffc81e355bd921cf07aa1fc003fc21a4c2d76dbe077b5517f08edb585b0647df2a7c1443a95d37af3e466fe0fd690b73d7e1654aadd36bd806d6aa51525adbf82445f7a1dd48d885557ad23441443510a58b0e352c65cd2e1cbe7a6858cafe8cb9fa931a0a1f5b86403e3c248441cee2fa861df577f9a83ecc23a1f44df2a56582d77118fc0250ad989891d34d199e23afcc287b10a594da4dbcd0bf581266eadb469f3fee9ab2b47626f50c37a5bfd9de789ace62180f2ed82a639bfedef714a86b75cdeccfa964883bcb4eda5df9b67a6d97859dbcec08f9b8dcd3f0681d0aec291bc35a73973981f7b1db86ed583ba9ef83b1dfe0c6fafcf39ea4b77ddd55aa95d1aa2c19fce47d3da08208dae9598e13a8ced215844d4a62143c4f1f22494b55a304786121cd58a109341d741c7d27333ed155df36a23e1aa19219ac8b2327d65064482f5f1c40ee56d12d8b74cf411c53c307ae42a94025be8c9fc62a963eab55014a9458ae97b74cfc3614608fd356c9930f849952da396ca14a23367154d2dcdef88e7a9a4707c493c8eddd48b4fce7ce6c42458d54c64a64cafda9f8b6c20a299ad5f57bb1a6f01781c81df5940a01011eeb1b49dae382877354e6498d3bfc9ecae372d35d5087fc9776dd8b9cf3a7c2ce5cb8f3f4ff8a3c0e5dbf2c504705749b026fbf7e5a236ac8e4cc0cae90d91519b86f9ddf7f5a939becb48c56e8a648dc8b4a08fe18bbc41ad70c181314d6fbb82411726afd0a71892bbaf287afdc4a668b236a08691831e28b09cb9ce718af34dd70bbd69e7de19b94dfb4c92ba734985adcfae4068c4882cc24c6a57dfd180d4af57ad07608790622b073985f51ae9c287d495460e6c289c06bed6eac695d7c9fab493d7210a7037ef48b0ce89a72f14634d8984a1a6a0a55960e53b91d8ab163668070f25917eda3e6018dac9dc41745c79b0726fb8ba9ff0e4e84c4f7378f670412392b0f48e18055d6f027250b2179715c88160707c84137e0d0ab31739872223ff7fe45d5ee3ddc5f620d0ca3c41f09508c85d2d756ac806ef978c2151930dcbd7b4f197c7d2fcfa7534dcfc7b0cb6ce6c4d58b91395bc69305f0b70860ebb9223261b4baa311ebb48488e1c3cb618899ae364ce5ce83e134601e34790653931c22e43c0999ff96f5f4b8ab7323cc16f2b2877a03cef3cf89a34cdc86145e54d9ee82ab43c55f21cf5c77272932092e72b771f81053ef7c3e86402e24c42076c8ab689c35e2ab0ab64312b1e2be9e6d04ea46a72e1c1ffb1bbe4bb9ef5227e872f23adc33179679bee5a31e65b9117fa76fc7c387a26272271de16fa57259ee08c0c6b29b52d4964cfadac542cbe8159bca8528465d420f282dbabb3490bbcc4c96f5b7522bffb38cb2ac892901130c6a47bc920dc2cb85905c49dc79e60aac5d17d6ea9dd5ffa5363104a25ceb0fab8e636c679b449a2563b2554feeb2cc1547c9475cffe61fa454ce018f81ecd3bf1773ba5d4c31809c88a82b4aaf1f84557d9839725b428eb0327c6593d07b75121277464f05ed650c4485cdcdc42b926af6720c1b15f0838026724a94b8115f6753f2aa46c51ad17834e33273e04d447c9970c2e2823b0ee103ed638a95afe78a7f31c39a7ec1eb76a69e5bc1e5bf2f5a43a2672842c3fcd3c546667f514a2e22cc787e825fff3b5c1f3be2bb2bafaf8b501e7840c9a952d50a866f900bcef0a24268a6893c5bbdc104f8633742e17731520edb2d2bc551cd1c10c72dac7ac4936596b060c2a8c20d0646d0373b8c68947d5ca0d480b1a9cd133dfa0ef3beada5b3831262939de34e2afb283b32c4ef22e4b973b5491b9970158bd760706824289d5dd14e25411dff74ffff7428f40f12b715b98f4b890de0ff95b5ce0fcf28d4e1036b11c907c3fcaaab3f7bad0058328e6191c2cc35bc0d609255957d9098782ecbfe9e5571b61686172a53f5a4cb819ab4a664e9d70686fdbcc4f63e41d6dd2acfbda8b1061d43422222dd91e84304ad636ecc337d57e16b5f49cee4b2d6210dcb1d6bf6369385771123ec93b09f07104f24c148bf200ab996630bee34dd2243c1178894b926915c4bb594552b45b84eab04db6ce766740416aa45f5e04e7b1c99b5094a4bc16d8c67c9b77fd36336859f73e377592180f2a96435f14c0c100344202776e223d0ebf5ac9f804dacb5667a36adb467332f4804c06a061bd98bec69e2ba138b2bc19ed0460cf02c3470bf9215237a24f4a9b2218828763b00795973a7c752170e9e3c49722eb5197b85ecb8ed09e6c8adfa2dae4e9c67bcabe696fbc82c06675a20c0b5e2434849a5df427628fe8474150ae487a7ac3fc864e2f55412f3956a748e2e28077415c2975376644218ea3fb74fbfa7b5f35907fb557bf4b273ba99899c67392c0efa771ccc941ae7335b79b7b9f8c1a6dcfef217f2f9ba95e9dc193854edec0a435932b1779206a399c4a29b2a7ec0d64a443cb6c4ea1145829c575e0d1260d78f05253b921e84c1f7cc461f86b3f2e61b01adf530af0421d3e2b3b541bbd56590e5a1d85c2e7c84ead1c9b82d575b85b76d71f0ef1d0c04720972293728ac3b024c7e4d2c99c7970d7f655947d265fdf387b5bf99066ff2d8cb3c32faef8259c4b5decf7ed6fa472778fbe522db365765ec62bf2f09fe1a81a6c916d7f556e9806057df8fa00ab11147a0d870ab981553ab6c72423d14c44e3fa2748a09e4fccfa04edb1bf7aee45e7ca24a7323e3f716433d977957e2750b20ad3c61fafe2363f3b13a8ab60cb67fa976a6e92fbcceaa9e93f04b9792b83ca411903dd122149c80c974b1a7a01e7fc0e29f3511b2e248852f10db4650ae54a0e1e6dd4ca19d67328741632758de78fff439ca6c5c2fbc42db46485e3bf0b82e5fcb9698d7df7acba1b4067fd3c6699303be6ed81fe053c5c3c31b1e450419a4f85a14780cefdbe3b3293e9a22e8705a6fe62d4dd2f131e39bf969c64ed1e15940d2e5ae9b1c7cc6eaec45387a536a31edbc25a454b84a11c1efd3c2f621be0a9bccd01787d6d7b3981825a940abcfe8d9f95fdbb5c1f09b3ae2cbf982c4c49d72617640f2a4067fe0dc32d553373e73334c26ac920d730ba1c8348e9f7637758b4087bc9511ac30bec3833144eb5bd4cda8690f489a8a209f97d1857f38bde70496679e110016f4437333c1c0903db0ba1c74c578ce5465e5ab6a05b993b4e93571ce5d1926f70b1c838640896898945731a5850294f66f2edcbc57dacc98128991a003986a29345ea7db62456f4b32e519c4583fb3de6de293adc015bda283cb57ac5be2623a86763a5621c1dfc9bb3f22d9d54f57341899", 0xf00}, {&(0x7f0000000000)="cf", 0x1}], 0x3, 0x0, 0x0, 0x800}, {&(0x7f0000000180)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fd1bba3dfe9751a8926253e40c6e90b8", 0x10}, {&(0x7f0000000380)="d4eb3ea9490ed0694d4688453f4bc0bef72a4e7b39aff407752bf0d96bd2af99c285b8d8d2dfbd1cefc11ec22a13d263b611622e6ee4f9601c5e4187c580f6cb069952dde0cbb45cb4aee4e37d230cceae4cc087df21a875313d7f1577a0535696b197636d24d6318776ab8b1742c048f1063222f33553cd0a92bbbf5c2a6dcbeaaa3f35a43d3ca5", 0x88}, {&(0x7f0000000440)="b6bb05e3a9881987a665bca7743e6e008b2c50d01ee87c970d0c023862f65b010067ccb2c978204c1560c85084419f78cc84de41416bd50f3d378e3b7b5ebb841935bd0ce90eaa85d562c012a3c23da3d41ea330f71198b29d45979001616277af8beae883654cc6cbf1101a1226b053e71d62aec07b07e45686ef03a5f3b0776f93b15a18899436b85d3b0dfb48457368cee37680771c9b0894cba020bd81a5a45b3df915d70152cb59e24610166173d8e45ff8ffe61110b951a19e8d7795efa2fb56231f7d05b8b996", 0xca}], 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000084000000000000000f00ff0106000700300000000000000084000000010000000008f47408000000ffab0000ff0300000000ffff0a000000e2600000", @ANYRES32=r7, @ANYBLOB="18000100000000000000000006000000050000000000000018000000000000008400000000000000000020000000000000000000030009821a5d08000700"/76, @ANYRES32=r11, @ANYBLOB="18000000000000008400000006000000d1b3000000000000"], 0xb0, 0x1}, {&(0x7f0000000540)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000880)="122578efef260df090ff9c376b6e61da962fad5dfc39e73d6b6875121dd3a5e8ed39b9e70cf43d9a41c06e84c0ac5f22e3622626a0823d624deb1d35fda04ec5476790d735898ef56886d1668493fddbe9a7905ae16bb262bb251c995354831fceca9156c4c1cb7095be78c33b73860bdcad065e404112f689638753db734e580a13f85bc6a56b6e1af48fe2921b0e0695e1cfdc2ae0d65aaf95a2ef9ca02f454ce6075d3d84e5bd68f23d7d939ec1e5237eeabc2e512e2050824c9095a3b5156bede1b53c50628b3a25ef1b7a53614792dc203c7df0ce62d1cdc70e77843a19329ed911bdf98944d7bf6ce65465494f83b664b63981945aac", 0xf9}, {&(0x7f0000000640)="837a118d81b2d1976bc43d45acfb5b142efb00487272b5d51e422fc34630d5cdb9d175ee87a57c23566d17d7111ad23e2525c177dea1d0cfd877711cf45cca4b4930e733705342cae821", 0x4a}, {&(0x7f0000000980)="2aed22e3044719327f3c1683def69d6cb7c3209d7ad64a9984bfeb550e9c04d6e933c66abd6bdf9d949fe4261370e84aaef0a9c39e426b5b5d523fae2c7a4f90301df29369b3540acb659858fd91d646cba96954038b4fee4294ae722afcd3aaa7c5c99a542935ccb8142db944278986ec58038945228fdf7992c1bd", 0x7c}, {&(0x7f0000000a00)="b1a92020c5c62189cf7909a1957fc3501b1e8106d336de801ca7f72c2bca761c349d53457a5d8cf5474a7e1ce9e216984207a0d35ec09f589d2be0f35024eef99531fe09c835a28672cd21e867bb4dc594bfb32f5f2d7cc3dc76ac007d51a0bf29b6ee08b080", 0x66}], 0x4, 0x0, 0x0, 0x18c}, {&(0x7f0000000ac0)=@in6={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x24}, 0x1}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000b00)="3eaa6e2b3c91cf869d08ee2f8ffe556d7947e2bb253d4c086d4cfb519a10a65918577cabd864aeb2a9b933b15622c125ce8184f2c1ec8fc73aad651b92e22ffabb9aa39b21e7f3fa5d17322dfd52df74f67e9d7619248cb7f8c6", 0x5a}, {&(0x7f0000000b80)="1e74f7ff5d0ed8ef84b5bc47ffaf94761050fe3de5d8d203cfbd89ca38fd", 0x1e}, {&(0x7f0000000bc0)="1f2c9cc8d5d04601eddd44aa001421e13d7461ec", 0x14}, {&(0x7f0000000c00)="012525b1d68cefe6aaa3d9dc", 0xc}, {&(0x7f0000000d00)="a1cea07e8b7f8434721fa6c2d787e70e447e453e7be1c294ad7d4a0e7453825e38ca4788eb83db2d82c0740ea0fdb22af04cb3718cf0c5668cea99075e4e37060659b605b80f43f393ab1eb222cc52802c87125a3153cc7bc3b81adcba08d748355e48fda879ff5dd7a12a6fcdf47f8d6e6c5415b773d5a80004eddd12f66b38293c145e233f8b20765c8784fae82754224a80a20f73047ce13d563179114c6c144e2b0bf228cf491fd9fb617af8b1267a18855fb12037cfa8d49c", 0xbb}], 0x5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="300000000084080000010000005cff00000200000000020000510f0000020000000500040000000000", @ANYRES32=r12, @ANYBLOB="18000000000000008400000006000000020000000000000020000000000000008400000008000000fe880000000000000000000000000001"], 0x68, 0x4000000}], 0x4, 0x20008000) ioctl$IOMMU_IOAS_MAP(r9, 0x3b85, &(0x7f0000000fc0)={0x28, 0x4, 0x0, 0x0, &(0x7f0000000f40)="7280365c3595d1f89cf3d42cd4f0f4245a92e8a5aa04c47b953d862f191c98dfcab55e5a9ef4c52595d1274d8d6060cffe960a508eefcf12be57a899b811c0ef1b1b8eb24f8ab87652ce0d44115452e337d6d219e01281d35206b2cb6736d1c10beb6e19b4a2eaaac8e25a69ca1565", 0x6f, 0x1000}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x9c) sendto$inet6(r4, &(0x7f0000001080)="4e0ede4853723b81261437398c4ecef8b6a19d4cf376daec39f1b2103782689825c38e3534b02a05fd338c53bebc6dc7ed0091b21e9f15d684fa7823febf46e51a69c2152dcaaf55805bc6dc95c548ff35ec72c78bb07d6c6cfe888aa693c6eb94404136c0684419a4b1eed6caba3d9b07b7e645d2041116b46ca416bdf35af073879cfe7fc289279b91e7cab60796c4347e029506db342047f455490d95225cba57c3f17b5c6156e1c8694ae4edde4a39935884e6fd6fabbeef98ec8a2a8296e81a1d", 0xc3, 0x4000, &(0x7f0000001040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_connect$uac1(0x2, 0x8e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003000000106b1d01014000000000007fd0278d7efcd009027c0003010e00030904000000010100000a24010100010401000001f7ff000904012325e293e2f2f77e441dc32ef5335a0101010200e676240105620000090501091f02413225bfcf08bec78bad0a020107250182064a07090402000001020000090402010101020000080402010004064707240109090700090582090800060e0307250100030100885b3e7a595d3b1dfb95490dab"], &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) 872.446232ms ago: executing program 1 (id=3851): r0 = socket$inet_sctp(0x2, 0x5, 0x84) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f00003b0000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x30000000) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001d40)=[{{0x0, 0x5a, 0x0}}], 0x40001ec, 0x102, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 604.297906ms ago: executing program 2 (id=3852): openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/cgroup\x00') r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101"], 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x36, @string={0x36, 0x3, "828bfe190d264e43d6d458c4dab2c4c5f0312c8b182e0880f621a4e60b12553ab9cd73b9018750ed80105e7ff9dddc9e8bb1d8bc"}}}, 0x0) (async) syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x36, @string={0x36, 0x3, "828bfe190d264e43d6d458c4dab2c4c5f0312c8b182e0880f621a4e60b12553ab9cd73b9018750ed80105e7ff9dddc9e8bb1d8bc"}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x49920d862a92153b}, 0x20}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x49920d862a92153b}, 0x20}}, 0x0) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8, @ANYBLOB="05", @ANYRES16], 0x0) 0s ago: executing program 3 (id=3853): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[], 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e24, 0xfffffbf8, @remote, 0x7}, 0x1c) mremap(&(0x7f0000ad1000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r5 = socket$nl_crypto(0x10, 0x3, 0x15) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000020"], 0x24}}, 0x0) sendmsg$nl_crypto(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@del={0xe0, 0x11, 0x1, 0x70bd2b, 0x25dfdbff, {{'lrw(serpent)\x00'}, '\x00', '\x00', 0x3000, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x48014) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7f, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xfa, 0xff, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x1, 0x7b, 0x7}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0xe, 0x7, 0xfd, 0xff, 0x4}, 0x44, &(0x7f0000000400)={0x5, 0xf, 0x44, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x4, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0x6, 0x6}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x4b, 0xf0f, 0x7ff, [0xf, 0xffc0, 0xf, 0xc000, 0x7]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x81, 0x8, 0x0, 0x5, 0x6}, @ptm_cap={0x3}]}}) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) r7 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil) shmat(r7, &(0x7f00001f1000/0x4000)=nil, 0x2000) bind$inet(0xffffffffffffffff, 0x0, 0x0) mlock2(&(0x7f000069d000/0x1000)=nil, 0x1000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/43) kernel console output (not intermixed with test programs): z.1.3356'. [ 812.487040][ T5898] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 812.512301][ T5898] usb 37-1: enqueue for inactive port 0 [ 812.527054][T18040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3356'. [ 812.566185][ T6913] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.576001][T18042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3356'. [ 812.591449][ T6913] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.607218][T18042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3356'. [ 812.630675][ T6913] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.630750][T18040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3356'. [ 812.650905][ T5898] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 812.701028][T18040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3356'. [ 812.899522][ T6913] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 813.597775][T18059] __nla_validate_parse: 1 callbacks suppressed [ 813.597795][T18059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3360'. [ 815.434566][T18066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.478572][T18066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.737615][ T39] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 815.797561][T18075] netlink: 10104 bytes leftover after parsing attributes in process `syz.3.3365'. [ 815.927161][ T39] usb 3-1: Using ep0 maxpacket: 8 [ 815.939424][ T39] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 815.952740][ T39] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 815.994774][ T39] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 816.028216][ T39] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 816.154134][ T5926] IPVS: starting estimator thread 0... [ 816.161879][ T39] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 816.215105][ T39] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 816.269898][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.277081][T18081] IPVS: using max 31 ests per chain, 74400 per kthread [ 816.648189][ T39] usb 3-1: usb_control_msg returned -32 [ 816.653857][ T39] usbtmc 3-1:16.0: can't read capabilities [ 816.903473][T18093] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3369'. [ 816.913385][T18093] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3369'. [ 816.937368][T18093] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3369'. [ 816.957513][T18093] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3369'. [ 816.974007][T18093] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3369'. [ 817.002081][T18095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.013519][T18067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.022824][T18067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.032207][T18093] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3369'. [ 817.032838][T18095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.105665][T18093] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3369'. [ 817.134268][T18093] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3369'. [ 819.817582][ T39] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 819.977188][ T39] usb 1-1: Using ep0 maxpacket: 8 [ 820.009291][ T39] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 820.020407][ T39] usb 1-1: config 0 has no interfaces? [ 820.031829][ T39] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 820.041257][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.049388][ T39] usb 1-1: Product: syz [ 820.054077][ T39] usb 1-1: Manufacturer: syz [ 820.060654][ T39] usb 1-1: SerialNumber: syz [ 820.091062][ T39] usb 1-1: config 0 descriptor?? [ 820.317954][T18138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.357202][T18138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.451241][T17261] usb 1-1: USB disconnect, device number 63 [ 820.639077][ T5898] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 820.797291][ T5898] usb 6-1: Using ep0 maxpacket: 32 [ 820.803429][ T5898] usb 6-1: no configurations [ 820.813404][ T5898] usb 6-1: can't read configurations, error -22 [ 820.947130][ T5898] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 821.097065][ T5898] usb 6-1: Using ep0 maxpacket: 32 [ 821.104367][ T5898] usb 6-1: no configurations [ 821.117237][ T5898] usb 6-1: can't read configurations, error -22 [ 821.132239][ T5898] usb usb6-port1: attempt power cycle [ 821.477329][ T5898] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 821.508134][ T5898] usb 6-1: Using ep0 maxpacket: 32 [ 821.518538][ T5898] usb 6-1: no configurations [ 821.523435][ T5898] usb 6-1: can't read configurations, error -22 [ 821.670126][ T5898] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 821.693853][T18164] __nla_validate_parse: 58 callbacks suppressed [ 821.693874][T18164] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3389'. [ 821.698011][ T5898] usb 6-1: Using ep0 maxpacket: 32 [ 821.737983][ T5898] usb 6-1: no configurations [ 821.742658][ T5898] usb 6-1: can't read configurations, error -22 [ 821.767529][ T5898] usb usb6-port1: unable to enumerate USB device [ 822.617344][T18095] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 822.670380][T17261] usb 3-1: USB disconnect, device number 52 [ 822.937815][T18187] openvswitch: netlink: Flow actions attr not present in new flow. [ 823.819965][T18202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.830367][T18202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.967074][T17076] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 824.060108][ T5898] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 824.131147][T17076] usb 1-1: No LPM exit latency info found, disabling LPM. [ 824.150121][T17076] usb 1-1: string descriptor 0 read error: -22 [ 824.168519][T17076] usb 1-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 824.239036][T18206] netlink: 'syz.3.3400': attribute type 5 has an invalid length. [ 824.366894][T17076] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.385060][T17076] usb 1-1: config 0 descriptor?? [ 824.401290][ T5898] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 824.420719][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.450625][ T5898] usb 2-1: config 0 descriptor?? [ 824.470638][ T5898] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 824.628930][T18199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.640786][T18199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.665605][ T5898] gspca_cpia1: usb_control_msg 05, error -71 [ 824.683426][ T5898] gspca_cpia1: usb_control_msg 01, error -71 [ 824.710084][ T5898] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 824.744992][ T5898] usb 2-1: USB disconnect, device number 55 [ 824.796675][T18215] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3402'. [ 824.808756][T17076] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 824.842040][T17076] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 824.853921][T17076] dib0700: firmware download failed at 7 with -22 [ 824.885946][T17076] usb 1-1: USB disconnect, device number 64 [ 824.931601][T18219] loop5: detected capacity change from 0 to 7 [ 825.079590][T18219] Dev loop5: unable to read RDB block 7 [ 825.085260][T18219] loop5: unable to read partition table [ 825.086795][ T9] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 825.112630][T18219] loop5: partition table beyond EOD, truncated [ 825.137077][T18219] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 825.225554][ T5898] IPVS: starting estimator thread 0... [ 825.297046][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 825.313042][ T9] usb 6-1: config 1 has an invalid descriptor of length 60, skipping remainder of the config [ 825.339689][T18222] IPVS: using max 51 ests per chain, 122400 per kthread [ 825.350115][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 825.364974][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 825.382509][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 825.487582][ T9] usb 6-1: SerialNumber: syz [ 825.598070][ T9] usb 6-1: 0:2 : does not exist [ 826.339881][ T9] usb 6-1: USB disconnect, device number 120 [ 826.631361][T18242] binder: 18239:18242 ioctl c0306201 0 returned -14 [ 826.876704][T18251] netlink: 'syz.5.3413': attribute type 6 has an invalid length. [ 827.233279][T18259] loop5: detected capacity change from 0 to 7 [ 827.252496][T18259] Dev loop5: unable to read RDB block 7 [ 827.270172][T18259] loop5: unable to read partition table [ 827.284411][T18259] loop5: partition table beyond EOD, truncated [ 827.304796][T18259] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 827.644836][ T30] audit: type=1326 audit(1765411521.514:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18248 comm="syz.3.3412" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d7d78f749 code=0x0 [ 827.964814][ T39] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 828.127228][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 828.247909][ T39] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 828.300149][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 828.439966][ T39] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 828.533405][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.569015][ T39] usb 1-1: Product: syz [ 828.580634][ T39] usb 1-1: Manufacturer: syz [ 828.737036][ T39] usb 1-1: SerialNumber: syz [ 828.758198][ T39] usb 1-1: config 0 descriptor?? [ 828.769318][ T39] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 828.791409][ T39] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 829.410308][ T39] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 829.510236][ T39] em28xx 1-1:0.0: Config register raw data: 0x41 [ 830.109540][T18303] netlink: 'syz.3.3425': attribute type 6 has an invalid length. [ 830.739507][T18310] veth1_to_bond: entered allmulticast mode [ 830.792112][T18310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3427'. [ 831.276044][T18319] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3429'. [ 831.641703][ T9] usb 1-1: USB disconnect, device number 65 [ 831.687847][ T9] em28xx 1-1:0.0: Disconnecting em28xx [ 831.718136][ T9] em28xx 1-1:0.0: Freeing device [ 831.905681][T18329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3432'. [ 831.935781][T18329] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3432'. [ 832.710444][ T30] audit: type=1326 audit(1765411526.584:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18330 comm="syz.5.3431" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8c078f749 code=0x0 [ 833.007186][T17261] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 833.169721][T17261] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 833.182195][T17261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 833.200592][T17261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.227400][T17261] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 833.297365][T17261] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 833.306632][T17261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.325660][T17261] usb 1-1: config 0 descriptor?? [ 833.393454][T18341] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 833.501880][T18348] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3437'. [ 833.677610][T17076] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 833.777150][ T129] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 833.792453][T17261] steelseries 0003:1038:1410.003D: missing HID_OUTPUT_REPORT 0 [ 833.837035][T17076] usb 2-1: Using ep0 maxpacket: 16 [ 833.844742][T17076] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 833.852911][T17076] usb 2-1: config 0 has no interface number 0 [ 833.859570][T17076] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 833.894447][T17076] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 833.906376][T17076] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 833.922632][T17076] usb 2-1: Product: syz [ 833.944840][T17076] usb 2-1: SerialNumber: syz [ 833.966560][T17076] usb 2-1: config 0 descriptor?? [ 833.981002][ T129] usb 6-1: Using ep0 maxpacket: 32 [ 833.996512][T17076] cm109 2-1:0.8: invalid payload size 10, expected 4 [ 834.001160][ T129] usb 6-1: unable to get BOS descriptor or descriptor too short [ 834.011714][T18307] veth1_to_bond: left allmulticast mode [ 834.044478][T17076] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input98 [ 834.105237][ T129] usb 6-1: config 7 has an invalid interface number: 187 but max is 0 [ 834.126106][ T129] usb 6-1: config 7 has no interface number 0 [ 834.143367][ T129] usb 6-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 834.192643][ C0] cm109_urb_ctl_callback: 2 callbacks suppressed [ 834.192666][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 834.193098][T17261] usb 2-1: USB disconnect, device number 56 [ 834.199047][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 834.307283][ T129] usb 6-1: config 7 interface 187 has no altsetting 0 [ 834.326512][ T129] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 834.343767][ T129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.356589][T17261] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 834.365102][ T129] usb 6-1: Product: syz [ 834.369670][ T129] usb 6-1: Manufacturer: syz [ 834.375184][ T129] usb 6-1: SerialNumber: syz [ 834.527200][T17076] usb 1-1: USB disconnect, device number 66 [ 834.695332][ T129] usb 6-1: Unknown endpoint type found, address 0x07 [ 834.717104][ T129] usb 6-1: Unknown endpoint type found, address 0x03 [ 834.755544][ T129] usb 6-1: Not enough endpoints found in device, aborting! [ 835.087936][T17076] usb 6-1: USB disconnect, device number 121 [ 835.397039][ T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 835.407279][T18375] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 835.520670][T18375] hfs: unable to load iocharset "io#harset" [ 835.612746][ T9] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 835.626495][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.658964][ T9] usb 2-1: Product: syz [ 835.677352][ T9] usb 2-1: Manufacturer: syz [ 835.691862][ T9] usb 2-1: SerialNumber: syz [ 835.716589][ T9] usb 2-1: config 0 descriptor?? [ 835.750235][ T9] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 836.003414][T18390] cgroup: fork rejected by pids controller in /syz5 [ 836.377861][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 837.822401][T18368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.832359][T18368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.844952][ T9] usb 2-1: USB disconnect, device number 57 [ 838.498125][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 838.659653][ T9] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 838.752051][ T9] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 838.768496][ T9] usb 4-1: config 220 has no interface number 2 [ 838.840098][ T9] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 838.905014][ T9] usb 4-1: config 220 interface 0 has no altsetting 0 [ 838.928128][T19083] binder: 19082:19083 ioctl c0306201 200000000080 returned -14 [ 838.967363][ T5898] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 838.994820][ T9] usb 4-1: config 220 interface 76 has no altsetting 0 [ 839.020723][ T9] usb 4-1: config 220 interface 1 has no altsetting 0 [ 839.055484][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 839.074764][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.101642][ T9] usb 4-1: Product: syz [ 839.112747][ T9] usb 4-1: Manufacturer: syz [ 839.124540][ T9] usb 4-1: SerialNumber: syz [ 839.193853][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 839.204929][ T5898] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 839.270865][ T5898] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.294458][ T5898] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 839.362622][ T5898] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 839.494703][ T5898] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 839.537089][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 839.537137][ T5898] usb 2-1: SerialNumber: syz [ 839.565764][ T5898] hub 2-1:1.0: bad descriptor, ignoring hub [ 839.565783][ T5898] hub 2-1:1.0: probe with driver hub failed with error -5 [ 839.566610][ T5898] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 839.604788][T19061] Ï$: option downdelay: invalid value (18446744073709547007) [ 839.604814][T19061] Ï$: option downdelay: allowed values 0 - 2147483647 [ 839.704608][T19061] Ï$ (unregistering): Released all slaves [ 839.890887][T19094] netlink: 'syz.1.3453': attribute type 12 has an invalid length. [ 839.926885][ T9] usb 4-1: selecting invalid altsetting 0 [ 839.969561][ T9] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 839.989443][ T9] uvcvideo 4-1:220.0: No valid video chain found. [ 840.003670][ T9] usb 4-1: selecting invalid altsetting 0 [ 840.021531][ T9] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 840.042988][ T9] usb 4-1: USB disconnect, device number 42 [ 840.107052][ T5898] usb 6-1: new full-speed USB device number 122 using dummy_hcd [ 840.130110][T17076] usb 2-1: USB disconnect, device number 58 [ 840.290038][ T5898] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 840.299319][ T5898] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.327757][ T5898] usb 6-1: config 0 has no interface number 0 [ 840.343745][ T5898] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 840.388221][ T5898] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 840.444883][ T5898] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 840.481413][ T5898] usb 6-1: config 0 interface 52 has no altsetting 0 [ 840.519577][ T5898] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 840.557205][ T5898] usb 6-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 840.568390][ T5898] usb 6-1: Manufacturer: syz [ 840.576730][ T5898] usb 6-1: config 0 descriptor?? [ 840.687143][ T39] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 840.927348][ T5926] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 840.962192][ T39] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 840.976718][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.113661][ T39] usb 1-1: Product: syz [ 841.128998][ T39] usb 1-1: Manufacturer: syz [ 841.139743][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 841.147298][ T5926] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 841.166674][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 841.195926][ T39] usb 1-1: SerialNumber: syz [ 841.236114][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 12408, setting to 64 [ 841.295993][ T39] hub 1-1:24.0: bad descriptor, ignoring hub [ 841.311671][ T39] hub 1-1:24.0: probe with driver hub failed with error -5 [ 841.319368][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 841.416669][ T5926] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 841.434779][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 841.452860][ T5926] usb 3-1: SerialNumber: syz [ 841.485215][ T5926] usb 3-1: config 0 descriptor?? [ 841.492579][ T39] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 841.516154][ T5926] hso 3-1:0.0: Can't find BULK IN endpoint [ 841.533780][ T39] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 841.693871][T19098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.723364][T19098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.749099][ T39] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 841.755550][T17076] usb 3-1: USB disconnect, device number 53 [ 841.765070][ T39] usb 1-1: media controller created [ 841.787242][ T39] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 842.235718][ T5898] usb 6-1: Can not set alternate setting to 1, error: -71 [ 842.289717][ T5898] synaptics_usb 6-1:0.52: probe with driver synaptics_usb failed with error -71 [ 842.314482][ T39] DVB: Unable to find symbol dib7000p_attach() [ 842.347829][ T39] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 842.369569][ T5898] usb 6-1: USB disconnect, device number 122 [ 842.667297][ T39] rc_core: IR keymap rc-dib0700-rc5 not found [ 842.704297][ T39] Registered IR keymap rc-empty [ 842.752354][ T39] dvb-usb: could not initialize remote control. [ 842.837320][ T39] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 842.882244][ T39] usb 1-1: USB disconnect, device number 67 [ 843.027262][T19127] SET target dimension over the limit! [ 843.196663][ T39] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 843.762228][T19144] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 843.784964][T19146] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 844.007071][ T39] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 844.158610][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 844.173843][ T39] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 844.209155][ T39] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.238550][ T39] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 844.275587][ T39] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 844.318398][ T39] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 844.351110][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 844.367065][ T39] usb 4-1: SerialNumber: syz [ 844.408174][ T39] hub 4-1:1.0: bad descriptor, ignoring hub [ 844.427125][ T39] hub 4-1:1.0: probe with driver hub failed with error -5 [ 844.452176][ T39] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 844.671906][T19179] netlink: 'syz.3.3467': attribute type 12 has an invalid length. [ 844.837400][ T39] usb 4-1: USB disconnect, device number 43 [ 844.895486][T19184] fuse: Unknown parameter 'ÿÿÿÿÿÿ0177777777777777777777718446744073709551615öÕã¶Ïø0<ÿÿÿÿ18446744073709551615' [ 844.988254][T19187] program syz.5.3472 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 846.349252][T19208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3486'. [ 846.607082][T17076] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 846.645491][T14695] Bluetooth: hci1: command 0x0406 tx timeout [ 846.698342][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.724700][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.777034][T17076] usb 3-1: Using ep0 maxpacket: 32 [ 846.789364][T17076] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 846.817030][T17076] usb 3-1: config 0 has no interface number 0 [ 846.826751][T19230] erspan0: entered promiscuous mode [ 846.838968][T17076] usb 3-1: config 0 interface 230 has no altsetting 0 [ 846.864562][T17076] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 846.897239][T17076] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.922321][T17076] usb 3-1: Product: syz [ 846.932067][T17076] usb 3-1: Manufacturer: syz [ 846.954551][T17076] usb 3-1: SerialNumber: syz [ 846.978258][T17076] usb 3-1: config 0 descriptor?? [ 847.000823][ T5898] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 847.036108][T17076] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 847.049604][T17076] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 847.257350][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 847.296459][ T5898] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 847.316679][ T5898] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.347229][ T5898] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 847.383385][ T5898] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 847.657525][ T5898] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 847.742673][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 847.813539][T19239] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.821442][T19239] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.834144][ T5898] usb 1-1: SerialNumber: syz [ 847.873521][ T5898] hub 1-1:1.0: bad descriptor, ignoring hub [ 847.933799][T19255] netlink: 'syz.2.3496': attribute type 5 has an invalid length. [ 847.973329][ T5898] hub 1-1:1.0: probe with driver hub failed with error -5 [ 848.008655][ T5898] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 848.258238][T19233] delete_channel: no stack [ 849.473603][T17076] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 849.489237][T17076] usb 3-1: USB disconnect, device number 54 [ 850.078327][T19239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.231810][T19239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.523424][T19261] netlink: 'syz.0.3491': attribute type 12 has an invalid length. [ 850.537321][ T1941] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 850.546190][ T1941] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.631778][ T1941] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 850.648753][ T1941] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.709187][T19234] usb 1-1: USB disconnect, device number 68 [ 850.717384][ T1941] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 850.759855][ T1941] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.790261][ T1941] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 850.815884][ T1941] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.892704][T19286] loop5: detected capacity change from 0 to 7 [ 850.926083][T11120] Dev loop5: unable to read RDB block 7 [ 850.947268][T11120] loop5: unable to read partition table [ 850.953301][T11120] loop5: partition table beyond EOD, truncated [ 850.961848][T19286] Dev loop5: unable to read RDB block 7 [ 850.972516][T19286] loop5: unable to read partition table [ 850.997360][T19286] loop5: partition table beyond EOD, truncated [ 851.006170][T19286] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 851.127384][T19234] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 851.297224][T19234] usb 4-1: Invalid ep0 maxpacket: 64 [ 851.417123][ T6907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.514348][ T6907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.517184][T19234] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 851.747035][T19234] usb 4-1: Invalid ep0 maxpacket: 64 [ 851.752671][T19234] usb usb4-port1: attempt power cycle [ 852.107077][T19234] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 852.259832][T19234] usb 4-1: Invalid ep0 maxpacket: 64 [ 852.407193][T19234] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 852.478632][T19234] usb 4-1: Invalid ep0 maxpacket: 64 [ 852.484920][T19234] usb usb4-port1: unable to enumerate USB device [ 853.381317][T19333] input: syz1 as /devices/virtual/input/input100 [ 853.397699][T19333] program syz.2.3514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 853.477146][T19234] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 853.657819][T19234] usb 2-1: Using ep0 maxpacket: 16 [ 853.667972][T19234] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 853.678806][T19234] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.702546][T19234] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 853.718181][T19247] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 853.737110][T19234] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 853.765966][T19234] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 853.777083][T19234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 853.788632][T19234] usb 2-1: SerialNumber: syz [ 853.805553][T19234] hub 2-1:1.0: bad descriptor, ignoring hub [ 853.815927][T19234] hub 2-1:1.0: probe with driver hub failed with error -5 [ 853.834093][T19234] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 853.887008][T19247] usb 3-1: Using ep0 maxpacket: 8 [ 853.895083][T19247] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 853.912525][T19247] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 853.962821][T19337] binder: 19336:19337 ioctl c0306201 200000000080 returned -14 [ 854.042215][T19247] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 854.074178][T19339] netlink: 'syz.1.3511': attribute type 12 has an invalid length. [ 854.128643][T19247] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 854.173575][T19247] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 854.277885][T19248] usb 2-1: USB disconnect, device number 59 [ 854.301770][T19247] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 854.353680][T19247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.362932][T19247] usb 3-1: Product: syz [ 854.367279][T19247] usb 3-1: Manufacturer: syz [ 854.394120][T19247] usb 3-1: SerialNumber: syz [ 854.447549][T19247] usb 3-1: config 0 descriptor?? [ 854.530865][T19247] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input101 [ 854.621129][T19347] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3519'. [ 854.828518][T19351] rtc_cmos 00:00: Alarms can be up to one day in the future [ 854.984323][T19353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3521'. [ 855.014104][T19247] rtc_cmos 00:00: Alarms can be up to one day in the future [ 855.022772][T19247] rtc_cmos 00:00: Alarms can be up to one day in the future [ 855.032760][T19247] rtc_cmos 00:00: Alarms can be up to one day in the future [ 855.044482][T19247] rtc_cmos 00:00: Alarms can be up to one day in the future [ 855.053520][T19247] rtc rtc0: __rtc_set_alarm: err=-22 [ 855.062964][T19353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.413631][T19360] loop5: detected capacity change from 0 to 7 [ 855.451963][T16499] Dev loop5: unable to read RDB block 7 [ 855.458482][T16499] loop5: unable to read partition table [ 855.464563][T16499] loop5: partition table beyond EOD, truncated [ 855.476395][T19360] Dev loop5: unable to read RDB block 7 [ 855.483748][T19360] loop5: unable to read partition table [ 855.490319][T19360] loop5: partition table beyond EOD, truncated [ 855.500067][T19360] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 855.627280][T19248] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 855.798130][T19248] usb 1-1: Using ep0 maxpacket: 16 [ 855.805057][T19248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.842147][T19248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.859733][T19372] binder: 19370:19372 ioctl c0306201 200000000080 returned -14 [ 855.872432][T19248] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 855.910110][T19248] usb 1-1: New USB device found, idVendor=0409, idProduct=07da, bcdDevice= 0.00 [ 855.940730][T19248] usb 1-1: New USB device strings: Mfr=21, Product=0, SerialNumber=0 [ 855.953083][T19375] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3529'. [ 856.026824][T19248] usb 1-1: Manufacturer: syz [ 856.064582][T19248] usb 1-1: config 0 descriptor?? [ 856.141967][T19234] usb 3-1: USB disconnect, device number 55 [ 856.188973][ T30] audit: type=1326 audit(1765411550.064:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19379 comm="syz.2.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31cf8f749 code=0x7ffc0000 [ 856.242127][ T30] audit: type=1326 audit(1765411550.084:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19379 comm="syz.2.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31cf8f749 code=0x7ffc0000 [ 856.333802][ T30] audit: type=1326 audit(1765411550.134:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19379 comm="syz.2.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff31cf8f749 code=0x7ffc0000 [ 856.407051][ T30] audit: type=1326 audit(1765411550.134:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19379 comm="syz.2.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31cf8f749 code=0x7ffc0000 [ 856.438122][ T30] audit: type=1326 audit(1765411550.134:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19379 comm="syz.2.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31cf8f749 code=0x7ffc0000 [ 856.463929][ T30] audit: type=1326 audit(1765411550.234:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19367 comm="syz.3.3527" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d7d78f749 code=0x0 [ 856.510826][ T30] audit: type=1326 audit(1765411550.234:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19379 comm="syz.2.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff31cf8f749 code=0x7ffc0000 [ 856.537401][T19248] hid-generic 0003:0409:07DA.003E: unknown main item tag 0x0 [ 856.544807][T19248] hid-generic 0003:0409:07DA.003E: unknown main item tag 0x0 [ 856.563389][T19248] hid-generic 0003:0409:07DA.003E: unknown main item tag 0x0 [ 856.571623][T19248] hid-generic 0003:0409:07DA.003E: unknown main item tag 0x0 [ 856.615312][ T30] audit: type=1326 audit(1765411550.234:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19379 comm="syz.2.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31cf8f749 code=0x7ffc0000 [ 856.644272][T19248] hid-generic 0003:0409:07DA.003E: unknown main item tag 0x0 [ 856.713867][T19234] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 856.721723][T19249] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 856.726712][ T30] audit: type=1326 audit(1765411550.234:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19379 comm="syz.2.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31cf8f749 code=0x7ffc0000 [ 856.757321][ T30] audit: type=1326 audit(1765411550.234:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19379 comm="syz.2.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff31cf8f749 code=0x7ffc0000 [ 856.816201][T19248] hid-generic 0003:0409:07DA.003E: unknown main item tag 0x0 [ 856.826180][T19248] hid-generic 0003:0409:07DA.003E: unknown main item tag 0x0 [ 856.835345][T19248] hid-generic 0003:0409:07DA.003E: unknown main item tag 0x0 [ 856.844399][T19248] hid-generic 0003:0409:07DA.003E: unknown main item tag 0x0 [ 856.847051][T19234] usb 3-1: device descriptor read/64, error -71 [ 856.852077][T19248] hid-generic 0003:0409:07DA.003E: unknown main item tag 0x0 [ 856.858835][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 856.878286][T19249] usb 2-1: Using ep0 maxpacket: 16 [ 856.887881][T19249] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 856.931815][T19248] hid-generic 0003:0409:07DA.003E: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 856.943731][T19249] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.972503][T19249] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 856.985927][T19248] usb 1-1: USB disconnect, device number 69 [ 856.998983][T19249] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 857.022447][T19249] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 857.035726][T19249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 857.044356][T19249] usb 2-1: SerialNumber: syz [ 857.058332][T19249] hub 2-1:1.0: bad descriptor, ignoring hub [ 857.064282][T19249] hub 2-1:1.0: probe with driver hub failed with error -5 [ 857.072790][T19249] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 857.150040][T19234] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 857.159230][T19386] fido_id[19386]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 857.298063][T19234] usb 3-1: device descriptor read/64, error -71 [ 857.319812][T19381] netlink: 'syz.1.3530': attribute type 12 has an invalid length. [ 857.407700][T19234] usb usb3-port1: attempt power cycle [ 857.477262][T19248] usb 2-1: USB disconnect, device number 60 [ 857.522435][T19396] loop5: detected capacity change from 0 to 7 [ 857.529917][T19396] Dev loop5: unable to read RDB block 7 [ 857.535522][T19396] loop5: unable to read partition table [ 857.542988][T19396] loop5: partition table beyond EOD, truncated [ 857.549370][T19396] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 857.747038][T19234] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 857.778376][T19234] usb 3-1: device descriptor read/8, error -71 [ 857.995473][T19410] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3538'. [ 858.017198][T19234] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 858.041844][T19234] usb 3-1: device descriptor read/8, error -71 [ 858.080195][T19414] binder: 19413:19414 ioctl c0306201 200000000080 returned -14 [ 858.091690][T19414] binder: 19413:19414 unknown command 0 [ 858.134281][T19414] binder: 19413:19414 ioctl c0306201 200000000180 returned -22 [ 858.157824][T19234] usb usb3-port1: unable to enumerate USB device [ 858.477342][T19248] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 858.647577][T19248] usb 6-1: Using ep0 maxpacket: 32 [ 858.661908][T19248] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.689726][T19248] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.715445][T19248] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 858.737135][T19248] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.763724][T19248] usb 6-1: config 0 descriptor?? [ 859.192192][T19248] koneplus 0003:1E7D:2D51.003F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 859.199941][T19446] loop5: detected capacity change from 0 to 7 [ 859.272041][T19446] Dev loop5: unable to read RDB block 7 [ 859.336265][T19446] loop5: unable to read partition table [ 859.401143][T19446] loop5: partition table beyond EOD, truncated [ 859.450027][T19446] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 859.595420][T19410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.626475][T19410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.656491][T19249] usb 6-1: USB disconnect, device number 123 [ 860.007080][T19234] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 860.146112][T19472] netlink: 'syz.0.3555': attribute type 6 has an invalid length. [ 860.182208][T19234] usb 4-1: Using ep0 maxpacket: 16 [ 860.221639][T19234] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 860.260114][T19234] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.284689][T19234] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 860.306978][T19234] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 860.321537][T19234] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 860.332211][T19234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 860.340386][T19234] usb 4-1: SerialNumber: syz [ 860.371813][T19234] hub 4-1:1.0: bad descriptor, ignoring hub [ 860.378130][T19234] hub 4-1:1.0: probe with driver hub failed with error -5 [ 860.405100][T19234] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 860.710005][T19483] netlink: 'syz.3.3549': attribute type 12 has an invalid length. [ 860.728016][T19485] binder: BINDER_SET_CONTEXT_MGR already set [ 860.773446][T19485] binder: 19481:19485 ioctl 40046207 0 returned -16 [ 860.947288][T19248] usb 4-1: USB disconnect, device number 48 [ 861.000639][T19491] loop5: detected capacity change from 0 to 7 [ 861.025086][T19491] Dev loop5: unable to read RDB block 7 [ 861.034580][T19491] loop5: unable to read partition table [ 861.041914][T19491] loop5: partition table beyond EOD, truncated [ 861.137058][T19491] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 861.768821][T19509] input: syz1 as /devices/virtual/input/input102 [ 861.867166][T19248] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 861.887996][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 861.888012][ T30] audit: type=1326 audit(1765411555.764:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19495 comm="syz.1.3561" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3debd8f749 code=0x0 [ 861.987605][T14695] Bluetooth: hci0: command 0x0406 tx timeout [ 862.017181][T19248] usb 3-1: Using ep0 maxpacket: 8 [ 862.025166][T19248] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 862.037107][T19248] usb 3-1: config 0 has no interface number 0 [ 862.061614][T19248] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 862.078354][T19516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.089736][T19248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.099741][T19516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.110685][T19248] usb 3-1: Product: syz [ 862.114877][T19248] usb 3-1: Manufacturer: syz [ 862.120448][T19248] usb 3-1: SerialNumber: syz [ 862.138174][T19248] usb 3-1: config 0 descriptor?? [ 862.307246][T19249] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 862.345501][T19505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3565'. [ 862.365610][T19505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3565'. [ 862.379691][T19248] uvcvideo 3-1:0.31: probe with driver uvcvideo failed with error -22 [ 862.457159][T19249] usb 4-1: Using ep0 maxpacket: 8 [ 862.465135][T19249] usb 4-1: unable to get BOS descriptor or descriptor too short [ 862.480996][T19249] usb 4-1: config 8 has an invalid interface number: 158 but max is 0 [ 862.489494][T19249] usb 4-1: config 8 has an invalid interface number: 158 but max is 0 [ 862.498110][T19249] usb 4-1: config 8 has no interface number 0 [ 862.504414][T19249] usb 4-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 862.525177][T19249] usb 4-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 862.692495][T19248] usb 3-1: USB disconnect, device number 60 [ 862.704655][T19249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.713957][T19249] usb 4-1: Product: syz [ 862.718338][T19249] usb 4-1: Manufacturer: syz [ 862.723291][T19249] usb 4-1: SerialNumber: syz [ 862.873724][T19538] loop5: detected capacity change from 0 to 7 [ 862.885619][T19538] Dev loop5: unable to read RDB block 7 [ 862.892855][T19538] loop5: unable to read partition table [ 862.899068][T19538] loop5: partition table beyond EOD, truncated [ 862.905352][T19538] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 863.035425][T19249] sierra 4-1:8.158: Sierra USB modem converter detected [ 863.089074][T19249] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 863.264094][T19249] usb 4-1: USB disconnect, device number 49 [ 863.283718][T19249] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 863.302000][T19249] sierra 4-1:8.158: device disconnected [ 863.680432][T19548] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 863.807369][T19249] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 863.961504][T19562] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3579'. [ 864.011416][T19249] usb 3-1: Using ep0 maxpacket: 16 [ 864.028654][T19249] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 864.051527][T19249] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.110402][T19249] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 864.179740][T19249] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 864.197828][ T30] audit: type=1326 audit(1765411558.074:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19558 comm="syz.1.3580" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3debd8f749 code=0x0 [ 864.208292][T19566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.259618][T19566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.379554][T19249] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 864.393750][T19249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 864.421542][T19249] usb 3-1: SerialNumber: syz [ 864.467021][T19248] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 864.479625][T19249] hub 3-1:1.0: bad descriptor, ignoring hub [ 864.488161][T19249] hub 3-1:1.0: probe with driver hub failed with error -5 [ 864.511206][T19249] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 864.627069][T19248] usb 1-1: Using ep0 maxpacket: 16 [ 864.638148][T19248] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 864.649930][T19248] usb 1-1: config 0 has no interface number 0 [ 864.662533][T19248] usb 1-1: config 0 interface 119 has no altsetting 0 [ 864.840563][T19574] netlink: 'syz.2.3574': attribute type 12 has an invalid length. [ 864.973621][T19248] usb 1-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=26.35 [ 864.993509][T19248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.013253][T19248] usb 1-1: Product: syz [ 865.022795][T19248] usb 1-1: Manufacturer: syz [ 865.030176][T19248] usb 1-1: SerialNumber: syz [ 865.043221][T19248] usb 1-1: config 0 descriptor?? [ 865.304334][T19248] usb 1-1: USB disconnect, device number 70 [ 865.318871][T17076] usb 3-1: USB disconnect, device number 61 [ 865.335617][T19579] loop5: detected capacity change from 0 to 7 [ 865.361469][T19579] Dev loop5: unable to read RDB block 7 [ 865.369518][T19579] loop5: unable to read partition table [ 865.377229][T19579] loop5: partition table beyond EOD, truncated [ 865.396143][T19579] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 865.417160][ T9] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 865.658665][ T30] audit: type=1326 audit(1765411559.534:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19576 comm="syz.1.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debd8f749 code=0x7ffc0000 [ 865.719885][ T30] audit: type=1326 audit(1765411559.554:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19576 comm="syz.1.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f3debd8f749 code=0x7ffc0000 [ 865.826871][ T30] audit: type=1326 audit(1765411559.554:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19576 comm="syz.1.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debd8f749 code=0x7ffc0000 [ 865.877278][ T30] audit: type=1326 audit(1765411559.554:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19576 comm="syz.1.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3debd8f749 code=0x7ffc0000 [ 865.901923][ T30] audit: type=1326 audit(1765411559.564:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19589 comm="syz.1.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3debdc2005 code=0x7ffc0000 [ 865.925284][ T30] audit: type=1326 audit(1765411559.564:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19576 comm="syz.1.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debd8f749 code=0x7ffc0000 [ 865.972109][ T30] audit: type=1326 audit(1765411559.574:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19576 comm="syz.1.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debd8f749 code=0x7ffc0000 [ 865.999485][ T30] audit: type=1326 audit(1765411559.574:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19576 comm="syz.1.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3debd91667 code=0x7ffc0000 [ 866.056169][T19600] netlink: 'syz.0.3591': attribute type 6 has an invalid length. [ 866.207004][T17076] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 866.357021][T17076] usb 3-1: Using ep0 maxpacket: 8 [ 866.365398][T17076] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 866.373360][T17076] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 866.385410][T17076] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 866.397603][T17076] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 866.409556][T17076] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 866.424217][T17076] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 866.432946][T17076] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 866.445797][T17076] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 866.458667][T17076] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 866.472503][T17076] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 866.486380][T17076] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 866.494873][T17076] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 866.507635][T17076] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 866.520969][T17076] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 866.532714][T17076] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 866.560512][T17076] usb 3-1: string descriptor 0 read error: -22 [ 866.583100][T17076] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 866.600826][T17076] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.639953][T17076] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 866.837889][T19595] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 866.848495][T19595] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 866.882143][T19248] usb 3-1: USB disconnect, device number 62 [ 867.175053][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 867.175070][ T30] audit: type=1326 audit(1765411561.044:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19607 comm="syz.5.3593" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8c078f749 code=0x0 [ 867.284217][T19621] loop5: detected capacity change from 0 to 7 [ 867.298881][T19621] Dev loop5: unable to read RDB block 7 [ 867.305897][T19621] loop5: unable to read partition table [ 867.317395][T19621] loop5: partition table beyond EOD, truncated [ 867.336594][T19621] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 867.887239][T19248] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 868.267032][T19248] usb 4-1: Using ep0 maxpacket: 8 [ 868.277966][T19248] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 868.329325][ T5926] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 868.337574][T19248] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 868.346123][T19248] usb 4-1: Product: syz [ 868.403595][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 868.414608][ T9] usb 2-1: too many configurations: 252, using maximum allowed: 8 [ 868.423383][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 868.432699][ T9] usb 2-1: can't read configurations, error -71 [ 868.471941][T19248] usb 4-1: Manufacturer: syz [ 868.512034][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 868.524901][ T5926] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 868.542561][T19248] usb 4-1: SerialNumber: syz [ 868.551165][ T5926] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.568544][T19248] usb 4-1: config 0 descriptor?? [ 868.700909][T19248] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 868.708755][ T5926] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 868.756595][ T5926] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 868.785087][ T5926] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 868.797693][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 868.808871][ T5926] usb 3-1: SerialNumber: syz [ 868.839798][ T5926] hub 3-1:1.0: bad descriptor, ignoring hub [ 868.845836][ T5926] hub 3-1:1.0: probe with driver hub failed with error -5 [ 868.859384][ T5926] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 868.911185][T19627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.933229][T19627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.115408][T19655] netlink: 'syz.2.3600': attribute type 12 has an invalid length. [ 869.253675][T19657] loop5: detected capacity change from 0 to 7 [ 869.262813][T16519] Dev loop5: unable to read RDB block 7 [ 869.269940][T16519] loop5: unable to read partition table [ 869.278336][T16519] loop5: partition table beyond EOD, truncated [ 869.287653][ T5926] usb 3-1: USB disconnect, device number 63 [ 869.304343][T19657] Dev loop5: unable to read RDB block 7 [ 869.310979][T19657] loop5: unable to read partition table [ 869.333115][T19657] loop5: partition table beyond EOD, truncated [ 869.352469][T19657] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 869.375593][T19248] input: gspca_zc3xx as /devices/platform/dummy_hcd.3/usb4/4-1/input/input103 [ 869.666588][ T9] usb 4-1: USB disconnect, device number 50 [ 870.141648][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.148537][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.885680][T19668] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3612'. [ 872.036805][ T5926] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 872.048249][T19678] fuse: Bad value for 'fd' [ 872.056005][T19676] netlink: 'syz.3.3611': attribute type 5 has an invalid length. [ 872.081043][ T5926] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz1] on syz0 [ 872.137452][T19234] usb 2-1: new low-speed USB device number 63 using dummy_hcd [ 872.343039][T19234] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 872.366154][T19234] usb 2-1: config 0 has no interface number 0 [ 872.377444][T17076] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 872.397156][T19689] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 872.419969][T19234] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 872.479675][T19234] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 872.499923][T19234] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 872.526126][T19234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.580299][T17076] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 872.600266][T17076] usb 3-1: config 1 has an invalid descriptor of length 182, skipping remainder of the config [ 872.613285][T19234] usb 2-1: config 0 descriptor?? [ 872.625981][T19669] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 872.655029][T17076] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 872.692127][T19234] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 872.703443][T19689] hfs: unable to load iocharset "io#harset" [ 872.807085][T17076] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 113, changing to 7 [ 872.883641][T17076] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42791, setting to 1024 [ 872.957470][T17076] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 873.010811][T17076] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 873.038264][T17076] usb 3-1: Product: syz [ 873.062963][T17076] usb 3-1: Manufacturer: syz [ 873.273029][T17076] usb 3-1: can't set config #1, error -71 [ 873.333791][T17076] usb 3-1: USB disconnect, device number 64 [ 873.609776][T19699] [U]  [ 873.612841][T19699] [U] K{‘ [ 873.617247][T19699] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 873.635869][T19699] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 873.748450][T19699] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 873.858362][T19699] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 873.969045][T19699] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 874.037091][T19699] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 874.067120][T19699] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 874.138794][T19699] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/< HID v0.03 Device [syz1] on syz0 [ 900.243146][T19246] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 900.368214][ T7133] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 900.381606][ T7133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.411659][ T7133] usb 2-1: Product: syz [ 900.419513][ T7133] usb 2-1: Manufacturer: syz [ 900.424184][ T7133] usb 2-1: SerialNumber: syz [ 900.470811][ T7133] usb 2-1: config 0 descriptor?? [ 900.504131][T19246] usb 6-1: config 0 has no interfaces? [ 900.550811][T19246] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 900.560850][T19246] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.571464][T19246] usb 6-1: Product: syz [ 900.575753][T19246] usb 6-1: Manufacturer: syz [ 900.580769][T19246] usb 6-1: SerialNumber: syz [ 900.588898][T19246] usb 6-1: config 0 descriptor?? [ 900.819868][T20149] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 900.844792][T20149] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 900.854789][T20149] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 900.946857][ T7133] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 900.984739][ T7133] input input107: Device does not respond to id packet M [ 901.006059][ T7133] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 901.030573][T20149] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 901.681646][ T7133] input input107: Device does not respond to id packet P [ 901.709502][ T7133] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 901.722494][ T7133] input input107: Device does not respond to id packet B [ 901.777652][ T7133] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 901.787466][ T7133] input input107: Device does not respond to id packet N [ 901.807708][ T7133] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 901.840656][ T7133] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 901.857517][ T7133] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 901.868357][ T7133] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 901.878373][ T7133] iforce 2-1:0.0: usb_submit_urb failed -90 [ 901.888426][ T7133] iforce 2-1:0.0: usb_submit_urb failed -90 [ 901.908375][ T7133] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input107 [ 901.963589][ T7133] usb 2-1: USB disconnect, device number 74 [ 902.040069][T20168] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 902.057047][ T9] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 902.102078][T20169] fuse: Bad value for 'group_id' [ 902.151882][T20169] fuse: Bad value for 'group_id' [ 902.188112][ T9] usb 3-1: device descriptor read/64, error -71 [ 902.205890][T20173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3754'. [ 902.215900][T20173] FAULT_INJECTION: forcing a failure. [ 902.215900][T20173] name failslab, interval 1, probability 0, space 0, times 0 [ 902.247145][T20173] CPU: 1 UID: 0 PID: 20173 Comm: syz.3.3754 Tainted: G L syzkaller #0 PREEMPT(full) [ 902.247174][T20173] Tainted: [L]=SOFTLOCKUP [ 902.247181][T20173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 902.247192][T20173] Call Trace: [ 902.247200][T20173] [ 902.247209][T20173] dump_stack_lvl+0x189/0x250 [ 902.247236][T20173] ? __pfx____ratelimit+0x10/0x10 [ 902.247259][T20173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 902.247278][T20173] ? __pfx__printk+0x10/0x10 [ 902.247307][T20173] ? __pfx___might_resched+0x10/0x10 [ 902.247331][T20173] should_fail_ex+0x414/0x560 [ 902.247359][T20173] should_failslab+0xa8/0x100 [ 902.247381][T20173] __kmalloc_noprof+0xdf/0x800 [ 902.247400][T20173] ? nft_set_elem_expr_alloc+0x16f/0x590 [ 902.247420][T20173] nft_set_elem_expr_alloc+0x16f/0x590 [ 902.247433][T20173] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 902.247442][T20173] ? __debug_object_init+0x102/0x4b0 [ 902.247462][T20173] ? nft_rhash_init+0x2b3/0x3a0 [ 902.247476][T20173] ? __pfx_nft_rhash_init+0x10/0x10 [ 902.247488][T20173] ? __pfx_nft_rhash_key+0x10/0x10 [ 902.247502][T20173] ? __pfx_nft_rhash_obj+0x10/0x10 [ 902.247513][T20173] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 902.247526][T20173] nft_set_expr_alloc+0x68/0x760 [ 902.247541][T20173] nf_tables_newset+0x1c4c/0x2540 [ 902.247562][T20173] ? __pfx_nf_tables_newset+0x10/0x10 [ 902.247586][T20173] ? __nla_parse+0x40/0x60 [ 902.247598][T20173] nfnetlink_rcv+0x11d9/0x2590 [ 902.247626][T20173] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 902.247644][T20173] ? ref_tracker_free+0x63a/0x7d0 [ 902.247673][T20173] ? __netlink_deliver_tap+0x807/0x850 [ 902.247684][T20173] ? netlink_deliver_tap+0x2e/0x1b0 [ 902.247703][T20173] netlink_unicast+0x82f/0x9e0 [ 902.247717][T20173] ? __pfx_netlink_unicast+0x10/0x10 [ 902.247728][T20173] ? netlink_sendmsg+0x642/0xb30 [ 902.247738][T20173] ? skb_put+0x11b/0x210 [ 902.247749][T20173] netlink_sendmsg+0x805/0xb30 [ 902.247765][T20173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 902.247777][T20173] ? aa_sock_msg_perm+0xf1/0x1b0 [ 902.247790][T20173] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 902.247800][T20173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 902.247811][T20173] __sock_sendmsg+0x21c/0x270 [ 902.247826][T20173] ____sys_sendmsg+0x505/0x820 [ 902.247842][T20173] ? __pfx_____sys_sendmsg+0x10/0x10 [ 902.247858][T20173] ? import_iovec+0x74/0xa0 [ 902.247870][T20173] ___sys_sendmsg+0x21f/0x2a0 [ 902.247882][T20173] ? __pfx____sys_sendmsg+0x10/0x10 [ 902.247895][T20173] ? rcu_read_lock_any_held+0xb3/0x120 [ 902.247925][T20173] ? __fget_files+0x2a/0x420 [ 902.247943][T20173] ? __fget_files+0x3a0/0x420 [ 902.247972][T20173] __x64_sys_sendmsg+0x19b/0x260 [ 902.247992][T20173] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 902.248008][T20173] ? __pfx_ksys_write+0x10/0x10 [ 902.248021][T20173] ? do_syscall_64+0xbe/0xf80 [ 902.248036][T20173] do_syscall_64+0xfa/0xf80 [ 902.248050][T20173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.248060][T20173] ? clear_bhb_loop+0x60/0xb0 [ 902.248072][T20173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.248082][T20173] RIP: 0033:0x7f4d7d78f749 [ 902.248100][T20173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 902.248109][T20173] RSP: 002b:00007f4d7e56f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 902.248121][T20173] RAX: ffffffffffffffda RBX: 00007f4d7d9e5fa0 RCX: 00007f4d7d78f749 [ 902.248129][T20173] RDX: 00000000000000c4 RSI: 00002000000000c0 RDI: 0000000000000003 [ 902.248135][T20173] RBP: 00007f4d7e56f090 R08: 0000000000000000 R09: 0000000000000000 [ 902.248142][T20173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 902.248148][T20173] R13: 00007f4d7d9e6038 R14: 00007f4d7d9e5fa0 R15: 00007f4d7db0fa28 [ 902.248164][T20173] [ 902.760298][T17261] usb 6-1: USB disconnect, device number 127 [ 902.867115][ T9] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 903.007009][ T9] usb 3-1: device descriptor read/64, error -71 [ 903.010213][T20182] erspan0: left promiscuous mode [ 903.042997][T20182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.061909][T20182] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.106374][T20182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 903.127915][ T9] usb usb3-port1: attempt power cycle [ 903.153000][T20187] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 903.506199][ T9] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 903.548312][ T9] usb 3-1: device descriptor read/8, error -71 [ 903.926966][ T9] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 904.068513][ T9] usb 3-1: device descriptor read/8, error -71 [ 904.185751][ T9] usb usb3-port1: unable to enumerate USB device [ 904.918361][ T5926] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 904.972172][T20212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3766'. [ 904.998499][T20212] FAULT_INJECTION: forcing a failure. [ 904.998499][T20212] name failslab, interval 1, probability 0, space 0, times 0 [ 905.012507][T20212] CPU: 1 UID: 0 PID: 20212 Comm: syz.2.3766 Tainted: G L syzkaller #0 PREEMPT(full) [ 905.012535][T20212] Tainted: [L]=SOFTLOCKUP [ 905.012542][T20212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 905.012553][T20212] Call Trace: [ 905.012567][T20212] [ 905.012575][T20212] dump_stack_lvl+0x189/0x250 [ 905.012602][T20212] ? __pfx____ratelimit+0x10/0x10 [ 905.012624][T20212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 905.012643][T20212] ? __pfx__printk+0x10/0x10 [ 905.012680][T20212] ? __pfx___might_resched+0x10/0x10 [ 905.012697][T20212] ? fs_reclaim_acquire+0x7d/0x100 [ 905.012720][T20212] should_fail_ex+0x414/0x560 [ 905.012747][T20212] should_failslab+0xa8/0x100 [ 905.012769][T20212] __kmalloc_cache_noprof+0x84/0x700 [ 905.012788][T20212] ? nfnetlink_rcv+0xf97/0x2590 [ 905.012809][T20212] nfnetlink_rcv+0xf97/0x2590 [ 905.012859][T20212] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 905.012889][T20212] ? ref_tracker_free+0x63a/0x7d0 [ 905.012936][T20212] ? __netlink_deliver_tap+0x807/0x850 [ 905.012954][T20212] ? netlink_deliver_tap+0x2e/0x1b0 [ 905.012986][T20212] netlink_unicast+0x82f/0x9e0 [ 905.013010][T20212] ? __pfx_netlink_unicast+0x10/0x10 [ 905.013027][T20212] ? netlink_sendmsg+0x642/0xb30 [ 905.013042][T20212] ? skb_put+0x11b/0x210 [ 905.013062][T20212] netlink_sendmsg+0x805/0xb30 [ 905.013089][T20212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 905.013112][T20212] ? aa_sock_msg_perm+0xf1/0x1b0 [ 905.013132][T20212] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 905.013148][T20212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 905.013166][T20212] __sock_sendmsg+0x21c/0x270 [ 905.013189][T20212] ____sys_sendmsg+0x505/0x820 [ 905.013211][T20212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 905.013237][T20212] ? import_iovec+0x74/0xa0 [ 905.013256][T20212] ___sys_sendmsg+0x21f/0x2a0 [ 905.013268][T20212] ? __pfx____sys_sendmsg+0x10/0x10 [ 905.013282][T20212] ? rcu_read_lock_any_held+0xb3/0x120 [ 905.013310][T20212] ? __fget_files+0x2a/0x420 [ 905.013323][T20212] ? __fget_files+0x3a0/0x420 [ 905.013340][T20212] __x64_sys_sendmsg+0x19b/0x260 [ 905.013352][T20212] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 905.013367][T20212] ? __pfx_ksys_write+0x10/0x10 [ 905.013379][T20212] ? do_syscall_64+0xbe/0xf80 [ 905.013395][T20212] do_syscall_64+0xfa/0xf80 [ 905.013409][T20212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.013419][T20212] ? clear_bhb_loop+0x60/0xb0 [ 905.013430][T20212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.013440][T20212] RIP: 0033:0x7ff31cf8f749 [ 905.013451][T20212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 905.013460][T20212] RSP: 002b:00007ff31dde0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 905.013472][T20212] RAX: ffffffffffffffda RBX: 00007ff31d1e5fa0 RCX: 00007ff31cf8f749 [ 905.013480][T20212] RDX: 00000000000000c4 RSI: 00002000000000c0 RDI: 0000000000000003 [ 905.013486][T20212] RBP: 00007ff31dde0090 R08: 0000000000000000 R09: 0000000000000000 [ 905.013493][T20212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 905.013499][T20212] R13: 00007ff31d1e6038 R14: 00007ff31d1e5fa0 R15: 00007ff31d30fa28 [ 905.013516][T20212] [ 905.177249][ T7133] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 905.217012][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 905.393695][ T5926] usb 2-1: config 0 interface 0 has no altsetting 0 [ 905.479292][ T5926] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 905.492324][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.507139][ T5926] usb 2-1: Product: syz [ 905.520360][ T5926] usb 2-1: Manufacturer: syz [ 905.530991][ T5926] usb 2-1: SerialNumber: syz [ 905.555331][ T5926] usb 2-1: config 0 descriptor?? [ 905.567271][ T7133] usb 6-1: device descriptor read/64, error -71 [ 905.827050][ T7133] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 905.914536][T20227] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 905.967051][ T7133] usb 6-1: device descriptor read/64, error -71 [ 906.043071][ T5926] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 906.071461][T20220] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 906.078284][T20220] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 906.102908][T20220] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 906.112295][T20220] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 906.120322][ T7133] usb usb6-port1: attempt power cycle [ 906.132629][T20220] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 906.139443][T20220] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 906.173341][T20220] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 906.179714][T20220] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 906.193517][T20220] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 906.201456][T20220] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 906.477051][ T7133] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 906.507681][ T7133] usb 6-1: device descriptor read/8, error -71 [ 906.767028][ T7133] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 906.807925][ T7133] usb 6-1: device descriptor read/8, error -71 [ 906.949680][ T7133] usb usb6-port1: unable to enumerate USB device [ 907.342567][ T5926] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 907.821394][T14695] Bluetooth: hci3: command 0x0406 tx timeout [ 908.001323][T20252] netlink: 'syz.5.3774': attribute type 5 has an invalid length. [ 908.137071][T14695] Bluetooth: hci5: command 0x0406 tx timeout [ 908.274249][T14695] Bluetooth: hci0: command 0x0406 tx timeout [ 908.275093][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 908.280530][T14695] Bluetooth: hci1: command 0x0406 tx timeout [ 908.331027][ T7133] usb 2-1: USB disconnect, device number 75 [ 908.705557][T20262] sctp: [Deprecated]: syz.0.3776 (pid 20262) Use of int in maxseg socket option. [ 908.705557][T20262] Use struct sctp_assoc_value instead [ 909.039507][ T7133] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 909.070870][T20274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3778'. [ 909.108434][T20274] FAULT_INJECTION: forcing a failure. [ 909.108434][T20274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 909.132259][T20274] CPU: 0 UID: 0 PID: 20274 Comm: syz.2.3778 Tainted: G L syzkaller #0 PREEMPT(full) [ 909.132288][T20274] Tainted: [L]=SOFTLOCKUP [ 909.132294][T20274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 909.132303][T20274] Call Trace: [ 909.132310][T20274] [ 909.132317][T20274] dump_stack_lvl+0x189/0x250 [ 909.132344][T20274] ? __pfx____ratelimit+0x10/0x10 [ 909.132367][T20274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 909.132388][T20274] ? __pfx__printk+0x10/0x10 [ 909.132411][T20274] ? __might_fault+0xb0/0x130 [ 909.132444][T20274] should_fail_ex+0x414/0x560 [ 909.132473][T20274] _copy_from_user+0x2d/0xb0 [ 909.132491][T20274] kstrtouint_from_user+0xc4/0x170 [ 909.132514][T20274] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 909.132550][T20274] proc_fail_nth_write+0x88/0x200 [ 909.132570][T20274] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 909.132592][T20274] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 909.132611][T20274] vfs_write+0x27e/0xb30 [ 909.132637][T20274] ? __pfx_vfs_write+0x10/0x10 [ 909.132655][T20274] ? __fget_files+0x2a/0x420 [ 909.132690][T20274] ? __fget_files+0x3a0/0x420 [ 909.132709][T20274] ? __fget_files+0x2a/0x420 [ 909.132738][T20274] ksys_write+0x145/0x250 [ 909.132758][T20274] ? __pfx_ksys_write+0x10/0x10 [ 909.132779][T20274] ? do_syscall_64+0xbe/0xf80 [ 909.132807][T20274] do_syscall_64+0xfa/0xf80 [ 909.132829][T20274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.132846][T20274] ? clear_bhb_loop+0x60/0xb0 [ 909.132867][T20274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.132882][T20274] RIP: 0033:0x7ff31cf8e1ff [ 909.132899][T20274] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 909.132914][T20274] RSP: 002b:00007ff31dde0030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 909.132932][T20274] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff31cf8e1ff [ 909.132944][T20274] RDX: 0000000000000001 RSI: 00007ff31dde00a0 RDI: 0000000000000004 [ 909.132955][T20274] RBP: 00007ff31dde0090 R08: 0000000000000000 R09: 0000000000000000 [ 909.132966][T20274] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 909.132976][T20274] R13: 00007ff31d1e6038 R14: 00007ff31d1e5fa0 R15: 00007ff31d30fa28 [ 909.133006][T20274] [ 909.378887][ T7133] usb 6-1: Using ep0 maxpacket: 8 [ 909.423932][ T7133] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 909.433197][ T7133] usb 6-1: config 0 has no interface number 0 [ 909.439655][ T7133] usb 6-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 909.453858][ T7133] usb 6-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 909.529622][ T7133] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 909.538864][ T7133] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.547224][ T7133] usb 6-1: Product: syz [ 909.551407][ T7133] usb 6-1: Manufacturer: syz [ 909.556016][ T7133] usb 6-1: SerialNumber: syz [ 909.564141][ T7133] usb 6-1: config 0 descriptor?? [ 909.570242][T20264] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 909.801153][T20264] tipc: Enabled bearer , priority 0 [ 909.810337][T20264] tipc: Resetting bearer [ 909.833289][ T7133] ath6kl: Failed to submit usb control message: -71 [ 909.841852][ T7133] ath6kl: unable to send the bmi data to the device: -71 [ 909.866634][T20263] tipc: Disabling bearer [ 909.876413][ T7133] ath6kl: Unable to send get target info: -71 [ 909.899185][T14695] Bluetooth: hci3: command 0x0406 tx timeout [ 909.912985][T20301] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 909.945689][ T7133] ath6kl: Failed to init ath6kl core: -71 [ 909.963949][T20303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3784'. [ 910.022557][T20305] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3785'. [ 910.060062][ T7133] ath6kl_usb 6-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 910.101228][T20306] netlink: 'syz.2.3785': attribute type 6 has an invalid length. [ 910.160326][ T7133] usb 6-1: USB disconnect, device number 6 [ 910.222917][T14695] Bluetooth: hci5: command 0x0406 tx timeout [ 910.297070][T14695] Bluetooth: hci1: command 0x0406 tx timeout [ 910.307174][T14695] Bluetooth: hci4: command 0x0406 tx timeout [ 910.313213][T14695] Bluetooth: hci0: command 0x0406 tx timeout [ 910.980122][T20318] netlink: 'syz.2.3787': attribute type 46 has an invalid length. [ 911.011695][T20318] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3787'. [ 911.039073][ T5926] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 911.144219][ T30] audit: type=1326 audit(1765411605.014:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20317 comm="syz.2.3787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31cf8f749 code=0x7ffc0000 [ 911.227141][ T5926] usb 6-1: Using ep0 maxpacket: 16 [ 911.391786][ T5926] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 911.465752][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.475592][ T5926] usb 6-1: Product: syz [ 911.500665][ T5926] usb 6-1: Manufacturer: syz [ 911.505565][ T5926] usb 6-1: SerialNumber: syz [ 911.533979][ T5926] r8152-cfgselector 6-1: Unknown version 0x0000 [ 911.542300][ T5926] r8152-cfgselector 6-1: config 0 descriptor?? [ 911.570778][ T30] audit: type=1326 audit(1765411605.014:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20317 comm="syz.2.3787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31cf8f749 code=0x7ffc0000 [ 911.666073][ T30] audit: type=1326 audit(1765411605.014:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20317 comm="syz.2.3787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31cf8f749 code=0x7ffc0000 [ 911.751522][ T30] audit: type=1326 audit(1765411605.014:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20317 comm="syz.2.3787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7ff31cf8f749 code=0x7ffc0000 [ 911.781766][ T30] audit: type=1326 audit(1765411605.014:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20317 comm="syz.2.3787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31cf8f749 code=0x7ffc0000 [ 911.814435][ T30] audit: type=1326 audit(1765411605.014:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20317 comm="syz.2.3787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31cf8f749 code=0x7ffc0000 [ 911.960021][ T30] audit: type=1326 audit(1765411605.014:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20317 comm="syz.2.3787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31cf8f749 code=0x7ffc0000 [ 911.983480][ T30] audit: type=1326 audit(1765411605.014:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20317 comm="syz.2.3787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31cf8f749 code=0x7ffc0000 [ 912.007598][T20316] netlink: 1000 bytes leftover after parsing attributes in process `syz.5.3786'. [ 912.027074][T20316] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3786'. [ 912.107219][ T30] audit: type=1326 audit(1765411605.014:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20317 comm="syz.2.3787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff31cf8f749 code=0x7ffc0000 [ 912.155924][ T30] audit: type=1326 audit(1765411605.014:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20317 comm="syz.2.3787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31cf8f749 code=0x7ffc0000 [ 913.415936][T20333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3791'. [ 913.627085][ T9] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 913.779248][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 913.808112][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 913.818618][ T9] usb 3-1: config 36 has an invalid interface number: 241 but max is 0 [ 913.838527][ T9] usb 3-1: config 36 has no interface number 0 [ 913.844850][ T9] usb 3-1: config 36 interface 241 has no altsetting 0 [ 913.866570][T19248] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 913.877081][ T9] usb 3-1: New USB device found, idVendor=110a, idProduct=1451, bcdDevice=97.99 [ 913.889967][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.917377][ T9] usb 3-1: Product: syz [ 913.921613][ T9] usb 3-1: Manufacturer: syz [ 913.926281][ T9] usb 3-1: SerialNumber: syz [ 914.036947][T19248] usb 1-1: Using ep0 maxpacket: 32 [ 914.045050][T19248] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 914.057390][T19248] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 914.066442][T19248] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 914.097951][T19248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 914.112180][T19248] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 914.126653][T19248] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 914.141740][T19248] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 914.151873][T19248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.199339][T19248] usb 1-1: config 0 descriptor?? [ 914.243640][ T9] mxuport 3-1:36.241: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 914.259610][ T9] mxuport 3-1:36.241: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 914.280156][ T9] mxuport 3-1:36.241: probe with driver mxuport failed with error -71 [ 914.309512][ T9] usb 3-1: USB disconnect, device number 71 [ 914.358427][T20359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3795'. [ 914.443545][T19248] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 74 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 914.665637][T20344] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 914.719902][ T5926] r8152-cfgselector 6-1: Unknown version 0x0000 [ 914.793005][ T5926] r8152-cfgselector 6-1: bad CDC descriptors [ 914.811170][ C1] usblp0: nonzero read bulk status received: -71 [ 914.811562][ T9] usb 1-1: USB disconnect, device number 74 [ 914.869299][ T5926] r8152-cfgselector 6-1: USB disconnect, device number 7 [ 915.198226][T20373] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 915.280924][T20369] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3797'. [ 915.447149][ T9] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 915.617037][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 915.636382][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 915.648454][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 915.658865][ T9] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 915.675739][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.692280][ T9] usb 1-1: Product: syz [ 915.718220][ T9] usb 1-1: Manufacturer: syz [ 915.752975][ T9] usb 1-1: SerialNumber: syz [ 916.038349][T20381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3799'. [ 917.211482][T20344] usblp0: removed [ 917.213592][ T9] usbhid 1-1:1.0: can't add hid device: -71 [ 917.225883][ T9] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 917.261573][ T9] usb 1-1: USB disconnect, device number 75 [ 917.440731][T19246] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 917.629185][T19246] usb 3-1: device descriptor read/64, error -71 [ 917.897157][T19246] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 918.039799][T19246] usb 3-1: device descriptor read/64, error -71 [ 918.189796][T19246] usb usb3-port1: attempt power cycle [ 918.547144][ T7133] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 918.567177][T19246] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 918.598424][T19246] usb 3-1: device descriptor read/8, error -71 [ 918.697083][ T7133] usb 2-1: Using ep0 maxpacket: 16 [ 918.704972][ T7133] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 918.716594][ T7133] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 918.741653][ T7133] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 918.753145][ T7133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.772561][ T7133] usb 2-1: Product: syz [ 918.803364][ T7133] usb 2-1: Manufacturer: syz [ 918.815812][ T7133] usb 2-1: SerialNumber: syz [ 918.877045][T19246] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 918.899875][T19246] usb 3-1: device descriptor read/8, error -71 [ 919.027399][T19246] usb usb3-port1: unable to enumerate USB device [ 919.052784][ T7133] usb 2-1: 0:2 : does not exist [ 919.073383][ T7133] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 919.183029][ T7133] usb 2-1: USB disconnect, device number 76 [ 919.241062][T19806] udevd[19806]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 919.512945][T20423] pim6reg: entered allmulticast mode [ 919.525458][T20422] lo: entered allmulticast mode [ 919.531052][T20422] pim6reg: left allmulticast mode [ 919.536375][T20422] lo: left allmulticast mode [ 919.593518][T20426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3809'. [ 919.993440][T20438] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3815'. [ 920.068567][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 920.218719][ T9] usb 6-1: device descriptor read/64, error -71 [ 920.248083][T20442] netlink: 'syz.1.3817': attribute type 6 has an invalid length. [ 920.417309][T17261] IPVS: starting estimator thread 0... [ 920.507047][T20448] IPVS: using max 52 ests per chain, 124800 per kthread [ 920.517076][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 920.798652][ T9] usb 6-1: device descriptor read/64, error -71 [ 920.927810][ T9] usb usb6-port1: attempt power cycle [ 920.945691][T20454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3819'. [ 921.367004][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 921.407837][ T9] usb 6-1: device descriptor read/8, error -71 [ 921.657217][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 921.687885][ T9] usb 6-1: device descriptor read/8, error -71 [ 921.733838][T20458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3820'. [ 921.817174][ T9] usb usb6-port1: unable to enumerate USB device [ 922.350537][T20469] netlink: 'syz.0.3823': attribute type 8 has an invalid length. [ 922.546784][T20474] netlink: 'syz.3.3825': attribute type 5 has an invalid length. [ 922.917531][T20480] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3826'. [ 922.963296][T20483] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3826'. [ 923.001796][T20478] ptrace attach of "./syz-executor exec"[20484] was attempted by "./syz-executor exec"[20478] [ 923.377752][T20488] netlink: 'syz.2.3830': attribute type 29 has an invalid length. [ 923.697037][ T7133] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 923.850271][ T7133] usb 3-1: Using ep0 maxpacket: 16 [ 923.861206][ T7133] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 923.930165][ T7133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 924.022973][ T7133] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 924.059625][ T7133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.093027][ T7133] usb 3-1: Product: syz [ 924.115257][ T7133] usb 3-1: Manufacturer: syz [ 924.134041][ T7133] usb 3-1: SerialNumber: syz [ 924.163851][ T7133] usb 3-1: config 0 descriptor?? [ 924.192073][ T7133] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 924.239006][ T7133] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 924.326999][T17261] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 924.410109][T20499] could not allocate digest TFM handle hmac(sha1-avx2) [ 924.481215][T17261] usb 2-1: config 0 has no interfaces? [ 924.497033][T17261] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 924.507079][T17261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.535198][T17261] usb 2-1: config 0 descriptor?? [ 924.755824][T17261] usb 2-1: USB disconnect, device number 77 [ 924.787206][ T7133] em28xx 3-1:0.0: chip ID is em2710 [ 924.837077][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 925.000510][ T9] usb 6-1: config 0 has an invalid interface number: 98 but max is 0 [ 925.009278][ T9] usb 6-1: config 0 has no interface number 0 [ 925.015579][ T9] usb 6-1: config 0 interface 98 has no altsetting 0 [ 925.071478][ T9] usb 6-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 925.095780][T20489] netlink: 'syz.2.3830': attribute type 12 has an invalid length. [ 925.104106][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.119048][ T9] usb 6-1: Product: syz [ 925.131269][ T9] usb 6-1: Manufacturer: syz [ 925.149615][ T9] usb 6-1: SerialNumber: syz [ 925.185875][ T9] usb 6-1: config 0 descriptor?? [ 925.438008][T20523] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3839'. [ 925.455821][T20522] bridge2: entered promiscuous mode [ 925.496549][T20522] bridge2: entered allmulticast mode [ 925.520941][ T9] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 925.772462][T20488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.812667][T20533] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3843'. [ 925.824762][T20488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.833586][ T7133] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 925.849213][ T7133] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 925.865014][ T7133] em28xx 3-1:0.0: No AC97 audio processor [ 925.875828][T20533] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 925.903716][ T7133] usb 3-1: USB disconnect, device number 76 [ 925.914124][ T7133] em28xx 3-1:0.0: Disconnecting em28xx [ 925.929318][ T7133] em28xx 3-1:0.0: Freeing device [ 926.035811][ T9] usb 6-1: reset high-speed USB device number 12 using dummy_hcd [ 926.177011][ T9] usb 6-1: device descriptor read/64, error -71 [ 926.426468][T20553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3850'. [ 926.453599][ T9] usb 6-1: reset high-speed USB device number 12 using dummy_hcd [ 926.584200][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 926.584217][ T30] audit: type=1326 audit(1765411620.454:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20545 comm="syz.3.3847" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d7d78f749 code=0x0 [ 926.612576][ T9] usb 6-1: device descriptor read/64, error -71 [ 926.687028][T17261] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 926.737133][T19246] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 926.839602][T17261] usb 1-1: unable to get BOS descriptor or descriptor too short [ 926.848463][T17261] usb 1-1: not running at top speed; connect to a high speed hub [ 926.856270][T17261] usb 1-1: no configurations [ 926.861532][T17261] usb 1-1: can't read configurations, error -22 [ 926.877129][ T9] usb 6-1: reset high-speed USB device number 12 using dummy_hcd [ 926.886987][T19248] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 926.897164][T19246] usb 2-1: Using ep0 maxpacket: 16 [ 926.903865][T19246] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 926.913000][T19246] usb 2-1: config 0 has no interface number 0 [ 926.917855][ T9] usb 6-1: device descriptor read/8, error -71 [ 926.921351][T19246] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 926.934648][T19246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.943202][T19246] usb 2-1: Product: syz [ 926.947553][T19246] usb 2-1: Manufacturer: syz [ 926.952162][T19246] usb 2-1: SerialNumber: syz [ 926.959308][T19246] usb 2-1: config 0 descriptor?? [ 926.965734][T19246] hub 2-1:0.132: bad descriptor, ignoring hub [ 926.971927][T19246] hub 2-1:0.132: probe with driver hub failed with error -5 [ 926.981741][T19246] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input108 [ 926.997990][T17261] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 927.036983][T19248] usb 3-1: Using ep0 maxpacket: 16 [ 927.049100][T19248] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 927.064209][T19248] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 927.075660][T19248] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 927.085150][T19248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.094435][T19248] usb 3-1: Product: syz [ 927.101858][T19248] usb 3-1: Manufacturer: syz [ 927.106488][T19248] usb 3-1: SerialNumber: syz [ 927.177141][ T9] usb 6-1: reset high-speed USB device number 12 using dummy_hcd [ 927.188547][T17261] usb 1-1: unable to get BOS descriptor or descriptor too short [ 927.207770][T17261] usb 1-1: not running at top speed; connect to a high speed hub [ 927.216016][ T9] usb 6-1: device descriptor read/8, error -71 [ 927.222447][T17261] usb 1-1: no configurations [ 927.222467][T17261] usb 1-1: can't read configurations, error -22 [ 927.238675][T17261] usb usb1-port1: attempt power cycle [ 927.247484][ T7133] usb 2-1: USB disconnect, device number 78 [ 927.346563][ T9] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 927.357193][ T9] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 927.368552][ T9] usb 6-1: USB disconnect, device number 12 [ 927.380577][T17076] usb 6-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 927.402020][T17076] usb 6-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 927.480736][T17076] ------------[ cut here ]------------ [ 927.486735][T17076] WARNING: fs/kernfs/dir.c:537 at kernfs_get+0x72/0x90, CPU#0: kworker/0:1/17076 [ 927.496540][T17076] Modules linked in: [ 927.502498][T17076] CPU: 0 UID: 0 PID: 17076 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 927.514673][T17076] Tainted: [L]=SOFTLOCKUP [ 927.519575][T17076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 927.529893][T17076] Workqueue: events request_firmware_work_func [ 927.536888][T17076] RIP: 0010:kernfs_get+0x72/0x90 [ 927.541849][T17076] Code: e8 c3 5b 5d ff 48 89 df be 04 00 00 00 e8 16 b0 c3 ff f0 ff 03 eb 05 e8 ac 5b 5d ff 5b 5d e9 55 96 f9 08 cc e8 9f 5b 5d ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 15 [ 927.561880][T17076] RSP: 0018:ffffc9000480f600 EFLAGS: 00010293 [ 927.568047][T17076] RAX: ffffffff82645511 RBX: ffff88805ae982d0 RCX: ffff88802ea79e80 [ 927.576101][T17076] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 927.584925][T17076] RBP: 0000000000000000 R08: ffff88805ae982d3 R09: 1ffff1100b5d305a [ 927.593043][T17076] R10: dffffc0000000000 R11: ffffed100b5d305b R12: ffff888059440030 [ 927.601757][T17076] R13: 1ffff1100b288007 R14: ffff888059440038 R15: dffffc0000000000 [ 927.610342][T17076] FS: 0000000000000000(0000) GS:ffff888125e3a000(0000) knlGS:0000000000000000 [ 927.619353][T17076] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 927.626060][T17076] CR2: 00007f4d7d772a60 CR3: 000000005501c000 CR4: 00000000003526f0 [ 927.634111][T17076] Call Trace: [ 927.637460][T17076] [ 927.640398][T17076] kobject_add_internal+0x72b/0xcc0 [ 927.645737][T17076] kobject_add+0x155/0x220 [ 927.650221][T17076] ? __pfx_kobject_add+0x10/0x10 [ 927.655179][T17076] ? __kasan_kmalloc+0x93/0xb0 [ 927.660040][T17076] ? __pfx_kobject_add+0x10/0x10 [ 927.664998][T17076] ? kobject_put+0x52a/0x570 [ 927.669761][T17076] ? get_device_parent+0x366/0x3a0 [ 927.670693][T17261] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 927.674905][T17076] device_add+0x408/0xb80 [ 927.686961][T17076] firmware_fallback_sysfs+0x2e4/0xa40 [ 927.692453][T17076] ? kmem_cache_free+0x197/0x620 [ 927.697487][T17076] _request_firmware+0xfa4/0x1680 [ 927.703244][T17076] ? __pfx__request_firmware+0x10/0x10 [ 927.709455][T17076] ? process_scheduled_works+0x9ef/0x1770 [ 927.715213][T17076] request_firmware_work_func+0xaf/0x1c0 [ 927.720930][T17076] ? process_scheduled_works+0x9ef/0x1770 [ 927.726679][T17076] process_scheduled_works+0xad1/0x1770 [ 927.732336][T17076] ? __pfx_process_scheduled_works+0x10/0x10 [ 927.739126][T17076] worker_thread+0x8a0/0xda0 [ 927.744184][T17076] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 927.750879][T17076] ? __kthread_parkme+0x7b/0x200 [ 927.755856][T17076] kthread+0x711/0x8a0 [ 927.760032][T17076] ? __pfx_worker_thread+0x10/0x10 [ 927.765166][T17076] ? __pfx_kthread+0x10/0x10 [ 927.769828][T17076] ? _raw_spin_unlock_irq+0x23/0x50 [ 927.775060][T17076] ? lockdep_hardirqs_on+0x98/0x140 [ 927.780338][T17076] ? __pfx_kthread+0x10/0x10 [ 927.784944][T17076] ret_from_fork+0x599/0xb30 [ 927.789616][T17076] ? __pfx_ret_from_fork+0x10/0x10 [ 927.794746][T17076] ? __switch_to_asm+0x39/0x70 [ 927.797011][T19246] usb 4-1: new low-speed USB device number 59 using dummy_hcd [ 927.799582][T17076] ? __switch_to_asm+0x33/0x70 [ 927.812699][T17076] ? __pfx_kthread+0x10/0x10 [ 927.818246][T17076] ret_from_fork_asm+0x1a/0x30 [ 927.823069][T17076] [ 927.826095][T17076] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 927.833383][T17076] CPU: 0 UID: 0 PID: 17076 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 927.844425][T17076] Tainted: [L]=SOFTLOCKUP [ 927.848742][T17076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 927.858910][T17076] Workqueue: events request_firmware_work_func [ 927.865274][T17076] Call Trace: [ 927.868564][T17076] [ 927.871498][T17076] dump_stack_lvl+0x99/0x250 [ 927.876100][T17076] ? __asan_memcpy+0x40/0x70 [ 927.880702][T17076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 927.885926][T17076] ? __pfx__printk+0x10/0x10 [ 927.890599][T17076] vpanic+0x237/0x6d0 [ 927.894587][T17076] ? __pfx_vpanic+0x10/0x10 [ 927.899088][T17076] ? is_bpf_text_address+0x292/0x2b0 [ 927.904430][T17076] ? is_bpf_text_address+0x26/0x2b0 [ 927.909646][T17076] panic+0xb9/0xc0 [ 927.913400][T17076] ? __pfx_panic+0x10/0x10 [ 927.917837][T17076] ? ret_from_fork_asm+0x1a/0x30 [ 927.922800][T17076] __warn+0x317/0x4b0 [ 927.926783][T17076] ? kernfs_get+0x72/0x90 [ 927.931130][T17076] ? kernfs_get+0x72/0x90 [ 927.935473][T17076] __report_bug+0x288/0x500 [ 927.940008][T17076] ? kernfs_get+0x72/0x90 [ 927.944352][T17076] ? __pfx___report_bug+0x10/0x10 [ 927.949396][T17076] ? preempt_schedule_thunk+0x16/0x30 [ 927.954775][T17076] ? up_write+0x1da/0x410 [ 927.959155][T17076] ? kernfs_get+0x72/0x90 [ 927.963487][T17076] report_bug+0x16a/0x220 [ 927.967895][T17076] ? kernfs_get+0x72/0x90 [ 927.972266][T17076] ? kernfs_get+0x74/0x90 [ 927.976626][T17076] handle_bug+0x98/0x200 [ 927.980895][T17076] exc_invalid_op+0x1a/0x50 [ 927.985406][T17076] asm_exc_invalid_op+0x1a/0x20 [ 927.990255][T17076] RIP: 0010:kernfs_get+0x72/0x90 [ 927.995202][T17076] Code: e8 c3 5b 5d ff 48 89 df be 04 00 00 00 e8 16 b0 c3 ff f0 ff 03 eb 05 e8 ac 5b 5d ff 5b 5d e9 55 96 f9 08 cc e8 9f 5b 5d ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 15 [ 928.014910][T17076] RSP: 0018:ffffc9000480f600 EFLAGS: 00010293 [ 928.021108][T17076] RAX: ffffffff82645511 RBX: ffff88805ae982d0 RCX: ffff88802ea79e80 [ 928.029097][T17076] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 928.037081][T17076] RBP: 0000000000000000 R08: ffff88805ae982d3 R09: 1ffff1100b5d305a [ 928.045075][T17076] R10: dffffc0000000000 R11: ffffed100b5d305b R12: ffff888059440030 [ 928.053065][T17076] R13: 1ffff1100b288007 R14: ffff888059440038 R15: dffffc0000000000 [ 928.061077][T17076] ? kernfs_get+0x71/0x90 [ 928.065437][T17076] kobject_add_internal+0x72b/0xcc0 [ 928.070676][T17076] kobject_add+0x155/0x220 [ 928.075112][T17076] ? __pfx_kobject_add+0x10/0x10 [ 928.080072][T17076] ? __kasan_kmalloc+0x93/0xb0 [ 928.084852][T17076] ? __pfx_kobject_add+0x10/0x10 [ 928.089817][T17076] ? kobject_put+0x52a/0x570 [ 928.094413][T17076] ? get_device_parent+0x366/0x3a0 [ 928.099553][T17076] device_add+0x408/0xb80 [ 928.103914][T17076] firmware_fallback_sysfs+0x2e4/0xa40 [ 928.109476][T17076] ? kmem_cache_free+0x197/0x620 [ 928.114435][T17076] _request_firmware+0xfa4/0x1680 [ 928.119674][T17076] ? __pfx__request_firmware+0x10/0x10 [ 928.125153][T17076] ? process_scheduled_works+0x9ef/0x1770 [ 928.130892][T17076] request_firmware_work_func+0xaf/0x1c0 [ 928.136553][T17076] ? process_scheduled_works+0x9ef/0x1770 [ 928.142284][T17076] process_scheduled_works+0xad1/0x1770 [ 928.147925][T17076] ? __pfx_process_scheduled_works+0x10/0x10 [ 928.153920][T17076] worker_thread+0x8a0/0xda0 [ 928.158602][T17076] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 928.164940][T17076] ? __kthread_parkme+0x7b/0x200 [ 928.169893][T17076] kthread+0x711/0x8a0 [ 928.173997][T17076] ? __pfx_worker_thread+0x10/0x10 [ 928.179120][T17076] ? __pfx_kthread+0x10/0x10 [ 928.183726][T17076] ? _raw_spin_unlock_irq+0x23/0x50 [ 928.188969][T17076] ? lockdep_hardirqs_on+0x98/0x140 [ 928.194187][T17076] ? __pfx_kthread+0x10/0x10 [ 928.198867][T17076] ret_from_fork+0x599/0xb30 [ 928.203471][T17076] ? __pfx_ret_from_fork+0x10/0x10 [ 928.208599][T17076] ? __switch_to_asm+0x39/0x70 [ 928.213372][T17076] ? __switch_to_asm+0x33/0x70 [ 928.218159][T17076] ? __pfx_kthread+0x10/0x10 [ 928.222763][T17076] ret_from_fork_asm+0x1a/0x30 [ 928.227546][T17076] [ 928.231118][T17076] Kernel Offset: disabled [ 928.235447][T17076] Rebooting in 86400 seconds..