last executing test programs: 12m7.916079482s ago: executing program 0 (id=4083): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 12m7.021502213s ago: executing program 0 (id=4093): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d000905"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0xca401) write$sequencer(r0, 0x0, 0xffaa) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 12m5.433871252s ago: executing program 0 (id=4104): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ppoll(0x0, 0x0, 0x0, &(0x7f00000007c0)={[0xbd15]}, 0x8) 12m5.197803107s ago: executing program 0 (id=4106): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 12m5.095103573s ago: executing program 0 (id=4107): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001840)=ANY=[], 0x550}, 0x1, 0x0, 0x0, 0x40}, 0xc020) recvmsg$can_raw(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1}, 0x40000002) 12m4.444202407s ago: executing program 0 (id=4109): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 12m3.892203983s ago: executing program 32 (id=4109): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 11m53.596455917s ago: executing program 1 (id=4164): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg$can_j1939(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/6, 0x6}], 0x1}, 0x10100) 11m53.148645026s ago: executing program 1 (id=4166): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x38}, 0x2}, 0x0) 11m52.937520159s ago: executing program 1 (id=4168): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x11}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 11m52.631698581s ago: executing program 1 (id=4171): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x1) 11m52.453886295s ago: executing program 1 (id=4173): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 11m51.522231958s ago: executing program 1 (id=4178): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000340)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0x172}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3ffffffe]}, 0x8, 0x80000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r0, 0x47f2, 0xeffdffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1727, 0x0, 0x0, 0x0) 11m50.866242175s ago: executing program 33 (id=4178): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000340)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0x172}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3ffffffe]}, 0x8, 0x80000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r0, 0x47f2, 0xeffdffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1727, 0x0, 0x0, 0x0) 23.868899008s ago: executing program 6 (id=6179): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xce, 0xf8, 0xbd, 0x8, 0xe41, 0x4142, 0xbc76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x6a, 0x2f, 0xf6, 0x0, [], [{{0x9, 0x5, 0x1, 0x8, 0x200, 0xb, 0x8, 0x64}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) sendmsg(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) open_by_handle_at(r4, &(0x7f0000000240)=ANY=[], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0x1000, 0x118000}) 20.81952069s ago: executing program 5 (id=6235): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000052c0)=ANY=[@ANYBLOB="5c6e7c0fc438763700", @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000480006804400040067636d28616573290000000000000000000000000000000000e5b971990000001c000000ffcaf35c8375f28a0a45aea9d25fd91f3dbaf77f283b9112e5ffdd3f728a2661e171b43f95a6addc98b409fe959f712de476f584022152d010dd26e30ab34c440890b7f8e5e47cbb499ae61b60a0654aa1776c02bca09fba064fb369a0e0dfc2198206ec46b42052da43f454eefdcbe1d82ac9cd3304b7395c466dfc"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) r3 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) unlinkat(r4, &(0x7f00000000c0)='./bus\x00', 0x200) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000006c00010029bd7000fedbdf2509000d0073797a300000000010003b800c001680"], 0x2c}], 0x1, 0x0, 0x0, 0x20004880}, 0xc000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[], 0x50) r6 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039bb0102030109021b0001000000000904"], 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000055c0)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000005580)={&(0x7f0000005600)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="24a0d6d79afa6ff340a41947ecfe34bf5729d3512d77d01832612496c21121c101e470ac0f69fe6be6a3f8c40bf521ce7be674d73b92d4ae139ffccbb50105a3b48389aa7bb6073fe404078ae0ca06fb6639c469b6678868bf79b4722a16efd780b8dc10441e8841c0f594092d0cdd532a86e24c54dd8090d8a8e86139b05d9c2eb1f2ca5c37c48bddcd6d7fcca3989d03022b"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80c0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="d800000019008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b800069903000000b0000500808178a8001500030001400200000901ac040000d69b6f94007100a007a290457f0189b316277ce06bbace8017cbec4c0000001fb791643a5ee4b11602b2a10c11ce1b25d6d9300000730d7a5025ccca262f2240fad95667e04adcdf634c1f215ce3bb9ad809d5e15de6ccd40dd6e4edef3d93452a9230000e9703000000000000000000000000129ae100000000000000000000080000000000000000000000000080b6fcdb2ab01ec2bb13", 0xd8}], 0x1}, 0x8040150) recvmsg(r0, &(0x7f00000057c0)={&(0x7f00000056c0)=@nfc, 0x80, &(0x7f0000004140)=[{&(0x7f0000005740)=""/117, 0x75}], 0x1}, 0x0) mount$fuse(0x0, &(0x7f0000002000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003000), 0x2100820, &(0x7f0000004180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d0f260cabfb7d81", @ANYRESDEC, @ANYBLOB=',\x00']) openat$tun(0xffffff9c, &(0x7f0000004080), 0x101000, 0x0) umount2(&(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xf) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) r8 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) openat$nvme_fabrics(0xffffff9c, &(0x7f00000040c0), 0x40200, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x7a, &(0x7f0000005200)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902680002010690080904000001020d00000a2406000138ade40976052400e10c0d240f0101000050000003000706241a040022072414030018000905810310000702020904010000020d00000904010102020d000009058202ff03050404060000000002b60400"], &(0x7f0000005400)={0xa, &(0x7f0000005280)={0xa, 0x6, 0x201, 0x8, 0x6, 0xf8, 0x10, 0xe}, 0xff, &(0x7f0000005440)=ANY=[@ANYBLOB="050fff00050a100300000007015e7414100404eae6b623c5312a81ed305001c8a93e57be100297853f7203a527e925659e26e4614df00ccccc6c9708b466905cdc79d9c09225c1f38a2197abdd707dd338082e5aeafcf4fb4ed230b1d930d74529ac1ba488af43ae08364ad2247c232b0388b718faed90914dbb570ee88211f7ed2f5c801183434a950c88c07ee99d2b6a95ee8ea81fece91a726472e88e625adf8ac91c4018c26a62c304e035e0d834fa1c21f18a0c8ef43dd089269e44ccec75c6a56a5c48c050942a577e0ac1dbce83399efeeb27a97aa5553e72d98a13184d948eb4a61410040e621212c657d995b4e52e"], 0x1, [{0x4, &(0x7f00000053c0)=@lang_id={0x4, 0x3, 0x380a}}]}) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) pivot_root(&(0x7f0000003080)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000003040)='highspeed', 0x9) 18.251223288s ago: executing program 6 (id=6229): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000440)=""/200, 0x200000, 0x1000, 0x0, 0x3}, 0x20) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r6 = msgget$private(0x0, 0x4a0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xb, "bdab7e9d"}, @main=@item_4={0x3, 0x0, 0xa, "582a6eb3"}]}}, 0x0}, 0x0) msgctl$IPC_STAT(r6, 0x2, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0x100000002, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500000040001e01fe04bb9b0b000000017c0000040042a314000180", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0], 0x30}}, 0xc000) 15.605811164s ago: executing program 5 (id=6233): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8000, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x17) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000180)=@add_del={0x2, &(0x7f0000000140)='wg0\x00'}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) writev(r3, &(0x7f0000000640)=[{&(0x7f0000000200)="9c", 0x1}], 0x1) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000100)={0xa04, 0xa00}) syz_emit_ethernet(0x116, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "70eae4", 0xe0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@routing={0x0, 0x0, 0x5}, @hopopts={0x3a, 0x19, '\x00', [@pad1, @ra={0x5, 0x2, 0x268}, @generic={0xf, 0xc0, "614ccb56dd684a71816467683dafdf84e26d48a952d0a41b15a34cc14fc4afe6e6a7d5e12cfd9bd459c39cd719c23f6d598f7f64dd51c2ba4074512f221e2dd496cb58523bbdb9136a2bdb420018931dc265824cb6df54d732b7a865954f051df4c90941872bc4d0224431e01afd5e5545fa4f350b8ffa4c4ce0dbd58ee4fec61205d64ec94a1d8c649b2eac33cd561dfc5aa22cd70e0ce01025b7492cd77c6d449d192949646977d6b9b6af1e3d1970ac2bffc8fb620c602cba640fcf454820"}]}]}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r4, 0xc0045103, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2dc, 0x0, 0x111, 0x4b4, 0xec, 0xd4feffff, 0x214, 0x202, 0x225, 0x214, 0x278, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xfc}, @empty, [], [], 'veth1_vlan\x00', 'team_slave_0\x00'}, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [], [0x0, 0xffffffff], 'veth1_to_hsr\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@limit={{0x3c}, {0x0, 0x8000000}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xa, 'syz1\x00', {0x7f}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x338) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 15.10000115s ago: executing program 4 (id=6234): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r3, 0x107, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4b8affbf514fd00", r4, 0xffffffffffffffff}) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) close_range(r2, r7, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r11, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r11, &(0x7f0000000200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r11, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'gre0\x00', 0x1}, 0x18) 15.061292926s ago: executing program 6 (id=6236): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r4 = openat$procfs(0xffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f00000002c0)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) syz_usb_control_io(r5, 0x0, &(0x7f0000000b00)={0xffffffffffffff5b, &(0x7f0000000340)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}], 0x1c) 14.562577148s ago: executing program 3 (id=6237): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0xab, @loopback, 0x1}, 0x1c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000000), 0x4) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r2, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) 13.789150001s ago: executing program 2 (id=6238): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe2(0x0, 0x800) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="9110feff000d000095000000e0ff0000"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004c, '\x00', 0x0, @sk_reuseport=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x922, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0xd, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40044}, 0x200088c0) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) getsockopt$inet_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f0000000100)) sendmsg$key(r4, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x20000000) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r8 = syz_io_uring_setup(0x39, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x21, &(0x7f0000000440)=r7, 0x1) msgctl$IPC_INFO(0x0, 0x3, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) 11.355377784s ago: executing program 5 (id=6239): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, 0x0) socket(0x1d, 0x2, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r3, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000200), 0x7ffffffc, 0x6a0) r4 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000005c0)={0x0, r5}) writev(r5, 0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}, @sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}, @sadb_key={0x2, 0x8, 0x8, 0x0, "b6"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x20000001}]}, 0x60}, 0x1, 0x7}, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 11.032300656s ago: executing program 3 (id=6240): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff034}, {0x28, 0x80, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmsg$rds(r2, &(0x7f0000001380)={&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_map={0x2c, 0x10c, 0x3, {{0x0}, 0x0, 0x10}}, @cswp={0x58, 0x114, 0x7, {{0x7ff80000, 0x101}, 0x0, 0x0, 0x89, 0x4, 0xeb, 0x10000000008a, 0x22, 0x77}}], 0x84}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x41, 0x3, 0x27c, 0x0, 0x19, 0x0, 0x0, 0x0, 0x220, 0x1f0, 0x1f0, 0x220, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x3c}, {0x0, 0x1}}, @common=@inet=@socket1={{0x24}, 0xc}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x2d8) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x80000001}, 0x50) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r6, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 10.921138268s ago: executing program 4 (id=6241): socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0xa0, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xa0}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r3, 0x107, 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {0x54}, [{{@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x0, 0x3, 0x2}}}, {{@pci}}]}, 0xffffffffffffff0e}, 0x1, 0x0, 0x0, 0x8001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000060042fe03e300000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xed}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) close(r1) syz_io_uring_setup(0x88f, &(0x7f0000000400)={0x0, 0xaee2, 0x400, 0xffffffff, 0xbfe00000}, &(0x7f0000000000), &(0x7f0000000280)) 10.69224222s ago: executing program 2 (id=6242): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003740)=ANY=[@ANYBLOB="280000001200010027ad700000000000100000000c00000000000000000000000800450002000000"], 0x28}], 0x1}, 0x4000800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x9, 0x0, 0x0, 0x0, @tick=0x9, {0x2}, {0x10}, @raw8={"f718aef669452b8821773b08"}}], 0x1c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) madvise(&(0x7f0000290000/0x3000)=nil, 0x3000, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = socket$rxrpc(0x21, 0x2, 0xa) listen(r8, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r9, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="19"], 0x48) modify_ldt$read(0x0, &(0x7f0000001100)=""/4130, 0x48) 9.068181062s ago: executing program 6 (id=6243): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xce, 0xf8, 0xbd, 0x8, 0xe41, 0x4142, 0xbc76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x6a, 0x2f, 0xf6, 0x0, [], [{{0x9, 0x5, 0x1, 0x8, 0x200, 0xb, 0x8, 0x64}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) sendmsg(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0x1000, 0x118000}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) 8.230071836s ago: executing program 2 (id=6244): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0x6, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e23, 0x0, @empty, 0xfffffff8}, 0x0, {[0xfffffffe, 0x0, 0x0, 0x1, 0x50, 0x5]}}, 0x5c) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@private2, 0x0, r6}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000040)={@private2, r6}, 0x14) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500000000", @ANYRES32=r6, @ANYBLOB="3a8d04005a10000008000400440000003cfeca652dfefec1385909000000000000003aa5e5f0f3e1f7e2472f9a08e572ef2ccbd659b1625497a86055c72dc96e4face0c53925144eb419e65095d7ff820db18efd6343bf4dee7057c7cd194a9b62bc29cf448cdfe8081c8279d0d88efb3fedbf14bf3a5548c13ef27ba9245ea03a23b9a6670e90e0462a0117bb8a60c37c691aa6d6e7dff8c9ebe9d00c0bbe444be32859af1d01da6b981c98c00c5b35f1be8b76885e573392c70f2d024a5f0ca3416bef8cff18b6fc60f70b68bd51b3ac11cb265cc3db6df4d8d116fe95851c4bde2d6a8fbd8532775105d47e707bff8a78b81cb63e8dd16806000000018a6005921846a9a70c0000000000000003353cd39b05d92817aeaa2291553bd9111cbd4451b1e23ead553350be3e34e33e376f73d7f07151e366dc3a3360c0d69ff0d6ae345448c15ed70e355a8a983dd553a499d61d45546d37727d53313a7ceade325a86ecb2761b00524c7e13c79c159686e6a23d885d0dc81d22c5f50a4c6e25e6f383627d9450618b3570145b354f3c12422afb60d06c65a63ccf7ed97f820d30864f116ce26cbc8f2475b2aed7eb167baed836bf0178fb8b49a30f5e55a376ec4bbb71037299762010de70f893"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x4000) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000001c0), 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) 8.16779009s ago: executing program 4 (id=6245): socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$pid(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) socket$nl_generic(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000002140)=""/4096, 0x694}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 8.107064837s ago: executing program 3 (id=6246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x6e042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x5, &(0x7f00000001c0)=[{0x4, 0x0, 0x25, 0x10000000}, {0x6, 0x8f, 0xfd, 0x1}, {0x200, 0x7c, 0xdc, 0x342e}, {0x800, 0x10, 0x7f, 0xe24}, {0x6, 0xff, 0x1, 0x1000}]}) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280), 0x143ec7, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c001}, 0x0) read$FUSE(r4, 0x0, 0x0) capget(&(0x7f0000000140)={0x19980330}, &(0x7f0000000300)={0xffffffff, 0x7, 0x9, 0x9, 0x7f, 0x80000204}) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r6 = openat$vim2m(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000240)={0x10001, 0x1, 0x2, "8608ba41085e351e77cebd465b38ae3ecb74783a1e8e07a9a026ad7bfb2ae176", 0x494e4f4b}) r7 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r7, 0xc0a45320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x3eb, 0x21e2f, 0x7f, 0x1681bcd7, 0x0, 0x10000, 0x400, 0x0, 0x6, 0x4}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x0, 0x10, 0x45d7, 0x9, 0x52, 0x0, 0x8, 0xc, 0x9}, 0x0) 7.998976506s ago: executing program 5 (id=6247): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) sendto$packet(r2, &(0x7f0000000240)="c8af88a8", 0x4, 0x0, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0xe0}, 0x14) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x10}, 0x20040001) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc381735512e000bc2b08cd6d659d3cfb1f79688235dd8"}, 0xc4) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x28) close(0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) 7.306577744s ago: executing program 4 (id=6248): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xce, 0xf8, 0xbd, 0x8, 0xe41, 0x4142, 0xbc76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x6a, 0x2f, 0xf6, 0x0, [], [{{0x9, 0x5, 0x1, 0x8, 0x200, 0xb, 0x8, 0x64}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) sendmsg(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) open_by_handle_at(r5, &(0x7f0000000240)=ANY=[], 0x10000) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0x1000, 0x118000}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) 5.276818936s ago: executing program 2 (id=6249): r0 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000240)=[{r1, 0x1000}], 0x1, &(0x7f0000000280), &(0x7f00000002c0)={[0x5, 0x3]}, 0x8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000000c0)={{@host, 0xffffffff}, @host, 0x0, 0x0, 0x1, 0x4}) close(r3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe26, 0x101400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0xc0045520, &(0x7f00000000c0)=""/92) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r5, 0x4020940d, &(0x7f00000013c0)={@local, @rand_addr=' \x01\x00'}) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000140)={'filter\x00', 0x0, 0x0, 0x0, [0x5, 0x0, 0x9476, 0x3, 0x9, 0x2]}, &(0x7f0000000080)=0x50) preadv(r6, &(0x7f0000002540)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x47fff, 0x6) 5.035364869s ago: executing program 3 (id=6250): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f00000003c0), 0x0, 0x1, 0x0, 0x0, r6}) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvfrom(r7, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r6], 0x0, 0x0, &(0x7f0000000040)}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x28, r1, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void, @val={0xc, 0x99, {0x89fb, 0x2b}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48041}, 0x40840) 4.483847476s ago: executing program 6 (id=6251): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0xab, @loopback, 0x1}, 0x1c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000000), 0x4) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r2, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) 2.963519896s ago: executing program 5 (id=6252): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x3, 0x2ef, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) unshare(0x6a040000) r7 = socket$isdn(0x22, 0x2, 0x11) r8 = socket$isdn(0x22, 0x2, 0x2) dup3(r7, r8, 0x0) socket$inet(0x2, 0x3, 0x5) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r12 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r12, 0x40000000af01, 0x0) r13 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)) io_uring_register$IORING_REGISTER_PBUF_RING(r13, 0x16, &(0x7f00000000c0)={&(0x7f0000001000), 0x0, 0x3}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 2.800932935s ago: executing program 2 (id=6253): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001500)={0x504, r9, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4dc, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @mcast2, 0x6}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x1a8, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7b4326167f79726ecfae0aeee91d38ba98df91957e9dead91c7bebb4db027bf1"}, @WGPEER_A_ALLOWEDIPS={0x130, 0x9, 0x0, 0x1, [{0x4}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x4}]}, {0x2bc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ALLOWEDIPS={0x124, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x168, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x504}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) inotify_init1(0x800) mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x25}) 2.73040246s ago: executing program 3 (id=6254): r0 = socket(0x80000000000000a, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0x55b4e85f}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r6, 0x40046103, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000000000002000002e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000027dabfc54c2c0e1f532d95a1a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200000002004e030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1414bb00"/400], 0x18c) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x10000, 0x87) unlinkat(r7, &(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unshare(0x1e028180) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x14, 0x0) ioctl$TCSETS(r2, 0x5402, 0x0) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153bdf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000300)={0x191, 0x140, 0xa0, 0x40, 0x8, 0x1, 0x20, 0x0, {}, {0x0, 0xffffffff, 0x1}, {0x0, 0x0, 0xfffffffd}, {0x6, 0x4}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x6, 0x6, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) semctl$SETVAL(0x0, 0x2, 0x10, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000004c0)=""/88) fsopen(&(0x7f0000000240)='nfsd\x00', 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}, 0x8a}}, {{0xa, 0x0, 0x10001, @local}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x7abd, {{0xa, 0xfffe, 0x0, @empty, 0x3}}, {{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x104) 1.963765359s ago: executing program 4 (id=6255): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='ubifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = socket(0xa, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'team_slave_0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1ae54091e573394}, 0x4080) connect$pppoe(r4, 0x0, 0x42) r7 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r7, &(0x7f00000082c0)={0x2020}, 0x2020) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fbdbdf252b0000000c409900010000000d00000004004400"], 0x24}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000012400)={0x2020}, 0x207d) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x401, 0x8, 0x1, 0x6, 0x5, 0x0}) fcntl$lock(r2, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x2, r9}) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) unshare(0x28040680) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r10, r10, 0x0, 0x200000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.87611453s ago: executing program 6 (id=6256): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101a01) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, 0x0, &(0x7f000000bbc0)) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x4}, 0x1c) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) lseek(r5, 0x20000093, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100)=0xfffffff8, 0x4) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xfe72, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r6 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x400) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) 527.098077ms ago: executing program 3 (id=6257): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r2, &(0x7f0000000240)={0x1000000, 0x0, 0x2, 0xffff, 0x3, "82b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf700"/48}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000004c80)={0x2020}, 0x2020) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8080) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x2, 0x1) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x5, 0x10009}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) getsockopt(0xffffffffffffffff, 0x6, 0x101, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x49) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40086410, &(0x7f0000000140)={0x8f, &(0x7f00000001c0)="7016f8c77c41562f42647fa2eb2a543aa32950f740594cab35b30f713997713f76d3fd9bdc66e13c529fe7a468cfdcc749f6188780973e475b46a144264578458191061dbd9651a101dda0126ff82be17a2a417e400d2e71c43561d35c58a7b41e8fd288983abb7b877ccc8cffc3f3cea3531c58d199e4409d5234e82c9979b8d17c88bf36717d308fc6ebb4e20862"}) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r4, 0x0, 0x0, 0x2000c76d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 291.248037ms ago: executing program 5 (id=6258): socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$pid(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000002140)=""/4096, 0x694}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 57.126072ms ago: executing program 2 (id=6259): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) sendfile(r3, r2, 0x0, 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x86, 0x7e, &(0x7f0000000bc0)="1a00", 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000040)='l', 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x1) preadv(r1, 0x0, 0x0, 0x1, 0x5) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f0ffffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed0000620300ff000000003f440000000000007a0a00fe00ffffffc303000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a0000000000000000"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x48, &(0x7f00000011c0)=ANY=[@ANYBLOB="109904032eb4b60102030109023600010707400d09048e8501ffb62601052406000005240005000d240f0173c100000600ff01060424020209050a03400002030200000000000000"], &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 0s ago: executing program 4 (id=6260): modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000dc0)=""/229, 0xe5, 0x0) mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000700)={0x0, 0x3ca9, 0x10, 0x0, 0x10002da}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xa4, &(0x7f0000000440)={0x0, 0xce53, 0x400, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000), 0x0, 0x12}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000540)='./file0/file0\x00', r7}, 0x14) accept4(r1, &(0x7f0000000380)=@ieee802154, 0x0, 0x80000) kernel console output (not intermixed with test programs): riptor's value: 21 [ 1774.995594][T19414] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1775.044752][T19414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.105058][T19414] usb 5-1: config 0 descriptor?? [ 1775.137507][T19414] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1775.294407][T19403] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1775.316195][T19403] usb 6-1: USB disconnect, device number 49 [ 1776.304800][T19407] usb 3-1: USB disconnect, device number 51 [ 1776.864441][ T5919] usb 5-1: USB disconnect, device number 46 [ 1777.227525][T19414] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1777.330887][T26415] could not allocate digest TFM handle sha3-512-generic [ 1777.437228][T19414] usb 6-1: Using ep0 maxpacket: 16 [ 1777.447238][T19414] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1777.487139][T19414] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1777.511810][T19414] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1777.555811][T19414] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1777.591175][T19414] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1777.831266][T26426] fuse: Bad value for 'rootmode' [ 1777.880249][T19414] usb 6-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1777.995313][T19414] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1778.081411][T19414] usb 6-1: SerialNumber: syz [ 1778.119278][T26413] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1778.177742][T19414] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 1778.278428][T19414] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 1779.515207][T19403] usb 6-1: USB disconnect, device number 50 [ 1780.233494][T19414] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1780.653155][T19414] usb 5-1: Using ep0 maxpacket: 8 [ 1780.679267][T19414] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1780.719297][T19414] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1781.315516][T19414] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1781.325114][T19414] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.343753][T19414] usb 5-1: Product: syz [ 1781.348493][T19414] usb 5-1: Manufacturer: syz [ 1781.353108][T19414] usb 5-1: SerialNumber: syz [ 1781.420916][T19414] usb 5-1: bad CDC descriptors [ 1781.458029][T19414] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 1781.493028][T19414] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 1781.785109][T19414] IPVS: starting estimator thread 0... [ 1781.921280][T26465] IPVS: using max 27 ests per chain, 64800 per kthread [ 1782.187863][T19414] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1782.347091][T19414] usb 3-1: Using ep0 maxpacket: 32 [ 1782.390697][T19414] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1782.405395][T19414] usb 3-1: config 0 has no interface number 0 [ 1782.436711][T19414] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1782.447026][T19414] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.456343][T19414] usb 3-1: Product: syz [ 1782.474822][T19414] usb 3-1: Manufacturer: syz [ 1782.486089][T19414] usb 3-1: SerialNumber: syz [ 1782.564575][T19414] usb 3-1: config 0 descriptor?? [ 1782.593593][T19414] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1782.734380][ T30] audit: type=1326 audit(1767446419.949:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26433 comm="syz.4.5610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 1782.911378][T19414] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1782.964072][T19414] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1783.329321][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1783.330579][ T5919] usb 3-1: USB disconnect, device number 52 [ 1783.361943][ T5919] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1783.445291][ T5919] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1783.514125][ T5919] quatech2 3-1:0.51: device disconnected [ 1783.871436][T19414] usb 5-1: USB disconnect, device number 47 [ 1785.520920][T26500] kvm: pic: non byte read [ 1785.525762][T26500] kvm: pic: non byte read [ 1785.530806][T26500] kvm: pic: non byte read [ 1785.535542][T26500] kvm: pic: non byte read [ 1785.540284][T26500] kvm: pic: non byte read [ 1785.544893][T26500] kvm: pic: non byte read [ 1785.549570][T26500] kvm: pic: non byte read [ 1785.554294][T26500] kvm: pic: non byte read [ 1785.559141][T26500] kvm: pic: non byte read [ 1785.563846][T26500] kvm: pic: non byte read [ 1787.402085][T26516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5624'. [ 1788.649484][T26533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5627'. [ 1788.689350][T26533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5627'. [ 1788.699997][T26533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5627'. [ 1788.710450][T26533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5627'. [ 1788.720646][T26533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5627'. [ 1788.730949][T26533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5627'. [ 1788.743467][T26533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5627'. [ 1788.803640][T26533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5627'. [ 1788.948088][T26533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5627'. [ 1790.477005][T19407] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1790.747991][T19407] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1790.764578][T19407] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1790.779963][T19407] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1790.917030][T19407] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1790.964731][T19407] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1790.997387][T19407] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1791.031007][T19407] usb 6-1: Manufacturer: syz [ 1791.368854][T19407] usb 6-1: config 0 descriptor?? [ 1791.390911][T26555] binder: 26554:26555 ioctl 4018620d 0 returned -22 [ 1791.525510][T26555] binder: 26554:26555 ioctl c0306201 0 returned -14 [ 1791.843268][T19407] appleir 0003:05AC:8243.00AC: unknown main item tag 0x0 [ 1791.856197][T19407] appleir 0003:05AC:8243.00AC: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1793.267096][T19403] usb 6-1: reset high-speed USB device number 51 using dummy_hcd [ 1793.526748][T26589] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1794.958267][ T5919] usb 6-1: USB disconnect, device number 51 [ 1795.771162][T26606] loop8: detected capacity change from 0 to 7 [ 1795.807969][T26606] Dev loop8: unable to read RDB block 7 [ 1795.813689][T26606] loop8: AHDI p1 p2 p3 [ 1795.818033][T26606] loop8: partition table partially beyond EOD, truncated [ 1795.826492][T26606] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1795.833581][T26606] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1795.922560][T26237] Dev loop8: unable to read RDB block 7 [ 1795.928535][T26237] loop8: AHDI p1 p2 p3 [ 1796.101668][T26237] loop8: partition table partially beyond EOD, truncated [ 1796.112680][T26237] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1796.394626][T26237] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1796.677097][T26609] Dev loop8: unable to read RDB block 7 [ 1796.692192][T26609] loop8: AHDI p1 p2 p3 [ 1796.696453][T26609] loop8: partition table partially beyond EOD, truncated [ 1796.749024][T26609] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1796.776684][T26609] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1797.121139][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.130162][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1798.917341][T26637] __nla_validate_parse: 52 callbacks suppressed [ 1798.917403][T26637] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5646'. [ 1799.198749][T19403] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1799.405280][T19403] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1799.456050][T19403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.477099][T19403] usb 5-1: Product: syz [ 1799.481369][T19403] usb 5-1: Manufacturer: syz [ 1799.485995][T19403] usb 5-1: SerialNumber: syz [ 1799.536698][T19403] usb 5-1: config 0 descriptor?? [ 1800.205557][T26641] syz.2.5647 (26641): drop_caches: 2 [ 1801.087051][T26655] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5649'. [ 1801.589013][T26651] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5650'. [ 1801.770109][T26651] netlink: 'syz.6.5650': attribute type 13 has an invalid length. [ 1802.905718][T26651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1802.968810][T26651] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1803.051230][T19414] usb 5-1: USB disconnect, device number 48 [ 1804.166998][T19403] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1804.382497][T19403] usb 5-1: config 0 has no interfaces? [ 1804.393189][T19403] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1804.403754][T19403] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.426497][T19403] usb 5-1: config 0 descriptor?? [ 1804.700058][T19403] usb 5-1: USB disconnect, device number 49 [ 1804.967454][ T1162] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1804.978273][ T1162] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 41494 - 0 [ 1805.034314][ T1162] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1805.061563][ T1162] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 41494 - 0 [ 1805.085553][ T1162] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1805.105856][ T1162] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 41494 - 0 [ 1805.134490][ T1162] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1805.274467][ T1162] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 41494 - 0 [ 1807.822299][T26704] ucma_write: process 3865 (syz.3.5660) changed security contexts after opening file descriptor, this is not allowed. [ 1808.141024][T26712] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1808.147624][T26712] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1808.193417][T26712] vhci_hcd vhci_hcd.0: Device attached [ 1808.657990][T19414] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1808.805158][T26716] vhci_hcd: connection reset by peer [ 1808.892360][ T1335] vhci_hcd vhci_hcd.6: stop threads [ 1808.940160][ T1335] vhci_hcd vhci_hcd.6: release socket [ 1809.004460][ T1335] vhci_hcd vhci_hcd.6: disconnect device [ 1810.951258][T19403] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1811.495139][T19403] usb 5-1: Using ep0 maxpacket: 16 [ 1811.572455][T19403] usb 5-1: config 0 has an invalid interface number: 213 but max is 0 [ 1811.595797][T19403] usb 5-1: config 0 has no interface number 0 [ 1812.086214][T19403] usb 5-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 1812.146123][T19403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.165736][T19403] usb 5-1: Product: syz [ 1812.178933][T19403] usb 5-1: Manufacturer: syz [ 1812.188181][T19403] usb 5-1: SerialNumber: syz [ 1812.210491][T19403] usb 5-1: config 0 descriptor?? [ 1812.592480][T26747] binder: 26745:26747 ioctl 4018620d 0 returned -22 [ 1812.691234][T26747] binder: 26745:26747 ioctl c0306201 0 returned -14 [ 1812.951370][T26748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5668'. [ 1813.937038][T19414] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1814.278529][T19403] usb 5-1: USB disconnect, device number 50 [ 1814.510751][T19407] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1814.808769][T19407] usb 4-1: config 0 has no interfaces? [ 1814.814337][T19407] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1814.827545][T19407] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.844600][T19407] usb 4-1: config 0 descriptor?? [ 1814.958451][T19403] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1815.139242][T19403] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1815.149592][T19403] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1815.412069][T19403] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.521383][T19403] usb 5-1: config 0 descriptor?? [ 1815.564019][T19403] rndis_host 5-1:0.0: probe with driver rndis_host failed with error -22 [ 1815.661962][T26774] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5672'. [ 1816.741705][T19414] usb 4-1: USB disconnect, device number 41 [ 1817.067759][T26787] program syz.3.5675 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1818.567042][T19403] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1818.608324][ T5919] usb 5-1: USB disconnect, device number 51 [ 1818.847519][T19403] usb 7-1: config 0 has no interfaces? [ 1818.867399][T19403] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1818.887080][T19398] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1818.900890][T19403] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.912145][T19403] usb 7-1: config 0 descriptor?? [ 1819.101573][T19398] usb 6-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 1819.111731][T19398] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.161695][T19398] usb 6-1: config 0 descriptor?? [ 1819.205489][T19398] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 1819.229694][T19403] usb 7-1: USB disconnect, device number 45 [ 1820.020905][T19398] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -110 [ 1820.054074][T19398] pac7311 6-1:0.0: probe with driver pac7311 failed with error -110 [ 1820.249787][T19398] usb 6-1: USB disconnect, device number 52 [ 1820.919670][T26803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1820.927261][T26803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1821.381034][T26803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1821.464765][T26803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1821.655823][T23476] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1821.665178][T23476] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1821.900670][T23476] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1825.920880][T19403] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1825.931456][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1826.087231][T19403] usb 5-1: device descriptor read/64, error -32 [ 1826.347030][T19403] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1826.707433][T19403] usb 5-1: Using ep0 maxpacket: 8 [ 1826.733412][T19403] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1826.769550][T26879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5692'. [ 1826.870752][T26879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5692'. [ 1826.880119][T26879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5692'. [ 1827.497357][T19403] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1827.505026][T19403] usb 5-1: can't read configurations, error -71 [ 1827.522188][T19403] usb usb5-port1: attempt power cycle [ 1827.645301][T26879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5692'. [ 1827.934179][T26879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5692'. [ 1828.012320][T26879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5692'. [ 1828.277131][T26879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5692'. [ 1828.399375][T26879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5692'. [ 1828.455429][T26879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5692'. [ 1828.525352][T26879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5692'. [ 1828.606848][T19403] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1828.859172][T19403] usb 5-1: Using ep0 maxpacket: 8 [ 1828.928457][T19403] usb 5-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67 [ 1828.968466][T19403] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.000239][T19403] usb 5-1: config 0 descriptor?? [ 1829.047997][T19403] quatech2 5-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1831.890949][T19403] usb 5-1: qt2_attach - failed to power on unit: -71 [ 1831.917183][T19403] quatech2 5-1:0.0: probe with driver quatech2 failed with error -71 [ 1831.995146][T19403] usb 5-1: USB disconnect, device number 54 [ 1832.340002][T26921] fuse: Bad value for 'fd' [ 1832.662160][T26918] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1834.574868][T19407] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 1834.857417][T19407] usb 3-1: config 0 has no interfaces? [ 1834.863897][T19407] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1834.924179][T19407] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.965742][T19407] usb 3-1: config 0 descriptor?? [ 1835.222293][T19398] usb 3-1: USB disconnect, device number 53 [ 1837.101633][T26959] loop8: detected capacity change from 0 to 7 [ 1837.223328][T26959] Dev loop8: unable to read RDB block 7 [ 1837.317000][T26959] loop8: AHDI p1 p2 p3 [ 1837.321417][T26959] loop8: partition table partially beyond EOD, truncated [ 1837.387216][T26959] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1837.395224][T26959] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1837.522264][T19407] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1837.697658][T26865] Dev loop8: unable to read RDB block 7 [ 1837.703298][T26865] loop8: AHDI p1 p2 p3 [ 1837.711228][T26865] loop8: partition table partially beyond EOD, truncated [ 1837.817351][T19407] usb 7-1: Using ep0 maxpacket: 16 [ 1837.829708][T26865] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1837.846772][T26865] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1837.872245][T19407] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1837.898542][T19407] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1837.947041][T19398] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1837.963500][T19407] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1837.984058][T26966] Dev loop8: unable to read RDB block 7 [ 1838.004037][T26966] loop8: AHDI p1 p2 p3 [ 1838.019531][T26966] loop8: partition table partially beyond EOD, truncated [ 1838.031705][T26966] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1838.041541][T19407] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1838.102608][T26966] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1838.152341][T19407] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1838.166956][T19398] usb 6-1: Using ep0 maxpacket: 16 [ 1838.211861][T19398] usb 6-1: config 0 has an invalid interface number: 213 but max is 0 [ 1838.231358][T19398] usb 6-1: config 0 has no interface number 0 [ 1838.234744][T19407] usb 7-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1838.303239][T19398] usb 6-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 1838.337083][T19398] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.345366][T19407] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1838.404401][T19398] usb 6-1: Product: syz [ 1838.416992][T19398] usb 6-1: Manufacturer: syz [ 1838.431343][T19407] usb 7-1: SerialNumber: syz [ 1838.444488][T19398] usb 6-1: SerialNumber: syz [ 1838.538105][T19398] usb 6-1: config 0 descriptor?? [ 1838.593989][T26962] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1838.731950][T19407] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 1838.799643][T19407] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -12 [ 1839.167556][T26977] __nla_validate_parse: 49 callbacks suppressed [ 1839.167602][T26977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5709'. [ 1839.780068][ T30] audit: type=1326 audit(1767446476.999:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26972 comm="syz.2.5720" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x0 [ 1840.294479][T19407] usb 7-1: USB disconnect, device number 46 [ 1841.542418][T26054] usb 6-1: USB disconnect, device number 53 [ 1842.297947][T26998] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5713'. [ 1842.647133][T19398] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1842.677441][T27005] fuse: Bad value for 'fd' [ 1842.843185][T19398] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1842.889284][T19398] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.914993][T19398] usb 6-1: Product: syz [ 1842.940904][T19398] usb 6-1: Manufacturer: syz [ 1843.044480][T19398] usb 6-1: SerialNumber: syz [ 1843.093756][T19398] usb 6-1: config 0 descriptor?? [ 1843.542978][T27013] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1845.208773][T27030] netlink: 'syz.3.5721': attribute type 3 has an invalid length. [ 1845.985218][T19407] usb 6-1: USB disconnect, device number 54 [ 1849.308371][T26054] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1849.587147][T26054] usb 3-1: Using ep0 maxpacket: 16 [ 1849.907963][T26054] usb 3-1: config 0 has an invalid interface number: 213 but max is 0 [ 1849.916175][T26054] usb 3-1: config 0 has no interface number 0 [ 1850.007329][T26054] usb 3-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 1850.027104][T26054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.067084][T26054] usb 3-1: Product: syz [ 1850.081614][T26054] usb 3-1: Manufacturer: syz [ 1850.086278][T26054] usb 3-1: SerialNumber: syz [ 1850.137482][T26054] usb 3-1: config 0 descriptor?? [ 1850.646247][T19398] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 1850.953644][T19398] usb 7-1: config 0 has no interfaces? [ 1851.006330][T19398] usb 7-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1851.086950][T19398] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1851.129124][T19398] usb 7-1: config 0 descriptor?? [ 1851.550398][T19414] usb 7-1: USB disconnect, device number 47 [ 1851.787035][T19398] usb 3-1: USB disconnect, device number 54 [ 1852.045167][T27095] tipc: Resetting bearer [ 1852.910589][T27102] tipc: Enabled bearer , priority 0 [ 1852.939669][T27101] syzkaller0: entered promiscuous mode [ 1852.945214][T27101] syzkaller0: entered allmulticast mode [ 1853.154802][T27101] tipc: Resetting bearer [ 1853.178116][T27100] tipc: Resetting bearer [ 1853.258658][T27100] tipc: Disabling bearer [ 1853.892419][T27118] fuse: Bad value for 'rootmode' [ 1853.916984][T19403] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1854.419050][T19403] usb 5-1: config 0 has no interfaces? [ 1854.424723][T19403] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1854.655151][T19403] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1854.812169][T19403] usb 5-1: config 0 descriptor?? [ 1855.259319][T19414] usb 5-1: USB disconnect, device number 55 [ 1855.508113][T27123] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5739'. [ 1857.596993][T26054] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1857.787265][T26054] usb 7-1: Using ep0 maxpacket: 16 [ 1857.800094][T26054] usb 7-1: config 0 has an invalid interface number: 213 but max is 0 [ 1857.810573][T26054] usb 7-1: config 0 has no interface number 0 [ 1857.818820][T27151] netlink: 'syz.4.5746': attribute type 1 has an invalid length. [ 1857.858200][T26054] usb 7-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 1857.895751][T26054] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.917511][T27151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1857.924261][T26054] usb 7-1: Product: syz [ 1857.931652][T26054] usb 7-1: Manufacturer: syz [ 1857.965377][T26054] usb 7-1: SerialNumber: syz [ 1858.104087][T26054] usb 7-1: config 0 descriptor?? [ 1858.188921][T27156] bond0: (slave gretap1): making interface the new active one [ 1858.365446][T27156] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 1858.553191][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.559737][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1860.390524][T19414] usb 7-1: USB disconnect, device number 48 [ 1860.806345][T27184] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5752'. [ 1861.295007][T27191] No such timeout policy "syz0" [ 1865.206975][T19403] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1865.478893][T19403] usb 4-1: config 0 has no interfaces? [ 1865.484450][T19403] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1865.514511][T19403] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1865.551076][T19403] usb 4-1: config 0 descriptor?? [ 1865.898179][T19407] usb 4-1: USB disconnect, device number 42 [ 1867.423454][T27235] netlink: 'syz.6.5777': attribute type 1 has an invalid length. [ 1867.487491][T27235] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1867.505728][T25100] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1867.509143][T27235] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1867.581836][T27235] veth3: entered promiscuous mode [ 1867.620508][T27235] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 1867.669022][T25100] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1868.250793][T27249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5767'. [ 1868.359579][T27246] netlink: 'syz.6.5779': attribute type 3 has an invalid length. [ 1868.606987][T19403] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1868.866151][T19403] usb 3-1: Using ep0 maxpacket: 8 [ 1868.916558][T19403] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1868.929313][T19403] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.321042][T19403] usb 3-1: Product: syz [ 1869.346089][T19403] usb 3-1: Manufacturer: syz [ 1869.363940][T19403] usb 3-1: SerialNumber: syz [ 1869.477612][T19403] usb 3-1: config 0 descriptor?? [ 1870.661959][T27264] No such timeout policy "syz0" [ 1873.641389][T19403] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1873.662566][T19403] gspca_sunplus: reg_w_riv err -71 [ 1873.685541][T19403] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1873.766677][T19403] usb 3-1: USB disconnect, device number 55 [ 1874.733802][T27302] netlink: 'syz.3.5780': attribute type 1 has an invalid length. [ 1874.748237][T26054] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1874.907023][T26054] usb 3-1: Using ep0 maxpacket: 16 [ 1875.040629][T27305] bond5: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 1875.066312][ T6252] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1875.083159][T27307] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1875.131714][T27302] veth9: entered promiscuous mode [ 1875.358790][ T6252] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1875.390662][T27302] bond5: (slave veth9): Enslaving as a backup interface with a down link [ 1878.862011][T26054] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1878.883702][T26054] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1878.903305][T27329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5785'. [ 1878.974524][T26054] usb 3-1: can't read configurations, error -71 [ 1879.417106][T19403] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1879.667700][T19403] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1879.701535][T19403] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1879.780188][T19403] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1879.947235][T19403] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1880.069938][T27336] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1880.080313][T19403] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1880.347356][T27336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1880.607224][T27336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1880.960818][T27348] No such timeout policy "syz0" [ 1881.239828][ T30] audit: type=1326 audit(1767446518.369:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27330 comm="syz.6.5786" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1881.290506][ T30] audit: type=1326 audit(1767446518.369:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27330 comm="syz.6.5786" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1881.374843][T26054] usb 7-1: USB disconnect, device number 49 [ 1884.433283][T27382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5797'. [ 1884.444410][T27382] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5797'. [ 1884.453733][T27382] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5797'. [ 1884.503642][T27381] fuse: Bad value for 'fd' [ 1884.883244][T27385] tipc: Enabled bearer , priority 0 [ 1884.963764][T27387] syzkaller0: entered promiscuous mode [ 1885.187332][T27387] syzkaller0: entered allmulticast mode [ 1885.897755][T27391] tipc: Resetting bearer [ 1886.607083][ T5919] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1886.868252][T27406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5801'. [ 1886.895640][T27406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5801'. [ 1886.905272][T27406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5801'. [ 1886.914673][T27406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5801'. [ 1886.924164][T27406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5801'. [ 1886.933702][T27406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5801'. [ 1886.943146][T27406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5801'. [ 1886.952171][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 1887.031245][ T5919] usb 5-1: config 3 has an invalid interface number: 171 but max is 0 [ 1887.080253][ T5919] usb 5-1: config 3 has no interface number 0 [ 1887.093321][ T5919] usb 5-1: config 3 interface 171 has no altsetting 0 [ 1887.131920][ T5919] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5 [ 1887.236753][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.248217][ T5919] usb 5-1: Product: syz [ 1887.300819][ T5919] usb 5-1: Manufacturer: syz [ 1887.311379][ T5919] usb 5-1: SerialNumber: syz [ 1887.800748][ T5919] as10x_usb: device has been detected [ 1887.810949][ T5919] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1887.943014][ T5919] usb 5-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 1888.109657][ T5919] as10x_usb: error during firmware upload part1 [ 1888.128747][ T5919] Registered device Sky IT Digital Key (green led) [ 1888.148819][ T5919] usb 5-1: USB disconnect, device number 56 [ 1888.313282][ T5919] Unregistered device Sky IT Digital Key (green led) [ 1888.319174][ T5919] as10x_usb: device has been disconnected [ 1890.006990][ T5919] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1890.008169][T19414] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1890.488143][ T5919] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1890.500976][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1890.526057][ T5919] usb 5-1: config 0 descriptor?? [ 1890.557947][ T5919] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1890.596932][T19414] usb 7-1: Using ep0 maxpacket: 8 [ 1890.818071][T19414] usb 7-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67 [ 1890.850815][T19414] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1890.896579][T19414] usb 7-1: config 0 descriptor?? [ 1890.929109][T19414] quatech2 7-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1891.048850][ T5919] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 1891.248861][ T5919] gspca_cpia1: usb_control_msg 01, error -32 [ 1891.525662][ T5919] gspca_cpia1: usb_control_msg 01, error -71 [ 1891.551226][ T5919] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 1891.669130][ T5919] usb 5-1: USB disconnect, device number 57 [ 1892.059738][T27445] __nla_validate_parse: 37 callbacks suppressed [ 1892.059781][T27445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5823'. [ 1892.770770][T27454] binder: 27451:27454 ioctl c0306201 800001c0 returned -14 [ 1893.317508][T27459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5816'. [ 1893.811694][T19414] usb 7-1: qt2_attach - failed to power on unit: -71 [ 1893.837318][T19414] quatech2 7-1:0.0: probe with driver quatech2 failed with error -71 [ 1893.895492][T19414] usb 7-1: USB disconnect, device number 50 [ 1894.624731][T27476] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5819'. [ 1896.320332][T27496] netlink: 'syz.6.5825': attribute type 1 has an invalid length. [ 1898.600547][ T30] audit: type=1326 audit(1767446535.789:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27507 comm="syz.2.5829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d558 code=0x7ffc0000 [ 1898.654283][ T30] audit: type=1326 audit(1767446535.789:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27507 comm="syz.2.5829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1898.937740][ T30] audit: type=1326 audit(1767446535.789:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27507 comm="syz.2.5829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d558 code=0x7ffc0000 [ 1899.192767][ T30] audit: type=1326 audit(1767446535.789:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27507 comm="syz.2.5829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1899.427085][ T30] audit: type=1326 audit(1767446535.789:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27507 comm="syz.2.5829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1899.449848][ T30] audit: type=1326 audit(1767446535.829:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27507 comm="syz.2.5829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d558 code=0x7ffc0000 [ 1899.472492][ T30] audit: type=1326 audit(1767446535.829:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27507 comm="syz.2.5829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d558 code=0x7ffc0000 [ 1899.495572][ T30] audit: type=1326 audit(1767446535.829:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27507 comm="syz.2.5829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d558 code=0x7ffc0000 [ 1899.519008][ T30] audit: type=1326 audit(1767446535.829:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27507 comm="syz.2.5829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d558 code=0x7ffc0000 [ 1899.874501][ T30] audit: type=1326 audit(1767446535.829:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27507 comm="syz.2.5829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d558 code=0x7ffc0000 [ 1901.197527][T27540] syz.4.5835 (27540): drop_caches: 1 [ 1901.197573][T27539] syz.4.5835 (27539): drop_caches: 1 [ 1901.416715][T27545] binder: 27542:27545 ioctl c0306201 800001c0 returned -14 [ 1902.120223][T27539] syz.4.5835 (27539): drop_caches: 1 [ 1902.910179][ T5919] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1903.917610][ T5919] usb 7-1: Using ep0 maxpacket: 32 [ 1903.928454][ T5919] usb 7-1: config 3 has an invalid interface number: 171 but max is 0 [ 1903.950085][ T5919] usb 7-1: config 3 has no interface number 0 [ 1903.958776][ T5919] usb 7-1: config 3 interface 171 has no altsetting 0 [ 1903.997069][ T5919] usb 7-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5 [ 1904.009540][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.027291][ T5919] usb 7-1: Product: syz [ 1904.031504][ T5919] usb 7-1: Manufacturer: syz [ 1904.036099][ T5919] usb 7-1: SerialNumber: syz [ 1904.388083][ T5919] as10x_usb: device has been detected [ 1904.399627][ T5919] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1904.441927][ T5919] usb 7-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 1904.502658][ T5919] as10x_usb: error during firmware upload part1 [ 1904.528507][ T5919] Registered device Sky IT Digital Key (green led) [ 1904.532408][ T5919] usb 7-1: USB disconnect, device number 51 [ 1904.635591][ T5919] Unregistered device Sky IT Digital Key (green led) [ 1904.639520][ T5919] as10x_usb: device has been disconnected [ 1904.877711][T27569] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1905.020424][T27577] netlink: 'syz.3.5843': attribute type 9 has an invalid length. [ 1905.029752][T26044] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1905.219308][T26044] usb 6-1: config 0 has an invalid interface number: 156 but max is 0 [ 1905.227762][T26044] usb 6-1: config 0 has no interface number 0 [ 1905.234296][T26044] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1905.245827][T26044] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1905.258947][T26044] usb 6-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1905.273629][T26044] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1905.659733][T26044] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1905.670950][T26044] usb 6-1: config 0 descriptor?? [ 1905.693557][T26044] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1905.948892][T27567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1905.979904][T27567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1906.040849][T26044] spca561 6-1:0.156: probe with driver spca561 failed with error -22 [ 1906.230892][T26044] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1906.258540][T26044] usb 6-1: MIDIStreaming interface descriptor not found [ 1906.563158][T26044] usb 6-1: USB disconnect, device number 55 [ 1908.370139][T27612] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5851'. [ 1910.298201][T27609] batman_adv: batadv0: Adding interface: dummy0 [ 1910.304522][T27609] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1910.516456][T27609] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1911.776691][T27645] mac80211_hwsim hwsim27 ..ãc¤±: renamed from wlan1 [ 1912.434824][T26044] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1912.947347][T26044] usb 3-1: Using ep0 maxpacket: 32 [ 1912.955543][T26044] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1912.984047][T26044] usb 3-1: config 0 has no interface number 0 [ 1913.033243][T26044] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1913.127369][T26044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1913.135443][T26044] usb 3-1: Product: syz [ 1913.200974][T26044] usb 3-1: Manufacturer: syz [ 1913.205652][T26044] usb 3-1: SerialNumber: syz [ 1913.266727][T26044] usb 3-1: config 0 descriptor?? [ 1913.319043][T26044] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1913.518745][T26044] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 1913.547920][T26044] quatech2 3-1:0.51: probe with driver quatech2 failed with error -8 [ 1913.597208][T26054] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1914.019510][T26054] usb 5-1: config 0 has an invalid interface number: 156 but max is 0 [ 1914.027983][T26054] usb 5-1: config 0 has no interface number 0 [ 1914.037004][T26054] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1914.134091][T27650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5857'. [ 1914.155137][T26054] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1914.194920][T26054] usb 5-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1914.304424][T26054] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1914.322137][T26054] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1914.478015][T26054] usb 5-1: config 0 descriptor?? [ 1914.502050][T26054] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1914.697917][T27655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1914.889252][T27655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1914.979878][T26054] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 1915.018161][T26054] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1915.072463][T26054] usb 5-1: MIDIStreaming interface descriptor not found [ 1915.241752][T26054] usb 5-1: USB disconnect, device number 58 [ 1915.840104][T26054] usb 3-1: USB disconnect, device number 58 [ 1915.861703][T27689] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5866'. [ 1916.068788][ T30] kauditd_printk_skb: 403 callbacks suppressed [ 1916.068811][ T30] audit: type=1326 audit(1767446553.289:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27683 comm="syz.5.5865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f84558 code=0x7ffc0000 [ 1916.243765][T27692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5868'. [ 1916.488779][ T30] audit: type=1326 audit(1767446553.319:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27683 comm="syz.5.5865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f84558 code=0x7ffc0000 [ 1916.575947][ T30] audit: type=1326 audit(1767446553.319:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27683 comm="syz.5.5865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 1916.803246][ T30] audit: type=1326 audit(1767446553.319:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27683 comm="syz.5.5865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f84558 code=0x7ffc0000 [ 1916.948340][ T30] audit: type=1326 audit(1767446553.319:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27683 comm="syz.5.5865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 1917.087130][ T30] audit: type=1326 audit(1767446553.319:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27683 comm="syz.5.5865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f84558 code=0x7ffc0000 [ 1917.187166][ T30] audit: type=1326 audit(1767446553.319:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27683 comm="syz.5.5865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 1917.255589][ T30] audit: type=1326 audit(1767446553.319:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27683 comm="syz.5.5865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f84558 code=0x7ffc0000 [ 1917.384019][ T30] audit: type=1326 audit(1767446553.319:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27683 comm="syz.5.5865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 1917.536359][ T30] audit: type=1326 audit(1767446553.319:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27683 comm="syz.5.5865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f84558 code=0x7ffc0000 [ 1918.066485][T27692] bond4: (slave dummy0): Releasing active interface [ 1918.087470][T27692] dummy0: left allmulticast mode [ 1918.111473][T27692] batman_adv: batadv0: Adding interface: dummy0 [ 1918.153909][T27692] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1918.203257][T27692] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1919.727029][ T5919] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1919.977095][ T5919] usb 3-1: Using ep0 maxpacket: 8 [ 1919.993407][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.999932][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.024796][ T5919] usb 3-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67 [ 1920.036897][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1920.139178][ T5919] usb 3-1: config 0 descriptor?? [ 1920.195842][ T5919] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1920.272435][T27730] mac80211_hwsim hwsim9 ..ãc¤±: renamed from wlan1 [ 1920.955476][T26044] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1921.257132][T26044] usb 7-1: Using ep0 maxpacket: 8 [ 1921.264641][T26044] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1921.323626][T26044] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1921.398761][T26044] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 1921.415174][T26044] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.444050][T26044] usb 7-1: Product: syz [ 1921.476245][T26044] usb 7-1: Manufacturer: syz [ 1921.501688][T26044] usb 7-1: SerialNumber: syz [ 1921.546198][T26044] usb 7-1: config 0 descriptor?? [ 1921.778603][T26044] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 found [ 1921.922865][T26044] snd_usb_toneport 7-1:0.0: cannot get proper max packet size [ 1921.932617][T26044] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 now disconnected [ 1921.944834][T26044] snd_usb_toneport 7-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1922.747048][T27747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5878'. [ 1922.851744][ T5919] usb 3-1: qt2_attach - failed to power on unit: -71 [ 1922.861027][ T5919] quatech2 3-1:0.0: probe with driver quatech2 failed with error -71 [ 1922.900833][ T5919] usb 3-1: USB disconnect, device number 59 [ 1923.177220][T19414] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1923.357404][T19414] usb 5-1: Using ep0 maxpacket: 32 [ 1923.367862][T19414] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1923.386425][T19414] usb 5-1: config 0 has no interface number 0 [ 1923.433306][T19414] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1923.444878][T19414] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.508940][T19414] usb 5-1: Product: syz [ 1923.521597][T19414] usb 5-1: Manufacturer: syz [ 1923.538556][T19414] usb 5-1: SerialNumber: syz [ 1923.584677][T19414] usb 5-1: config 0 descriptor?? [ 1923.606070][T19414] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1923.818136][T19414] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 1923.827513][T19414] quatech2 5-1:0.51: probe with driver quatech2 failed with error -8 [ 1924.116013][T27752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5879'. [ 1924.250041][ T5919] usb 7-1: USB disconnect, device number 52 [ 1924.713165][T27766] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1926.333146][T26044] usb 5-1: USB disconnect, device number 59 [ 1926.899911][T27792] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1928.322881][T19407] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1928.527017][T19414] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1928.547328][T19407] usb 7-1: Using ep0 maxpacket: 8 [ 1928.555165][T19407] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1928.563701][T19407] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1928.589901][T19407] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1928.660412][T19407] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1928.680405][T19407] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1928.693923][T19414] usb 6-1: Using ep0 maxpacket: 8 [ 1928.705511][T19414] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1928.717966][T19414] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1928.738155][T19407] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1928.848258][T19414] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1928.863948][T19414] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1928.873283][T19407] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1928.885509][T19414] usb 6-1: Product: syz [ 1928.893172][T19414] usb 6-1: Manufacturer: syz [ 1928.906554][T19414] usb 6-1: SerialNumber: syz [ 1929.047621][T19414] usb 6-1: bad CDC descriptors [ 1929.053823][T19414] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 1929.067614][T19414] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 1929.521026][T19414] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1929.828466][T19414] usb 3-1: Using ep0 maxpacket: 8 [ 1929.986793][T19414] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1929.999772][T19414] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1930.011850][T19414] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 1930.033635][T19414] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1930.119867][T19414] usb 3-1: Product: syz [ 1930.136986][T19414] usb 3-1: Manufacturer: syz [ 1930.145733][T19414] usb 3-1: SerialNumber: syz [ 1930.201872][T19414] usb 3-1: config 0 descriptor?? [ 1930.222411][T27827] libceph: resolve '. [ 1930.222411][T27827] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 1930.222411][T27827] ' (ret=-3): failed [ 1930.251095][T19414] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 1930.765685][T19414] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 1930.774775][T19414] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 1930.808689][T19414] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1930.865912][ T30] kauditd_printk_skb: 428 callbacks suppressed [ 1930.865931][ T30] audit: type=1326 audit(1767446568.079:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27807 comm="syz.5.5893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7fc00000 [ 1931.208928][T19414] usb 7-1: USB disconnect, device number 53 [ 1931.695899][T27840] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1932.059837][T19414] usb 6-1: USB disconnect, device number 56 [ 1932.740452][T27852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5899'. [ 1932.897009][ T5919] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1933.085558][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 1934.165006][T19414] usb 3-1: USB disconnect, device number 60 [ 1935.745793][ T5919] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1935.794934][ T5919] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1935.842015][ T5919] usb 4-1: can't read configurations, error -71 [ 1938.626333][ T5919] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1938.855424][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 1938.867825][ T5919] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 1938.876270][ T5919] usb 4-1: config 0 has no interface number 0 [ 1938.886657][ T5919] usb 4-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 1938.898901][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.907336][ T5919] usb 4-1: Product: syz [ 1938.911642][ T5919] usb 4-1: Manufacturer: syz [ 1938.918647][ T5919] usb 4-1: SerialNumber: syz [ 1938.949589][ T5919] usb 4-1: config 0 descriptor?? [ 1938.972825][ T5919] hub 4-1:0.89: bad descriptor, ignoring hub [ 1939.002076][ T5919] hub 4-1:0.89: probe with driver hub failed with error -5 [ 1939.031100][ T5919] option 4-1:0.89: GSM modem (1-port) converter detected [ 1939.256282][ T5919] usb 4-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 1939.947150][ T5919] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1940.347034][ T5919] usb 6-1: Using ep0 maxpacket: 8 [ 1940.357175][ T5919] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1940.424776][ T5919] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1940.520846][ T5919] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 1940.544646][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.663302][ T5919] usb 6-1: Product: syz [ 1940.689191][ T5919] usb 6-1: Manufacturer: syz [ 1940.704570][ T5919] usb 6-1: SerialNumber: syz [ 1940.717175][T27933] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1940.738541][ T5919] usb 6-1: config 0 descriptor?? [ 1940.756720][ T5919] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 1941.028639][ T5919] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 1941.086483][ T5919] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 1941.115813][ T5919] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1941.707881][ T5919] usb 4-1: USB disconnect, device number 45 [ 1941.851238][ T5919] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 1941.869693][ T5919] option 4-1:0.89: device disconnected [ 1943.504380][T26054] usb 6-1: USB disconnect, device number 57 [ 1944.722747][T27978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5934'. [ 1944.734049][ T30] audit: type=1326 audit(1767446581.929:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27967 comm="syz.5.5934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 1944.938906][ T30] audit: type=1326 audit(1767446581.929:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27967 comm="syz.5.5934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 1944.986016][ T30] audit: type=1326 audit(1767446581.929:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27967 comm="syz.5.5934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 1945.019802][T26054] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1945.028302][ T30] audit: type=1326 audit(1767446581.929:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27967 comm="syz.5.5934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 1945.055555][ T30] audit: type=1326 audit(1767446581.929:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27967 comm="syz.5.5934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 1945.078517][ T30] audit: type=1326 audit(1767446581.939:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27967 comm="syz.5.5934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 1945.306698][ T30] audit: type=1326 audit(1767446581.939:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27967 comm="syz.5.5934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 1945.329060][T26054] usb 7-1: Using ep0 maxpacket: 32 [ 1945.514951][T26054] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 1945.600238][T26054] usb 7-1: config 0 has no interface number 0 [ 1945.640707][T26054] usb 7-1: config 0 interface 12 has no altsetting 0 [ 1945.788863][T26054] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1945.798295][T26054] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.827191][ T30] audit: type=1326 audit(1767446581.939:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27967 comm="syz.5.5934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 1945.889935][T26054] usb 7-1: Product: syz [ 1945.917786][T26054] usb 7-1: Manufacturer: syz [ 1945.922617][T26054] usb 7-1: SerialNumber: syz [ 1945.933295][T26054] usb 7-1: config 0 descriptor?? [ 1945.950835][T26054] f81534 7-1:0.12: required endpoints missing [ 1946.028603][ T30] audit: type=1326 audit(1767446581.939:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27967 comm="syz.5.5934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 1946.147290][ T30] audit: type=1326 audit(1767446581.939:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27967 comm="syz.5.5934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 1947.759783][T26054] usb 7-1: USB disconnect, device number 54 [ 1947.821468][T28011] mac80211_hwsim hwsim11 ..ãc¤±: renamed from wlan1 [ 1949.614158][T26054] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1950.296889][T26054] usb 4-1: Using ep0 maxpacket: 8 [ 1950.397001][T26054] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1950.433541][T26054] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1950.700373][T26054] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 1950.710404][T26054] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1950.756982][T26054] usb 4-1: Product: syz [ 1950.767505][T26054] usb 4-1: Manufacturer: syz [ 1950.782393][T26054] usb 4-1: SerialNumber: syz [ 1950.815954][T26054] usb 4-1: config 0 descriptor?? [ 1950.930407][T26054] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 1951.156460][T26054] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 1951.184590][T26054] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 1951.209552][T26054] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1951.813837][T28052] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5940'. [ 1951.844597][T28052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5940'. [ 1952.043740][T28041] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1952.327161][T26054] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1952.547109][T26054] usb 7-1: Using ep0 maxpacket: 8 [ 1952.625667][T26054] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1952.787298][T26054] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1952.807160][T26054] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1952.987880][T26054] usb 7-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 1953.022100][T26054] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1953.031398][T26054] usb 7-1: Product: syz [ 1953.041554][T26054] usb 7-1: Manufacturer: syz [ 1953.047089][T26054] usb 7-1: SerialNumber: syz [ 1953.080638][T26054] usb 7-1: config 0 descriptor?? [ 1953.165632][T26054] radioshark 7-1:0.0: Invalid radioSHARK device [ 1953.230699][T26054] radioshark 7-1:0.0: probe with driver radioshark failed with error -22 [ 1953.247461][T26054] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1954.261919][T28064] lo: Caught tx_queue_len zero misconfig [ 1954.267781][T28064] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5942'. [ 1954.333676][T26044] usb 4-1: USB disconnect, device number 46 [ 1955.068947][T26054] usb 7-1: USB disconnect, device number 55 [ 1955.724657][T28087] binder: BINDER_SET_CONTEXT_MGR already set [ 1955.730888][T28087] binder: 28081:28087 ioctl 4018620d 80000540 returned -16 [ 1955.894496][T28088] netlink: 'syz.5.5948': attribute type 2 has an invalid length. [ 1955.997329][T28088] !: entered promiscuous mode [ 1956.242475][T28085] netlink: 'syz.5.5948': attribute type 2 has an invalid length. [ 1956.250728][T28085] !: left promiscuous mode [ 1958.644435][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1958.654570][ T30] audit: type=1326 audit(1767446595.859:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28109 comm="syz.6.5955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1958.661807][T28119] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5955'. [ 1958.697697][ T30] audit: type=1326 audit(1767446595.859:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28109 comm="syz.6.5955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1958.727600][ T30] audit: type=1326 audit(1767446595.859:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28109 comm="syz.6.5955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1958.752187][ T30] audit: type=1326 audit(1767446595.859:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28109 comm="syz.6.5955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1958.781461][ T30] audit: type=1326 audit(1767446595.859:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28109 comm="syz.6.5955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1958.832727][T28115] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1958.881071][T26044] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 1958.919352][ T30] audit: type=1326 audit(1767446595.859:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28109 comm="syz.6.5955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1959.081876][ T30] audit: type=1326 audit(1767446595.859:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28109 comm="syz.6.5955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1959.394372][T26044] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1959.426355][T26044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1959.470957][T26044] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1959.480406][ T30] audit: type=1326 audit(1767446595.859:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28109 comm="syz.6.5955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1959.709767][T26044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1959.756321][T26044] usb 5-1: config 0 descriptor?? [ 1959.762068][ T30] audit: type=1326 audit(1767446595.859:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28109 comm="syz.6.5955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1959.784932][T28118] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1959.826012][T26044] hub 5-1:0.0: USB hub found [ 1959.923842][ T30] audit: type=1326 audit(1767446595.859:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28109 comm="syz.6.5955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1960.016699][T26044] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1960.487136][T26044] usbhid 5-1:0.0: can't add hid device: -32 [ 1960.493170][T26044] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1960.759424][T28144] fuse: Unknown parameter 'mGN‡8o«ad' [ 1960.988530][T28154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5963'. [ 1961.362273][T28156] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5962'. [ 1961.381459][T28156] : entered promiscuous mode [ 1961.867571][T26054] usb 5-1: USB disconnect, device number 60 [ 1962.874016][T28172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5966'. [ 1964.577770][T28190] fuse: Bad value for 'fd' [ 1964.889130][T28190] nvme_fabrics: missing parameter 'transport=%s' [ 1964.910647][T28190] nvme_fabrics: missing parameter 'nqn=%s' [ 1965.750835][T28209] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1966.938598][T28217] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1967.834996][T28228] vimc link validate: Scaler:src:4096x16 (0x33524742, 6, 2, 0, 1) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1968.546059][T28235] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1969.172446][T28242] tipc: Enabling of bearer rejected, already enabled [ 1969.200112][T28242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5977'. [ 1969.299696][T28242] tipc: Disabling bearer [ 1971.086939][ T5982] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1971.246996][ T5982] usb 6-1: Using ep0 maxpacket: 8 [ 1971.270834][ T5982] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1971.316916][ T5982] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1971.392988][T28270] netlink: 'syz.4.5984': attribute type 1 has an invalid length. [ 1971.448818][ T5982] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 1971.471557][ T5982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.496983][ T5982] usb 6-1: Product: syz [ 1971.504228][ T5982] usb 6-1: Manufacturer: syz [ 1971.511592][ T5982] usb 6-1: SerialNumber: syz [ 1971.524611][ T5982] usb 6-1: config 0 descriptor?? [ 1971.549142][ T5982] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 1972.011228][ T5982] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 1972.020456][ T5982] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 1972.103682][ T5982] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1974.895538][T28301] netlink: 'syz.3.5989': attribute type 2 has an invalid length. [ 1974.914070][T28301] !: entered promiscuous mode [ 1975.005324][T28299] netlink: 'syz.3.5989': attribute type 2 has an invalid length. [ 1975.013443][T28299] !: left promiscuous mode [ 1975.111367][T19403] usb 6-1: USB disconnect, device number 58 [ 1978.255442][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1978.263049][ T30] audit: type=1326 audit(1767446615.469:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28329 comm="syz.4.5996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1978.311779][T28332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5996'. [ 1978.337217][ T30] audit: type=1326 audit(1767446615.469:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28329 comm="syz.4.5996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1978.466261][ T30] audit: type=1326 audit(1767446615.469:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28329 comm="syz.4.5996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1979.443494][ T30] audit: type=1326 audit(1767446615.469:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28329 comm="syz.4.5996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1979.495319][ T30] audit: type=1326 audit(1767446615.469:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28329 comm="syz.4.5996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1979.887311][ T30] audit: type=1326 audit(1767446615.469:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28329 comm="syz.4.5996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1980.337085][ T30] audit: type=1326 audit(1767446615.469:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28329 comm="syz.4.5996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1980.676187][ T30] audit: type=1326 audit(1767446615.469:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28329 comm="syz.4.5996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1980.831483][ T30] audit: type=1326 audit(1767446615.499:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28329 comm="syz.4.5996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1981.127698][ T30] audit: type=1326 audit(1767446615.499:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28329 comm="syz.4.5996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1981.434470][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.441708][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1982.331040][T26054] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1982.456976][T26044] usb 6-1: new low-speed USB device number 59 using dummy_hcd [ 1982.576952][T26054] usb 5-1: device descriptor read/64, error -71 [ 1982.751474][T26044] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1982.759264][T26044] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1982.777997][T26044] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1982.805993][T26044] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1982.823247][T26044] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1982.866946][T26054] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1983.206995][T26054] usb 5-1: device descriptor read/64, error -71 [ 1983.218992][T26044] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1983.247400][T26044] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1983.277476][T26044] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1983.307028][T26044] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1983.338765][T26044] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1983.359544][T26054] usb usb5-port1: attempt power cycle [ 1983.404173][T26044] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1983.422329][T26044] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1983.480292][T26044] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1983.514647][T26044] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1983.563554][T26044] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1983.609232][T26044] usb 6-1: string descriptor 0 read error: -22 [ 1983.656773][T26044] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1983.707177][T26044] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1983.765502][T26044] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1983.808593][T26054] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1983.858939][T26054] usb 5-1: device descriptor read/8, error -71 [ 1984.095492][T26044] usb 6-1: USB disconnect, device number 59 [ 1986.826969][T19403] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1986.923692][T28423] tipc: Cannot configure node identity twice [ 1987.217088][T19403] usb 4-1: Using ep0 maxpacket: 32 [ 1987.252164][T19403] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1987.274182][T19403] usb 4-1: config 0 has no interface number 0 [ 1987.290837][T19403] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1987.332124][T19403] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1987.354027][T19403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1987.390217][T19403] usb 4-1: Product: syz [ 1987.426280][T19403] usb 4-1: Manufacturer: syz [ 1987.476201][T19403] usb 4-1: SerialNumber: syz [ 1987.535752][T28431] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6015'. [ 1987.547699][T19403] usb 4-1: config 0 descriptor?? [ 1987.578436][T19403] f81534 4-1:0.12: required endpoints missing [ 1989.284658][T28438] syzkaller0: entered promiscuous mode [ 1989.292335][T28438] syzkaller0: entered allmulticast mode [ 1989.583715][T28444] IPv6: NLM_F_CREATE should be specified when creating new route [ 1990.551203][T26054] usb 4-1: USB disconnect, device number 47 [ 1991.606398][T28461] bridge_slave_0: entered promiscuous mode [ 1992.417349][T28454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1993.706881][T28477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6026'. [ 1993.727178][T28477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6026'. [ 1996.710856][T28511] binder: 28503:28511 ioctl c018620c 80000380 returned -22 [ 1996.801338][T28513] vimc link validate: Scaler:src:4096x16 (0x33524742, 6, 2, 0, 1) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1998.022582][T28525] binder: BINDER_SET_CONTEXT_MGR already set [ 1998.159838][T28525] binder: 28515:28525 ioctl 4018620d 80000540 returned -16 [ 1998.194945][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1998.194965][ T30] audit: type=1326 audit(1767446635.359:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28519 comm="syz.4.6034" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1998.477148][ T30] audit: type=1326 audit(1767446635.359:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28519 comm="syz.4.6034" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1998.543898][ T30] audit: type=1326 audit(1767446635.359:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28519 comm="syz.4.6034" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1998.630002][ T30] audit: type=1326 audit(1767446635.359:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28519 comm="syz.4.6034" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1998.720596][ T30] audit: type=1326 audit(1767446635.369:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28519 comm="syz.4.6034" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1998.926926][ T30] audit: type=1326 audit(1767446635.369:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28519 comm="syz.4.6034" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1999.006080][T28534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6036'. [ 1999.244625][ T30] audit: type=1326 audit(1767446635.369:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28519 comm="syz.4.6034" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1999.283310][ T30] audit: type=1326 audit(1767446635.369:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28519 comm="syz.4.6034" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1999.723438][ T30] audit: type=1326 audit(1767446635.369:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28519 comm="syz.4.6034" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1999.786957][ T30] audit: type=1326 audit(1767446635.369:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28519 comm="syz.4.6034" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2002.755969][T28568] fuse: Bad value for 'fd' [ 2002.846248][T28568] nvme_fabrics: missing parameter 'transport=%s' [ 2002.890084][T28568] nvme_fabrics: missing parameter 'nqn=%s' [ 2002.945681][T28561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6052'. [ 2003.007515][T28561] : entered promiscuous mode [ 2004.373110][T28590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6044'. [ 2004.385881][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 2004.385897][ T30] audit: type=1326 audit(1767446641.559:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28582 comm="syz.2.6044" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2004.435375][ T30] audit: type=1326 audit(1767446641.569:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28582 comm="syz.2.6044" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2004.487862][T28592] openvswitch: netlink: Flow key attr not present in new flow. [ 2004.675362][ T30] audit: type=1326 audit(1767446641.569:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28582 comm="syz.2.6044" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2004.737041][ T30] audit: type=1326 audit(1767446641.569:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28582 comm="syz.2.6044" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2004.799418][ T30] audit: type=1326 audit(1767446641.569:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28582 comm="syz.2.6044" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2004.910169][T19403] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 2004.975478][ T30] audit: type=1326 audit(1767446641.569:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28582 comm="syz.2.6044" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2005.062079][ T30] audit: type=1326 audit(1767446641.569:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28582 comm="syz.2.6044" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2005.096960][ T30] audit: type=1326 audit(1767446641.569:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28582 comm="syz.2.6044" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2005.256928][T19403] usb 7-1: device descriptor read/64, error -71 [ 2005.362015][ T30] audit: type=1326 audit(1767446641.569:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28582 comm="syz.2.6044" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2005.638718][T19403] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 2005.679817][ T30] audit: type=1326 audit(1767446641.569:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28582 comm="syz.2.6044" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2005.926944][T19403] usb 7-1: device descriptor read/64, error -71 [ 2006.037275][T19403] usb usb7-port1: attempt power cycle [ 2006.351216][T28600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6048'. [ 2006.393769][T19403] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 2006.424613][T28600] hub 9-0:1.0: USB hub found [ 2006.435371][T28600] hub 9-0:1.0: 1 port detected [ 2006.445222][T19403] usb 7-1: device descriptor read/8, error -71 [ 2006.869410][T19403] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 2007.010077][T28609] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2007.046910][T19403] usb 7-1: device descriptor read/8, error -71 [ 2007.237205][T19403] usb usb7-port1: unable to enumerate USB device [ 2009.289479][ T5982] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 2009.486956][ T5982] usb 5-1: Using ep0 maxpacket: 8 [ 2009.617515][ T5982] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2009.628423][ T5982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 2009.644958][ T5982] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2009.671202][ T5982] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 2009.680915][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2009.691629][ T5982] usb 5-1: Product: syz [ 2009.828205][ T5982] usb 5-1: Manufacturer: syz [ 2009.832846][ T5982] usb 5-1: SerialNumber: syz [ 2009.881363][ T5982] usb 5-1: config 0 descriptor?? [ 2009.896310][ T5982] radioshark 5-1:0.0: Invalid radioSHARK device [ 2009.913972][ T5982] radioshark 5-1:0.0: probe with driver radioshark failed with error -22 [ 2010.412719][ T5982] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2011.610777][T28647] fuse: Bad value for 'fd' [ 2011.686594][T28647] nvme_fabrics: missing parameter 'transport=%s' [ 2011.694817][T28647] nvme_fabrics: missing parameter 'nqn=%s' [ 2011.737183][T26044] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2011.923041][T26044] usb 3-1: device descriptor read/64, error -71 [ 2012.266910][T26044] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2012.649894][ T5982] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 2012.708819][T26044] usb 3-1: device descriptor read/64, error -71 [ 2012.806906][ T5982] usb 6-1: Using ep0 maxpacket: 32 [ 2012.822799][ T5982] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 2012.837446][T26044] usb usb3-port1: attempt power cycle [ 2013.002664][ T5982] usb 6-1: config 0 has no interface number 0 [ 2013.072480][T19403] usb 5-1: USB disconnect, device number 65 [ 2013.127041][ T5982] usb 6-1: config 0 interface 184 has no altsetting 0 [ 2013.185497][ T5982] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2013.217001][T26044] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2013.248096][T26044] usb 3-1: device descriptor read/8, error -71 [ 2013.255993][ T5982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.298352][ T5982] usb 6-1: Product: syz [ 2013.302862][ T5982] usb 6-1: Manufacturer: syz [ 2013.376970][ T5982] usb 6-1: SerialNumber: syz [ 2013.388824][ T5982] usb 6-1: config 0 descriptor?? [ 2013.420365][ T5982] smsc75xx v1.0.0 [ 2013.507154][T26044] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2013.587504][T26044] usb 3-1: device descriptor read/8, error -71 [ 2013.641275][T28653] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6059'. [ 2013.698938][T26044] usb usb3-port1: unable to enumerate USB device [ 2014.594343][T28671] kAFS: unable to lookup cell '(/c¾ûL' [ 2015.043985][T28675] RDS: rds_bind could not find a transport for ::c0fe:0:0:0:1, load rds_tcp or rds_rdma? [ 2015.095306][T28675] netlink: 'syz.3.6062': attribute type 2 has an invalid length. [ 2015.158207][T28675] !: entered promiscuous mode [ 2015.983391][ T5982] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2015.995423][ T5982] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2016.086996][ T5982] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 2016.182945][T28679] openvswitch: netlink: Flow key attr not present in new flow. [ 2016.249383][ T5982] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 2016.304452][ T5982] usb 6-1: USB disconnect, device number 60 [ 2016.728633][T26054] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2016.887009][T26054] usb 3-1: device descriptor read/64, error -71 [ 2017.184110][T26054] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2017.337024][T26054] usb 3-1: device descriptor read/64, error -71 [ 2017.458172][T26054] usb usb3-port1: attempt power cycle [ 2017.873526][T26054] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2017.907515][T26054] usb 3-1: device descriptor read/8, error -71 [ 2017.945773][T28699] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2018.237112][T26054] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2018.324750][T26054] usb 3-1: device descriptor read/8, error -71 [ 2018.727732][T26054] usb usb3-port1: unable to enumerate USB device [ 2019.406992][T26044] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 2019.547015][T26044] usb 6-1: device descriptor read/64, error -71 [ 2019.810410][T26044] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2019.948766][T26044] usb 6-1: device descriptor read/64, error -71 [ 2019.992753][T28715] netlink: 'syz.2.6080': attribute type 1 has an invalid length. [ 2020.121256][T26044] usb usb6-port1: attempt power cycle [ 2020.650692][T28726] fuse: Bad value for 'fd' [ 2020.854401][T28726] nvme_fabrics: missing parameter 'transport=%s' [ 2020.863989][T28726] nvme_fabrics: missing parameter 'nqn=%s' [ 2020.887174][T26044] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2021.044545][T26044] usb 6-1: device descriptor read/8, error -71 [ 2021.430757][T26044] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 2021.677617][T26044] usb 6-1: device not accepting address 64, error -71 [ 2021.692381][T26044] usb usb6-port1: unable to enumerate USB device [ 2025.325801][T28764] binder: 28750:28764 ioctl c018620c 80000380 returned -22 [ 2029.111855][T28769] Set syz1 is full, maxelem 6117 reached [ 2031.250129][T28801] netlink: 'syz.6.6087': attribute type 10 has an invalid length. [ 2031.260057][T28801] batman_adv: batadv0: Removing interface: dummy0 [ 2031.314083][T28801] team0: Device dummy0 failed to register rx_handler [ 2035.276535][T28842] binder: 28826:28842 ioctl c018620c 80000380 returned -22 [ 2038.236900][T26044] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2038.318477][T19403] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 2038.596980][T19403] usb 5-1: Using ep0 maxpacket: 8 [ 2038.603289][T26044] usb 4-1: Using ep0 maxpacket: 32 [ 2038.630675][T28881] RDS: rds_bind could not find a transport for ::c0fe:0:0:0:1, load rds_tcp or rds_rdma? [ 2038.641172][T26044] usb 4-1: config 9 has an invalid interface number: 37 but max is 0 [ 2038.661862][T19403] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2038.699549][T26044] usb 4-1: config 9 has no interface number 0 [ 2038.707423][T19403] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2038.723070][T26044] usb 4-1: config 9 interface 37 has no altsetting 0 [ 2038.765795][T26044] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 2038.778119][T26044] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2038.809403][T28882] netlink: 'syz.5.6101': attribute type 2 has an invalid length. [ 2038.927004][T26044] usb 4-1: Product: syz [ 2038.944459][T28882] !: entered promiscuous mode [ 2039.019141][T19403] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 2039.037046][T19403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.045497][T26044] usb 4-1: Manufacturer: syz [ 2039.055626][T26044] usb 4-1: SerialNumber: syz [ 2039.082496][T19403] usb 5-1: Product: syz [ 2039.123310][T19403] usb 5-1: Manufacturer: syz [ 2039.154269][T19403] usb 5-1: SerialNumber: syz [ 2039.258732][T19403] usb 5-1: config 0 descriptor?? [ 2039.544060][T19403] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 2039.751147][T19403] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 2039.777316][T19403] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 2039.823135][T19403] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 2041.330819][T28892] fuse: Bad value for 'fd' [ 2041.491542][T28892] nvme_fabrics: missing parameter 'transport=%s' [ 2041.498776][T28892] nvme_fabrics: missing parameter 'nqn=%s' [ 2041.790307][T28897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6107'. [ 2041.884333][T26044] gspca_main: spca506-2.14.0 probing 0734:043b [ 2042.110778][T28897] hub 9-0:1.0: USB hub found [ 2042.117007][T28897] hub 9-0:1.0: 1 port detected [ 2042.281677][T26054] usb 5-1: USB disconnect, device number 66 [ 2042.283111][T26044] usb 4-1: USB disconnect, device number 48 [ 2042.873316][ T6217] kworker/1:9 (6217) used greatest stack depth: 14520 bytes left [ 2042.907771][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.914196][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2044.128037][T28922] netlink: 'syz.3.6111': attribute type 3 has an invalid length. [ 2044.433174][T28928] binder: 28914:28928 ioctl c018620c 80000380 returned -22 [ 2044.927378][T28931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6112'. [ 2050.174858][T28984] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2051.350680][T26054] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2051.764131][T28997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6126'. [ 2051.773383][T28997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6126'. [ 2052.033772][T26054] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2052.181444][T26054] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2052.266383][T26054] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2052.340957][T26054] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2052.438882][T26054] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2052.541480][T26054] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2052.588798][T26054] usb 3-1: config 0 descriptor?? [ 2054.006410][T26054] usbhid 3-1:0.0: can't add hid device: -71 [ 2054.028549][T26054] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2054.073471][T26054] usb 3-1: USB disconnect, device number 69 [ 2055.079825][T29031] fuse: Unknown parameter 'mGN‡8o«ad' [ 2058.266746][T29062] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2058.478292][T29057] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2059.857127][T29075] nvme_fabrics: missing parameter 'transport=%s' [ 2059.863784][T29075] nvme_fabrics: missing parameter 'nqn=%s' [ 2060.268540][T29085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6143'. [ 2061.040796][T29086] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2061.273234][T29093] kAFS: unable to lookup cell '(/c¾ûL' [ 2062.374019][T29109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6147'. [ 2062.394490][T29109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6147'. [ 2067.848837][T29158] QAT: failed to copy from user. [ 2069.410801][T29172] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2070.467371][ T5982] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 2070.685414][ T5982] usb 7-1: Using ep0 maxpacket: 32 [ 2070.730732][ T5982] usb 7-1: config 9 has an invalid interface number: 37 but max is 0 [ 2070.741442][ T5982] usb 7-1: config 9 has no interface number 0 [ 2070.749130][ T5982] usb 7-1: config 9 interface 37 has no altsetting 0 [ 2071.035161][ T5982] usb 7-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 2071.045031][ T5982] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2071.680064][ T5982] usb 7-1: Product: syz [ 2071.712459][ T5982] usb 7-1: Manufacturer: syz [ 2071.765123][ T5982] usb 7-1: SerialNumber: syz [ 2073.612227][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 2073.612250][ T30] audit: type=1326 audit(1767446710.719:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29199 comm="syz.4.6166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2073.837266][T19407] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2074.007876][ T30] audit: type=1326 audit(1767446710.719:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29199 comm="syz.4.6166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2074.059336][ T30] audit: type=1326 audit(1767446710.719:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29199 comm="syz.4.6166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2074.137366][T19407] usb 5-1: Using ep0 maxpacket: 32 [ 2074.267096][ T30] audit: type=1326 audit(1767446710.719:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29199 comm="syz.4.6166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2074.267151][T19407] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2074.316983][T19407] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2074.336928][T19407] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2074.356517][T19407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2074.433428][ T30] audit: type=1326 audit(1767446710.719:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29199 comm="syz.4.6166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2074.507919][T19407] usb 5-1: config 0 descriptor?? [ 2074.558317][ T30] audit: type=1326 audit(1767446710.719:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29199 comm="syz.4.6166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2074.655057][ T30] audit: type=1326 audit(1767446710.719:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29199 comm="syz.4.6166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2074.722575][ T5982] gspca_main: spca506-2.14.0 probing 0734:043b [ 2074.779027][ T30] audit: type=1326 audit(1767446710.719:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29199 comm="syz.4.6166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2075.172236][T19407] ft260 0003:0403:6030.00AD: unknown main item tag 0x7 [ 2075.260038][ T5982] usb 7-1: USB disconnect, device number 60 [ 2075.288350][ T30] audit: type=1326 audit(1767446710.729:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29199 comm="syz.4.6166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2075.865421][ T30] audit: type=1326 audit(1767446710.729:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29199 comm="syz.4.6166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2076.311510][T29216] vivid-002: disconnect [ 2077.166567][T29211] vivid-002: reconnect [ 2077.317193][T19407] ft260 0003:0403:6030.00AD: failed to retrieve chip version [ 2077.325155][T19407] ft260 0003:0403:6030.00AD: probe with driver ft260 failed with error -71 [ 2077.375200][T19407] usb 5-1: USB disconnect, device number 67 [ 2078.363750][T21668] cgroup: fork rejected by pids controller in /syz6 [ 2078.588447][T29248] netlink: 'syz.2.6174': attribute type 10 has an invalid length. [ 2079.018854][T29248] batman_adv: batadv0: Removing interface: dummy0 [ 2079.461845][T29248] team0: Port device dummy0 added [ 2082.528288][T29281] netlink: 'syz.3.6182': attribute type 3 has an invalid length. [ 2083.025722][ T5149] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2083.043144][ T5149] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2083.053751][ T5149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2083.062277][ T5149] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2083.070909][ T5149] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2083.095706][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2083.105925][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2083.117539][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2083.125970][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2083.134417][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2084.280076][ T3556] bridge_slave_1: left allmulticast mode [ 2084.286934][ T3556] bridge_slave_1: left promiscuous mode [ 2084.331086][ T3556] bridge0: port 2(bridge_slave_1) entered disabled state [ 2084.412928][ T3556] bridge_slave_0: left allmulticast mode [ 2084.437968][ T3556] bridge_slave_0: left promiscuous mode [ 2084.456646][ T3556] bridge0: port 1(bridge_slave_0) entered disabled state [ 2084.746906][ T3556] ip6gretap0 (unregistering): left promiscuous mode [ 2084.895948][ T3556] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 2084.933769][ T3556] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 2084.966351][ T3556] bond2 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 72:20:71:7e:6c:62 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2085.197093][ T5842] Bluetooth: hci2: command tx timeout [ 2085.780452][ T3556] bond1 (unregistering): (slave gretap1): Releasing active interface [ 2086.064357][ T3556] dvmrp8 (unregistering): left allmulticast mode [ 2086.257762][ T3556] bridge0 (unregistering): left promiscuous mode [ 2086.496684][ T3556] bond1 (unregistering): (slave bridge1): Releasing active interface [ 2087.267116][ T5842] Bluetooth: hci2: command tx timeout [ 2087.329009][T29334] sctp: [Deprecated]: syz.5.6188 (pid 29334) Use of int in max_burst socket option. [ 2087.329009][T29334] Use struct sctp_assoc_value instead [ 2088.086636][ T3556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2088.098307][ T3556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2088.108580][ T3556] bond0 (unregistering): Released all slaves [ 2088.123598][ T3556] bond1 (unregistering): Released all slaves [ 2088.412936][ T3556] bond2 (unregistering): (slave veth3): Releasing backup interface [ 2088.426501][ T3556] bond2 (unregistering): Released all slaves [ 2088.566208][T29334] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 2088.630219][ T3556] : left promiscuous mode [ 2089.161486][T29291] chnl_net:caif_netlink_parms(): no params data found [ 2089.282400][T29348] fuse: Bad value for 'fd' [ 2089.347708][ T5842] Bluetooth: hci2: command tx timeout [ 2089.354141][ T3556] tipc: Left network mode [ 2089.540593][T29356] tc_dump_action: action bad kind [ 2089.551493][T29354] xt_bpf: check failed: parse error [ 2089.666323][T29348] nvme_fabrics: missing parameter 'transport=%s' [ 2089.672943][T29348] nvme_fabrics: missing parameter 'nqn=%s' [ 2091.267334][T29291] bridge0: port 1(bridge_slave_0) entered blocking state [ 2091.287122][T29291] bridge0: port 1(bridge_slave_0) entered disabled state [ 2091.325722][T29291] bridge_slave_0: entered allmulticast mode [ 2091.338691][T29291] bridge_slave_0: entered promiscuous mode [ 2091.431578][ T5842] Bluetooth: hci2: command tx timeout [ 2091.464136][T29291] bridge0: port 2(bridge_slave_1) entered blocking state [ 2091.504662][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 2091.504683][ T30] audit: type=1326 audit(1767446728.719:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29385 comm="syz.4.6195" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x0 [ 2091.673763][T29387] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2091.687948][T29291] bridge0: port 2(bridge_slave_1) entered disabled state [ 2091.695518][T29291] bridge_slave_1: entered allmulticast mode [ 2091.727122][T29291] bridge_slave_1: entered promiscuous mode [ 2092.314924][ T3556] hsr_slave_0: left promiscuous mode [ 2092.342427][ T3556] hsr_slave_1: left promiscuous mode [ 2092.381542][ T3556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2092.436117][ T3556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2093.419542][T29417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6197'. [ 2094.476059][ T3556] team0 (unregistering): Port device team_slave_1 removed [ 2094.564541][ T3556] team0 (unregistering): Port device team_slave_0 removed [ 2095.419884][T29291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2095.462278][T29416] ipip0: entered promiscuous mode [ 2095.470335][T29416] ipip0: entered allmulticast mode [ 2095.561342][T29291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2096.030752][T29291] team0: Port device team_slave_0 added [ 2096.041565][T29291] team0: Port device team_slave_1 added [ 2096.576905][T26044] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2096.926876][T26044] usb 5-1: Using ep0 maxpacket: 8 [ 2097.217776][T26044] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2097.237233][T26044] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2097.260968][T29291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2097.279771][T26044] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 2097.299934][T29291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2097.352353][T26044] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2097.365357][T26044] usb 5-1: Product: syz [ 2097.370760][T26044] usb 5-1: Manufacturer: syz [ 2097.377097][T26044] usb 5-1: SerialNumber: syz [ 2097.383354][T29291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2097.399897][T26044] usb 5-1: config 0 descriptor?? [ 2097.432310][T26044] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 2097.532868][T29291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2097.578085][T29291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2097.653103][T26044] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 2097.667703][T26044] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 2097.676956][T29291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2097.699497][T26044] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 2097.769222][ T3556] IPVS: stop unused estimator thread 0... [ 2098.101433][T29291] hsr_slave_0: entered promiscuous mode [ 2098.260201][T29291] hsr_slave_1: entered promiscuous mode [ 2098.288323][T29291] debugfs: 'hsr0' already exists in 'hsr' [ 2098.300943][T29291] Cannot create hsr debugfs directory [ 2098.752744][T29468] fuse: Bad value for 'fd' [ 2098.948889][T29468] nvme_fabrics: missing parameter 'transport=%s' [ 2098.960194][T29468] nvme_fabrics: missing parameter 'nqn=%s' [ 2100.140771][T19407] usb 5-1: USB disconnect, device number 68 [ 2102.410589][T29291] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2102.488461][T29291] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2102.661836][T29291] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2102.770662][T29291] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2103.720912][T29291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2103.900750][T29291] 8021q: adding VLAN 0 to HW filter on device team0 [ 2103.931587][T20633] bridge0: port 1(bridge_slave_0) entered blocking state [ 2103.938868][T20633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2104.284758][T23476] bridge0: port 2(bridge_slave_1) entered blocking state [ 2104.292361][T23476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2104.310337][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.317630][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2104.890446][T29291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2105.036108][T29550] 8021q: adding VLAN 0 to HW filter on device team0 [ 2105.309902][T29552] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2105.337782][T29552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2105.705736][T29550] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2106.023087][T29291] veth0_vlan: entered promiscuous mode [ 2106.221666][T29291] veth1_vlan: entered promiscuous mode [ 2106.349227][T29291] veth0_macvtap: entered promiscuous mode [ 2106.385089][T29291] veth1_macvtap: entered promiscuous mode [ 2106.397241][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2106.464728][T29291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2106.477193][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2106.685495][T29291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2106.780255][T25100] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2106.804231][T25100] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2106.838995][T25100] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2106.861953][T25100] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2107.105791][T29574] fuse: Bad value for 'fd' [ 2107.426895][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2107.517034][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2107.562282][T25100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2107.610317][T29574] nvme_fabrics: missing parameter 'transport=%s' [ 2107.617242][T29574] nvme_fabrics: missing parameter 'nqn=%s' [ 2107.627778][T25100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2107.966967][T26044] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2108.102610][ T6252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2108.125420][ T6252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2108.147769][T26044] usb 4-1: Using ep0 maxpacket: 8 [ 2108.185597][T26044] usb 4-1: config 1 has an invalid descriptor of length 75, skipping remainder of the config [ 2108.211750][T26044] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 13824, setting to 64 [ 2108.224241][T26044] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2108.331430][T26044] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2108.378579][T26044] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2108.431265][T26044] usb 4-1: Product: syz [ 2108.456904][T26044] usb 4-1: Manufacturer: syz [ 2108.461783][T26044] usb 4-1: SerialNumber: syz [ 2108.532407][T26044] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 2108.584350][T26044] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 2108.619450][T26044] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 2108.804674][ T5982] usb 4-1: USB disconnect, device number 49 [ 2109.197478][T29573] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 2109.484320][T29573] usb 7-1: Using ep0 maxpacket: 8 [ 2109.501998][T29573] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2109.952826][T29573] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2110.020397][T29573] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 2110.040275][T29573] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2110.136863][T29573] usb 7-1: Product: syz [ 2110.141529][T29573] usb 7-1: Manufacturer: syz [ 2110.146475][T29573] usb 7-1: SerialNumber: syz [ 2110.171260][T29573] usb 7-1: config 0 descriptor?? [ 2110.233811][T29573] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 found [ 2110.438328][T29573] snd_usb_toneport 7-1:0.0: cannot get proper max packet size [ 2110.446371][T29573] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 now disconnected [ 2110.535414][T29615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6224'. [ 2110.713041][T29573] snd_usb_toneport 7-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 2112.021876][ T5982] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 2112.165214][T29634] sctp: [Deprecated]: syz.2.6226 (pid 29634) Use of int in maxseg socket option. [ 2112.165214][T29634] Use struct sctp_assoc_value instead [ 2112.643006][ T5982] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2112.847173][ T5982] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 2113.731647][ T5982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2113.752964][ T5982] usb 6-1: Product: syz [ 2113.762658][ T5982] usb 6-1: Manufacturer: syz [ 2113.774543][ T5982] usb 6-1: SerialNumber: syz [ 2113.802135][ T5982] usb 6-1: config 0 descriptor?? [ 2113.873865][ T5982] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 2114.101572][T19407] usb 7-1: USB disconnect, device number 61 [ 2114.356310][T29657] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6228'. [ 2114.409388][T29645] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2114.444672][T29645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2114.615705][ T5919] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2114.705014][T29663] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 2114.716232][T29663] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2114.754692][T29646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2114.862710][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 2115.070997][ T5982] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 2115.084628][T29646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2115.143182][ T5919] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2115.167225][ T5982] gspca_pac7302 6-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 2115.194320][ T5919] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2115.255057][ T5919] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2115.279633][ T5919] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2115.506905][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2115.522435][ T5919] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2115.555517][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2115.566230][T29671] netlink: 'syz.2.6231': attribute type 5 has an invalid length. [ 2115.666591][T29671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6231'. [ 2115.716502][T29671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6231'. [ 2115.862352][ T5919] usb 4-1: GET_CAPABILITIES returned 0 [ 2115.891421][ T5919] usbtmc 4-1:16.0: can't read capabilities [ 2116.106545][T21751] bond5: (slave ip6gretap2): link status up again after 0 ms [ 2116.230494][T21751] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2116.357026][ T3556] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2116.546907][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2116.705629][ T5982] usb 6-1: USB disconnect, device number 65 [ 2116.717687][ T5956] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2116.931830][ T5956] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2117.047498][T20633] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2117.560338][T19407] usb 4-1: USB disconnect, device number 50 [ 2117.741077][T29694] pim6reg: entered allmulticast mode [ 2117.912583][ T30] audit: type=1326 audit(1767446755.079:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29692 comm="syz.6.6236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2117.983543][ T30] audit: type=1326 audit(1767446755.079:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29692 comm="syz.6.6236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2118.090113][ T30] audit: type=1326 audit(1767446755.079:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29692 comm="syz.6.6236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2118.257122][ T5919] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 2118.302030][ T30] audit: type=1326 audit(1767446755.079:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29692 comm="syz.6.6236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2118.458516][T29688] pim6reg: left allmulticast mode [ 2118.532264][ T30] audit: type=1326 audit(1767446755.079:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29692 comm="syz.6.6236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2118.596910][ T5919] usb 7-1: Using ep0 maxpacket: 32 [ 2118.621078][ T30] audit: type=1326 audit(1767446755.079:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29692 comm="syz.6.6236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2118.693156][ T5919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2118.754585][ T5919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2118.777504][ T30] audit: type=1326 audit(1767446755.079:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29692 comm="syz.6.6236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2118.785634][ T5919] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2118.913105][ T5919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2119.075329][ T30] audit: type=1326 audit(1767446755.079:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29692 comm="syz.6.6236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2119.187762][ T5919] usb 7-1: config 0 descriptor?? [ 2119.373092][ T30] audit: type=1326 audit(1767446755.089:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29692 comm="syz.6.6236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2119.507135][T23476] net_ratelimit: 14 callbacks suppressed [ 2119.507178][T23476] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2119.736945][ T30] audit: type=1326 audit(1767446755.089:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29692 comm="syz.6.6236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2119.790027][T21751] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2119.917111][ T7784] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2120.057016][T20633] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2120.177033][T20633] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2120.587250][T24514] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2120.700501][ T5919] ft260 0003:0403:6030.00AE: unknown main item tag 0x7 [ 2120.717281][T20633] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2120.847034][T20633] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2120.967533][T20633] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2121.284831][ T5919] ft260 0003:0403:6030.00AE: failed to retrieve chip version [ 2121.294925][ T5919] ft260 0003:0403:6030.00AE: probe with driver ft260 failed with error -32 [ 2121.408669][ T7784] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2123.247731][ T5919] usb 7-1: USB disconnect, device number 62 [ 2124.086920][ T5919] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 2124.256922][ T5919] usb 7-1: Using ep0 maxpacket: 8 [ 2124.290220][ T5919] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2124.303586][ T5919] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2124.325767][ T5919] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 2124.338175][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2124.347460][ T5919] usb 7-1: Product: syz [ 2124.363107][ T5919] usb 7-1: Manufacturer: syz [ 2124.373597][ T5919] usb 7-1: SerialNumber: syz [ 2124.456246][ T5919] usb 7-1: config 0 descriptor?? [ 2124.744835][ T5919] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 found [ 2124.767349][ T7784] net_ratelimit: 21 callbacks suppressed [ 2124.767372][ T7784] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2124.896955][ T7784] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2125.006949][ T7784] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2125.091913][ T5919] snd_usb_toneport 7-1:0.0: cannot get proper max packet size [ 2125.103112][ T5919] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 now disconnected [ 2125.179438][ T5919] snd_usb_toneport 7-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 2125.211806][ T6252] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2125.396891][T29573] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 2125.519193][T21751] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2125.665328][T21751] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2125.751162][T29573] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 2125.787890][T29573] usb 6-1: config 0 has no interface number 0 [ 2125.792580][ T3556] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2125.907918][T29573] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2125.978781][ T3556] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2126.034923][T29573] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2126.117139][T24514] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2126.143494][T29573] usb 6-1: Product: syz [ 2126.151460][T29573] usb 6-1: Manufacturer: syz [ 2126.156298][T29573] usb 6-1: SerialNumber: syz [ 2126.180503][T29573] usb 6-1: config 0 descriptor?? [ 2126.186981][T19403] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2126.227595][ T3556] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2126.377316][T19403] usb 5-1: Using ep0 maxpacket: 8 [ 2126.386562][T19403] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2126.402590][T19403] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2126.415498][T19403] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 2126.436385][T19403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2126.455302][T19403] usb 5-1: Product: syz [ 2126.477617][T19403] usb 5-1: Manufacturer: syz [ 2126.689169][T19403] usb 5-1: SerialNumber: syz [ 2126.737812][T19403] usb 5-1: config 0 descriptor?? [ 2126.762350][T19403] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 2126.974249][T19403] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 2126.994978][T19403] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 2127.048835][T19403] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 2127.851011][ T5982] usb 7-1: USB disconnect, device number 63 [ 2129.285821][T29573] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 2129.296360][T29573] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 2129.369036][T29573] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 2129.497196][T29573] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 2129.564508][T29573] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2129.657002][T29573] usb 6-1: USB disconnect, device number 66 [ 2129.684930][T29573] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2129.748624][T29573] keyspan 6-1:0.133: device disconnected [ 2129.807169][ T6252] net_ratelimit: 26 callbacks suppressed [ 2129.807189][ T6252] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2130.130724][T29803] QAT: failed to copy from user. [ 2130.349342][ T5982] usb 5-1: USB disconnect, device number 69 [ 2130.427049][T25100] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2130.615884][T29790] delete_channel: no stack [ 2131.028951][T21562] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2131.147155][T23476] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2131.667154][T21562] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2131.777200][T21562] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2131.897155][ T5978] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2132.007287][ T5978] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2132.127078][ T6252] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2132.271122][T24514] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 2133.191334][ T5982] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2133.209109][T23476] ================================================================== [ 2133.217261][T23476] BUG: KASAN: use-after-free in __linkwatch_run_queue+0x5b6/0x7e0 [ 2133.225220][T23476] Read of size 8 at addr ffff88802ae8cb88 by task kworker/u8:9/23476 [ 2133.233504][T23476] [ 2133.235861][T23476] CPU: 1 UID: 0 PID: 23476 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 2133.235886][T23476] Tainted: [L]=SOFTLOCKUP [ 2133.235893][T23476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2133.235905][T23476] Workqueue: events_unbound linkwatch_event [ 2133.235936][T23476] Call Trace: [ 2133.235947][T23476] [ 2133.235957][T23476] dump_stack_lvl+0xe8/0x150 [ 2133.235981][T23476] print_report+0xca/0x240 [ 2133.236000][T23476] ? __linkwatch_run_queue+0x5b6/0x7e0 [ 2133.236023][T23476] kasan_report+0x118/0x150 [ 2133.236045][T23476] ? __linkwatch_run_queue+0x5b6/0x7e0 [ 2133.236073][T23476] __linkwatch_run_queue+0x5b6/0x7e0 [ 2133.236099][T23476] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 2133.236125][T23476] ? process_scheduled_works+0x9ef/0x1770 [ 2133.236143][T23476] ? process_scheduled_works+0x9ef/0x1770 [ 2133.236161][T23476] linkwatch_event+0x4c/0x60 [ 2133.236184][T23476] process_scheduled_works+0xad1/0x1770 [ 2133.236213][T23476] ? __pfx_process_scheduled_works+0x10/0x10 [ 2133.236229][T23476] ? do_raw_spin_lock+0x121/0x290 [ 2133.236260][T23476] worker_thread+0x8a0/0xda0 [ 2133.236284][T23476] ? __kthread_parkme+0x7b/0x200 [ 2133.236307][T23476] kthread+0x711/0x8a0 [ 2133.236330][T23476] ? __pfx_worker_thread+0x10/0x10 [ 2133.236348][T23476] ? __pfx_kthread+0x10/0x10 [ 2133.236371][T23476] ? _raw_spin_unlock_irq+0x23/0x50 [ 2133.236398][T23476] ? __pfx_kthread+0x10/0x10 [ 2133.236426][T23476] ret_from_fork+0x510/0xa50 [ 2133.236445][T23476] ? __pfx_ret_from_fork+0x10/0x10 [ 2133.236460][T23476] ? __switch_to+0xc9e/0x1480 [ 2133.236485][T23476] ? __pfx_kthread+0x10/0x10 [ 2133.236507][T23476] ret_from_fork_asm+0x1a/0x30 [ 2133.236539][T23476] [ 2133.236546][T23476] [ 2133.406067][T23476] The buggy address belongs to the physical page: [ 2133.412513][T23476] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802ae8fa80 pfn:0x2ae8c [ 2133.422647][T23476] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 2133.429888][T23476] raw: 00fff00000000000 ffffea000110f908 ffff8880b8640c00 0000000000000000 [ 2133.438568][T23476] raw: ffff88802ae8fa80 0000000000000000 00000000ffffffff 0000000000000000 [ 2133.447181][T23476] page dumped because: kasan: bad access detected [ 2133.453615][T23476] page_owner tracks the page as freed [ 2133.459092][T23476] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x546dc0(GFP_USER|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP|__GFP_ACCOUNT), pid 29827, tgid 29825 (syz.5.6258), ts 2132380523970, free_ts 2133208998531 [ 2133.481398][T23476] post_alloc_hook+0x234/0x290 [ 2133.486199][T23476] get_page_from_freelist+0x24e0/0x2580 [ 2133.491768][T23476] __alloc_frozen_pages_noprof+0x181/0x370 [ 2133.497600][T23476] alloc_pages_mpol+0x232/0x4a0 [ 2133.502836][T23476] ___kmalloc_large_node+0x4e/0x150 [ 2133.508058][T23476] __kmalloc_large_node_noprof+0x18/0x90 [ 2133.513714][T23476] __kvmalloc_node_noprof+0x6e/0x920 [ 2133.519025][T23476] alloc_netdev_mqs+0xa6/0x11b0 [ 2133.523906][T23476] tun_set_iff+0x532/0xf00 [ 2133.528352][T23476] __tun_chr_ioctl+0x788/0x1df0 [ 2133.533227][T23476] __ia32_compat_sys_ioctl+0x543/0x840 [ 2133.538791][T23476] __do_fast_syscall_32+0x1dc/0x560 [ 2133.544098][T23476] do_fast_syscall_32+0x34/0x80 [ 2133.548973][T23476] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2133.555344][T23476] page last free pid 29825 tgid 29825 stack trace: [ 2133.561879][T23476] __free_frozen_pages+0xbc8/0xd30 [ 2133.567032][T23476] device_release+0x9e/0x1d0 [ 2133.571690][T23476] kobject_put+0x228/0x570 [ 2133.576225][T23476] netdev_run_todo+0xd2c/0xea0 [ 2133.581022][T23476] tun_chr_close+0x13c/0x1c0 [ 2133.585647][T23476] __fput+0x44c/0xa70 [ 2133.589660][T23476] task_work_run+0x1d4/0x260 [ 2133.594275][T23476] exit_to_user_mode_loop+0xef/0x4e0 [ 2133.599582][T23476] __do_fast_syscall_32+0x38e/0x560 [ 2133.604853][T23476] do_fast_syscall_32+0x34/0x80 [ 2133.609732][T23476] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2133.616093][T23476] [ 2133.618446][T23476] Memory state around the buggy address: [ 2133.624101][T23476] ffff88802ae8ca80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2133.632181][T23476] ffff88802ae8cb00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2133.640527][T23476] >ffff88802ae8cb80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2133.648695][T23476] ^ [ 2133.653092][T23476] ffff88802ae8cc00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2133.661412][T23476] ffff88802ae8cc80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2133.669675][T23476] ================================================================== [ 2133.783193][ T5982] usb 3-1: device descriptor read/64, error -71 [ 2133.947725][T23476] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2133.955069][T23476] CPU: 0 UID: 0 PID: 23476 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 2133.966206][T23476] Tainted: [L]=SOFTLOCKUP [ 2133.970732][T23476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2133.980830][T23476] Workqueue: events_unbound linkwatch_event [ 2133.986792][T23476] Call Trace: [ 2133.990098][T23476] [ 2133.993050][T23476] vpanic+0x1e0/0x670 [ 2133.997238][T23476] panic+0xb9/0xc0 [ 2134.001024][T23476] ? __pfx_panic+0x10/0x10 [ 2134.005486][T23476] ? preempt_schedule_thunk+0x16/0x30 [ 2134.010885][T23476] ? __linkwatch_run_queue+0x5b6/0x7e0 [ 2134.016494][T23476] check_panic_on_warn+0x89/0xb0 [ 2134.021468][T23476] ? __linkwatch_run_queue+0x5b6/0x7e0 [ 2134.026955][T23476] end_report+0x6f/0x140 [ 2134.031243][T23476] kasan_report+0x129/0x150 [ 2134.035801][T23476] ? __linkwatch_run_queue+0x5b6/0x7e0 [ 2134.041297][T23476] __linkwatch_run_queue+0x5b6/0x7e0 [ 2134.046609][T23476] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 2134.052448][T23476] ? process_scheduled_works+0x9ef/0x1770 [ 2134.058192][T23476] ? process_scheduled_works+0x9ef/0x1770 [ 2134.063930][T23476] linkwatch_event+0x4c/0x60 [ 2134.068545][T23476] process_scheduled_works+0xad1/0x1770 [ 2134.074126][T23476] ? __pfx_process_scheduled_works+0x10/0x10 [ 2134.080151][T23476] ? do_raw_spin_lock+0x121/0x290 [ 2134.085375][T23476] worker_thread+0x8a0/0xda0 [ 2134.089982][T23476] ? __kthread_parkme+0x7b/0x200 [ 2134.094933][T23476] kthread+0x711/0x8a0 [ 2134.099026][T23476] ? __pfx_worker_thread+0x10/0x10 [ 2134.104183][T23476] ? __pfx_kthread+0x10/0x10 [ 2134.108798][T23476] ? _raw_spin_unlock_irq+0x23/0x50 [ 2134.114025][T23476] ? __pfx_kthread+0x10/0x10 [ 2134.118633][T23476] ret_from_fork+0x510/0xa50 [ 2134.123231][T23476] ? __pfx_ret_from_fork+0x10/0x10 [ 2134.128346][T23476] ? __switch_to+0xc9e/0x1480 [ 2134.133070][T23476] ? __pfx_kthread+0x10/0x10 [ 2134.137866][T23476] ret_from_fork_asm+0x1a/0x30 [ 2134.142743][T23476] [ 2134.146475][T23476] Kernel Offset: disabled [ 2134.150832][T23476] Rebooting in 86400 seconds..