last executing test programs: 9m19.776305437s ago: executing program 1 (id=4227): syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0xb00) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r1 = socket$inet(0xa, 0x801, 0x84) socket$netlink(0x10, 0x3, 0x9) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xc) accept4(r1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x2040400) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) fsmount(r0, 0x0, 0xf) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r3], 0x40c}}, 0x0) 9m19.614400959s ago: executing program 1 (id=4229): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000006c0)={'broute\x00', 0x0, 0x0, 0x0, [0x7fff, 0x700000000, 0x1, 0x2, 0x2, 0x3], 0x1, 0x0, 0x0, [{}]}, 0x88) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) recvmmsg(r3, &(0x7f0000006a40)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x20a0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="b20a0500234802001c00128009000100626f6e64000000000c00028008001e"], 0x3c}, 0x1, 0x0, 0x0, 0x40885}, 0x20048004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYRESHEX], 0x0) 9m16.552138057s ago: executing program 1 (id=4243): socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$vim2m(&(0x7f0000000080), 0xe2, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) writev(r0, &(0x7f00000000c0), 0x0) 9m16.549413512s ago: executing program 1 (id=4244): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5892d}]}, 0x28}}, 0x4000) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r9, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="2a000000060000000000000000200000bc69645ba2c601000000050008000008"], 0x2a) syz_fuse_handle_req(r5, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b0000000000000000000000000000000000000000020000000000000000000000000000000000000020000000000000000002000"/62, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000380)={'\x00', 0x1, 0xd8d, 0x6, 0x5, 0x7, r7}) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x7f5, 0x2) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, {0x4}}]}]}, 0x58}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x8417f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) 9m14.917574934s ago: executing program 1 (id=4249): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="30003300c0000000ffffffffffff080211"], 0x54}, 0x1, 0x700000000000000}, 0x0) 9m14.808344022s ago: executing program 1 (id=4250): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080013"], 0x3c}}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x10, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x10}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = accept4$unix(r3, &(0x7f00000002c0), &(0x7f0000000380)=0x6e, 0xc0000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f00000003c0)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040)="5f856f1e92023169425e0094a2ab78287500a2fa70cf03a8a158865b7c1518b145", &(0x7f00000000c0)=@udp=r4, 0x4}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r6 = syz_usb_connect(0x2, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd3619204433f0224def010203010902400001020000000904"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000001380)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000306"], 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800) 8m59.57708358s ago: executing program 32 (id=4250): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080013"], 0x3c}}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x10, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x10}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = accept4$unix(r3, &(0x7f00000002c0), &(0x7f0000000380)=0x6e, 0xc0000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f00000003c0)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040)="5f856f1e92023169425e0094a2ab78287500a2fa70cf03a8a158865b7c1518b145", &(0x7f00000000c0)=@udp=r4, 0x4}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r6 = syz_usb_connect(0x2, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd3619204433f0224def010203010902400001020000000904"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000001380)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000306"], 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800) 4m37.030576635s ago: executing program 2 (id=5465): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x0, 0x5, 0x2, 0x0, 0x80000000, "f759e1006dc710000000d9fc6300", '\x00', "06000061", "e8cc1304", ["00e8ffffffffffffff00", "c2fe00408000", '\x00\x00\x00\t\t\x00\x00\x00\x00\x00\x00$', "0000005fc8000040001000"]}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mq_timedsend(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) (async, rerun: 32) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x24000000) (rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, 0x0) (async) mmap(&(0x7f00000ab000/0x2000)=nil, 0x2000, 0x2, 0x13, r3, 0x80927000) mmap(&(0x7f00000ab000/0x1000)=nil, 0x1000, 0x6, 0x11012, r3, 0xffffe000) (async) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x80, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x6}, 0x8, 0x80000000, 0x9, 0x0, 0x1, 0x101, 0x0}) getpeername$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x10) (async) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) socket$igmp(0x2, 0x3, 0x2) (rerun: 32) 4m36.407857169s ago: executing program 2 (id=5469): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000072009fb3000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="040001"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x10000}, 0x28) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f00000000c0)=@x={0x94, 0x7, "de331b629ae6"}) 4m35.466392265s ago: executing program 2 (id=5473): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2, 0x401a, 0x0, r2}, &(0x7f0000000500), &(0x7f0000ffe000)=0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000000, 0x7, &(0x7f0000000340)) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x1, 0xc00, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x0, 0x1}, 0x21, 0x2, 0x0, 0x0, "90bd38f4de9b969d99a2321a11808840004b4e1c537dc61119c864da8f5dc1f2b4c917d0253c6d108ba26575b5a650fb516c85af94f75c4299167d61bca1302f"}}, 0x80}, 0x1, 0x0, 0x0, 0x31e5c82bbd281ed0}, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100bbdade1100000000008000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000c038000000dc5a0ed20407f2bd0690bfe106dae015ddf047a63e388c3a17049dc942090000000000000018195704fd22e15c26b0555e6a957c3f2dc86a355f4806c9e4f761"], 0x80}}, 0x40000) sendmsg$can_bcm(r7, &(0x7f0000000840)={0x0, 0x41, &(0x7f0000000800)={&(0x7f0000000700)=ANY=[@ANYRES32=r0, @ANYRES8=r4, @ANYRESOCT=r1, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0100008001000000010000a0210200004205008375a76b7405708266578718c143917f0e5ae8812931ae1045ea157a793a0cad9e15c4aa3e1ff6e318066fb5ddd77fa697712909eb628ecadfb35211b35b1d50c18caad156fbf79ad98a3aae9a2ca6a3954c1def47087458ed60a07a7e2be27aa6f892fdf9d832a7da02a5c2c21b71ea5207b300f8643c51d782c9ca0a8a9602d972ca7811a480829e45f5f41ee9934aff55d5c61846ceb6295aac67711e974c"], 0x80}, 0x1, 0x0, 0x0, 0x4000045}, 0x8040) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000580)={0x38, 0x5, 0x10000008, 0x3, 0x0, 0x4000000000000b49, 0x9, 0xc, 0x2, 0x3}, 0x0) sched_getattr(0x0, &(0x7f00000008c0)={0x38}, 0xffffffffffffffca, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_eeprom={0x43, 0x1d2, 0x8000, 0xba, "98d38a5e3f3fffee4214ce01ece7578f23fd5022f7209a7e449d8580de439d1a285450817c90576abb4f4b54eb727299efc6e330672a6ebcd352e6266427a70307754c3b2cf55b7358b671f798214cff305550a011fcfee889e602744cf063aee13b9ab477696f4353a30cf9d17335570168d0a96428b802be61807ff0d3b5ee802e0377e8863b5d5d393a744b67161654451f01f042dcfce899a147a743ae88c054072102de04d0869c921381e18a246da45a0c5ddb6fb54431"}}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180), 0xfe) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x6, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x3e, &(0x7f0000000200)=""/62, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x2e, r2, 0x8, &(0x7f0000000240)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x0, &(0x7f00000002c0), 0x0, 0x10, 0x4}, 0x94) ioctl$BTRFS_IOC_LOGICAL_INO(r9, 0xc0389424, &(0x7f0000000480)={0x1, 0x10, '\x00', 0x0, &(0x7f0000000440)=[0x0, 0x0]}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x260, 0x180, 0xa, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x21}, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b040000000000000000020000002c0004802800018007000100633665465100028008000140000000020800024000000016080004400000000c0900010073797a"], 0x74}}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x4, 0x0) 4m32.474775204s ago: executing program 2 (id=5484): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010c0fdb033e52dadb133ee00090600"/30, @ANYRES32=0x0, @ANYBLOB="11900300000000001c00128009000100626f6e64000000000c0002800800130001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x82100, 0x0) mmap$fb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008, 0x810, r2, 0x7000) 4m31.055998781s ago: executing program 2 (id=5491): r0 = add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYRES8=r0, @ANYRESDEC=r2, @ANYRESOCT=r2, @ANYBLOB="761304d6ae8d3d1d231b915f43cd66566f826c59cbb4185132628db6aca424496a4bfed23403c13cd6fec66baedc54f4319547a76a2fea6bbb840dbb0c0c06df715f35256f800c637ab1fd5cfd9eb53d3194c45db86189fcb2cc94d57b551af94728d15a9273b92dbfdb925deb00ed97c2016a302b0bdb1cde8ad19d7f5c5441ab61af7f611f5ed97b3e143208d3ca2b04d36a2fff025f2ec74d7b283b6658d658d229be8cad791ce98813b8d9ac73f3ed9a3b338d48ba4756ae1d8645a00e4040a6cec859590d9f99aa7562410177d91f249d99034737e3", @ANYBLOB="0bc7ef849ea570e45f27cb673f91f3b981d8c25596bffb802cd30f33c760bed229a1514e1ecc2faec88c053380126f92b931b4c759fdb98668101d9d4e43bb62dce791a368288e3c2a116cdc5b48989a988699dc93664415211b91f5ae677f5600b1010c9fb5740e50ddd1df186fd33bf177b9a89b6c3716ee52c72de49e4af218f6bfcf33ccb81501e7518f790143fad4e288add844b0ec89bc09fca8e3110ff5ec17889cc55651f82d0081474a9ecbc56785d391b61756860d3cc6dab276c13f2b31649bd3fb6090520fd01f602b"], 0x1df) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000000050", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 4m31.035728978s ago: executing program 2 (id=5492): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x300, 0x1200, 0x0, 0x3) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "4cf90fba85c830e42a3ca4b10f01bbcb15f3806c4853e7c44a6974759d9f643905a56baa4195fb396d9bfa306999f1586e5d1ca49add100a36b751a7d9fe0b182ebf2c8a0e66f72c1c08260030752f07cd4089473e52885a3c85bacf3ccfac5bb9435fe036dcfccd7254bbd8bce90e2284d29e1f17d6652270fd0abcb8729f16ff602b438bd122a9e09984e2799d0dbfef7533d1a930ea4f4b57605ace45f5815450693650ae122d34aa0c5ca5e793516d156e5a5b34d6c17c40d753426a3d8e15e726d0f2622e873e0cbe63751bb62c68594d4cb0a21b92ad2e80f24a9b290a87ee6779022a0b7f5223e4e8c9f53f501ec8c439724078fdc076a51d50760566"}) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="4a1800000b00000081"]) 4m15.917162325s ago: executing program 33 (id=5492): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x300, 0x1200, 0x0, 0x3) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="4a1800000b00000081"]) 3m56.952997791s ago: executing program 3 (id=5613): socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) fsopen(&(0x7f0000000000)='ufs\x00', 0x1) socket$kcm(0x10, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000014000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) 3m56.741345067s ago: executing program 3 (id=5614): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x27, 0x803, 0xeffffff9) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000880)={&(0x7f0000000480)=@in={0x2, 0x4e24, @remote}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000580)="c380ad39f03fd99e5532a92466c5d337f246a659eea24ef924bcfee93ca01852b4e6d9706d2e4f50270dd5b8beaaaac54e4bfff18fce8de1f8663ce2b4fba9cebd23d72d56c4700a799a1677de5edc09f6b6ed67180d93449441895ac820779770c66827f19f83b344a27c7ce931dd44631a087478f677bdc979271298889a01ec7d2339167a0c6587880a274b691bc801afeae5bc8324cac5d516503f0e69bab4d788bb7dc98b2bbbbabecb", 0xac}, {&(0x7f0000000640)="8ef280ed4c18ed36d2cfaf458c4a1550cb9ea19e7bf03d8e50af2fcc6b8bc152ed005359ef2fc6b64247bd42a48b288a031244b0debe7fafa45b0b978d12cb02eeb72c7657f5af21ce28a8605b9eee3c", 0x50}, {&(0x7f00000003c0)="c4af33cb8e5066238cb6d947", 0xc}, {&(0x7f00000006c0)="882b139e9d0574689a5052b8ba60ff4adf5b2a6dbfca4b44f6ff91449cbd86ca10d4a589cf4680409262ac2ba1dd3fb5df480dc9de4de2c177f2dc4dd15d0b10029a9de9158414d9e2e923fdd572d94e5d6b0819f16a5e37f345bc379427e9280fedc9582af5dc99bc093c5419efee8ab7e339b138a3008a8dfdd0df62dbd097c7c30954bfff6ffa6399f18d3f00", 0x8e}], 0x4, &(0x7f00000007c0)=[{0x70, 0x10b, 0x8000000, "13f5f0e40f4993444c2d8b3788102fc6e792336abc58d73eac64117d69f00e9017be1d8db5019cf23db0bbbc0ff08883d87cc909ebd6eedf525e99d1b83cf76903797da2a2c39b3528c5179c747edd5da6177bc89afd610503"}], 0x70}, 0x8080) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) (async) r4 = socket$inet(0x2, 0x3, 0x2) (async) r5 = syz_open_dev$vcsa(&(0x7f0000000240), 0x3, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000340)={0x79, 0x0, 0x2ea}) (async) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r7, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r8 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) r10 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r10, 0x40045532, &(0x7f0000000840)) (async) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) (async) ppoll(&(0x7f0000000100), 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, &(0x7f0000000400)) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000440)={0x0, 0x2, 0xd, 0x4, 0x6, 0x1}, 0x14) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) 3m56.58185487s ago: executing program 3 (id=5617): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x5, 0x0) r1 = epoll_create1(0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000740)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback, 0x8e9}, {0xa, 0x0, 0x0, @local}, r3}}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000340)={0x5, 0x6, "c76956a1b0c3f1bbcf55e5ba2d4a97450cd8e0024af9a4b33ebdac3d40359b84", 0x7, 0x7, 0x4, 0xfffffffd, 0x303}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000400)={0x64, 0x3c, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x3f, 0x18, 0x0, 0x1, [@typed={0x8, 0x10a7, 0x0, 0x0, @u32}, @generic="7f95ef8e7b21620430343227c49290dc0a3ce7c8b8caecd18d384720b21db28301acbdb487dd5e03f9d8b6406a6de911d97c42"]}]}, 0x64}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3m55.588675837s ago: executing program 3 (id=5623): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) getsockname$packet(r0, 0x0, &(0x7f0000000440)) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000022c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e00000000000000060040000800000000400000", @ANYRES32, @ANYBLOB="000000000c0001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000000000002000000fdffffffffffffff0000000000000000"], 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0x2020) r2 = socket(0x2, 0x80805, 0x0) close(0x3) r3 = socket(0x2, 0x80805, 0xc0f) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000008c0)=@assoc_value={0x0, 0x1}, 0x8) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000280)={0x101, 0xe72, 0x2, 0x6, 0x4, 0x7fff}) r6 = socket$kcm(0xa, 0xd, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) splice(r7, 0x0, r8, 0x0, 0x8000000000000000, 0x6) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local={0xac, 0x14, 0x14, 0x64}}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa682c726}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000002280), 0x711600, 0x0) sysfs$3(0x3) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000000c0)={0x3, [0xfffe, 0x535, 0x2]}, &(0x7f0000000100)=0xa) 3m55.33189523s ago: executing program 3 (id=5625): add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRESDEC=r1, @ANYRESOCT=r1, @ANYRESDEC=r0, @ANYBLOB="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"], 0x1df) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 3m54.831929134s ago: executing program 3 (id=5628): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/reserved_size', 0x400200, 0x40) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000e3c30000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xf}, 0x94) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r2 = openat$vimc0(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000140)={0x1, 0x59565955, 0x1, @stepwise={0x7, 0x9, 0x2, 0x7, 0x3}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = fanotify_init(0x200, 0x0) write(r4, 0x0, 0x0) iopl(0xff) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="2016ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0xffffffff, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @private}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2c, 0x3501}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private=0xa010100}}]}, 0x50}}, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000543f4550182195f57584b3"], 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r8, 0xc00c4809, &(0x7f0000000180)={0x3, 0x200, 0x2}) 3m39.439877236s ago: executing program 34 (id=5628): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/reserved_size', 0x400200, 0x40) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000e3c30000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xf}, 0x94) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r2 = openat$vimc0(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000140)={0x1, 0x59565955, 0x1, @stepwise={0x7, 0x9, 0x2, 0x7, 0x3}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = fanotify_init(0x200, 0x0) write(r4, 0x0, 0x0) iopl(0xff) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="2016ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0xffffffff, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @private}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2c, 0x3501}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private=0xa010100}}]}, 0x50}}, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000543f4550182195f57584b3"], 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r8, 0xc00c4809, &(0x7f0000000180)={0x3, 0x200, 0x2}) 3m3.188668529s ago: executing program 7 (id=5786): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) mknodat(r2, &(0x7f0000000040)='./file0\x00', 0x8000, 0xfffffffc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002480), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x7}}]}}) read$FUSE(r2, &(0x7f00000062c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r8, 0x0, 0x0) syz_usb_control_io$sierra_net(r8, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x8, {0x8, 0x11, "e4ff14eca81f"}}, 0x0}, 0x0) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x29, 0x1, 0x20b61000, 0x0, 0x0, 0x0, 0xfffffff9}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000088c0)="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", 0x2000, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xf, {0x7, 0x7, 0x0, {0x0, 0x9, 0x3, 0x8, 0x0, 0x5, 0x3, 0x8, 0x9, 0xc000, 0xa91, r6, r7, 0x972}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_io_uring_setup(0x90d, &(0x7f0000000140)={0x0, 0x2a46, 0x20, 0x400003, 0x3, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000980)={{}, {}, [], {}, [{0x8, 0x6}]}, 0x2c, 0x0) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', &(0x7f0000000400)=""/254, 0x145) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xe4, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_USERDATA={0xb8, 0xc, "cedae3f1ffb302898f1a25abaf7f043a19d8c2c0c75a5a71a4c9db6fca78e992599bc54f60e5e577643f202f348ca2a5662fbd92c764b1f27f93246e7c5b55fc4da1bc3550c55dd372c4c618dc076cb4bc942fb7dc82788393d2632ef523c847c3e59d14a7740bdf64cdba601a27f22ddc070c15e2dbe1950b3bcf3bfe4fa7c97b813f1b8e576999dbb50490c52b9f44c64c0e3874f05d0057e34439f900fa9d5996c4cda2c94fd52452fbe9398cfd812bc4bab8"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x100}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8809}]}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x194}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142408000700e000000108000a00", @ANYRES32=r10], 0x48}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0x78, 0x65, 0x0, 0x9, 0x1, 0x0, @empty, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x15, 0x4, 0x1, 0x5, 0x3, 0x65, 0x174, 0xd, 0x73, 0x6, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x27, 0xdd, [@private=0xa010102, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x1d}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @lsrr={0x83, 0xf, 0xa5, [@local, @local, @multicast1]}]}}, "050000d03f506d00"}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 3m0.071964153s ago: executing program 7 (id=5799): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1f, 0x800, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r2, @ANYRESHEX], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0xeffffffd}, &(0x7f0000000240), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x21, &(0x7f0000000340)=r4, 0x1) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f00000003c0), 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f00000000c0)=r6) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 2m56.85991732s ago: executing program 7 (id=5812): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000002200)=""/266, 0x10a}, {&(0x7f0000000d40)=""/244, 0xf4}, {&(0x7f0000005300)=""/4047, 0xfcf}, {&(0x7f0000000f40)=""/209, 0xd1}, {&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f0000000440)=""/205, 0xcd}, {&(0x7f0000000a40)=""/190, 0xbe}, {&(0x7f0000000940)=""/198, 0xc6}], 0x8}, 0x40012100) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r1, 0x32d7, 0x0, 0x46, 0x0, 0x0) (async) io_uring_enter(r1, 0x32d7, 0x0, 0x46, 0x0, 0x0) 2m56.486097068s ago: executing program 7 (id=5815): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x9) 2m56.106747918s ago: executing program 7 (id=5818): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="b800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000900016806c0001800c000300"], 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 2m55.526197702s ago: executing program 7 (id=5820): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) (rerun: 32) r0 = syz_io_uring_setup(0x386, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xa0}}) (async) io_uring_enter(r0, 0x1002df1, 0x3e72, 0x4e, 0x0, 0x0) (async) select(0x40, &(0x7f0000000000)={0x9, 0x7, 0xffff, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f046}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) (async) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async) bind$inet(r10, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) (async) r11 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async) setsockopt$sock_int(r11, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r11, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000004200)=@newtfilter={0xec8, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe9c, 0x2, [@TCA_FW_ACT={0xe98, 0x4, [@m_pedit={0xe94, 0x1, 0x0, 0x0, {{0xa}, {0xe68, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x1, 0x7, 0xf, 0x8}, 0x3, 0x40}, [{0x1, 0x1, 0xacc3, 0x9, 0x2, 0x2aaaa9c1}, {0x8, 0x2, 0x5, 0x8, 0x8000, 0x5}, {0x484c, 0x5, 0xe72, 0x10000, 0x140000, 0x2ec0}, {0x1, 0x5, 0x401, 0xa, 0x7, 0x3}, {0x0, 0x1, 0x3, 0x7, 0x7, 0xc}, {0x4, 0x6adc, 0x5a5, 0xe, 0xe, 0x9}, {0x9, 0x3, 0x2, 0x5, 0x4, 0x64}, {0x10000, 0xffffff7f, 0xfffffffa, 0x3, 0x8}, {0x7, 0x1, 0x9, 0x80, 0xb44, 0xfffffff9}, {0x6, 0xfffffff9, 0x7fffffff, 0x32a8, 0x2, 0x1}, {0x1000, 0x8000, 0x2df6, 0x8, 0x7, 0x3}, {0x7fffffff, 0x1, 0x800, 0x8, 0x2, 0x2}, {0x1, 0xb1, 0x7, 0xe7, 0x1, 0x6}, {0x34, 0x9, 0x6, 0xa13, 0x0, 0x1}, {0xc8c863be, 0x7fff, 0x7, 0x8, 0x19c372c2, 0x3bfc7233}, {0x2, 0x0, 0x10000, 0x5, 0x1}, {0x6, 0x7, 0x1, 0x4, 0x921, 0x1000}, {0x6, 0x5ac5, 0x1c7, 0x304, 0x4, 0x4002d00}, {0x4, 0x9, 0xffff, 0x4, 0x1, 0x233}, {0x401, 0xffffffa6, 0x2, 0x7fffffff, 0xd9b, 0xfffffff9}, {0x8, 0x4db, 0x0, 0xe872, 0x3, 0xff}, {0x1, 0x9, 0xaddf, 0x200, 0x81a}, {0xd8, 0x10, 0x2, 0x7fffffff, 0x6, 0x4}, {0x3, 0x2, 0x3, 0x1, 0x8}, {0x0, 0x8, 0x80000001, 0x9, 0x0, 0x2}, {0x5, 0x8, 0x8, 0x3ffc, 0x0, 0xe6c}, {0x6, 0x400, 0xffffff9e, 0x2, 0x40, 0x5}, {0x4, 0x9, 0xd91, 0x1, 0x6, 0x1}, {0xc, 0xff, 0x3, 0x1, 0xb, 0xb}, {0x69ad7fb1, 0x0, 0x0, 0x81, 0x6100, 0x9}, {0x7a2, 0x8, 0x2338, 0x2, 0x5, 0xfffffff9}, {0x7, 0xfffffbff, 0x6, 0x7, 0x1, 0x9}, {0x7f, 0x1, 0x7, 0x9, 0x7, 0x5}, {0x1000, 0x1, 0xfffffff8, 0x9, 0x8, 0x200}, {0x3, 0x2, 0x3, 0x3, 0xb, 0x2}, {0x43b3, 0x883e, 0x1, 0x3, 0xffffff80, 0x95b7}, {0x4, 0x343, 0x2, 0x400, 0xfffffffc, 0x80000001}, {0x8, 0xcf, 0x1, 0x0, 0x9f, 0x6}, {0x400, 0x10, 0xa7, 0xc, 0x8, 0x1000}, {0x101, 0x5, 0x8, 0xa7, 0x7, 0xc84}, {0x4, 0x1, 0x5, 0x5, 0xfffffff8, 0x2}, {0x3, 0x9, 0x5, 0xffff, 0x7, 0xd}, {0x8, 0x9, 0xffffff39, 0x3, 0x8, 0x440}, {0x9, 0xb, 0x9, 0x2, 0x8, 0xa6fa}, {0xffff, 0x8ed, 0x9, 0x4, 0x3, 0x100}, {0x860, 0xfffffffb, 0xc0, 0x2, 0x9, 0x42d0}, {0xfffffffa, 0x1, 0xee, 0x8000, 0x1000, 0x40004}, {0x4, 0x90d2, 0x20000, 0x0, 0x8001, 0x646}, {0x1, 0x8, 0x0, 0x7, 0x9, 0x7}, {0x7ff, 0x0, 0x2, 0x9, 0x13d5, 0x6}, {0x3, 0x0, 0x6, 0x347, 0x8000}, {0x7, 0x8, 0xb76a, 0x6, 0x2, 0x6}, {0x7ff, 0x200, 0x6e, 0xb2, 0x80a7, 0x8001}, {0xd, 0x8, 0x0, 0x1, 0x9, 0x1}, {0x3b, 0x4, 0x0, 0xe686, 0x9, 0x400000}, {0x2, 0x2, 0xf4, 0x7, 0x3, 0x1}, {0x80, 0x3, 0x6, 0x10001, 0x0, 0xffffffff}, {0xd93, 0xf5, 0x3, 0x1, 0x6, 0x2}, {0x2, 0x2, 0x3cd6, 0x4, 0x1, 0x9}, {0x3, 0x6, 0x0, 0x5, 0xa, 0xffffff0f}, {0x7fff, 0x4, 0x8, 0x0, 0x6, 0x179436fe}, {0xb8a6, 0x0, 0x3, 0x9, 0x0, 0x51}, {0xe296, 0x7fff, 0x3, 0x2, 0xfff, 0xd}, {0x1, 0x6, 0x4, 0x6, 0x10000, 0xbd}, {0x9, 0x7f, 0x5744bcb9, 0xc, 0x10001, 0x8}, {0x2, 0x8, 0x6, 0x4, 0x2, 0xfb35}, {0x80000001, 0xb9a6, 0x1, 0x80, 0x1, 0x3f04}, {0x2, 0xffffffc0, 0xffff, 0x9, 0x300000, 0xc}, {0x2, 0x2, 0x8, 0x6, 0x5, 0x80000000}, {0x0, 0x19, 0x3, 0x0, 0xab6f, 0x9}, {0x80000001, 0x6, 0x760d, 0x80, 0x2, 0x8f7}, {0x471800, 0x3, 0x7, 0x1, 0x7, 0x6}, {0xa000000, 0x9, 0x8, 0x8000, 0xe0, 0x401}, {0xc, 0x7f, 0x4, 0x2, 0x1, 0x200}, {0xec55, 0x76, 0x6, 0x6c1f, 0x4, 0x8}, {0x7, 0x2, 0x8, 0xc9, 0xfffffffe, 0xe0}, {0x0, 0x3, 0x0, 0x2, 0x7, 0x3}, {0x8, 0x5, 0x9, 0x8, 0x3a4, 0x6}, {0xffc000, 0x10000, 0x1a4, 0x773, 0x2, 0xe2}, {0xe581, 0x8, 0x200, 0x9, 0xa9, 0x2}, {0x8, 0x7, 0x6, 0x4, 0x9, 0x88ff}, {0xa80, 0x6, 0x7fff, 0x2, 0xfffffff7, 0x2}, {0xa0, 0x81, 0x7, 0xfffffffe, 0x17, 0x8}, {0x3, 0x2d5, 0x7, 0x0, 0xf9f, 0x80000001}, {0xe, 0x7, 0x0, 0x9, 0xffff, 0x200}, {0x9, 0x7fffffff, 0x8, 0x9, 0x8, 0x5}, {0x7, 0x3, 0x5, 0x8, 0x1}, {0x3, 0x4, 0x1, 0xa, 0x1, 0x9}, {0x6, 0x0, 0x0, 0x7, 0x400000, 0xfffffffc}, {0x1, 0x3, 0x81, 0xff, 0x4, 0x4}, {0x3, 0x8a8, 0x8, 0x0, 0x8, 0xfffffffe}, {0x3, 0x82c, 0x2, 0x80000001, 0x9d, 0xfffffc00}, {0x0, 0x5, 0x3, 0x2009, 0x7, 0x8000}, {0x2, 0x8, 0x8, 0x0, 0x8, 0x2}, {0x4, 0x7, 0x7, 0x9, 0x7, 0x1000}, {0xfffffffa, 0xffffffff, 0x5, 0x4, 0x3, 0xa}, {0x3, 0x66c, 0xfffff001, 0x4, 0x6, 0x5c}, {0x0, 0x9, 0x7, 0x480f, 0x6, 0x1000}, {0x7fffffff, 0x0, 0x7b, 0x7fff, 0x80000001, 0x401}, {0x6, 0xc2, 0x3, 0x800, 0x1, 0x5}, {0x6, 0x7b5, 0x2, 0x2, 0xfffffffc, 0x7bc9}, {0x750, 0x2, 0x41a2, 0x6, 0x5, 0x20}, {0xf, 0x792c, 0xa4, 0x8, 0x8, 0x3}, {0x800, 0x27, 0x0, 0x2, 0x4, 0x1}, {0x2, 0x8, 0x401, 0x9, 0xe, 0xfffffff9}, {0x5, 0x4, 0x101, 0x1, 0x4, 0x8}, {0x3, 0xecd, 0x80, 0x9, 0x100, 0xdcc}, {0x2, 0xab2c, 0x80000000, 0x1a, 0x87, 0xf}, {0x6, 0x7ff, 0x81, 0x0, 0x1, 0x800}, {0x9, 0x9, 0x7fff, 0x200, 0x80000000, 0x7}, {0x10, 0x3, 0xdb, 0x400, 0x57, 0x1}, {0x8001, 0xffff, 0x3, 0x6, 0x2, 0x7}, {0x1, 0x10000, 0x1, 0x397a, 0xfffffffd, 0x7}, {0x80000001, 0x4, 0x5, 0xe6, 0x35c, 0x800}, {0x0, 0x101, 0x8, 0x401, 0x2, 0x7}, {0x9, 0x0, 0x23, 0x4, 0xe}, {0x8, 0x56c, 0xffff9586, 0xd, 0x9, 0xb}, {0x80000001, 0x7, 0x0, 0x2, 0x4, 0xe}, {0x0, 0x5, 0x80000001, 0xf8, 0x6, 0x2}, {0xa8, 0x101, 0x0, 0x8854, 0x5, 0x5}, {0x823, 0x9, 0x0, 0x5, 0x6f3, 0x800}, {0x3, 0x9, 0x1, 0x2, 0x9, 0x4}, {0x8, 0x0, 0x2, 0x80, 0x100, 0x4}, {0xfffff801, 0x1, 0xb, 0x7, 0x2, 0x453}, {0x8, 0x0, 0x1, 0x5d0ea327, 0x0, 0x8}, {0x7, 0x107, 0x3, 0x9, 0x8, 0x7}, {0x3, 0x5, 0x5, 0x1, 0x48, 0x1}, {0x3, 0x9, 0x93e8, 0x7, 0x9, 0x7fffffff}], [{0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x1}, {0x0, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x3}, {0x2}, {0x4}, {0x2}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {}, {0x4}, {0x3}, {0x4}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x5}, {}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x6, 0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0xf}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x9, 0x1}, {0x5}, {0x2}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x3, 0x9e6fab21fbfb7b49}, {0x3}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x44, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x4}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xec8}, 0x1, 0x0, 0x0, 0x81}, 0x800) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000180)={&(0x7f0000001000)={[{&(0x7f00000003c0)="14665d5ac713e8c2063a9af11f78a7631977f94befcc23eeb846cf0e9d213b917f47350a5eb8923cc4b9f51c9951e26ab480673cffb6b6228d35e53778299e03e459b79766176b1e7a7577ee5d7c49f6dd397e07e6fa4a1a33f2ff76fc1597d32fdba9fe0d2eb25fca61d817f90e024226fc3e469b9fa5758dfdc56f631f2776bd6e17921ec40940455e28de9a8c94625991e0dca8d333e53098f7989f38325058d235ebef760650bbe462c86170112880d82f8c97d2b8c286adf4b95124519c4b5e57d3106414d398549b20e2a8186dbe7da0f50eb435459145443e36477ba5be4754fcf2364022e2", 0xe9}, {&(0x7f0000000140)="377b4497f26ae5aa6c55bd5c8300c9ea01", 0x11, 0x3}, {&(0x7f00000004c0)="fed85a33c450919f47d0e1730d31b24200d8b220dbf9a8b78533f73ef7a886c7244a10a5cf00fd2c41c2e9190bc52166214f793116017dd58ea7c406a2afe54585fcaf58a07f50265f5ffcb3d621bfe4894bd590c966f223d9c4bf0023aa51b282c9f57d17f649d7a6d5e9d162babe8dafeb13136cc9f2252fa5d490f2f08110acae6ccf353e5a16fd626887993ee3e4c219794e3fe0c427ad3e5ed7cd4f20f07831bd4100e06731c0ffce3e98357d988ac099104c95926cb3e7157c14a618d18850a7356d2583bedcd136c7742a8c9079ebce27a7b2354f4ad3767b8e8258d4256b22d9a0d1a91aff85785138b29e27edf4514607", 0xf5}]}, 0x3, 0x2}, 0x1) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r14, 0x1c, 0x0, @in6={0xa, 0x4e20, 0xc1d, @empty, 0x9}}}, 0x90) (async) socket$xdp(0x2c, 0x3, 0x0) 2m39.798874969s ago: executing program 35 (id=5820): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) (rerun: 32) r0 = syz_io_uring_setup(0x386, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xa0}}) (async) io_uring_enter(r0, 0x1002df1, 0x3e72, 0x4e, 0x0, 0x0) (async) select(0x40, &(0x7f0000000000)={0x9, 0x7, 0xffff, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f046}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) (async) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async) bind$inet(r10, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) (async) r11 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async) setsockopt$sock_int(r11, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r11, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000004200)=@newtfilter={0xec8, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe9c, 0x2, [@TCA_FW_ACT={0xe98, 0x4, [@m_pedit={0xe94, 0x1, 0x0, 0x0, {{0xa}, {0xe68, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x1, 0x7, 0xf, 0x8}, 0x3, 0x40}, [{0x1, 0x1, 0xacc3, 0x9, 0x2, 0x2aaaa9c1}, {0x8, 0x2, 0x5, 0x8, 0x8000, 0x5}, {0x484c, 0x5, 0xe72, 0x10000, 0x140000, 0x2ec0}, {0x1, 0x5, 0x401, 0xa, 0x7, 0x3}, {0x0, 0x1, 0x3, 0x7, 0x7, 0xc}, {0x4, 0x6adc, 0x5a5, 0xe, 0xe, 0x9}, {0x9, 0x3, 0x2, 0x5, 0x4, 0x64}, {0x10000, 0xffffff7f, 0xfffffffa, 0x3, 0x8}, {0x7, 0x1, 0x9, 0x80, 0xb44, 0xfffffff9}, {0x6, 0xfffffff9, 0x7fffffff, 0x32a8, 0x2, 0x1}, {0x1000, 0x8000, 0x2df6, 0x8, 0x7, 0x3}, {0x7fffffff, 0x1, 0x800, 0x8, 0x2, 0x2}, {0x1, 0xb1, 0x7, 0xe7, 0x1, 0x6}, {0x34, 0x9, 0x6, 0xa13, 0x0, 0x1}, {0xc8c863be, 0x7fff, 0x7, 0x8, 0x19c372c2, 0x3bfc7233}, {0x2, 0x0, 0x10000, 0x5, 0x1}, {0x6, 0x7, 0x1, 0x4, 0x921, 0x1000}, {0x6, 0x5ac5, 0x1c7, 0x304, 0x4, 0x4002d00}, {0x4, 0x9, 0xffff, 0x4, 0x1, 0x233}, {0x401, 0xffffffa6, 0x2, 0x7fffffff, 0xd9b, 0xfffffff9}, {0x8, 0x4db, 0x0, 0xe872, 0x3, 0xff}, {0x1, 0x9, 0xaddf, 0x200, 0x81a}, {0xd8, 0x10, 0x2, 0x7fffffff, 0x6, 0x4}, {0x3, 0x2, 0x3, 0x1, 0x8}, {0x0, 0x8, 0x80000001, 0x9, 0x0, 0x2}, {0x5, 0x8, 0x8, 0x3ffc, 0x0, 0xe6c}, {0x6, 0x400, 0xffffff9e, 0x2, 0x40, 0x5}, {0x4, 0x9, 0xd91, 0x1, 0x6, 0x1}, {0xc, 0xff, 0x3, 0x1, 0xb, 0xb}, {0x69ad7fb1, 0x0, 0x0, 0x81, 0x6100, 0x9}, {0x7a2, 0x8, 0x2338, 0x2, 0x5, 0xfffffff9}, {0x7, 0xfffffbff, 0x6, 0x7, 0x1, 0x9}, {0x7f, 0x1, 0x7, 0x9, 0x7, 0x5}, {0x1000, 0x1, 0xfffffff8, 0x9, 0x8, 0x200}, {0x3, 0x2, 0x3, 0x3, 0xb, 0x2}, {0x43b3, 0x883e, 0x1, 0x3, 0xffffff80, 0x95b7}, {0x4, 0x343, 0x2, 0x400, 0xfffffffc, 0x80000001}, {0x8, 0xcf, 0x1, 0x0, 0x9f, 0x6}, {0x400, 0x10, 0xa7, 0xc, 0x8, 0x1000}, {0x101, 0x5, 0x8, 0xa7, 0x7, 0xc84}, {0x4, 0x1, 0x5, 0x5, 0xfffffff8, 0x2}, {0x3, 0x9, 0x5, 0xffff, 0x7, 0xd}, {0x8, 0x9, 0xffffff39, 0x3, 0x8, 0x440}, {0x9, 0xb, 0x9, 0x2, 0x8, 0xa6fa}, {0xffff, 0x8ed, 0x9, 0x4, 0x3, 0x100}, {0x860, 0xfffffffb, 0xc0, 0x2, 0x9, 0x42d0}, {0xfffffffa, 0x1, 0xee, 0x8000, 0x1000, 0x40004}, {0x4, 0x90d2, 0x20000, 0x0, 0x8001, 0x646}, {0x1, 0x8, 0x0, 0x7, 0x9, 0x7}, {0x7ff, 0x0, 0x2, 0x9, 0x13d5, 0x6}, {0x3, 0x0, 0x6, 0x347, 0x8000}, {0x7, 0x8, 0xb76a, 0x6, 0x2, 0x6}, {0x7ff, 0x200, 0x6e, 0xb2, 0x80a7, 0x8001}, {0xd, 0x8, 0x0, 0x1, 0x9, 0x1}, {0x3b, 0x4, 0x0, 0xe686, 0x9, 0x400000}, {0x2, 0x2, 0xf4, 0x7, 0x3, 0x1}, {0x80, 0x3, 0x6, 0x10001, 0x0, 0xffffffff}, {0xd93, 0xf5, 0x3, 0x1, 0x6, 0x2}, {0x2, 0x2, 0x3cd6, 0x4, 0x1, 0x9}, {0x3, 0x6, 0x0, 0x5, 0xa, 0xffffff0f}, {0x7fff, 0x4, 0x8, 0x0, 0x6, 0x179436fe}, {0xb8a6, 0x0, 0x3, 0x9, 0x0, 0x51}, {0xe296, 0x7fff, 0x3, 0x2, 0xfff, 0xd}, {0x1, 0x6, 0x4, 0x6, 0x10000, 0xbd}, {0x9, 0x7f, 0x5744bcb9, 0xc, 0x10001, 0x8}, {0x2, 0x8, 0x6, 0x4, 0x2, 0xfb35}, {0x80000001, 0xb9a6, 0x1, 0x80, 0x1, 0x3f04}, {0x2, 0xffffffc0, 0xffff, 0x9, 0x300000, 0xc}, {0x2, 0x2, 0x8, 0x6, 0x5, 0x80000000}, {0x0, 0x19, 0x3, 0x0, 0xab6f, 0x9}, {0x80000001, 0x6, 0x760d, 0x80, 0x2, 0x8f7}, {0x471800, 0x3, 0x7, 0x1, 0x7, 0x6}, {0xa000000, 0x9, 0x8, 0x8000, 0xe0, 0x401}, {0xc, 0x7f, 0x4, 0x2, 0x1, 0x200}, {0xec55, 0x76, 0x6, 0x6c1f, 0x4, 0x8}, {0x7, 0x2, 0x8, 0xc9, 0xfffffffe, 0xe0}, {0x0, 0x3, 0x0, 0x2, 0x7, 0x3}, {0x8, 0x5, 0x9, 0x8, 0x3a4, 0x6}, {0xffc000, 0x10000, 0x1a4, 0x773, 0x2, 0xe2}, {0xe581, 0x8, 0x200, 0x9, 0xa9, 0x2}, {0x8, 0x7, 0x6, 0x4, 0x9, 0x88ff}, {0xa80, 0x6, 0x7fff, 0x2, 0xfffffff7, 0x2}, {0xa0, 0x81, 0x7, 0xfffffffe, 0x17, 0x8}, {0x3, 0x2d5, 0x7, 0x0, 0xf9f, 0x80000001}, {0xe, 0x7, 0x0, 0x9, 0xffff, 0x200}, {0x9, 0x7fffffff, 0x8, 0x9, 0x8, 0x5}, {0x7, 0x3, 0x5, 0x8, 0x1}, {0x3, 0x4, 0x1, 0xa, 0x1, 0x9}, {0x6, 0x0, 0x0, 0x7, 0x400000, 0xfffffffc}, {0x1, 0x3, 0x81, 0xff, 0x4, 0x4}, {0x3, 0x8a8, 0x8, 0x0, 0x8, 0xfffffffe}, {0x3, 0x82c, 0x2, 0x80000001, 0x9d, 0xfffffc00}, {0x0, 0x5, 0x3, 0x2009, 0x7, 0x8000}, {0x2, 0x8, 0x8, 0x0, 0x8, 0x2}, {0x4, 0x7, 0x7, 0x9, 0x7, 0x1000}, {0xfffffffa, 0xffffffff, 0x5, 0x4, 0x3, 0xa}, {0x3, 0x66c, 0xfffff001, 0x4, 0x6, 0x5c}, {0x0, 0x9, 0x7, 0x480f, 0x6, 0x1000}, {0x7fffffff, 0x0, 0x7b, 0x7fff, 0x80000001, 0x401}, {0x6, 0xc2, 0x3, 0x800, 0x1, 0x5}, {0x6, 0x7b5, 0x2, 0x2, 0xfffffffc, 0x7bc9}, {0x750, 0x2, 0x41a2, 0x6, 0x5, 0x20}, {0xf, 0x792c, 0xa4, 0x8, 0x8, 0x3}, {0x800, 0x27, 0x0, 0x2, 0x4, 0x1}, {0x2, 0x8, 0x401, 0x9, 0xe, 0xfffffff9}, {0x5, 0x4, 0x101, 0x1, 0x4, 0x8}, {0x3, 0xecd, 0x80, 0x9, 0x100, 0xdcc}, {0x2, 0xab2c, 0x80000000, 0x1a, 0x87, 0xf}, {0x6, 0x7ff, 0x81, 0x0, 0x1, 0x800}, {0x9, 0x9, 0x7fff, 0x200, 0x80000000, 0x7}, {0x10, 0x3, 0xdb, 0x400, 0x57, 0x1}, {0x8001, 0xffff, 0x3, 0x6, 0x2, 0x7}, {0x1, 0x10000, 0x1, 0x397a, 0xfffffffd, 0x7}, {0x80000001, 0x4, 0x5, 0xe6, 0x35c, 0x800}, {0x0, 0x101, 0x8, 0x401, 0x2, 0x7}, {0x9, 0x0, 0x23, 0x4, 0xe}, {0x8, 0x56c, 0xffff9586, 0xd, 0x9, 0xb}, {0x80000001, 0x7, 0x0, 0x2, 0x4, 0xe}, {0x0, 0x5, 0x80000001, 0xf8, 0x6, 0x2}, {0xa8, 0x101, 0x0, 0x8854, 0x5, 0x5}, {0x823, 0x9, 0x0, 0x5, 0x6f3, 0x800}, {0x3, 0x9, 0x1, 0x2, 0x9, 0x4}, {0x8, 0x0, 0x2, 0x80, 0x100, 0x4}, {0xfffff801, 0x1, 0xb, 0x7, 0x2, 0x453}, {0x8, 0x0, 0x1, 0x5d0ea327, 0x0, 0x8}, {0x7, 0x107, 0x3, 0x9, 0x8, 0x7}, {0x3, 0x5, 0x5, 0x1, 0x48, 0x1}, {0x3, 0x9, 0x93e8, 0x7, 0x9, 0x7fffffff}], [{0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x1}, {0x0, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x3}, {0x2}, {0x4}, {0x2}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {}, {0x4}, {0x3}, {0x4}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x5}, {}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x6, 0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0xf}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x9, 0x1}, {0x5}, {0x2}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x3, 0x9e6fab21fbfb7b49}, {0x3}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x44, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x4}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xec8}, 0x1, 0x0, 0x0, 0x81}, 0x800) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000180)={&(0x7f0000001000)={[{&(0x7f00000003c0)="14665d5ac713e8c2063a9af11f78a7631977f94befcc23eeb846cf0e9d213b917f47350a5eb8923cc4b9f51c9951e26ab480673cffb6b6228d35e53778299e03e459b79766176b1e7a7577ee5d7c49f6dd397e07e6fa4a1a33f2ff76fc1597d32fdba9fe0d2eb25fca61d817f90e024226fc3e469b9fa5758dfdc56f631f2776bd6e17921ec40940455e28de9a8c94625991e0dca8d333e53098f7989f38325058d235ebef760650bbe462c86170112880d82f8c97d2b8c286adf4b95124519c4b5e57d3106414d398549b20e2a8186dbe7da0f50eb435459145443e36477ba5be4754fcf2364022e2", 0xe9}, {&(0x7f0000000140)="377b4497f26ae5aa6c55bd5c8300c9ea01", 0x11, 0x3}, {&(0x7f00000004c0)="fed85a33c450919f47d0e1730d31b24200d8b220dbf9a8b78533f73ef7a886c7244a10a5cf00fd2c41c2e9190bc52166214f793116017dd58ea7c406a2afe54585fcaf58a07f50265f5ffcb3d621bfe4894bd590c966f223d9c4bf0023aa51b282c9f57d17f649d7a6d5e9d162babe8dafeb13136cc9f2252fa5d490f2f08110acae6ccf353e5a16fd626887993ee3e4c219794e3fe0c427ad3e5ed7cd4f20f07831bd4100e06731c0ffce3e98357d988ac099104c95926cb3e7157c14a618d18850a7356d2583bedcd136c7742a8c9079ebce27a7b2354f4ad3767b8e8258d4256b22d9a0d1a91aff85785138b29e27edf4514607", 0xf5}]}, 0x3, 0x2}, 0x1) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r14, 0x1c, 0x0, @in6={0xa, 0x4e20, 0xc1d, @empty, 0x9}}}, 0x90) (async) socket$xdp(0x2c, 0x3, 0x0) 13.828554817s ago: executing program 5 (id=6427): socket$inet(0x2, 0x1, 0x100) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000140), 0x80) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004479bb10b10e0770000201020301090212"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) pselect6(0x40, &(0x7f0000000000)={0x6, 0x100000001, 0x3, 0xfffffffd, 0x2627bc41, 0xba4, 0x3, 0xfffffffffffffff8}, 0x0, &(0x7f00000000c0)={0x7ff, 0xfffffffffffffffc, 0x0, 0xffffffff, 0xffffffffffffffff, 0x6, 0x1, 0x7f}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r5 = syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x7, 0x8000) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f00000005c0)={0x0, 0x9, 0x9, 0x0, 0x3d, 0x17, 0x3, 0x2, 0x7f, 0x0, 0x6, 0x1}) connect$unix(r4, &(0x7f0000000540)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) syz_usb_connect(0x2, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101efff020dbc123c050d4951bcca3fca6f3bebc2afe9"], 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000180)="994dde821359e46cc95eb85f6da35560b0dccd6134756bb03ccea435320e2090c545bd31b04cab31956499a4665ad895c3a8364b1a2cca082bbf96b177598f35156e157e1d1cdab4382990890039881e844548aa199329d31e41c23aff3f175ee901d2310bb6392128502be70b595df8d46b0c90161d91c93c56f36ce14ee1a5ef399a3699d59c6c18f8d3ba454e7c3cc8bbe690f6bf1f0d52023e41005f92ebf56172f38eef08940a83739987f0a1f9935434c8fcfb5472053eabcef21bb50e7a200f730231c264253b7df6825cf9f3", 0xd0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[r6], 0x1, 0x800}) 10.899563472s ago: executing program 5 (id=6437): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000010ac05620200000000000109022400080000500309040002010300000009210000500122f8040905810300"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 9.365001652s ago: executing program 0 (id=6438): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000140)={0x1, @pix={0x3, 0x5, 0x30314742, 0x1, 0x0, 0xffffffff, 0x9, 0x7, 0x0, 0x3, 0x2}}) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140), 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0xfffffffffffffe63, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201bcc0afcf1740d2191800622b01020301090212000119050008"], &(0x7f0000000f00)={0xfe5f, 0x0, 0x0, 0x0}) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r4, 0x2, 0x5001) 8.793564283s ago: executing program 5 (id=6442): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee000000000000", 0x53}], 0x1) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000002c0)={0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r2], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) fcntl$setstatus(r2, 0x4, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="e0b9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r3, 0x550c, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000080)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="400000000000653047ff759ade9375b732ebed0659247463aa1ca76895e6a8d32baec40641ada6186003dcb6f58b9e79a2b24b56f5d707b8132d9623012731071f11f017d33ad6a2a953ce17688c189a4c9bb79249c0e4e180c8d332e06f2dd7f1e69979e3f722910a25b633e250eab14c6080abde4c83c5a81fea4ee1af68"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000100)="88", 0x1}], 0x1) 8.527912091s ago: executing program 8 (id=6443): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = gettid() tkill(r1, 0x11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) semget$private(0x0, 0x5, 0x1a4) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r4 = syz_io_uring_setup(0x5370, &(0x7f0000000a80)={0x0, 0x0, 0x200, 0x40, 0xfffffffb}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) sendmsg$unix(r2, &(0x7f0000000780)={&(0x7f0000000a00)=@abs={0xdc5d84db4e0d8ff2, 0x0, 0x4e21}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000200)="b6dfbabef5c6236520e67a7599a821ebbae8a3c3cc256499", 0x18}, {&(0x7f0000000380)="d72936bfdd3c2b964fc4e7d631da86b2f70a29acf2223ab4ba32f96511adbc5f7ca847be135b8261dae90dccfbfa9b3fa7671fe2db2e7f54e65d70f93ca64df9977123d66ac25b33f05e85ad33f9c43183fc908251a591ed4b00"/104, 0x68}, {&(0x7f0000000340)="d45f98474e05618400abc4b5", 0xc}, {0x0}, {&(0x7f00000004c0)="0a1f6058f2940e57bf7d17373739558a984daa8b3fa06dcc42caf7693577dc5312ace9369989c3373f4c22b29d72e348841083ca9377fbc80cb3fc0b551fbc55f42abb5375fdc6157609289356f03129fb959dcc29ed980e5579083d31ab4f466576b2fd92949db9faaa5097c13001630c027c2a8fbc95a0867a7f1495089b13448649203f090c73be68e733f313dcc9d3e9c84a3da8d50a7f56c399a6315b0f52908d1ace5d6d97b0d284bf933fba07b5ab41adb420625cedf190238937", 0xbe}, {&(0x7f0000000580)}, {&(0x7f0000000640)="84b69967ec6906b97ea51b7210ea1c96d6a8ee3883ede75d7bc6494c520c042b650674606426de486e6ba909678213ef79e2bb7a04604babd6b262025ec316940f8d38a999e39d0a0b6feb78ece3ee328233efebe358401f095b0bb94fcb78cb9f175c99f0a2613c4b6980cb32b8689449b581f0a578b44ccb9712f37d466260e8b5b4537cc173ed42aa413a2c8d94d306c21e6b4ef0c4b1e67ebc5bc36529652b9a01752352b0cefd974455", 0xac}], 0x7, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r4, @ANYRES16=r0, @ANYRESDEC=r4], 0x30}, 0x1) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b1", 0x19}) io_uring_enter(r4, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r7 = signalfd4(r0, 0x0, 0x0, 0x80000) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r8, &(0x7f0000001600)={0xbb, 0x6, 0x0, {0x4000005, 0x1, 0xfffffffffffffe09, 0x0, 'o\xbayg/sync/in\x01\x80\x00\x13\xc3\\-v\x18\xe6\xff\xf8\xa4%\xbd\xa1;%\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbd\xe38{\xa3\x1b\xb8\xb0]\xef\xa9\xbb7\xa3\x01\x00\x00\x00\xc7\x8f\x05\xaf\x19=_\x9b!\xd2\x87\xc7ki\x81\xca\x9a:T\xd9\xeb\xe0E\xd1\x88*\x9fL\xc19\xba\x8b\xe3h6\x84\x9c\xf2\x03*\xbc\xf2;~\xda\x9e\x12d\xd6?\x1ct!^\xae\t\x00\x00\x00\xcc\x89\x14\xa2h-\x00'/138}}, 0xbb) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="e99633d7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r9, 0x0, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0xfff}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, 0x0, &(0x7f0000000480)) 7.071402111s ago: executing program 0 (id=6446): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) openat(0xffffffffffffff9c, 0x0, 0x64040, 0xd0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020}, 0x2020) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100008) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) 6.167789565s ago: executing program 5 (id=6450): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4f}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r0 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @loopback}, 0x10) socket$inet6(0xa, 0x3, 0x9) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) syz_usb_connect(0x1, 0xe30, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0xf8, 0xf6, 0x40, 0x40, 0x5c6, 0x9215, 0x14db, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xe1e, 0x4, 0x1, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x5b, 0x6b, 0xb, 0xed, 0x3c, 0xc9, 0x4, [@generic={0x22, 0x3, "b26e1d682d31a6d17273488e01507b7af0d89b3e35884a2c65401e173cfdf9be"}], [{{0x9, 0x5, 0x40c056466f658967, 0x18, 0x40, 0x3, 0xed, 0x7}}, {{0x9, 0x5, 0x6, 0x0, 0x260, 0x0, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xe, 0x8}]}}, {{0x9, 0x5, 0xe, 0x4, 0x10, 0x9, 0x10, 0x35}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x0, 0x3c, 0x3, [@generic={0xfe, 0xe, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xfc, 0x100}]}}, {{0x9, 0x5, 0xb, 0x1, 0x8, 0xd1, 0x7, 0x4}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x44, 0x1, 0x81}}, {{0x9, 0x5, 0x5, 0x8, 0x10, 0xfc, 0xd, 0x6, [@generic={0x56, 0x3, "21fda9f94751dacb1c2c5dd08fb01f368426646e8f1863fa70adbca72183024408df1ac6e6fdcfd65c53ef0fa4440ebfe08c42d02bbdbb863f3ff1b5a532b076185e31adefad8868cd4bc2aaa39d37467d67d22e"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x6, 0xe5, 0x9}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0x40, 0x3c, 0x80, [@generic={0xd1, 0x9, "0dbcb643ba30f78e5aa03b85ca970dcf5e8a15d00842c1989a3bb761435f2a80297ba31b2f0841ac859df1eb5f69e7db50748816c196f46dbb1bc72a85112d52a020bdc097674e07cd36fa9b94882dec1f73fe617754793e2e483652c133858ab62e8463d12b45012c1d2ca77ea780f664b5d95a9e447a166fd8b17a1781d9e2ee4b9dc01d6c5cee81abe820205ea318246bd8c3be744c80f0f3bf2cdc866d210c749ab04fae03160ba70c7ed80b23b0d551d9bd4875664d00719d4f857fc337cce063a872a567178b6f6e0e77b00f"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xe}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0x0, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x8}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0xa, 0x56, 0xaa, [@generic={0x92, 0xe, "f2b3c7b8c071d7587a28a4a4bee1f73aaf35e42c678d537a1ed6400810eaaf2b28dddbba1fc159ea7594cd1e91ab61dc71cbb5f14f45ace04554f9d9fc0feb848ff7a443f9aaa14014b1b27a60c10f1f6eb83e93a01f2dffacbb00613965034e99e31877c92cb49e1f96714679fabaf16fad9fdb3cb97ce24f52e7eb17e7cfd714f730ee69dfbc33583002b75f5f49c6"}, @generic={0x1a, 0xd, "559509cd6bb714e9caf321aa82459d7d7cb784cbebbe2230"}]}}]}}, {{0x9, 0x4, 0x6, 0x6, 0x9, 0x62, 0x85, 0x20, 0x0, [], [{{0x9, 0x5, 0x80, 0x0, 0x40, 0x9, 0x7, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xa}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x3, 0x60, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0xfffa}, @uac_iso={0x7, 0x25, 0x1, 0x183, 0x9, 0xffff}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0xa3, 0x40, 0x8, [@generic={0x7b, 0x1, "895d9c0075e56252b28962ea85c50b90494fc501451e47d43494834b4ba1173f3408de855155543b56c43d9e85ac34532cc596a2180f893e604b7c9cdb7b1ed495476b827b6c25e349126109a47dbb651800d69a2e295a50c02e52085d883334897ea88efda53729e25036aa674159b715e2bdc084e05e8a41"}, @generic={0x5d, 0x5, "b9ad436f860000233d708166b17638e03d9666fdfc984fff56c255d91da58b37b5bbd1606eb916ba94fd3e6acae928b28232f39550af176a6eaf9c8fff5555c87aef713b5ba4a3bb4b809c2af71bd39aa486730268b434e0adbe8c"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x5, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x9}, @generic={0xa8, 0x11, "c9680238dc7089ca6bfa707536b9262a7f200677324ac861a1dcf602f4b0ffbdd0d596013481aabe179a9598b9e32369da9bc3b0ca5311fdf7fd9c8b3d434d85fe239a99258f0513c343098109fefb184d635bddf86f569f9982584225a3371d84cbb7221978353822c24e1130cc0c12ab29649d91e2720571904f1da9783d75ed8ccb63f256b9473ded1ec55f03d35f41e9439915ccb7db8d419740d534551611830a8ed380"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x20, 0x1, 0x7, 0xe8, [@generic={0x91, 0xd, "10f479069c247e8b55b9dcc1e1173377e54200821437ae9e029e255f80b25c574ab6826a6a729671498ca95166cb205ec0cea4b542555479199c0d85aa8b4daab48ce60f30dd5713eeb6d7b8daaf8f3a63660e67a1f7259f31b8f910d1b8d63037593ddce63beba9eddb67671f75b12e0cd244415107b929f67ef78736aed3d5b2149be04efae485ec4caef1f09989"}, @generic={0xf5, 0x22, "ab2f118df3a1ea3a9a97772d82bd6fd91ff278deb6d3becff7a23df563ae2bbab3a3fddd5f0ee0edaf24b2f1e4c0f059b1afad04b7c3ebbaa884dd5fd96e8d6a439359431fc0381675ccc953dce313b7ba337023b72effd77e348d9616c51ce638f9c334d6b1f5eeb7d7b20a40dc597270f5b159c513415be2a1f0310f6d9a2017db550f9f17ba34d8031df8bb5375a668b5bc33239dea7c467ffd38b55e00c34689b3fa58eef6ca75b3894893277db0f81dd5e78d22d583687e4f306c8232450c47cf639645c08bcf4b5df7aab1e9659628f263287c04ab20bdabbdcda5e4c6dddbbb1d8b492b18690475c097574017710fa3"}]}}, {{0x9, 0x5, 0xf, 0x20, 0x8, 0x50, 0xfd, 0xff}}, {{0x9, 0x5, 0xa, 0xc, 0x10, 0x80, 0xf, 0x1, [@generic={0x28, 0x22, "670076e2e48bf3d63eb2187b06f53bb282d97826d2e8473c02b0e3b94291599a6f017161afcb"}, @generic={0x33, 0x2, "e8af0199a9c2ee8183cadb36394842450b604ff07f2d6825d5624b6ba002005f2141a4c4905056ddb92ca80cea2d595275"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x9, 0x8, 0x72, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x5}, @generic={0x47, 0x7, "45ad783870124bdf0ce25f8868344e52e3dad95cf6d63f1628403c560f6a840d8357698ad937a82b02edabb9310d1c282054adc4f433ce8604ba01caebd33a15b028ec256d"}]}}, {{0x9, 0x5, 0x8, 0x13, 0x200, 0x3, 0x2, 0xd7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xfffb}]}}]}}, {{0x9, 0x4, 0x95, 0x5, 0xf, 0x6d, 0xe2, 0xab, 0x2, [@generic={0xc9, 0x22, "c7f2bee03acebd52b2627919a9e8f026a56448d47da12480a73b441935f169bd5133b070871ad48266032f8cbda9e4ffa17d331ebb99701370c7cc2343ce1e3e011456228591b3a55eed6fcb90429b8291f0c7eda0716809ac7de6f66179a681d087ff8bf20769f06e377a039470df838e07c267b01899f0d5c4a8ffe2503c8e0a07338188c73d246771efce5720dbf40ff474280382e0c364ddfb7922de3e62803c52809ea4d606f5aa4bf6d7154244633a0837ff0d11bb37d05a71b3bc71cb5c3d6c7ce0ffe7"}], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x5, 0xf7, 0xef, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0xfe37}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0xe8, 0x90, 0x5, [@generic={0x57, 0x7, "c81695fc7af012357e7f3681f85b67d81aa3050702d673c453810fb59c688e3f727505ed5f655f4bbac8601978f19c1b3ab2b66e233c443fe6c5283b6cd9f67150b468b1c769b55c0f397a63b5b284481f5818446a"}, @generic={0x77, 0x21, "fe730118d50a00bc037364332ab3354c1bb4f6e0afad9849fa86f76550bd49f1a48485b2bbe9f4ddb9496db7e2d9346b733a9a2fcb09f59ad3364c7c7ed3a924cebcab691fcc04483335dbe3dbe00d4963abda7dda0698fb869cbc579e8df804204900fd7acaadb0759fb180918a22bd04982d641f"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x9, 0x0, 0x8}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0xc8, 0x5, 0x2b}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x7f, 0xe, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x10}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0xfe, 0x50, 0xe3, [@generic={0xaa, 0x4, "0b843eadf15dcd2880e7ba764914ef01425c977c228e8aa9faf47c6023e5b3d9c4deeaa794426c9ba6cbb13200e83e73a04ea5de8979bfeb79b8d1c06c3667a085537d186f84b76a4afc7669a0650167d2369b1e00e114efd74536db3526f3c5ab0b07e8f39a5b11352391b383eb8b1dd060e8c69ea488a12430258d9726a2451b5c2eeb008a3131d17531d38dfb6c9ccb0a12a7c2cb49cf75cf67eb8765f5f6f338a52dabe0b090"}, @uac_iso={0x7, 0x25, 0x1, 0x100, 0x9}]}}, {{0x9, 0x5, 0xb, 0x2, 0x40, 0x31, 0x9, 0x9b}}, {{0x9, 0x5, 0xc, 0xc, 0x3ff, 0x1, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x57, 0xab}]}}, {{0x9, 0x5, 0xd, 0x8, 0x400, 0xe7, 0x5, 0xa3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x5}, @generic={0x79, 0x7, "ec53413d71f529cd25212dd5abd4139f9c979e4091b8d418606b5518e00003e39e2ecad80c3027cf37f510039efde697669aaa6781c2254045f9c2be1e92b870a3439526db9b762ae2b16300549191939900eafde1007ad233959c481c14f0d29481fb2c59ffbd15cd70baea68966f8de55bbd47dc1294"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x7, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xa, 0xc55}]}}, {{0x9, 0x5, 0xb, 0x3, 0x40, 0x10, 0xa, 0x9}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x40, 0x6, 0x6, [@generic={0x3d, 0xe, "404e21e10c2df5869fc6f917a5cd8b74b74dc842f3209f1a3e792c0494ac7cad0a2486c77192ef2ecfc3514e0ddca41fbfc415e2f82e1a621f437e"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x2}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x1, 0xff, 0xe, [@generic={0xbf, 0x10, "5bcf4af0016e6e54228c5e454383e6809b35f61905583958b2148b1b8ff23c89ad1adcbb37445a01c8812a9906d4e1837a415faac16a44b325e5d895e38d86e61503838541f9a71cc7f44c4524fd7527af9582c81e331f60a3f91a1146cb9f437c49a4d5ea246f19b3303151bf43b4e20e40790477f0a105146fbe3f34a5c5b1b9a724632be8f3ff402593e06a55b088b3731641dae5bf5c2537b09a675c1275830bbace9b449bbef1084b885e826489e1ed890970fad01b57fb377d6e"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x3df, 0xdf, 0x2, 0x1, [@generic={0x33, 0x23, "333c10e5ac383433a3bf2d7803a2b4d3a1b4592f8f040f2ec1d2db75d6ff91ad788025a6e34878941347c392c45af49f6c"}, @generic={0xa, 0x5, "0cc1e02fb8d823ea"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0x9, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x40}]}}]}}, {{0x9, 0x4, 0x2, 0x7f, 0x6, 0xa3, 0x30, 0xe6, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x3}, [@mixer_unit={0x6, 0x24, 0x4, 0x4, 0x1, ':'}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x206, 0x4, 0x3, 0xc}, @mixer_unit={0x5, 0x24, 0x4, 0x6, 0xd1}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x301, 0x6, 0x1, 0x40}]}], [{{0x9, 0x5, 0xb, 0x1, 0x627b1dff48e7553b, 0xb, 0x1, 0xf4}}, {{0x9, 0x5, 0x80, 0x8254bfbde68b268e, 0x400, 0xf7, 0x7, 0x0, [@generic={0x8, 0x11, "3d66929dbec7"}, @generic={0xe9, 0x31, "4abf4c19cfd9cbe294286ef30d5b4568e4fb311f1d93abe9c7ff27a374702086e9045befb7e22fe71346d374acdefeb2a307f2938e7481ab3ff1b17aa5a3a8f5035d7eea1488cef4a32b7c8659fdf248d5a2db2b3352f9f0682b955b6305784575c30790aba020203b5ed142470b0c2727b4061e5604c4d8b32551033bfcbaab8cf5a5cc72c076a772581d0a6d03d434132c52cf1539b007652db11b4c5cfc75212a30e33df149530d0a2c4720141137e313e2df51e6765610145cef4493516b479801cb2a394240355bcd68529ce1e1600e60b5c18bece4549a85f6db17efea6101b896c71f3b"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0xb, 0xf7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x3}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x66, 0x5, 0x8a, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x3f7a}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x0, 0x4, 0xac, [@generic={0x1c, 0xc, "660ebe702773ba537eeb8b0ee717f112ba49c569c16dbffbee58"}, @generic={0x1e, 0x31, "7df1ff2572e06dece7e7cf484a1e472a249f0e599038804779f8dd6b"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0x7, 0xaf, 0xf8}}]}}]}}]}}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x8, 0x8, 0x7fff, 0x9, {{0x20, 0x4, 0x2, 0x1, 0x80, 0x65, 0x0, 0x2, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xb, 0x2f, [@loopback, @private=0xa010100]}, @end, @noop, @lsrr={0x83, 0x7, 0x81, [@remote]}, @end, @rr={0x7, 0x27, 0xfc, [@private=0xa010102, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x18}, @local, @broadcast, @local, @loopback, @loopback]}, @cipso={0x86, 0x2f, 0x2, [{0x0, 0x11, "fde1a20d8635de9f57b22712c1d4f7"}, {0x1, 0x8, "5228e64477db"}, {0x7, 0x10, "ef6242d2d9b357ad7b22ddc99ba1"}]}]}}}}}) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000001300)={0x328, 0x12, 0x400, 0x70bd26, 0x25dfdbfb, {0x1e, 0x92, 0x2, 0x8, {0x4e24, 0x4e21, [0x3, 0x3, 0xfff, 0xd662576], [0x80000000, 0x3, 0x9, 0x9], r2, [0x2, 0x3]}, 0x0, 0x80000001}, [@INET_DIAG_REQ_BYTECODE={0xdb, 0x1, "2717c1c2331ce06677152a28a4f83041811bc4b26b4551134e803389eaa094f04f2f501bd5f09acf049e376154d5c690ce6661228ae29ebc5aab40a9f36dbd4a684f28ceb564335b5e1d5bf6a574e286a5c278c7c48e1907d00f946ab156b33f42b72c2dd05b6b151fb23d79befa7ce6ee93192884ffc4dfb2ea4cd5218e06983896ad6d2d3b6695bd645c00be467fcd95f9868080b1b216f3b5f3b089d099bbce56131e009c55a084c46c106bb59ca22ae865f5310ad83616996a8d0e89aa83d8d748a96df368f8b1e95ab21f349598f3a757b05b71c5"}, @INET_DIAG_REQ_BYTECODE={0xf6, 0x1, "411f887479855bc30edf9e60716c3fbb5fedb6a468586ccc8851cdcb052e7c0dd83857678c23b652018869a6c236181bd1005c0d46fb109ddd92c1de880c843e7ed4f0729fce5f9521ba7c700308f8a23ab4e6b958e8b797091ea813435d722236e440c170a378be27a009253f38561cd39e54bfb7e94a54841026bed7b1b48f72f6bdfd79c837b93adee0ea6c08eed2d4580e0b9163284dc8be413868d3290484b843f03b9cb939d2afe681cb4948491078946a64108e1c1a2d4cdd84214a38ed35d032540ec5fb485a39717c2d4b63ec7b871ac2425186661fc5f12560b0b8dae49b9dec5ea649e849082f6dcf6d85bfab"}, @INET_DIAG_REQ_BYTECODE={0xaa, 0x1, "41430d5ac34f53bbb43ecbd8e9c78b71713e083a7dd9ae40dec62b7c4a50fd11563912d1f195a8e3811e649f1f9548650d83b0ef0ced8b27c370eda0ba982098f40e0f9f84618ecb42e4c23004f0cc43cc218e9931b1f2c8b55968476cddbb3847111cbe42dcbc4f4fb5d6c383f4890531d9cdcb51e235f8fc749ea8d755f2485b425fc96d9305f559aac66c81791d6734eb873be80055adbfb378d9c12c337d0b4e2c601ef6"}, @INET_DIAG_REQ_BYTECODE={0x41, 0x1, "5cac3919e898c2df70c927ffca1486a9525e269bd78f0992c1743cb6075be0e39333c5f250758b6a397bc6be1a73db93aa1bd354154f2b4906e6dea216"}, @INET_DIAG_REQ_BYTECODE={0x17, 0x1, "adf17c3e782f9e1eab34c1d22eb714e2a50ec8"}]}, 0x328}, 0x1, 0x0, 0x0, 0x2004080}, 0x4) 5.299833556s ago: executing program 8 (id=6456): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x2000}}, 0xd8}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000006c0)={0x6}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@fallback=r1, 0xffffffffffffffff, 0x35, 0x70}, 0x20) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd26, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x5}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e21}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 5.209827447s ago: executing program 8 (id=6458): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c67) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0xc0c0}, 0x40000c8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x200007, 0x8482) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000004200)='net/xfrm_stat\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r0], 0x28}}, 0x14) openat(0xffffffffffffffff, 0x0, 0xdc4c30765e1cde1a, 0x90) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r7 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r6, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) io_uring_enter(r7, 0x27e2, 0x0, 0x0, 0x0, 0x0) r10 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r10, 0x83, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x5) 4.404016092s ago: executing program 6 (id=6463): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005850000bf090000000000005509010000000000e500000000000000bf980000000000005608000002000000c500000007000000b70000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.291828772s ago: executing program 6 (id=6471): r0 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000040)=0x7, 0x9, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fremovexattr(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000"]) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0xce20, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x4e23, @broadcast}, {0x2, 0xfffd, @broadcast}, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffe, 0x3fce, 0x3}) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) syz_open_dev$video4linux(&(0x7f0000000300), 0xa9, 0x4041) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async, rerun: 64) mknod(0x0, 0x8001420, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_1\x00'}) (async, rerun: 64) r6 = socket(0x840000000002, 0x3, 0xff) (rerun: 64) sendmmsg$inet(r6, &(0x7f0000000b00), 0x0, 0x2404c0e4) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRES8], 0x50) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async, rerun: 64) openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x2, 0x0) (rerun: 64) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x1, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a54f61b0986eb5a528290500000000000021000000000000ebf800008000"}}) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000180)=@usbdevfs_connect={0xeb6}) (async) get_mempolicy(0x0, 0x0, 0x782, &(0x7f0000fff000/0x1000)=nil, 0x3) 3.249120325s ago: executing program 6 (id=6472): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, 0xb0b0b0b0}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x4, 0x0, 0xb7b7b7b7}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000200)={0x9, r1, r2, 0xdededede}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, &(0x7f0000000280)={r3}) 3.241480925s ago: executing program 4 (id=6473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x24000080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.088008743s ago: executing program 5 (id=6474): io_submit(0x0, 0x1, &(0x7f0000000940)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, 0x0}]) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd00000080190000000000002000", [0x8, 0xffffffff9673e35d]}}) 3.0870776s ago: executing program 6 (id=6475): write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback, 0x8e9}, {0xa, 0x0, 0x0, @local}}}, 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x4, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000400)={0x64, 0x3c, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x3f, 0x18, 0x0, 0x1, [@typed={0x8, 0x10a7, 0x0, 0x0, @u32}, @generic="7f95ef8e7b21620430343227c49290dc0a3ce7c8b8caecd18d384720b21db28301acbdb487dd5e03f9d8b6406a6de911d97c42"]}]}, 0x64}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.034853632s ago: executing program 5 (id=6476): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18030000000000000000000000000000850000002e000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b80)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="c03cba2d1f1f78de2c3ba843600c", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0x7) (async) r3 = socket$inet6(0xa, 0x3, 0x87) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="0000fc00", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x16, 0x7c, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}}}}}, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000140)=0x42, 0xffffffffffffffc1) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x10001, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) (async) pselect6(0x40, &(0x7f0000000180)={0x0, 0x3, 0x7, 0x8, 0x9, 0xfffffffffffffffe, 0x4, 0x2}, &(0x7f00000001c0)={0x80000001, 0xf00000000, 0x3, 0xbbd8, 0x4, 0x3, 0x5}, &(0x7f0000000200)={0x93, 0x800, 0xc2c, 0x5, 0x4, 0x4, 0x8, 0x8}, &(0x7f0000000240), &(0x7f00000003c0)={&(0x7f0000000380)={[0x6]}, 0x8}) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 2.899064937s ago: executing program 4 (id=6477): add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRESDEC=r1, @ANYRESOCT=r1, @ANYRESDEC=r0, @ANYBLOB="0bc7ef849ea570e45f27cb673f91f3b981d8c25596bffb802cd30f33c760bed229a1514e1ecc2faec88c053380126f92b931b4c759fdb98668101d9d4e43bb62dce791a368288e3c2a116cdc5b48989a988699dc93664415211b91f5ae677f5600b1010c9fb5740e50ddd1df186fd33bf177b9a89b6c3716ee52c72de49e4af218f6bfcf33ccb81501e7518f790143fad4e288add844b0ec89bc09fca8e3110ff5ec17889cc55651f82d0081474a9ecbc56785d391b61756860d3cc6dab276c13f2b31649bd3fb6090520fd01f602b746627e3c8bf7328602af894dd7f9a13abbf3f7c4a24f68e8e7545b13690563e9709125c70958793bc5f79620f91910600568e6d3ef52e3430265ea626481789f14b0dae9468b47c00a6f708b155a5d8e0bc100246b1a2a36d98ca53fdf725174a64899ecffc86ad30216cf985ea767075f9f31c0b7bc923f0c930f3ac8febc436da569e4a5e9a5d2e20673255e5986287738c6e14f4d947a9a6d58c816f4647d1be771585a381a456f815f0feefc257a3c381db911eae710dc57b90e550ff30a935e65d163fb53811e0"], 0x1df) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000000000700", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2.821395376s ago: executing program 6 (id=6478): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000100)={0x50, 0x0, r9, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) write$FUSE_INIT(r7, &(0x7f0000000340)={0x50, 0x0, r9, {0x7, 0x2b, 0x100, 0x8, 0x2, 0x1, 0xc0d, 0xfffffff9, 0x0, 0x0, 0x10, 0x2}}, 0x50) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newqdisc={0xa4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x74, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LOSS={0x58, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x8800000, 0xfffff348, 0x5}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x1, 0x7fffffff}}, @NETEM_LOSS_GE={0x14, 0x2, {0xfff, 0x8, 0x5254, 0x401}}, @NETEM_LOSS_GI={0x18, 0x1, {0x9, 0x530, 0x81, 0x4, 0xf}}]}]}}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0xffe0, 0xb}, {0xa, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xd8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.635895201s ago: executing program 4 (id=6479): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x3000000}}, 0xd8}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000006c0)={0x6}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@fallback=r1, 0xffffffffffffffff, 0x35, 0x70}, 0x20) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd26, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x5}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e21}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2.604510364s ago: executing program 4 (id=6480): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000040)='[:::\x00', 0x0) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c00509042300010300000009058503"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000bc0)={0x0, 0x15, 0x3, "c39242"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x20, 0x0, 0x4, "3582495d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x40000) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) (async) r3 = socket(0x2, 0x805, 0x0) (async) r4 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x21) ioctl$BLKFRAGET(r4, 0x1265, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @remote}]}, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000080)={r5}, &(0x7f0000000300)=0x8) (async) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async) sendmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 2.484546786s ago: executing program 0 (id=6481): syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100008010bd40820529009dbb0000000109022400011b00001009040000022a3e740009058bff7f0000100109050b362f"], 0x0) setitimer(0x2, &(0x7f0000000040)={{}, {0x0, 0x2710}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x8000000000000035, 0x0, 0x10000000215b9037, 0x40180, 0x1, 0x11, 0x8000000000f2, 0x0, 0x7, 0x5, 0x5, 0xc6bd, 0x566, 0x45, 0x80000000005, 0x7], 0x6006, 0x1c0293}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0xa000, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f00000009c0)=0x1238, 0x4) unshare(0x42040200) 2.439770622s ago: executing program 6 (id=6482): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.127441185s ago: executing program 8 (id=6483): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001040)={0x0, 0x2, 0x0, 0xd94, 0x0}, &(0x7f0000001080)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000010c0)={r1, 0x6, 0x30}, 0xc) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001100)=0x0) sched_setattr(r2, &(0x7f0000001140)={0x38, 0x0, 0x5, 0x3, 0x28f2, 0x3, 0x2, 0xbd2, 0x5, 0x7ff}, 0x0) connect$inet6(r0, &(0x7f0000001180)={0xa, 0x4e21, 0x5, @empty, 0x9}, 0x1c) (async) connect$inet6(r0, &(0x7f0000001180)={0xa, 0x4e21, 0x5, @empty, 0x9}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f00000013c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}}, @NFT_MSG_NEWTABLE={0x110, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xa9, 0x6, "1b0053aa10872759cf1d36231a6a9a87e49e715c5d7dd7e1149beee2cd1973e196766f711a96b72fd9a93d96a6c9f947039192632e1214b22523597e483aa05f22baa2d78aa8c281ee1101d3371f10b4073b09a6f2dcf4c7e6ffe10cefda07bd2856eaade0d90b67f3703412b98fefea1cf17cf7183eb38c25791c76a2844a5ff0984297a1a55ace250f4299725f917a3eaf6088abb5c9bba02d002f95b3d5b4466eb21b61"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x14c}, 0x1, 0x0, 0x0, 0x60e1f2bb55b18e3e}, 0x40c0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001400)={r1, 0x6, 0x4, 0xfff}, &(0x7f0000001440)=0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) lseek(r3, 0x11, 0x1) (async) lseek(r3, 0x11, 0x1) bind$alg(r0, &(0x7f0000001480)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000001480)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) vmsplice(r3, &(0x7f0000001640)=[{&(0x7f0000001500)="6aaa3e104d079b06deade24e3351ced2d197c5800c1c9f6ead6528a616d656dc3967f99bd497565e09a481b2b4b8ce267fcaae04039fd438a76f6af702f67dc2704c9030205b62ecfc8067b91bf6c0fd277c8ae9baccd585a641d6afe7b988d0a874db371eeea427891746", 0x6b}, {&(0x7f0000001580)="ccd9b3c9183708d6f378986642640bd9a08ca969e95c79e78800535f09e8ec398e42585211acf6e78329a089abbb14d5cf5c1c829b89bc18377c3aa986770d0b51c8ab71706178a8799b36473847f71ee3dff2b104b9cd5ce0c8a6da64ce7247f11d356c9019ffe1d5e2038210bf5fe33b1b73ebdafc45740d030208c084808165bbfed302254a3cc4043de58243ce7c518947b742ae783aedb53efdd207a36bd5ab04184ac5b5bd6b1bdfcdc9fe4f86fcdf59f8f0959e43", 0xb8}], 0x2, 0x6) (async) vmsplice(r3, &(0x7f0000001640)=[{&(0x7f0000001500)="6aaa3e104d079b06deade24e3351ced2d197c5800c1c9f6ead6528a616d656dc3967f99bd497565e09a481b2b4b8ce267fcaae04039fd438a76f6af702f67dc2704c9030205b62ecfc8067b91bf6c0fd277c8ae9baccd585a641d6afe7b988d0a874db371eeea427891746", 0x6b}, {&(0x7f0000001580)="ccd9b3c9183708d6f378986642640bd9a08ca969e95c79e78800535f09e8ec398e42585211acf6e78329a089abbb14d5cf5c1c829b89bc18377c3aa986770d0b51c8ab71706178a8799b36473847f71ee3dff2b104b9cd5ce0c8a6da64ce7247f11d356c9019ffe1d5e2038210bf5fe33b1b73ebdafc45740d030208c084808165bbfed302254a3cc4043de58243ce7c518947b742ae783aedb53efdd207a36bd5ab04184ac5b5bd6b1bdfcdc9fe4f86fcdf59f8f0959e43", 0xb8}], 0x2, 0x6) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x30, 0x0, 0x22573779d97debd4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x401, 0x12}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}, 0x1, 0x0, 0x0, 0x851}, 0x20000005) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x30, 0x0, 0x22573779d97debd4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x401, 0x12}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}, 0x1, 0x0, 0x0, 0x851}, 0x20000005) openat$cgroup_ro(r0, &(0x7f0000001780)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) (async) r4 = openat$cgroup_ro(r0, &(0x7f0000001780)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000017c0)={0x1000, 0xffff7fff, 0x7ff, 0x8, 0x400}, 0x14) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000017c0)={0x1000, 0xffff7fff, 0x7ff, 0x8, 0x400}, 0x14) r5 = accept$packet(r4, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001840)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001900)={'syztnl2\x00', &(0x7f0000001880)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x35, 0xffffff72, 0xa, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, 0x7, 0x8000, 0xd87}}) bind$packet(r5, &(0x7f0000001940)={0x11, 0x18, r7, 0x1, 0x5, 0x6, @multicast}, 0x14) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002980)=@o_path={&(0x7f0000001980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x30, r3}, 0x18) (async) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002980)=@o_path={&(0x7f0000001980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x30, r3}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000029c0)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002f40)={r0, 0x20, &(0x7f0000002f00)={&(0x7f0000002d00)=""/223, 0xdf, 0x0, &(0x7f0000002e00)=""/233, 0xe9}}, 0x10) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002f80)={0x1b, 0x0, 0x0, 0x3ef09932, 0x0, r0, 0xfff, '\x00', 0x0, r0, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003100)={0x1a, 0x26, &(0x7f0000002a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x3, 0x3, 0x3, 0x0, 0x9, 0xffffffffffffffe0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x1, 0x8, 0x2, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @ldst={0x1, 0x2, 0x0, 0xb, 0x6, 0x2, 0xfffffffffffffff4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xb}, @call={0x85, 0x0, 0x0, 0xb9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002b40)='GPL\x00', 0x2, 0xfa, &(0x7f0000002b80)=""/250, 0x40f00, 0x9, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000002c80)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000002cc0)={0x4, 0x4, 0x2, 0x5}, 0x10, r10, r0, 0x9, &(0x7f0000003000)=[r0, r11, r4, r0, r0, r4, r0, r4, r0], &(0x7f0000003040)=[{0x5, 0x3, 0xf, 0x8}, {0x3, 0x1, 0x0, 0xb}, {0x3, 0x2, 0xc, 0xb}, {0x5, 0x2, 0x9, 0x6}, {0x5, 0x4, 0xf, 0xb}, {0x0, 0x1, 0x8, 0x5}, {0x2, 0x1, 0x7, 0x3}, {0x1, 0x2, 0x2, 0x4}, {0x4, 0x2, 0x7, 0xb}]}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000003100)={0x1a, 0x26, &(0x7f0000002a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x3, 0x3, 0x3, 0x0, 0x9, 0xffffffffffffffe0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x1, 0x8, 0x2, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @ldst={0x1, 0x2, 0x0, 0xb, 0x6, 0x2, 0xfffffffffffffff4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xb}, @call={0x85, 0x0, 0x0, 0xb9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002b40)='GPL\x00', 0x2, 0xfa, &(0x7f0000002b80)=""/250, 0x40f00, 0x9, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000002c80)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000002cc0)={0x4, 0x4, 0x2, 0x5}, 0x10, r10, r0, 0x9, &(0x7f0000003000)=[r0, r11, r4, r0, r0, r4, r0, r4, r0], &(0x7f0000003040)=[{0x5, 0x3, 0xf, 0x8}, {0x3, 0x1, 0x0, 0xb}, {0x3, 0x2, 0xc, 0xb}, {0x5, 0x2, 0x9, 0x6}, {0x5, 0x4, 0xf, 0xb}, {0x0, 0x1, 0x8, 0x5}, {0x2, 0x1, 0x7, 0x3}, {0x1, 0x2, 0x2, 0x4}, {0x4, 0x2, 0x7, 0xb}]}, 0x94) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) pipe2(&(0x7f00000031c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x180980) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000003200)=0x1, 0x4) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000003300)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x1c, 0x6, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x10) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x110, r0, 0x42ff000) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x110, r0, 0x42ff000) setsockopt$inet6_IPV6_PKTINFO(r12, 0x29, 0x32, &(0x7f0000003340)={@rand_addr=' \x01\x00', r6}, 0x14) 2.091443385s ago: executing program 8 (id=6484): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000bd160f408680f001adbf00002bd40602120001000000000904000000a01224009dd7638bd42945ae4ee8d76974683e0c5dfa25eb008eab0ca00ab2bd130199a8dc230867be0f3dae3121a971068e42d45e21719bc1ca8d9672dcd7abe40eeb45aa04a114a9bb4931bf6350d30bbed84390f96f23ca3c543ce80f337c3e58148049ff85300fd2f46ef1f82b0a4c5def8ab27588be4541bb5db5329069aff514d61292b75b343d5b2d2a0fc4d419647634cd6155ce9070d4edae66dddd514c7bdd99c73d5ae171594b89ed1b"], 0x0) (async, rerun: 32) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) (async) r5 = inotify_init1(0x800) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) (async, rerun: 32) r7 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) (rerun: 32) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async, rerun: 64) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) shutdown(r6, 0x1) (async) inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x400) (async, rerun: 64) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000800)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (rerun: 64) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000c00)={r10, 0x3ffc00000000000, 0x1}) r11 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f00000005c0)=@urb_type_iso={0x0, {0x1, 0x1}, 0x9fb, 0xa4, 0x0, 0x0, 0x2, 0x4000b4f, 0x0, 0x10, 0x8, 0x0}) (async) inotify_add_watch(r5, &(0x7f0000000280)='.\x00', 0x850003f3) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async, rerun: 64) r12 = socket$inet(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x513, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x12, r13, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004804) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) write$UHID_INPUT(r1, &(0x7f00000010c0)={0xb, {"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", 0x1000}}, 0x1006) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) 1.895909553s ago: executing program 8 (id=6485): syz_usb_connect(0x0, 0x284, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x67, 0xac, 0x82, 0x40, 0x403, 0xe548, 0x8ff4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x272, 0x1, 0x2, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0x46, 0x3, 0x5, 0x6a, 0xd7, 0xfb, 0x0, [], [{{0x9, 0x5, 0x1, 0x8, 0x20, 0xd, 0x3, 0x9}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x3, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x10, 0x3ff}, @generic={0x97, 0x23, "f5ac4a2965cbb05642f4beaa664a20bbe8c2f9e6e44cf967abfe9c7719b4b70989b0bdd15e7843b82e7eb403617f9246f5d337812cb329aa7fc6c2e414dfbecbde92f0f27ab810cb9e34617576f1dbafff580f7f9f36e85aec682256caee5498b224468914c4ef7f760b72680f542289d3a0808ae857f8919acc28307bb7515074df16689f765ccd45188e534cde4bb87cfac1e411"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x40, 0xe, 0x6, 0xa, [@generic={0xf9, 0xa, "50a40e0486c48eecfb2719f58037ef07ab133c546874d44aab2dbd76f08bbf38c1376bb34059bdfa0fc8dc0568b5797574eea04ba4f133588addba63147360dabccdf3328cb71f09377c95c7d4f4a8e7216f5a8de14e88a11ff44be063c9cf3dc91cc01d071711d506bf359a7441bf4b4e56849016319f782b50c567e6aaa1f82559d7d42dbd435b147cae04d069540d165bd51bd7e76c2f8e67000ed2266f5e3d127cb4a4f9aef4441bf376e95ca841ff3ac52cd297b15eaa89651e52c39b48706c8c7088eeb78c440b54799960cceb3795759bcba5aa56da645c93cdddd7ae9454c0ed35f9dac54e361cd84d9add79b226c9c85f8a19"}, @generic={0x9c, 0x24, "ee03978cfb61b034f73d648882f5771e1d8e573ece8ea7c0ab2bd18167beabd49af8a6c1977376cdc44f2e38f0ffab2002992a90f7e35eb91880a8eb78d8dfc2bd58f89ea1e8a6a60de19817b01fb2e2aab96be287b95c47f3ec2956f92bd26e370d92beabd86bb1b72c39a4c514afd64590f4a4ff24b87fc214c65a6227f6d851a320b459d3d36b36eacb931a6e1f4a3a26e9b297ebb0968951"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x0, 0x10, 0xc}}, {{0x9, 0x5, 0xa, 0x1, 0x10, 0xba, 0x4, 0x5}}]}}]}}]}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="77a6bae9d7ce5ecba0c88cae84c105fe10ff39a3893eb1479c17dda0db39bdfb4c36b733bbe534070bb86e60d01dc4f31fbad678a6fad86478ddeff10551bb6fdd791f3904fdd8104b2a7c9c2f1f94db5fd8b0ea7ef66242372177cbb1a6331fda15ee3f3ab6eb51211ef7d67371aa57baab36c438f60ed46728b98c910ca04aaaa8b5826d1e82dd1dc42b03", 0x8c}], 0x1, 0x0, 0x0, 0x40480d1}}], 0x1, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r1, 0x2285, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) exit(0xffff) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x1]}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c20053"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r2, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x2c}, 0x1, 0x0, 0x0, 0xd37697ff28093c0e}, 0x24000040) r7 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.412035214s ago: executing program 4 (id=6486): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) inotify_init1(0x800) r2 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000001480)=[{0x0}, {&(0x7f00000002c0)=""/188, 0xbc}], 0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x7, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x40000}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002780)=@gettclass={0x24, 0x2a, 0x8, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0xc}, {0xffff, 0xa}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x80c8}, 0x20004894) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000d901"]) 1.320266546s ago: executing program 4 (id=6487): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0) 1.192341178s ago: executing program 0 (id=6488): write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback, 0x8e9}, {0xa, 0x0, 0x0, @local}}}, 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x4, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000400)={0x64, 0x3c, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x3f, 0x18, 0x0, 0x1, [@typed={0x8, 0x10a7, 0x0, 0x0, @u32}, @generic="7f95ef8e7b21620430343227c49290dc0a3ce7c8b8caecd18d384720b21db28301acbdb487dd5e03f9d8b6406a6de911d97c42"]}]}, 0x64}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 940.409867ms ago: executing program 0 (id=6489): socket$inet6_sctp(0xa, 0x801, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000b8010000b801000005000000000000000600000604000000000000001cdc000008000000050000000a000000000000000a000000008000000100000001fcffff0d0000000c08000007080000090000130b0000000f00000006000000010000800d00000006000000050000001000000000080000060000000800000005000000feffffff0300000000000000020000000d00000000000000060000000a00000001040000040000000900000004000000090000000b000000080000000200000002000000000000110100000007000000000000000600000d000000000f000000010000000f000000020000000a000000010000000200000002000000030000000000000003000000010000000500000002000005040000000d00000002000000020000000600000004000000010100000b000000020000057f00000001000000030000000700000003000000020000000f000000000000000200000d00000000020000000400000009000000010000000a000000004a00000c01000000060000000000001203000000000000000600000d00000000010000000500000009000000030000000d000000010000000a0000000300000005000000020000000c0000000100000000005f00"], &(0x7f0000000280)=""/221, 0x1d5, 0xdd, 0x1, 0x4}, 0x28) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x4000840) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) ioctl$KVM_RUN(r4, 0xae80, 0x0) flock(0xffffffffffffffff, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) pread64(r0, 0x0, 0x0, 0x6) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000480)={[0x8, 0x80, 0xc, 0x0, 0x1, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0xeeee0000, 0x8340}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\n\x00'], 0x48) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, 0x0) 0s ago: executing program 0 (id=6490): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) (async) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) socket(0x2b, 0x80801, 0x1) (async) r1 = socket(0x2b, 0x80801, 0x1) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x894b, &(0x7f0000000040)) r2 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x1b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4044057) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r0, &(0x7f0000000100)=@other={'unlock', ' ', 'mem'}, 0xb) (async) write$vga_arbiter(r0, &(0x7f0000000100)=@other={'unlock', ' ', 'mem'}, 0xb) kernel console output (not intermixed with test programs): t config #0, error -71 [ 1580.926870][T17755] usb 6-1: USB disconnect, device number 54 [ 1581.795703][T17755] usb 6-1: new low-speed USB device number 55 using dummy_hcd [ 1582.072073][T17755] usb 6-1: config 13 has an invalid interface number: 100 but max is 1 [ 1582.125386][T17755] usb 6-1: config 13 has an invalid interface association descriptor of length 2, skipping [ 1582.165800][T17755] usb 6-1: config 13 has an invalid interface number: 188 but max is 1 [ 1582.199368][T17755] usb 6-1: config 13 has no interface number 0 [ 1582.225144][T17755] usb 6-1: config 13 has no interface number 1 [ 1582.246181][T17755] usb 6-1: config 13 interface 100 altsetting 250 endpoint 0x6 has invalid maxpacket 32, setting to 8 [ 1582.288837][T17755] usb 6-1: config 13 interface 100 has no altsetting 0 [ 1582.335123][T17755] usb 6-1: string descriptor 0 read error: -22 [ 1582.367312][T17755] usb 6-1: New USB device found, idVendor=0408, idProduct=ea05, bcdDevice=2c.a8 [ 1582.530701][T17755] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.619752][T17755] option 6-1:13.100: GSM modem (1-port) converter detected [ 1582.721517][T29128] loop9: detected capacity change from 0 to 7 [ 1582.757849][T29128] Dev loop9: unable to read RDB block 7 [ 1582.794602][T29128] loop9: unable to read partition table [ 1582.801700][T17755] option 6-1:13.188: GSM modem (1-port) converter detected [ 1582.822533][T29128] loop9: partition table beyond EOD, truncated [ 1582.940860][T29128] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1583.004963][T29133] netlink: 'syz.5.5904': attribute type 4 has an invalid length. [ 1583.022310][T29127] netlink: 'syz.4.5907': attribute type 14 has an invalid length. [ 1583.040066][T17755] usb 6-1: USB disconnect, device number 55 [ 1583.085010][T17755] option 6-1:13.100: device disconnected [ 1583.126898][T17755] option 6-1:13.188: device disconnected [ 1583.310464][T29138] netlink: 'syz.8.5911': attribute type 1 has an invalid length. [ 1583.530486][T29140] bond1: entered allmulticast mode [ 1583.684522][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1583.684538][ T30] audit: type=1326 audit(1761134095.464:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29142 comm="syz.4.5913" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f536578efc9 code=0x0 [ 1584.285399][T17755] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1584.690708][T17755] usb 1-1: Using ep0 maxpacket: 32 [ 1584.814716][T17755] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1584.825777][T17755] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1584.911745][T17755] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1584.940917][T17755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.984780][T17755] usb 1-1: config 0 descriptor?? [ 1585.503477][T29172] vlan2: entered promiscuous mode [ 1585.508647][T29172] macvlan1: entered promiscuous mode [ 1586.295579][T17755] usbhid 1-1:0.0: can't add hid device: -71 [ 1586.306595][T17755] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1586.328828][T17755] usb 1-1: USB disconnect, device number 125 [ 1586.365421][T29197] netlink: 'syz.4.5920': attribute type 21 has an invalid length. [ 1586.430758][T29197] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5920'. [ 1586.443039][T29197] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5920'. [ 1587.942413][T29224] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5928'. [ 1587.970528][T29224] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1588.012711][T29226] loop6: detected capacity change from 0 to 7 [ 1588.031820][T29226] Dev loop6: unable to read RDB block 7 [ 1588.044015][T29226] loop6: AHDI p1 p2 p3 [ 1588.062129][T29226] loop6: partition table partially beyond EOD, truncated [ 1588.085069][T29226] loop6: p1 start 4217409618 is beyond EOD, truncated [ 1588.102623][T29226] loop6: p2 size 108 extends beyond EOD, truncated [ 1588.216378][T10709] udevd[10709]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1588.540956][T17754] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1588.999645][T25891] Bluetooth: hci4: command 0x0406 tx timeout [ 1589.123443][T17754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1589.165851][T17754] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1589.175370][T17754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.184366][T17754] usb 5-1: Product: syz [ 1589.188890][T17754] usb 5-1: Manufacturer: syz [ 1589.193567][T17754] usb 5-1: SerialNumber: syz [ 1589.230931][T17754] usb 5-1: config 0 descriptor?? [ 1589.986450][T29251] fuse: Invalid gid '00000000000000000000004' [ 1590.497913][ T30] audit: type=1326 audit(1761134102.274:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29260 comm="syz.5.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1590.525490][ T30] audit: type=1326 audit(1761134102.274:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29260 comm="syz.5.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1590.547971][ C1] vkms_vblank_simulate: vblank timer overrun [ 1590.573350][ T30] audit: type=1326 audit(1761134102.274:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29260 comm="syz.5.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1590.595813][ C1] vkms_vblank_simulate: vblank timer overrun [ 1590.614835][ T30] audit: type=1326 audit(1761134102.274:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29260 comm="syz.5.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1590.654319][ T30] audit: type=1326 audit(1761134102.274:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29260 comm="syz.5.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1590.676759][ C1] vkms_vblank_simulate: vblank timer overrun [ 1590.700155][ T30] audit: type=1326 audit(1761134102.274:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29260 comm="syz.5.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1590.722803][T17755] usb 1-1: new low-speed USB device number 126 using dummy_hcd [ 1590.732452][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1590.754697][ T30] audit: type=1326 audit(1761134102.274:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29260 comm="syz.5.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1590.777115][ C1] vkms_vblank_simulate: vblank timer overrun [ 1590.819069][ T30] audit: type=1326 audit(1761134102.274:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29260 comm="syz.5.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1590.860852][T17755] usb 1-1: device descriptor read/64, error -32 [ 1590.868614][ T30] audit: type=1326 audit(1761134102.274:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29260 comm="syz.5.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1590.906314][ T30] audit: type=1326 audit(1761134102.274:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29260 comm="syz.5.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1591.079111][T29272] syzkaller0: entered promiscuous mode [ 1591.086122][T29272] syzkaller0: entered allmulticast mode [ 1591.120918][T17755] usb 1-1: new low-speed USB device number 127 using dummy_hcd [ 1591.439920][T17755] usb 1-1: config 13 has an invalid interface number: 100 but max is 1 [ 1591.488853][T17755] usb 1-1: config 13 has an invalid interface association descriptor of length 2, skipping [ 1591.621495][T29274] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5941'. [ 1591.668162][T29274] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5941'. [ 1591.770639][T17755] usb 1-1: config 13 has an invalid interface number: 188 but max is 1 [ 1591.803118][T17755] usb 1-1: config 13 has no interface number 0 [ 1591.809316][T17755] usb 1-1: config 13 has no interface number 1 [ 1591.834595][T24505] usb 5-1: USB disconnect, device number 43 [ 1591.851428][T17755] usb 1-1: config 13 interface 100 altsetting 250 endpoint 0x6 has invalid maxpacket 32, setting to 8 [ 1591.874267][T17755] usb 1-1: config 13 interface 100 has no altsetting 0 [ 1591.966294][T29277] loop6: detected capacity change from 0 to 7 [ 1591.991817][T10673] Dev loop6: unable to read RDB block 7 [ 1591.997418][T10673] loop6: AHDI p1 p2 p3 [ 1592.026961][T10673] loop6: partition table partially beyond EOD, truncated [ 1592.049220][T10673] loop6: p1 start 4217409618 is beyond EOD, truncated [ 1592.088723][T10673] loop6: p2 size 108 extends beyond EOD, truncated [ 1592.121623][T29277] Dev loop6: unable to read RDB block 7 [ 1592.127215][T29277] loop6: AHDI p1 p2 p3 [ 1592.140968][T29277] loop6: partition table partially beyond EOD, truncated [ 1592.148219][T29277] loop6: p1 start 4217409618 is beyond EOD, truncated [ 1592.610742][T29277] loop6: p2 size 108 extends beyond EOD, truncated [ 1592.786954][T10709] udevd[10709]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1592.808931][T10709] udevd[10709]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1592.900727][T24505] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1593.220816][T17754] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1593.370725][T17754] usb 5-1: Using ep0 maxpacket: 32 [ 1593.401087][T17754] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1593.433586][T17754] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1593.488202][T17754] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1593.543976][T17754] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1593.557312][T17754] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1593.596129][T17754] usb 5-1: Product: syz [ 1593.600393][T17754] usb 5-1: Manufacturer: syz [ 1593.619559][T17754] usb 5-1: SerialNumber: syz [ 1593.653923][T17754] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input150 [ 1593.852338][T17754] usb 5-1: USB disconnect, device number 44 [ 1593.858291][ C1] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 1593.929636][T17754] appletouch 5-1:1.0: input: appletouch disconnected [ 1594.106894][T25891] Bluetooth: hci2: command 0x0419 tx timeout [ 1594.375127][T29298] fuse: Unknown parameter '0x0000000000000003' [ 1595.320873][T17760] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1595.484487][T17760] usb 5-1: config 171 has an invalid interface number: 109 but max is 0 [ 1595.493622][T17760] usb 5-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1595.504101][T17760] usb 5-1: config 171 has no interface number 0 [ 1595.531236][T29323] loop6: detected capacity change from 0 to 7 [ 1595.537140][T17760] usb 5-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1595.561152][T10709] Dev loop6: unable to read RDB block 7 [ 1595.566758][T10709] loop6: AHDI p1 p2 p3 [ 1595.588594][T10709] loop6: partition table partially beyond EOD, truncated [ 1595.604202][T10709] loop6: p1 start 231046032 is beyond EOD, truncated [ 1595.668889][T17760] usb 5-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 64 [ 1595.683016][T10709] loop6: p2 start 373273912 is beyond EOD, truncated [ 1595.700098][T17760] usb 5-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1595.716211][T29323] Dev loop6: unable to read RDB block 7 [ 1595.728598][T29323] loop6: AHDI p1 p2 p3 [ 1595.745608][T29323] loop6: partition table partially beyond EOD, truncated [ 1595.771816][T17760] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1595.783942][T29323] loop6: p1 start 231046032 is beyond EOD, truncated [ 1595.796106][T17760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.810760][T29323] loop6: p2 start 373273912 is beyond EOD, truncated [ 1595.813166][T17760] usb 5-1: Product: syz [ 1595.834095][T17760] usb 5-1: Manufacturer: syz [ 1595.884017][T17760] usb 5-1: SerialNumber: syz [ 1595.903199][T29313] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1596.006165][T29330] syzkaller0: entered promiscuous mode [ 1596.150837][T29330] syzkaller0: entered allmulticast mode [ 1596.377353][T17760] ath6kl: Failed to submit usb control message: -71 [ 1596.390730][T17760] ath6kl: unable to send the bmi data to the device: -71 [ 1596.397855][T17760] ath6kl: Unable to send get target info: -71 [ 1596.407018][T17760] ath6kl: Failed to init ath6kl core: -71 [ 1596.415556][T17760] ath6kl_usb 5-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 1596.437461][T17760] usb 5-1: USB disconnect, device number 45 [ 1597.191137][T17755] usb 1-1: string descriptor 0 read error: -32 [ 1597.213585][T17755] usb 1-1: New USB device found, idVendor=0408, idProduct=ea05, bcdDevice=2c.a8 [ 1597.278903][T17755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.386256][T17755] usb 1-1: can't set config #13, error -32 [ 1597.920439][T17755] usb 1-1: USB disconnect, device number 127 [ 1598.001213][T29376] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5958'. [ 1599.630710][ T5905] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1599.902676][T29409] syzkaller0: entered promiscuous mode [ 1599.943625][T29409] syzkaller0: entered allmulticast mode [ 1599.966347][ T5905] usb 5-1: config 0 has no interfaces? [ 1600.046169][ T5905] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1600.144257][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.179585][ T5905] usb 5-1: Product: syz [ 1600.193592][ T5905] usb 5-1: Manufacturer: syz [ 1600.209455][ T5905] usb 5-1: SerialNumber: syz [ 1600.248382][ T5905] usb 5-1: config 0 descriptor?? [ 1601.930398][ T5972] usb 5-1: USB disconnect, device number 46 [ 1602.228073][T29447] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5973'. [ 1602.250401][T29447] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1602.450269][T29449] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1602.899060][ T90] usb 6-1: new low-speed USB device number 57 using dummy_hcd [ 1603.803782][T29474] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5981'. [ 1604.526336][T29478] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5983'. [ 1604.842941][T29479] bridge1: entered promiscuous mode [ 1604.848191][T29479] bridge1: entered allmulticast mode [ 1604.910987][T29481] netlink: 'syz.5.5984': attribute type 1 has an invalid length. [ 1604.919179][T29481] netlink: 'syz.5.5984': attribute type 1 has an invalid length. [ 1604.927383][T29481] netlink: 'syz.5.5984': attribute type 1 has an invalid length. [ 1604.958662][T29481] netlink: 'syz.5.5984': attribute type 1 has an invalid length. [ 1604.974866][T29481] netlink: 'syz.5.5984': attribute type 1 has an invalid length. [ 1604.984114][T29481] netlink: 'syz.5.5984': attribute type 1 has an invalid length. [ 1604.998349][T29481] netlink: 'syz.5.5984': attribute type 1 has an invalid length. [ 1605.007132][T29485] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5985'. [ 1605.018986][T29485] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1605.040153][T29481] netlink: 'syz.5.5984': attribute type 1 has an invalid length. [ 1605.048922][T29481] netlink: 'syz.5.5984': attribute type 1 has an invalid length. [ 1605.058103][T29481] netlink: 'syz.5.5984': attribute type 1 has an invalid length. [ 1605.120366][T29489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5986'. [ 1605.489954][T29509] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5992'. [ 1605.613283][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 1605.613302][ T30] audit: type=1326 audit(1761134117.214:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29506 comm="syz.5.5992" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9067b8efc9 code=0x0 [ 1606.279661][T29522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5996'. [ 1606.326986][T29525] tipc: Enabling of bearer rejected, failed to enable media [ 1606.338247][T29525] syzkaller0: entered promiscuous mode [ 1606.344710][T29525] syzkaller0: entered allmulticast mode [ 1606.463712][T29527] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5998'. [ 1606.480722][T29527] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1606.802107][ T90] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1606.995710][ T90] usb 5-1: Using ep0 maxpacket: 8 [ 1607.032516][ T90] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1607.043720][ T90] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 1607.056556][ T90] usb 5-1: config 0 has no interface number 0 [ 1607.065471][ T90] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1607.077027][ T90] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1607.087678][ T90] usb 5-1: config 0 interface 88 has no altsetting 0 [ 1607.117864][ T90] usb 5-1: language id specifier not provided by device, defaulting to English [ 1607.133775][ T90] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1607.143045][ T90] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1607.151701][ T90] usb 5-1: Product: syz [ 1607.156030][ T90] usb 5-1: SerialNumber: syz [ 1607.164215][ T90] usb 5-1: config 0 descriptor?? [ 1607.400873][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.407348][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.870802][T29552] wireguard0: entered promiscuous mode [ 1607.876554][T29552] wireguard0: entered allmulticast mode [ 1607.883831][T29553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6000'. [ 1609.554536][ T90] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input151 [ 1609.575444][ T90] usb 5-1: USB disconnect, device number 47 [ 1609.609241][T29577] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6011'. [ 1609.624850][T29577] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1609.723158][T10673] udevd[10673]: Error opening device "/dev/input/event4": No such file or directory [ 1609.759109][T10673] udevd[10673]: Unable to EVIOCGABS device "/dev/input/event4" [ 1609.777259][T10673] udevd[10673]: Unable to EVIOCGABS device "/dev/input/event4" [ 1609.791285][T10673] udevd[10673]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 1609.846648][ T5198] udevd[5198]: worker [10673] terminated by signal 6 (Aborted) [ 1609.861157][ T5198] udevd[5198]: worker [10673] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input151/event4' [ 1610.154734][T29598] loop6: detected capacity change from 0 to 7 [ 1610.175633][T10709] Dev loop6: unable to read RDB block 7 [ 1610.181415][T10709] loop6: unable to read partition table [ 1610.197297][T10709] loop6: partition table beyond EOD, truncated [ 1610.210179][T29598] Dev loop6: unable to read RDB block 7 [ 1610.219741][T29598] loop6: unable to read partition table [ 1610.245824][T29598] loop6: partition table beyond EOD, truncated [ 1610.254666][T29598] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1610.410360][T29604] fuse: blksize only supported for fuseblk [ 1610.419944][T29605] fuse: blksize only supported for fuseblk [ 1610.700684][ T5972] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1610.864147][ T5972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1610.880667][ T5972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1610.881711][T29609] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6019'. [ 1610.907089][ T5972] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 1610.908786][T29609] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6019'. [ 1610.917018][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.939681][ T5972] usb 5-1: config 0 descriptor?? [ 1611.157126][ T5972] hid_parser_main: 28 callbacks suppressed [ 1611.157141][ T5972] playstation 0003:054C:0BA0.003C: unknown main item tag 0x0 [ 1611.183449][ T5972] playstation 0003:054C:0BA0.003C: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.4-1/input0 [ 1611.264932][ T5972] playstation 0003:054C:0BA0.003C: Failed to retrieve feature with reportID 18: -32 [ 1611.274694][ T5972] playstation 0003:054C:0BA0.003C: Failed to retrieve DualShock4 pairing info: -32 [ 1611.275982][T29605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1611.287230][ T5972] playstation 0003:054C:0BA0.003C: Failed to get MAC address from DualShock4 [ 1611.302091][T29605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1611.303283][ T5972] playstation 0003:054C:0BA0.003C: Failed to create dualshock4. [ 1611.356004][ T5972] playstation 0003:054C:0BA0.003C: probe with driver playstation failed with error -32 [ 1611.401134][ T5972] usb 5-1: USB disconnect, device number 48 [ 1611.610428][T29621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6023'. [ 1611.699715][T29625] bridge1: entered promiscuous mode [ 1611.714211][T29625] bridge1: entered allmulticast mode [ 1612.653301][T29638] loop6: detected capacity change from 0 to 7 [ 1612.672875][T29638] Dev loop6: unable to read RDB block 7 [ 1612.678484][T29638] loop6: AHDI p1 p2 p3 [ 1612.712291][T29638] loop6: partition table partially beyond EOD, truncated [ 1612.721849][T29638] loop6: p1 start 4217409618 is beyond EOD, truncated [ 1612.728736][T29638] loop6: p2 size 108 extends beyond EOD, truncated [ 1612.784799][T10709] udevd[10709]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1613.036166][T29649] tipc: Started in network mode [ 1613.045510][T29649] tipc: Node identity 9ea8eee34f99, cluster identity 4711 [ 1613.059667][T29649] tipc: Enabled bearer , priority 0 [ 1613.069819][T29649] syzkaller0: entered promiscuous mode [ 1613.077810][T29649] syzkaller0: entered allmulticast mode [ 1613.220769][T17752] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1613.452678][T17752] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1613.463559][T17752] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1613.477703][T17752] usb 5-1: config 220 has no interface number 2 [ 1613.487870][T17752] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1613.502085][T17752] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1613.509410][T17752] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1613.509513][T29655] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6032'. [ 1613.517803][T17752] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1613.540000][T29655] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1613.542457][T17752] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1613.570326][T17752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.582107][T17752] usb 5-1: Product: syz [ 1613.586968][T17752] usb 5-1: Manufacturer: syz [ 1613.592266][T17752] usb 5-1: SerialNumber: syz [ 1613.858210][T29648] tipc: Resetting bearer [ 1613.897289][T29648] tipc: Disabling bearer [ 1614.299645][T29669] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1614.315664][T24505] hid-generic 0000:0003:0001.003D: unknown main item tag 0x0 [ 1614.329810][T24505] hid-generic 0000:0003:0001.003D: unknown main item tag 0x0 [ 1614.353923][T24505] hid-generic 0000:0003:0001.003D: hidraw0: HID v0.03 Device [syz0] on syz1 [ 1614.428324][T29671] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6037'. [ 1614.503795][T29673] bridge2: entered promiscuous mode [ 1614.509111][T29673] bridge2: entered allmulticast mode [ 1614.582583][T29672] fido_id[29672]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1615.592847][ T30] audit: type=1326 audit(1761134127.364:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29678 comm="syz.8.6039" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f891d58efc9 code=0x0 [ 1615.683884][T29683] loop6: detected capacity change from 0 to 7 [ 1615.700393][T10709] Dev loop6: unable to read RDB block 7 [ 1615.707250][T10709] loop6: AHDI p1 p2 p3 [ 1615.711692][T10709] loop6: partition table partially beyond EOD, truncated [ 1615.719745][T10709] loop6: p1 start 4217409618 is beyond EOD, truncated [ 1615.732472][T10709] loop6: p2 size 108 extends beyond EOD, truncated [ 1615.749433][T17752] usb 5-1: selecting invalid altsetting 0 [ 1615.778566][T17752] usb 5-1: selecting invalid altsetting 0 [ 1615.785372][T17752] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1615.795832][T17752] uvcvideo 5-1:220.0: No valid video chain found. [ 1615.817701][T17752] usb 5-1: selecting invalid altsetting 0 [ 1615.955704][T29683] Dev loop6: unable to read RDB block 7 [ 1615.966259][T29683] loop6: AHDI p1 p2 p3 [ 1615.970513][T29683] loop6: partition table partially beyond EOD, truncated [ 1615.978223][T29683] loop6: p1 start 4217409618 is beyond EOD, truncated [ 1615.985614][T29683] loop6: p2 size 108 extends beyond EOD, truncated [ 1616.016227][T10709] udevd[10709]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1616.026364][T17752] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1616.079044][T10709] udevd[10709]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1616.376522][T17752] usb 5-1: USB disconnect, device number 49 [ 1616.541173][T29694] validate_nla: 56 callbacks suppressed [ 1616.541186][T29694] netlink: 'syz.5.6042': attribute type 4 has an invalid length. [ 1616.931936][T17755] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1617.101677][T17755] usb 6-1: Using ep0 maxpacket: 32 [ 1617.108500][T17755] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1617.122768][T17755] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1617.132976][T17755] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1617.144705][T17755] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1617.160397][T17755] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1617.172478][T17755] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1617.180812][T17755] usb 6-1: Product: syz [ 1617.190757][T17755] usb 6-1: Manufacturer: syz [ 1617.195344][T17755] usb 6-1: SerialNumber: syz [ 1617.207613][T17755] usb 6-1: config 0 descriptor?? [ 1617.234885][T17755] usb 6-1: no audio or video endpoints found [ 1617.354684][T29703] loop6: detected capacity change from 0 to 7 [ 1617.360071][ T30] audit: type=1326 audit(1761134129.134:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29702 comm="syz.4.6045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536578efc9 code=0x7ffc0000 [ 1617.386965][ T30] audit: type=1326 audit(1761134129.134:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29702 comm="syz.4.6045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536578efc9 code=0x7ffc0000 [ 1617.411031][T29703] Dev loop6: unable to read RDB block 7 [ 1617.416711][T29703] loop6: unable to read partition table [ 1617.423769][T29703] loop6: partition table beyond EOD, truncated [ 1617.434274][T29697] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6043'. [ 1617.436369][ T30] audit: type=1326 audit(1761134129.164:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29702 comm="syz.4.6045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f536578efc9 code=0x7ffc0000 [ 1617.459119][T29697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1617.466347][ T30] audit: type=1326 audit(1761134129.164:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29702 comm="syz.4.6045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536578efc9 code=0x7ffc0000 [ 1617.489327][T29697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1617.498481][ T30] audit: type=1326 audit(1761134129.164:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29702 comm="syz.4.6045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f536578efc9 code=0x7ffc0000 [ 1617.532983][ T30] audit: type=1326 audit(1761134129.184:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29702 comm="syz.4.6045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536578efc9 code=0x7ffc0000 [ 1617.589396][ T30] audit: type=1326 audit(1761134129.184:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29702 comm="syz.4.6045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f536578efc9 code=0x7ffc0000 [ 1617.624472][ T30] audit: type=1326 audit(1761134129.184:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29702 comm="syz.4.6045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536578efc9 code=0x7ffc0000 [ 1617.651629][T29703] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1617.661392][ T90] usb 6-1: USB disconnect, device number 58 [ 1617.684302][ T30] audit: type=1326 audit(1761134129.194:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29702 comm="syz.4.6045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f536578efc9 code=0x7ffc0000 [ 1617.936663][T29717] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6050'. [ 1618.028161][T29720] bridge2: entered promiscuous mode [ 1618.034076][T29720] bridge2: entered allmulticast mode [ 1618.480660][ T90] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1618.695773][ T90] usb 6-1: Using ep0 maxpacket: 16 [ 1618.715818][ T90] usb 6-1: config 0 has an invalid interface number: 176 but max is 0 [ 1618.724467][ T90] usb 6-1: config 0 has no interface number 0 [ 1618.734296][ T90] usb 6-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=18.b3 [ 1618.766375][ T90] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.777391][ T90] usb 6-1: Product: syz [ 1618.782354][ T90] usb 6-1: Manufacturer: syz [ 1618.787542][ T90] usb 6-1: SerialNumber: syz [ 1618.807849][ T90] usb 6-1: config 0 descriptor?? [ 1618.842887][ T90] usb 6-1: bad CDC descriptors [ 1619.181398][T24505] usb 6-1: USB disconnect, device number 59 [ 1619.240355][T29739] sg_read: process 365 (syz.6.6056) changed security contexts after opening file descriptor, this is not allowed. [ 1619.970086][T29751] netlink: 'syz.8.6058': attribute type 10 has an invalid length. [ 1619.982407][T29751] bridge0: port 2(bridge_slave_1) entered disabled state [ 1619.990213][T29751] bridge0: port 1(bridge_slave_0) entered disabled state [ 1620.060719][T24505] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1620.073562][T29751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1620.080799][T29751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1620.088337][T29751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1620.095537][T29751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1620.214852][T24505] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1620.227921][T24505] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1620.247542][T29755] netlink: 'syz.8.6058': attribute type 2 has an invalid length. [ 1620.257093][T24505] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1620.269041][T24505] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1620.280345][T29751] team0: Port device bridge0 added [ 1620.285714][T24505] usb 5-1: SerialNumber: syz [ 1620.294843][T29745] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1620.428151][T29755] 9: entered promiscuous mode [ 1620.442993][T24505] usb 5-1: bad CDC descriptors [ 1620.664258][T17755] usb 5-1: USB disconnect, device number 50 [ 1620.954172][T29761] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6061'. [ 1621.508643][T29768] netlink: 'syz.0.6062': attribute type 10 has an invalid length. [ 1622.063491][T25891] Bluetooth: hci0: command 0x0405 tx timeout [ 1622.500695][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 1622.507942][ T30] audit: type=1800 audit(1761134134.244:3819): pid=29765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6063" name="/" dev="fuse" ino=5 res=0 errno=0 [ 1624.097977][T25891] Bluetooth: hci0: command 0x0405 tx timeout [ 1624.481715][T29812] syzkaller1: entered promiscuous mode [ 1624.496277][T29812] syzkaller1: entered allmulticast mode [ 1624.720731][ T90] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1624.817986][T29816] netlink: 'syz.6.6072': attribute type 1 has an invalid length. [ 1624.882443][ T90] usb 5-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 1624.886279][T29816] bridge3: entered promiscuous mode [ 1624.898850][ T90] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.916226][T29816] bridge3: entered allmulticast mode [ 1624.917554][ T90] usb 5-1: config 0 descriptor?? [ 1624.946531][ T90] pwc: Creative Labs Webcam 5 detected. [ 1625.177850][ T90] pwc: Failed to set LED on/off time (-71) [ 1625.370926][ T90] pwc: send_video_command error -71 [ 1625.376440][ T90] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1625.389300][ T90] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1625.419379][ T90] usb 5-1: USB disconnect, device number 51 [ 1626.332056][T29842] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6080'. [ 1626.377905][T29842] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1626.667975][T29851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6084'. [ 1626.736860][T29852] bridge2: entered promiscuous mode [ 1626.742258][T29852] bridge2: entered allmulticast mode [ 1627.402673][T29873] syzkaller0: entered promiscuous mode [ 1627.408182][T29873] syzkaller0: entered allmulticast mode [ 1627.424587][T29876] loop6: detected capacity change from 0 to 7 [ 1627.432633][T29876] Dev loop6: unable to read RDB block 7 [ 1627.442222][T29876] loop6: AHDI p1 p2 p3 [ 1627.446682][T29876] loop6: partition table partially beyond EOD, truncated [ 1627.456101][T29876] loop6: p1 start 231046032 is beyond EOD, truncated [ 1627.482806][T29876] loop6: p2 start 373273912 is beyond EOD, truncated [ 1627.865864][T29890] loop6: detected capacity change from 0 to 2560 [ 1627.875484][T29890] Buffer I/O error on dev loop6, logical block 0, async page read [ 1627.884300][T29890] Buffer I/O error on dev loop6, logical block 0, async page read [ 1627.892529][T29890] Buffer I/O error on dev loop6, logical block 0, async page read [ 1627.900384][T29890] Buffer I/O error on dev loop6, logical block 0, async page read [ 1627.915936][T29890] Buffer I/O error on dev loop6, logical block 0, async page read [ 1627.995108][T29890] Buffer I/O error on dev loop6, logical block 0, async page read [ 1628.040661][ T90] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1628.048389][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1628.073608][T29890] Buffer I/O error on dev loop6, logical block 0, async page read [ 1628.097725][T29890] Buffer I/O error on dev loop6, logical block 0, async page read [ 1628.109662][T29890] ldm_validate_partition_table(): Disk read failed. [ 1628.116738][T29890] Buffer I/O error on dev loop6, logical block 0, async page read [ 1628.129144][T29890] Buffer I/O error on dev loop6, logical block 0, async page read [ 1628.139575][T29890] Dev loop6: unable to read RDB block 0 [ 1628.148663][T29890] loop6: unable to read partition table [ 1628.155904][T29890] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1628.208326][ T90] usb 1-1: device descriptor read/64, error -32 [ 1628.450709][ T90] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1628.740913][ T90] usb 1-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 1628.752137][ T90] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.813466][ T90] pwc: Logitech/Cisco VT Camera webcam detected. [ 1628.894337][T29897] geneve2: entered promiscuous mode [ 1629.006365][T29901] loop6: detected capacity change from 0 to 7 [ 1629.014488][T29901] Dev loop6: unable to read RDB block 7 [ 1629.020126][T29901] loop6: unable to read partition table [ 1629.026558][T29901] loop6: partition table beyond EOD, truncated [ 1629.041228][T29901] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1629.055577][ T90] pwc: Failed to set LED on/off time (-71) [ 1629.068703][ T90] pwc: send_video_command error -71 [ 1629.076183][ T90] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1629.097386][ T90] Philips webcam 1-1:127.0: probe with driver Philips webcam failed with error -71 [ 1629.138552][ T90] usb 1-1: USB disconnect, device number 3 [ 1629.860772][T17755] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1630.627428][T17755] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 1630.687404][T17755] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1630.793691][T29931] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6106'. [ 1630.824907][T29933] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6105'. [ 1630.834263][T17755] usb 6-1: config 0 has no interfaces? [ 1630.839787][T17755] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1630.925110][T29934] bridge4: entered promiscuous mode [ 1630.930391][T29934] bridge4: entered allmulticast mode [ 1630.974697][ T30] audit: type=1326 audit(1761134142.754:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29935 comm="syz.4.6107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536578efc9 code=0x7ffc0000 [ 1631.001683][ T30] audit: type=1326 audit(1761134142.774:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29935 comm="syz.4.6107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f536578efc9 code=0x7ffc0000 [ 1631.037974][T17755] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.062978][ T30] audit: type=1326 audit(1761134142.814:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29935 comm="syz.4.6107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536578efc9 code=0x7ffc0000 [ 1631.120639][ T30] audit: type=1326 audit(1761134142.814:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29935 comm="syz.4.6107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536578efc9 code=0x7ffc0000 [ 1631.180931][T17755] usb 6-1: config 0 descriptor?? [ 1631.193950][ T30] audit: type=1326 audit(1761134142.814:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29935 comm="syz.4.6107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f536578efc9 code=0x7ffc0000 [ 1631.216614][ T30] audit: type=1326 audit(1761134142.814:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29935 comm="syz.4.6107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536578efc9 code=0x7ffc0000 [ 1631.251588][ T30] audit: type=1326 audit(1761134142.814:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29935 comm="syz.4.6107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536578efc9 code=0x7ffc0000 [ 1631.279230][ T30] audit: type=1326 audit(1761134142.814:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29935 comm="syz.4.6107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f536578efc9 code=0x7ffc0000 [ 1631.312595][ T30] audit: type=1326 audit(1761134142.814:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29935 comm="syz.4.6107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536578efc9 code=0x7ffc0000 [ 1631.339826][ T30] audit: type=1326 audit(1761134142.824:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29935 comm="syz.4.6107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f536578efc9 code=0x7ffc0000 [ 1631.696014][T29949] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6112'. [ 1631.748535][T29949] syzkaller1: entered promiscuous mode [ 1631.754259][T29949] syzkaller1: entered allmulticast mode [ 1632.656049][ T5972] usb 6-1: USB disconnect, device number 60 [ 1632.755802][T29965] kvm: pic: non byte write [ 1632.825898][T29969] loop6: detected capacity change from 0 to 7 [ 1632.834952][T29969] Dev loop6: unable to read RDB block 7 [ 1632.860947][T29969] loop6: AHDI p1 p2 p3 [ 1632.865289][T29969] loop6: partition table partially beyond EOD, truncated [ 1632.873339][T29969] loop6: p1 start 231046032 is beyond EOD, truncated [ 1632.904803][T29969] loop6: p2 start 373273912 is beyond EOD, truncated [ 1633.201256][T29974] loop6: detected capacity change from 0 to 7 [ 1633.277924][T10709] Dev loop6: unable to read RDB block 7 [ 1633.292692][T10709] loop6: AHDI p1 p2 p3 [ 1633.300217][T10709] loop6: partition table partially beyond EOD, truncated [ 1633.319031][T10709] loop6: p1 start 4217409618 is beyond EOD, truncated [ 1633.333096][T10709] loop6: p2 size 108 extends beyond EOD, truncated [ 1633.365866][T29974] Dev loop6: unable to read RDB block 7 [ 1633.373781][T29974] loop6: AHDI p1 p2 p3 [ 1633.378069][T29974] loop6: partition table partially beyond EOD, truncated [ 1633.386532][T29974] loop6: p1 start 4217409618 is beyond EOD, truncated [ 1633.394487][T29974] loop6: p2 size 108 extends beyond EOD, truncated [ 1633.531760][T10709] udevd[10709]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1633.600198][T10709] udevd[10709]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1633.810320][T29990] program syz.4.6122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1633.979730][T29993] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6123'. [ 1634.098374][T29995] bridge3: entered promiscuous mode [ 1634.103733][T29995] bridge3: entered allmulticast mode [ 1634.120821][T17755] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1634.357152][T17755] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1634.395108][T17755] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1634.407920][T17755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.416745][T17755] usb 5-1: Product: syz [ 1634.421164][T17755] usb 5-1: Manufacturer: syz [ 1634.425902][T17755] usb 5-1: SerialNumber: syz [ 1634.432708][T17755] usb 5-1: config 0 descriptor?? [ 1634.567306][T17755] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1634.687826][T10709] udevd[10709]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1635.161347][T30009] syzkaller0: entered promiscuous mode [ 1635.169425][T30009] syzkaller0: entered allmulticast mode [ 1635.485748][T30020] loop6: detected capacity change from 0 to 7 [ 1635.496170][T30020] Dev loop6: unable to read RDB block 7 [ 1635.502384][T30020] loop6: AHDI p1 p2 p3 [ 1635.506684][T30020] loop6: partition table partially beyond EOD, truncated [ 1635.514361][T30020] loop6: p1 start 4217409618 is beyond EOD, truncated [ 1635.522286][T30020] loop6: p2 size 108 extends beyond EOD, truncated [ 1635.588982][T10709] udevd[10709]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1635.700812][ T90] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1635.861302][ T5905] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1635.870609][ T90] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1635.881788][ T90] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1635.890933][ T90] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.905279][ T90] usb 6-1: config 0 descriptor?? [ 1636.060920][ T5905] usb 1-1: Using ep0 maxpacket: 8 [ 1636.075574][ T5905] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1636.097936][ T5905] usb 1-1: config 0 has no interface number 0 [ 1636.135021][ T5905] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1636.148881][ T5905] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1636.160870][ T90] usbhid 6-1:0.0: can't add hid device: -71 [ 1636.168487][ T90] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1636.181840][ T5905] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 104, changing to 10 [ 1636.222771][ T90] usb 6-1: USB disconnect, device number 61 [ 1636.229281][ T5905] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1636.252748][ T5905] usb 1-1: New USB device found, idVendor=0005, idProduct=0000, bcdDevice= 0.00 [ 1636.261999][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.273667][ T5905] usb 1-1: config 0 descriptor?? [ 1636.486045][T24505] usb 1-1: USB disconnect, device number 4 [ 1636.690771][ T90] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1636.733769][ T5905] usb 5-1: USB disconnect, device number 52 [ 1636.814329][T30042] loop6: detected capacity change from 0 to 7 [ 1636.828104][T30042] Dev loop6: unable to read RDB block 7 [ 1636.840943][ T90] usb 6-1: device descriptor read/64, error -71 [ 1636.854898][T30042] loop6: AHDI p1 p2 p3 [ 1636.867254][T30042] loop6: partition table partially beyond EOD, truncated [ 1636.880197][T30042] loop6: p1 start 231046032 is beyond EOD, truncated [ 1636.888275][T30042] loop6: p2 start 373273912 is beyond EOD, truncated [ 1637.102348][ T90] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1637.269422][ T90] usb 6-1: device descriptor read/64, error -71 [ 1637.420908][ T90] usb usb6-port1: attempt power cycle [ 1637.920849][ T90] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1637.995739][ T5972] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 1638.051802][ T90] usb 6-1: device descriptor read/8, error -71 [ 1638.160826][ T5972] usb 5-1: device descriptor read/64, error -71 [ 1638.320705][ T90] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1638.341374][ T90] usb 6-1: device descriptor read/8, error -71 [ 1638.401048][ T5972] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 1638.461349][ T90] usb usb6-port1: unable to enumerate USB device [ 1638.540878][ T5972] usb 5-1: device descriptor read/64, error -71 [ 1638.577152][T30066] kvm: pic: non byte write [ 1638.661168][ T5972] usb usb5-port1: attempt power cycle [ 1638.724788][T30071] loop6: detected capacity change from 0 to 7 [ 1638.746631][T30071] Dev loop6: unable to read RDB block 7 [ 1638.754387][T30071] loop6: unable to read partition table [ 1638.760361][T30071] loop6: partition table beyond EOD, truncated [ 1638.766764][T30071] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1638.917759][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1638.917777][ T30] audit: type=1326 audit(1761134150.694:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30075 comm="syz.5.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1638.959687][T30078] fuse: Bad value for 'group_id' [ 1638.964816][T30078] fuse: Bad value for 'group_id' [ 1639.020345][ T30] audit: type=1326 audit(1761134150.694:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30075 comm="syz.5.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1639.043157][ T5972] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 1639.101605][ T5972] usb 5-1: device descriptor read/8, error -71 [ 1639.107963][ T30] audit: type=1326 audit(1761134150.694:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30075 comm="syz.5.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1639.210292][ T30] audit: type=1326 audit(1761134150.704:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30075 comm="syz.5.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1639.262808][ T30] audit: type=1326 audit(1761134150.704:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30075 comm="syz.5.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1639.358477][ T30] audit: type=1326 audit(1761134150.704:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30075 comm="syz.5.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1639.374590][T30087] loop6: detected capacity change from 0 to 7 [ 1639.381457][ T5972] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 1639.398889][T30087] Dev loop6: unable to read RDB block 7 [ 1639.405033][T30087] loop6: AHDI p1 p2 p3 [ 1639.410269][T30087] loop6: partition table partially beyond EOD, truncated [ 1639.419783][T30087] loop6: p1 start 231046032 is beyond EOD, truncated [ 1639.444211][T30087] loop6: p2 start 373273912 is beyond EOD, truncated [ 1639.470267][ T5972] usb 5-1: device descriptor read/8, error -71 [ 1639.521644][ T30] audit: type=1326 audit(1761134150.704:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30075 comm="syz.5.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1639.548791][T30089] fuse: Bad value for 'fd' [ 1639.618222][ T30] audit: type=1326 audit(1761134150.704:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30075 comm="syz.5.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1639.642496][ T5972] usb usb5-port1: unable to enumerate USB device [ 1639.684935][T30091] syzkaller0: entered promiscuous mode [ 1639.691641][T30091] syzkaller0: entered allmulticast mode [ 1639.839621][ T30] audit: type=1326 audit(1761134150.704:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30075 comm="syz.5.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1640.090741][ T30] audit: type=1326 audit(1761134150.704:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30075 comm="syz.5.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1640.712562][T30104] loop6: detected capacity change from 0 to 7 [ 1640.730106][T30104] Dev loop6: unable to read RDB block 7 [ 1640.747888][T30104] loop6: unable to read partition table [ 1640.753956][T30104] loop6: partition table beyond EOD, truncated [ 1640.760137][T30104] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1640.839880][T30106] netlink: 176 bytes leftover after parsing attributes in process `syz.4.6159'. [ 1640.852705][T30106] netlink: 176 bytes leftover after parsing attributes in process `syz.4.6159'. [ 1641.109343][T30106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1641.118709][T30111] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6162'. [ 1641.138604][T30111] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1641.348814][T17762] IPVS: starting estimator thread 0... [ 1641.355010][T30118] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1641.404799][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1641.451071][T30119] IPVS: using max 30 ests per chain, 72000 per kthread [ 1641.564432][T30121] loop6: detected capacity change from 0 to 7 [ 1641.572522][T30121] Dev loop6: unable to read RDB block 7 [ 1641.588854][T30121] loop6: AHDI p1 p2 p3 [ 1641.598309][T30121] loop6: partition table partially beyond EOD, truncated [ 1641.720893][T30121] loop6: p1 start 231046032 is beyond EOD, truncated [ 1641.727633][T30121] loop6: p2 start 373273912 is beyond EOD, truncated [ 1641.835565][T30126] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6167'. [ 1641.882770][T30126] bond1: option updelay: invalid value (18446744073072017407) [ 1641.897456][T30126] bond1: option updelay: allowed values 0 - 2147483647 [ 1641.909029][T30126] bond1 (unregistering): Released all slaves [ 1642.491177][T17755] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1642.563992][T30145] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6173'. [ 1642.580265][T30145] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1642.653946][T17755] usb 1-1: device descriptor read/64, error -71 [ 1642.868369][T30152] kvm: pic: non byte write [ 1642.930711][T17755] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1643.247553][T17755] usb 1-1: device descriptor read/64, error -71 [ 1643.361148][T17755] usb usb1-port1: attempt power cycle [ 1643.462006][T30160] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6176'. [ 1643.545149][T30162] syzkaller0: entered promiscuous mode [ 1643.550724][T30162] syzkaller0: entered allmulticast mode [ 1643.868250][T17755] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1643.901031][T17755] usb 1-1: device descriptor read/8, error -71 [ 1644.140708][T17755] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1644.163689][T17755] usb 1-1: device descriptor read/8, error -71 [ 1644.271451][T17755] usb usb1-port1: unable to enumerate USB device [ 1644.800124][T30187] loop6: detected capacity change from 0 to 7 [ 1644.807474][T30187] Dev loop6: unable to read RDB block 7 [ 1644.815586][T30187] loop6: unable to read partition table [ 1644.915262][T30187] loop6: partition table beyond EOD, truncated [ 1644.998596][T30187] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1645.033385][T30189] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6185'. [ 1645.059054][T30189] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1646.170736][ T5972] usb 5-1: new low-speed USB device number 57 using dummy_hcd [ 1646.322706][T30207] syzkaller0: entered promiscuous mode [ 1646.328411][T30207] syzkaller0: entered allmulticast mode [ 1646.482015][ T5972] usb 5-1: config 13 has an invalid interface number: 100 but max is 1 [ 1646.490308][ T5972] usb 5-1: config 13 has an invalid interface association descriptor of length 2, skipping [ 1646.530959][ T5972] usb 5-1: config 13 has an invalid interface number: 188 but max is 1 [ 1646.580859][ T5972] usb 5-1: config 13 has no interface number 0 [ 1646.587064][ T5972] usb 5-1: config 13 has no interface number 1 [ 1646.593511][ T5972] usb 5-1: config 13 interface 100 altsetting 250 endpoint 0x6 has invalid maxpacket 32, setting to 8 [ 1646.606552][ T5972] usb 5-1: config 13 interface 100 has no altsetting 0 [ 1646.663480][ T5972] usb 5-1: string descriptor 0 read error: -22 [ 1646.669938][ T5972] usb 5-1: New USB device found, idVendor=0408, idProduct=ea05, bcdDevice=2c.a8 [ 1646.679478][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.712139][ T5972] option 5-1:13.100: GSM modem (1-port) converter detected [ 1646.723849][ T5972] option 5-1:13.188: GSM modem (1-port) converter detected [ 1646.965563][T30201] netlink: 'syz.4.6188': attribute type 4 has an invalid length. [ 1647.032679][T17752] usb 5-1: USB disconnect, device number 57 [ 1647.110699][T17762] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1647.152956][T17752] option 5-1:13.100: device disconnected [ 1647.176038][T17752] option 5-1:13.188: device disconnected [ 1647.283276][T17762] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1647.320628][T17762] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1647.332493][T17762] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1647.395104][T17762] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1647.427153][T17762] usb 6-1: SerialNumber: syz [ 1647.740929][T17762] usb 6-1: 0:2 : does not exist [ 1647.827394][T17762] usb 6-1: USB disconnect, device number 66 [ 1647.971775][T10709] udevd[10709]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1648.397830][T30241] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6197'. [ 1648.407311][T30241] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1648.671466][T30253] syzkaller0: entered promiscuous mode [ 1648.677074][T30253] syzkaller0: entered allmulticast mode [ 1649.214198][T30258] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6202'. [ 1649.232544][T30258] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6202'. [ 1650.091335][T17755] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1650.254456][T17755] usb 6-1: no configurations [ 1650.259219][T17755] usb 6-1: can't read configurations, error -22 [ 1650.404906][T17755] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1650.631057][T17755] usb 6-1: no configurations [ 1650.636205][T17755] usb 6-1: can't read configurations, error -22 [ 1650.647751][T17755] usb usb6-port1: attempt power cycle [ 1650.990696][T17755] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1651.007023][T30278] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6209'. [ 1651.016331][T30278] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1651.033025][T17755] usb 6-1: no configurations [ 1651.037718][T17755] usb 6-1: can't read configurations, error -22 [ 1651.171082][T17755] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1651.215982][T17755] usb 6-1: no configurations [ 1651.220792][T17755] usb 6-1: can't read configurations, error -22 [ 1651.227791][T17755] usb usb6-port1: unable to enumerate USB device [ 1651.580004][T30285] binder: BINDER_SET_CONTEXT_MGR already set [ 1651.592378][T30285] binder: 30283:30285 ioctl 4018620d 200000000040 returned -16 [ 1651.614303][T30285] binder: 30283:30285 ioctl 541b 200000000140 returned -22 [ 1651.652989][T30285] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6212'. [ 1652.013849][T30292] syzkaller0: entered promiscuous mode [ 1652.019403][T30292] syzkaller0: entered allmulticast mode [ 1652.302486][ T30] kauditd_printk_skb: 113 callbacks suppressed [ 1652.302503][ T30] audit: type=1326 audit(1761134164.084:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30303 comm="syz.8.6218" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f891d58efc9 code=0x0 [ 1652.330595][ C1] vkms_vblank_simulate: vblank timer overrun [ 1653.328270][T30315] Cannot find set identified by id 0 to match [ 1653.660040][T30317] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6221'. [ 1653.669500][T30317] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1653.757536][ T30] audit: type=1326 audit(1761134165.534:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30318 comm="syz.4.6222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536578efc9 code=0x7ffc0000 [ 1653.781732][ T30] audit: type=1326 audit(1761134165.564:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30318 comm="syz.4.6222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536578efc9 code=0x7ffc0000 [ 1653.830055][ T30] audit: type=1326 audit(1761134165.564:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30318 comm="syz.4.6222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f536578efc9 code=0x7ffc0000 [ 1653.872031][ T30] audit: type=1326 audit(1761134165.564:3976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30318 comm="syz.4.6222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536578efc9 code=0x7ffc0000 [ 1653.980769][ T30] audit: type=1326 audit(1761134165.564:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30318 comm="syz.4.6222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536578efc9 code=0x7ffc0000 [ 1654.026823][ T30] audit: type=1326 audit(1761134165.564:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30318 comm="syz.4.6222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f536578efc9 code=0x7ffc0000 [ 1654.059529][ T30] audit: type=1326 audit(1761134165.584:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30318 comm="syz.4.6222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536578efc9 code=0x7ffc0000 [ 1654.087040][ T30] audit: type=1326 audit(1761134165.584:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30318 comm="syz.4.6222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f536578efc9 code=0x7ffc0000 [ 1654.114490][ T30] audit: type=1326 audit(1761134165.584:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30318 comm="syz.4.6222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536578efc9 code=0x7ffc0000 [ 1654.360712][T17752] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1654.490742][ T5972] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 1654.520834][T17752] usb 5-1: Using ep0 maxpacket: 8 [ 1654.529130][T17752] usb 5-1: config 4 has an invalid interface number: 4 but max is 1 [ 1654.538887][T17752] usb 5-1: config 4 has an invalid interface number: 5 but max is 1 [ 1654.546986][T17752] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.559413][T17752] usb 5-1: config 4 has no interface number 0 [ 1654.565633][T17752] usb 5-1: config 4 has no interface number 1 [ 1654.572223][T17752] usb 5-1: config 4 interface 5 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1654.585438][T17752] usb 5-1: config 4 interface 4 has no altsetting 0 [ 1654.593666][T17752] usb 5-1: config 4 interface 5 has no altsetting 0 [ 1654.604155][T17752] usb 5-1: New USB device found, idVendor=19d2, idProduct=0123, bcdDevice=f9.0b [ 1654.613509][T17752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.621664][T17752] usb 5-1: Product: syz [ 1654.625990][T17752] usb 5-1: Manufacturer: 講僭쮱íŽï Œå±£â¹¯ê­²ì¿§ã°­ê¾î“‚씠
떜䵔螥뾅㘫â¿èŽ˜Ï†ä™›å½êŒ€ãžî‹¸ï‹ä‚°â²³ï…´âžå¢í€†ï°´ä…¼ç‰Éž [ 1654.644589][T17752] usb 5-1: SerialNumber: syz [ 1654.669633][ T5972] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1654.678146][ T5972] usb 1-1: not running at top speed; connect to a high speed hub [ 1654.687365][ T5972] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.698150][ T5972] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1654.713029][ T5972] usb 1-1: string descriptor 0 read error: -22 [ 1654.719486][ T5972] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1654.728600][ T5972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.758058][ T5972] usb 1-1: 0:2 : does not exist [ 1654.868955][T30326] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1654.875505][T30326] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1654.885108][T30326] vhci_hcd vhci_hcd.0: Device attached [ 1654.901599][T30336] vhci_hcd: connection closed [ 1654.909271][T24786] vhci_hcd: stop threads [ 1654.925000][T17752] usb 5-1: USB disconnect, device number 58 [ 1654.930738][T24786] vhci_hcd: release socket [ 1654.935487][T24786] vhci_hcd: disconnect device [ 1655.095145][T30340] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6227'. [ 1655.107944][T30340] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6227'. [ 1655.294043][T30349] kvm: pic: non byte write [ 1657.399859][T30375] netlink: 'syz.5.6236': attribute type 1 has an invalid length. [ 1657.464632][T30375] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6236'. [ 1657.521063][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1657.521080][ T30] audit: type=1326 audit(1761134169.124:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30370 comm="syz.5.6236" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9067b8efc9 code=0x0 [ 1657.590118][T30372] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6225'. [ 1658.533768][T30388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6239'. [ 1658.549799][T30388] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6239'. [ 1658.562000][T30388] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6239'. [ 1658.861298][T30398] loop6: detected capacity change from 0 to 7 [ 1658.913809][T30398] Dev loop6: unable to read RDB block 7 [ 1659.297258][T30398] loop6: AHDI p1 p2 p3 [ 1659.314203][T30398] loop6: partition table partially beyond EOD, truncated [ 1659.381093][T30398] loop6: p1 start 4217409618 is beyond EOD, truncated [ 1659.390206][T30398] loop6: p2 size 108 extends beyond EOD, truncated [ 1659.850420][T10709] udevd[10709]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1659.999499][ T5972] usb 1-1: Warning! Unlikely big volume range (=4294967294), cval->res is probably wrong. [ 1660.019765][ T5972] usb 1-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/20196/-8016 [ 1660.033101][ T5972] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1660.076916][ T5972] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 1660.274633][ T5972] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1660.302922][ T5972] usb 1-1: USB disconnect, device number 9 [ 1660.754903][T30415] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6247'. [ 1661.520657][ T5972] usb 6-1: new low-speed USB device number 71 using dummy_hcd [ 1661.704880][ T5972] usb 6-1: config 13 has an invalid interface number: 100 but max is 1 [ 1661.731642][ T5972] usb 6-1: config 13 has an invalid interface association descriptor of length 2, skipping [ 1661.774586][T30431] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6252'. [ 1661.788638][ T5972] usb 6-1: config 13 has an invalid interface number: 188 but max is 1 [ 1661.800212][T30431] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6252'. [ 1661.810241][ T5972] usb 6-1: config 13 has no interface number 0 [ 1661.810265][ T5972] usb 6-1: config 13 has no interface number 1 [ 1661.818759][T30431] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6252'. [ 1661.913607][ T5972] usb 6-1: config 13 interface 100 altsetting 250 endpoint 0x6 has invalid maxpacket 32, setting to 8 [ 1661.973899][ T5972] usb 6-1: config 13 interface 100 has no altsetting 0 [ 1661.999429][T30440] loop6: detected capacity change from 0 to 7 [ 1662.020425][T10709] Dev loop6: unable to read RDB block 7 [ 1662.026481][T10709] loop6: AHDI p1 p2 p3 [ 1662.030980][T10709] loop6: partition table partially beyond EOD, truncated [ 1662.039198][T10709] loop6: p1 start 4217409618 is beyond EOD, truncated [ 1662.046375][T10709] loop6: p2 size 108 extends beyond EOD, truncated [ 1662.056497][T30440] Dev loop6: unable to read RDB block 7 [ 1662.065054][T30440] loop6: AHDI p1 p2 p3 [ 1662.069898][T30440] loop6: partition table partially beyond EOD, truncated [ 1662.079534][T30440] loop6: p1 start 4217409618 is beyond EOD, truncated [ 1662.097040][T30440] loop6: p2 size 108 extends beyond EOD, truncated [ 1662.200776][ T5972] usb 6-1: string descriptor 0 read error: -22 [ 1662.207449][ T5972] usb 6-1: New USB device found, idVendor=0408, idProduct=ea05, bcdDevice=2c.a8 [ 1662.216835][ T5972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.257463][ T5972] option 6-1:13.100: GSM modem (1-port) converter detected [ 1662.290204][ T5972] option 6-1:13.188: GSM modem (1-port) converter detected [ 1662.341941][T10709] udevd[10709]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1662.435337][T10709] udevd[10709]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1662.471823][T30443] kvm: pic: non byte write [ 1662.540236][T30426] netlink: 'syz.5.6249': attribute type 4 has an invalid length. [ 1662.566446][T17752] usb 6-1: USB disconnect, device number 71 [ 1662.593924][T17752] option 6-1:13.100: device disconnected [ 1662.617040][T17752] option 6-1:13.188: device disconnected [ 1662.967967][T30451] loop6: detected capacity change from 0 to 7 [ 1662.974850][T30451] Dev loop6: unable to read RDB block 7 [ 1662.980413][T30451] loop6: unable to read partition table [ 1662.995494][T30451] loop6: partition table beyond EOD, truncated [ 1663.009907][T30451] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1663.780870][T17755] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 1663.972794][T17755] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1663.981303][T17755] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1663.990006][T17755] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1664.000354][T17755] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1664.016658][T17755] usb 5-1: config 1 has no interface number 0 [ 1664.023254][T17755] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1664.033698][T17755] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.053282][T17755] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1664.248625][T17755] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 1664.281566][T17755] snd_usb_pod 5-1:1.1: invalid control EP [ 1664.287347][T17755] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 1664.302735][T30470] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6264'. [ 1664.302746][T17755] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1664.303262][T17755] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1664.327973][T30470] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6264'. [ 1664.343158][T30470] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6264'. [ 1664.461902][T17762] usb 5-1: USB disconnect, device number 59 [ 1664.762384][T30468] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6263'. [ 1664.978399][T30481] netlink: 148 bytes leftover after parsing attributes in process `syz.6.6267'. [ 1665.002953][T30480] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1665.015104][T30481] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1665.560902][T17755] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1665.850862][T17755] usb 5-1: device descriptor read/64, error -71 [ 1666.110726][T17755] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1666.274477][T17755] usb 5-1: device descriptor read/64, error -71 [ 1666.392664][T17755] usb usb5-port1: attempt power cycle [ 1666.740823][T17755] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1666.911414][T17755] usb 5-1: device descriptor read/8, error -71 [ 1667.092261][ T30] audit: type=1326 audit(1761134178.854:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30507 comm="syz.5.6274" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9067b8efc9 code=0x0 [ 1667.160876][T17755] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1667.191422][T17755] usb 5-1: device descriptor read/8, error -71 [ 1667.300932][T17755] usb usb5-port1: unable to enumerate USB device [ 1667.380858][T17752] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1667.520713][T17752] usb 6-1: device descriptor read/64, error -71 [ 1667.634590][T30526] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6279'. [ 1667.643818][T30526] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1667.697735][ T30] audit: type=1326 audit(1761134179.474:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30527 comm="syz.0.6280" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c7138efc9 code=0x0 [ 1667.754404][T30529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6280'. [ 1667.764809][T30529] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1667.777349][T17752] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1667.910769][T17752] usb 6-1: device descriptor read/64, error -71 [ 1668.022354][T17752] usb usb6-port1: attempt power cycle [ 1668.410058][T17752] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1668.431431][T17752] usb 6-1: device descriptor read/8, error -71 [ 1668.671838][T17752] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1668.701395][T17752] usb 6-1: device descriptor read/8, error -71 [ 1668.813723][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.814347][T17752] usb usb6-port1: unable to enumerate USB device [ 1668.820139][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.077641][T30542] program syz.0.6282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1670.300691][T17755] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1670.510672][T17755] usb 5-1: Using ep0 maxpacket: 8 [ 1670.519963][T17755] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1670.530743][T17755] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1670.533660][T30558] netlink: 'syz.6.6288': attribute type 10 has an invalid length. [ 1670.549521][T17755] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1670.553953][T30558] team0: left promiscuous mode [ 1670.564135][T30558] team_slave_0: left promiscuous mode [ 1670.569596][T17755] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1670.570408][T30558] team_slave_1: left promiscuous mode [ 1670.599524][T30558] 8021q: adding VLAN 0 to HW filter on device team0 [ 1670.607633][T30558] team0: entered promiscuous mode [ 1670.612954][T30558] team_slave_0: entered promiscuous mode [ 1670.621638][T30558] team_slave_1: entered promiscuous mode [ 1670.628208][T30558] bond0: (slave team0): Enslaving as an active interface with an up link [ 1670.656440][T17755] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1670.702692][T17755] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1670.764942][T17755] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.872576][T17755] usbtmc 5-1:16.0: bulk endpoints not found [ 1671.077108][T30565] netlink: 'syz.6.6291': attribute type 30 has an invalid length. [ 1671.918338][T30576] bridge1: entered promiscuous mode [ 1671.925935][T30576] bridge1: entered allmulticast mode [ 1672.925770][ T30] audit: type=1326 audit(1761134184.704:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30579 comm="syz.5.6295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1673.021142][ T30] audit: type=1326 audit(1761134184.704:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30579 comm="syz.5.6295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1673.046149][ T30] audit: type=1326 audit(1761134184.704:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30579 comm="syz.5.6295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1673.102117][T17752] usb 5-1: USB disconnect, device number 64 [ 1673.110698][ T30] audit: type=1326 audit(1761134184.704:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30579 comm="syz.5.6295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1673.154332][ T30] audit: type=1326 audit(1761134184.704:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30579 comm="syz.5.6295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1673.193533][ T30] audit: type=1326 audit(1761134184.704:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30579 comm="syz.5.6295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1673.319818][ T30] audit: type=1326 audit(1761134184.704:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30579 comm="syz.5.6295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1673.343847][ T30] audit: type=1326 audit(1761134184.704:4021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30579 comm="syz.5.6295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1673.367694][ T30] audit: type=1326 audit(1761134184.704:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30579 comm="syz.5.6295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1673.400681][ T30] audit: type=1326 audit(1761134184.704:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30579 comm="syz.5.6295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9067b8efc9 code=0x7ffc0000 [ 1673.998955][T30603] loop6: detected capacity change from 0 to 7 [ 1674.013483][T10709] Dev loop6: unable to read RDB block 7 [ 1674.019061][T10709] loop6: AHDI p1 p2 p3 [ 1674.023567][T10709] loop6: partition table partially beyond EOD, truncated [ 1674.033180][T10709] loop6: p1 start 231046032 is beyond EOD, truncated [ 1674.040205][T10709] loop6: p2 start 373273912 is beyond EOD, truncated [ 1674.093059][T30603] Dev loop6: unable to read RDB block 7 [ 1674.110130][T30603] loop6: AHDI p1 p2 p3 [ 1674.122304][T30603] loop6: partition table partially beyond EOD, truncated [ 1674.133343][T30603] loop6: p1 start 231046032 is beyond EOD, truncated [ 1674.140149][T30603] loop6: p2 start 373273912 is beyond EOD, truncated [ 1674.160958][T30608] tipc: Started in network mode [ 1674.165861][T30608] tipc: Node identity a658b0716e91, cluster identity 4711 [ 1674.181612][T30608] tipc: Enabled bearer , priority 0 [ 1674.190476][T30608] syzkaller0: entered promiscuous mode [ 1674.196120][T30608] syzkaller0: entered allmulticast mode [ 1674.223675][T30606] tipc: Resetting bearer [ 1674.252043][T30606] tipc: Disabling bearer [ 1674.428049][T30622] bridge5: entered promiscuous mode [ 1674.433946][T30622] bridge5: entered allmulticast mode [ 1675.242586][ T5905] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1675.450864][ T5905] usb 6-1: Using ep0 maxpacket: 32 [ 1675.462519][ T5905] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1675.660757][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1675.704007][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1675.793174][ T5905] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1676.108293][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.176305][ T5905] usb 6-1: config 0 descriptor?? [ 1676.186906][T30630] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1676.197594][ T5905] hub 6-1:0.0: USB hub found [ 1676.407155][T30630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1676.420358][T30657] loop6: detected capacity change from 0 to 7 [ 1676.421177][T30630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1676.459325][T30657] Dev loop6: unable to read RDB block 7 [ 1676.469232][ T5905] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 1676.483786][ T5905] usbhid 6-1:0.0: can't add hid device: -71 [ 1676.498386][ T5905] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1676.517821][T30657] loop6: AHDI p1 p2 p3 [ 1676.525842][T30657] loop6: partition table partially beyond EOD, truncated [ 1676.544633][ T5905] usb 6-1: USB disconnect, device number 76 [ 1676.562826][T30657] loop6: p1 start 231046032 is beyond EOD, truncated [ 1676.581465][T30657] loop6: p2 start 373273912 is beyond EOD, truncated [ 1676.681876][T17762] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 1677.209462][T17762] usb 1-1: config 13 has an invalid interface number: 100 but max is 1 [ 1677.218506][T17762] usb 1-1: config 13 has an invalid interface association descriptor of length 2, skipping [ 1677.229040][T17762] usb 1-1: config 13 has an invalid interface number: 188 but max is 1 [ 1677.245313][T17762] usb 1-1: config 13 has no interface number 0 [ 1677.262373][T17762] usb 1-1: config 13 has no interface number 1 [ 1677.280273][T17762] usb 1-1: config 13 interface 100 altsetting 250 endpoint 0x6 has invalid maxpacket 32, setting to 8 [ 1677.299314][T17762] usb 1-1: config 13 interface 100 has no altsetting 0 [ 1677.367273][T17762] usb 1-1: string descriptor 0 read error: -22 [ 1677.471812][T17762] usb 1-1: New USB device found, idVendor=0408, idProduct=ea05, bcdDevice=2c.a8 [ 1677.500002][T17762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.520622][ T5905] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 1677.581135][T17762] option 1-1:13.100: GSM modem (1-port) converter detected [ 1677.625805][T17762] option 1-1:13.188: GSM modem (1-port) converter detected [ 1677.630899][T17752] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1677.694257][ T5905] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1677.704956][ T5905] usb 5-1: config 0 has no interface number 0 [ 1677.713920][ T5905] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1677.735909][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.776046][ T5905] usb 5-1: config 0 descriptor?? [ 1677.788229][ T5905] usb 5-1: selecting invalid altsetting 1 [ 1677.800640][T17752] usb 6-1: Using ep0 maxpacket: 8 [ 1677.813351][T17752] usb 6-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 1677.824336][T17752] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.841948][T17752] usb 6-1: Product: syz [ 1677.849285][T17752] usb 6-1: Manufacturer: syz [ 1677.857160][T17752] usb 6-1: SerialNumber: syz [ 1677.875530][ T5905] dvb_ttusb_budget: ttusb_init_controller: error [ 1677.875980][T17752] usb 6-1: config 0 descriptor?? [ 1677.893212][ T5905] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1677.965783][T17752] option 6-1:0.0: GSM modem (1-port) converter detected [ 1677.989685][T30668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1678.017800][T30668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1678.039703][ T5905] DVB: Unable to find symbol cx22700_attach() [ 1678.054360][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1678.054371][ T30] audit: type=1400 audit(1761134189.834:4083): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=30664 comm="syz.4.6318" [ 1678.114440][ T5905] DVB: Unable to find symbol tda10046_attach() [ 1678.121430][ T5905] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1678.173841][T17752] usb 6-1: USB disconnect, device number 77 [ 1678.227004][T17752] option 6-1:0.0: device disconnected [ 1678.815969][T30658] netlink: 'syz.0.6314': attribute type 4 has an invalid length. [ 1678.824308][T30678] netlink: 148 bytes leftover after parsing attributes in process `syz.6.6322'. [ 1678.835696][T30678] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1678.928607][T17752] usb 1-1: USB disconnect, device number 10 [ 1678.938066][T17752] option 1-1:13.100: device disconnected [ 1678.947997][T17752] option 1-1:13.188: device disconnected [ 1679.001752][ T5972] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1679.175948][ T5972] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1679.246628][ T5972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.255055][ T5972] usb 6-1: Product: syz [ 1679.259313][ T5972] usb 6-1: Manufacturer: syz [ 1679.264079][ T5972] usb 6-1: SerialNumber: syz [ 1679.278748][ T5972] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1679.293769][T17762] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1679.700918][T17755] usb 6-1: USB disconnect, device number 78 [ 1679.897660][ T30] audit: type=1326 audit(1761134191.674:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30691 comm="syz.8.6326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891d58efc9 code=0x7ffc0000 [ 1679.924127][ T30] audit: type=1326 audit(1761134191.674:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30691 comm="syz.8.6326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891d58efc9 code=0x7ffc0000 [ 1679.949636][ T30] audit: type=1326 audit(1761134191.674:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30691 comm="syz.8.6326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f891d58efc9 code=0x7ffc0000 [ 1679.973061][ T30] audit: type=1326 audit(1761134191.674:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30691 comm="syz.8.6326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891d58efc9 code=0x7ffc0000 [ 1679.997870][ T30] audit: type=1326 audit(1761134191.674:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30691 comm="syz.8.6326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891d58efc9 code=0x7ffc0000 [ 1680.024592][ T30] audit: type=1326 audit(1761134191.674:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30691 comm="syz.8.6326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f891d58efc9 code=0x7ffc0000 [ 1680.054910][ T30] audit: type=1326 audit(1761134191.674:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30691 comm="syz.8.6326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891d58efc9 code=0x7ffc0000 [ 1680.078071][ T30] audit: type=1326 audit(1761134191.724:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30691 comm="syz.8.6326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f891d58efc9 code=0x7ffc0000 [ 1680.129068][ T30] audit: type=1326 audit(1761134191.724:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30691 comm="syz.8.6326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891d58efc9 code=0x7ffc0000 [ 1680.152623][T17752] usb 5-1: USB disconnect, device number 65 [ 1680.166973][T30694] loop6: detected capacity change from 0 to 7 [ 1680.174316][T30694] Dev loop6: unable to read RDB block 7 [ 1680.179988][T30694] loop6: AHDI p1 p2 p3 [ 1680.186122][T30694] loop6: partition table partially beyond EOD, truncated [ 1680.197369][T30694] loop6: p1 start 4217409618 is beyond EOD, truncated [ 1680.205119][T30694] loop6: p2 size 108 extends beyond EOD, truncated [ 1680.316513][T10709] udevd[10709]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1680.333114][T17762] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1680.340197][T17762] ath9k_htc: Failed to initialize the device [ 1680.380144][T17755] usb 6-1: ath9k_htc: USB layer deinitialized [ 1680.463557][T30704] tipc: Enabled bearer , priority 0 [ 1680.471583][T30704] syzkaller0: entered promiscuous mode [ 1680.477068][T30704] syzkaller0: entered allmulticast mode [ 1680.499302][T30704] tipc: Resetting bearer [ 1680.509607][T30703] tipc: Resetting bearer [ 1680.552846][T30703] tipc: Disabling bearer [ 1680.848745][T30711] usb usb8: usbfs: process 30711 (syz.4.6328) did not claim interface 0 before use [ 1681.543165][T30714] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6333'. [ 1681.644703][T30716] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6334'. [ 1681.662340][T30716] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1683.614560][T30753] loop6: detected capacity change from 0 to 7 [ 1683.676413][T10709] Dev loop6: unable to read RDB block 7 [ 1683.685537][T10709] loop6: AHDI p1 p2 p3 [ 1683.689747][T10709] loop6: partition table partially beyond EOD, truncated [ 1683.706626][T10709] loop6: p1 start 4217409618 is beyond EOD, truncated [ 1683.775042][T10709] loop6: p2 size 108 extends beyond EOD, truncated [ 1683.806817][T30753] Dev loop6: unable to read RDB block 7 [ 1683.812953][T30753] loop6: AHDI p1 p2 p3 [ 1683.817206][T30753] loop6: partition table partially beyond EOD, truncated [ 1683.868931][T30753] loop6: p1 start 4217409618 is beyond EOD, truncated [ 1683.895556][T30753] loop6: p2 size 108 extends beyond EOD, truncated [ 1683.904842][T30762] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6345'. [ 1684.030077][T10709] udevd[10709]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1684.085531][T10709] udevd[10709]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1684.131049][T17755] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1684.293201][T17755] usb 5-1: Using ep0 maxpacket: 8 [ 1684.305631][T17755] usb 5-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1684.314950][T17755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.340325][T30782] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1684.377075][T17755] usb 5-1: Product: syz [ 1684.382931][T17755] usb 5-1: Manufacturer: syz [ 1684.387575][T17755] usb 5-1: SerialNumber: syz [ 1684.396301][T17755] usb 5-1: config 0 descriptor?? [ 1684.409711][T17755] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1685.038796][T25891] Bluetooth: unknown link type 128 [ 1685.103481][T17755] gspca_vc032x: reg_w err -71 [ 1685.108452][T17755] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 1685.150682][T17755] usb 5-1: USB disconnect, device number 66 [ 1685.196818][T30787] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1685.213800][T30787] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1685.240835][T30787] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1685.247326][T30787] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1685.255633][T30787] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1685.263041][T30787] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1685.281330][T30787] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1685.290965][T30787] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1685.934589][T30806] trusted_key: encrypted_key: insufficient parameters specified [ 1686.060127][T30810] loop6: detected capacity change from 0 to 7 [ 1686.069076][T10709] Dev loop6: unable to read RDB block 7 [ 1686.074794][T10709] loop6: AHDI p1 p2 p3 [ 1686.082960][T10709] loop6: partition table partially beyond EOD, truncated [ 1686.099416][T10709] loop6: p1 start 4217409618 is beyond EOD, truncated [ 1686.113548][T10709] loop6: p2 size 108 extends beyond EOD, truncated [ 1686.142078][T30810] Dev loop6: unable to read RDB block 7 [ 1686.147786][T30810] loop6: AHDI p1 p2 p3 [ 1686.152368][T30810] loop6: partition table partially beyond EOD, truncated [ 1686.177408][T30810] loop6: p1 start 4217409618 is beyond EOD, truncated [ 1686.186950][T30810] loop6: p2 size 108 extends beyond EOD, truncated [ 1686.442452][T30816] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1686.851427][T30817] fuse: Bad value for 'group_id' [ 1686.856908][T30817] fuse: Bad value for 'group_id' [ 1686.875050][T10709] udevd[10709]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1686.970150][T10709] udevd[10709]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1687.131977][T20602] Bluetooth: hci1: command 0x0c1a tx timeout [ 1687.290769][T20602] Bluetooth: hci0: command 0x0405 tx timeout [ 1687.290976][T25891] Bluetooth: hci2: command 0x0419 tx timeout [ 1687.297893][T27067] Bluetooth: hci4: command 0x0406 tx timeout [ 1687.302984][T25891] Bluetooth: hci3: command 0x0405 tx timeout [ 1687.511180][ T5905] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1687.561891][T30833] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6364'. [ 1687.583512][T30833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1687.605745][T30833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1687.628892][T30837] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6362'. [ 1687.690734][ T5905] usb 5-1: Using ep0 maxpacket: 32 [ 1687.698375][ T5905] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1687.707501][T30832] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6363'. [ 1687.718027][ T5905] usb 5-1: config 0 has no interface number 0 [ 1687.734779][ T5905] usb 5-1: config 0 interface 51 has no altsetting 0 [ 1687.748278][ T5905] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1687.769007][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.777356][ T5905] usb 5-1: Product: syz [ 1687.784262][ T5905] usb 5-1: Manufacturer: syz [ 1687.789942][ T5905] usb 5-1: SerialNumber: syz [ 1687.805930][ T5905] usb 5-1: config 0 descriptor?? [ 1687.819909][ T5905] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1687.849715][T30839] pimreg: entered allmulticast mode [ 1687.857966][T30840] pimreg: left allmulticast mode [ 1687.947792][T30839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1687.960883][T30839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1688.020194][ T5905] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1688.045150][ T5905] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1688.456885][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1688.457258][T17752] usb 5-1: USB disconnect, device number 67 [ 1688.485519][T17752] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1688.524103][T17752] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1688.566718][T17752] quatech2 5-1:0.51: device disconnected [ 1689.370816][ T5831] Bluetooth: hci0: command 0x0405 tx timeout [ 1689.370891][T25891] Bluetooth: hci2: command 0x0419 tx timeout [ 1689.376946][T30823] Bluetooth: hci4: command 0x0406 tx timeout [ 1689.580793][T17752] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 1689.696067][T30851] loop6: detected capacity change from 0 to 7 [ 1689.704722][T30851] Dev loop6: unable to read RDB block 7 [ 1689.710498][T30851] loop6: AHDI p1 p2 p3 [ 1689.716329][T30851] loop6: partition table partially beyond EOD, truncated [ 1689.723903][T30851] loop6: p1 start 4217409618 is beyond EOD, truncated [ 1689.730875][T30851] loop6: p2 size 108 extends beyond EOD, truncated [ 1689.765482][T17752] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1689.779619][T17752] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.803785][T17752] usb 5-1: config 0 descriptor?? [ 1689.820142][T10709] udevd[10709]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1690.220686][ T5905] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1690.382325][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1690.393409][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1690.403247][ T5905] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1690.416457][ T5905] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1690.425704][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.436047][ T5905] usb 6-1: config 0 descriptor?? [ 1690.745398][T30859] xt_hashlimit: max too large, truncated to 1048576 [ 1691.010907][T17752] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 1691.083398][T17752] usb 5-1: USB disconnect, device number 68 [ 1691.462406][T30823] Bluetooth: hci0: command 0x0405 tx timeout [ 1692.506986][T30866] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6373'. [ 1692.832725][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1692.832743][ T30] audit: type=1326 audit(1761134204.614:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30877 comm="syz.8.6376" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f891d58efc9 code=0x0 [ 1692.861681][ C0] vkms_vblank_simulate: vblank timer overrun [ 1692.938456][T30879] netlink: 'syz.8.6376': attribute type 1 has an invalid length. [ 1692.949963][T30879] netlink: 68 bytes leftover after parsing attributes in process `syz.8.6376'. [ 1693.440664][T17755] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1693.530773][ T5905] usbhid 6-1:0.0: can't add hid device: -71 [ 1693.536767][ T5905] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1693.552414][ T5905] usb 6-1: USB disconnect, device number 79 [ 1693.600929][T17755] usb 5-1: Using ep0 maxpacket: 16 [ 1693.608546][T17752] hid-generic 0006:0004:0009.003E: unknown main item tag 0x0 [ 1693.618288][T17752] hid-generic 0006:0004:0009.003E: unknown main item tag 0x0 [ 1693.626951][T17752] hid-generic 0006:0004:0009.003E: unknown main item tag 0x0 [ 1693.634847][T17752] hid-generic 0006:0004:0009.003E: unknown main item tag 0x0 [ 1693.642866][T17752] hid-generic 0006:0004:0009.003E: unknown main item tag 0x0 [ 1693.650938][T17752] hid-generic 0006:0004:0009.003E: unknown main item tag 0x0 [ 1693.660122][T17755] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1693.669426][T17752] hid-generic 0006:0004:0009.003E: unknown main item tag 0x0 [ 1693.676897][T17752] hid-generic 0006:0004:0009.003E: unknown main item tag 0x0 [ 1693.684396][T17755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.692634][T17752] hid-generic 0006:0004:0009.003E: unknown main item tag 0x0 [ 1693.700022][T17752] hid-generic 0006:0004:0009.003E: unknown main item tag 0x0 [ 1693.707527][T17755] usb 5-1: Product: syz [ 1693.711756][T17755] usb 5-1: Manufacturer: syz [ 1693.716376][T17755] usb 5-1: SerialNumber: syz [ 1693.727930][T17752] hid-generic 0006:0004:0009.003E: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1693.798080][T30892] fido_id[30892]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1693.942962][T17755] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1693.949823][T17755] cdc_ncm 5-1:1.0: bind() failure [ 1693.962033][T17755] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1693.968872][T17755] cdc_ncm 5-1:1.1: bind() failure [ 1694.186887][T17755] usb 5-1: USB disconnect, device number 69 [ 1694.212458][T17752] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1694.377400][T17752] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1694.400715][T17752] usb 6-1: config 1 interface 0 has no altsetting 1 [ 1694.423672][T17752] usb 6-1: New USB device found, idVendor=0536, idProduct=a4a8, bcdDevice= 0.40 [ 1694.438998][T17752] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.447328][T17752] usb 6-1: Product: syz [ 1694.452802][T17752] usb 6-1: Manufacturer: syz [ 1694.458493][T17752] usb 6-1: SerialNumber: syz [ 1694.679984][T17752] usb 6-1: USB disconnect, device number 80 [ 1694.941027][T30902] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1695.483362][T30913] sctp: [Deprecated]: syz.5.6385 (pid 30913) Use of int in maxseg socket option. [ 1695.483362][T30913] Use struct sctp_assoc_value instead [ 1695.888200][T30919] tipc: Started in network mode [ 1695.894038][T30919] tipc: Node identity d20246fa503d, cluster identity 4711 [ 1695.911285][T30919] tipc: Enabled bearer , priority 0 [ 1695.921302][T30919] syzkaller0: entered promiscuous mode [ 1695.926962][T30919] syzkaller0: entered allmulticast mode [ 1696.232656][T24505] usb 5-1: new low-speed USB device number 70 using dummy_hcd [ 1696.413527][T24505] usb 5-1: Invalid ep0 maxpacket: 16 [ 1696.540642][T24505] usb 5-1: new low-speed USB device number 71 using dummy_hcd [ 1696.760846][T24505] usb 5-1: Invalid ep0 maxpacket: 16 [ 1696.769078][T24505] usb usb5-port1: attempt power cycle [ 1696.996424][ T30] audit: type=1326 audit(1761134208.764:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30930 comm="syz.6.6390" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf87b8efc9 code=0x0 [ 1697.050764][T17755] tipc: Node number set to 2185185018 [ 1697.164175][ T30] audit: type=1326 audit(1761134208.944:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30933 comm="syz.8.6391" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f891d58efc9 code=0x0 [ 1697.240411][T30938] netlink: 'syz.8.6391': attribute type 1 has an invalid length. [ 1697.248350][T30938] netlink: 68 bytes leftover after parsing attributes in process `syz.8.6391'. [ 1697.285009][T24505] usb 5-1: new low-speed USB device number 72 using dummy_hcd [ 1697.330635][T24505] usb 5-1: Invalid ep0 maxpacket: 16 [ 1697.509275][T24505] usb 5-1: new low-speed USB device number 73 using dummy_hcd [ 1697.651861][T24505] usb 5-1: Invalid ep0 maxpacket: 16 [ 1697.657584][T24505] usb usb5-port1: unable to enumerate USB device [ 1697.720766][T30941] tipc: Enabled bearer , priority 0 [ 1697.728207][T30941] syzkaller0: entered promiscuous mode [ 1697.734723][T30941] syzkaller0: entered allmulticast mode [ 1697.744335][T30940] tipc: Resetting bearer [ 1697.779443][T30940] tipc: Disabling bearer [ 1697.972751][T30946] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1698.033910][T30946] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1698.056637][T30946] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1698.065620][T30946] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1698.075994][T30946] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 1698.097425][T30946] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 1698.116652][T30946] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1698.132239][T30946] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 1698.154490][T30946] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 1698.202100][T30946] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 1698.702567][T30959] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1698.944677][T30918] tipc: Resetting bearer [ 1699.065811][T30918] tipc: Disabling bearer [ 1699.288043][T30974] tipc: Enabled bearer , priority 0 [ 1699.295575][T30974] syzkaller0: entered promiscuous mode [ 1699.305102][T30974] syzkaller0: entered allmulticast mode [ 1699.453403][T30973] tipc: Resetting bearer [ 1699.491582][T30973] tipc: Disabling bearer [ 1699.614776][T30982] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6405'. [ 1699.808708][T30986] netlink: 'syz.8.6406': attribute type 10 has an invalid length. [ 1699.819443][T30986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1699.826923][T30986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1699.847620][T30986] team0: Port device bridge0 removed [ 1699.854725][T30986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1699.861930][T30986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1699.869415][T30986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1699.876562][T30986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1699.903278][T30986] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1699.910918][T17752] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1700.072639][T17752] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1700.099099][T17752] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1700.119942][T17752] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1700.153240][T17752] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.181861][T17752] usb 5-1: config 0 descriptor?? [ 1700.233964][T30997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6409'. [ 1700.639712][T31003] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6412'. [ 1702.635585][ T30] audit: type=1326 audit(1761134214.414:4128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31028 comm="syz.5.6418" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9067b8efc9 code=0x0 [ 1702.735737][T17752] usbhid 5-1:0.0: can't add hid device: -71 [ 1702.751832][T17752] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1702.775052][T17752] usb 5-1: USB disconnect, device number 74 [ 1704.336963][T31063] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6425'. [ 1704.550428][T31066] tipc: Enabled bearer , priority 0 [ 1704.560475][T31066] syzkaller0: entered promiscuous mode [ 1704.566369][T31066] syzkaller0: entered allmulticast mode [ 1704.592622][T31066] tipc: Resetting bearer [ 1704.600054][T31064] tipc: Resetting bearer [ 1704.642438][T31064] tipc: Disabling bearer [ 1704.740691][T17752] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1704.894251][T17752] usb 6-1: Using ep0 maxpacket: 16 [ 1704.902416][T17752] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1704.913472][T17752] usb 6-1: config 0 has no interfaces? [ 1704.922063][T17752] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1704.931513][T17752] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.980730][T17752] usb 6-1: Product: syz [ 1704.984960][T17752] usb 6-1: Manufacturer: syz [ 1704.989559][T17752] usb 6-1: SerialNumber: syz [ 1705.182689][T17752] usb 6-1: config 0 descriptor?? [ 1705.600650][T17752] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1705.700259][T31088] fuse: Bad value for 'fd' [ 1705.842737][T31086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1705.859629][T31086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1705.900728][T17752] usb 5-1: Using ep0 maxpacket: 8 [ 1705.908470][T17752] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1705.916149][T17752] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1705.925685][T17752] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.942057][T17752] usb 5-1: config 0 descriptor?? [ 1706.460076][T17752] hid_parser_main: 7 callbacks suppressed [ 1706.460091][T17752] elo 0003:04E7:0009.003F: unknown main item tag 0x0 [ 1706.477976][T17752] elo 0003:04E7:0009.003F: unknown main item tag 0x0 [ 1706.501134][T17752] elo 0003:04E7:0009.003F: hidraw0: USB HID v80.00 Device [HID 04e7:0009] on usb-dummy_hcd.4-1/input0 [ 1706.684121][T17752] usb 5-1: USB disconnect, device number 75 [ 1706.742701][T17760] usb 6-1: USB disconnect, device number 81 [ 1706.926178][T31104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6432'. [ 1706.947021][T31104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1706.955175][T31104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1707.226195][T31110] tipc: Enabled bearer , priority 0 [ 1707.302910][T31110] syzkaller0: entered promiscuous mode [ 1707.328944][T31110] syzkaller0: entered allmulticast mode [ 1707.373507][T31119] tipc: Started in network mode [ 1707.378839][T31119] tipc: Node identity 82db86f588e1, cluster identity 4711 [ 1707.420836][T31119] tipc: Enabled bearer , priority 0 [ 1707.432615][T31110] tipc: Resetting bearer [ 1707.502174][T31122] syzkaller0: entered promiscuous mode [ 1707.507726][T31122] syzkaller0: entered allmulticast mode [ 1707.519155][T31112] FAULT_INJECTION: forcing a failure. [ 1707.519155][T31112] name failslab, interval 1, probability 0, space 0, times 0 [ 1707.549765][T31112] CPU: 1 UID: 0 PID: 31112 Comm: syz.8.6435 Not tainted syzkaller #0 PREEMPT(full) [ 1707.549779][T31112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1707.549786][T31112] Call Trace: [ 1707.549790][T31112] [ 1707.549795][T31112] dump_stack_lvl+0x189/0x250 [ 1707.549815][T31112] ? __pfx____ratelimit+0x10/0x10 [ 1707.549828][T31112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1707.549841][T31112] ? __pfx__printk+0x10/0x10 [ 1707.549854][T31112] ? __pfx___might_resched+0x10/0x10 [ 1707.549865][T31112] ? fs_reclaim_acquire+0x7d/0x100 [ 1707.549882][T31112] should_fail_ex+0x414/0x560 [ 1707.549900][T31112] should_failslab+0xa8/0x100 [ 1707.549911][T31112] __kmalloc_noprof+0xcb/0x7f0 [ 1707.549924][T31112] ? tomoyo_encode+0x28b/0x550 [ 1707.549942][T31112] tomoyo_encode+0x28b/0x550 [ 1707.549959][T31112] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1707.549974][T31112] ? tomoyo_domain+0xd9/0x130 [ 1707.549991][T31112] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1707.550004][T31112] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1707.550017][T31112] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1707.550049][T31112] ? __fget_files+0x2a/0x420 [ 1707.550061][T31112] ? __fget_files+0x3a0/0x420 [ 1707.550070][T31112] ? __fget_files+0x2a/0x420 [ 1707.550081][T31112] security_file_ioctl+0xcb/0x2d0 [ 1707.550094][T31112] __se_sys_ioctl+0x47/0x170 [ 1707.550108][T31112] do_syscall_64+0xfa/0xfa0 [ 1707.550120][T31112] ? lockdep_hardirqs_on+0x9c/0x150 [ 1707.550132][T31112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1707.550142][T31112] ? clear_bhb_loop+0x60/0xb0 [ 1707.550154][T31112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1707.550164][T31112] RIP: 0033:0x7f891d58efc9 [ 1707.550174][T31112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1707.550183][T31112] RSP: 002b:00007f891e3c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1707.550195][T31112] RAX: ffffffffffffffda RBX: 00007f891d7e5fa0 RCX: 00007f891d58efc9 [ 1707.550202][T31112] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 1707.550209][T31112] RBP: 00007f891e3c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1707.550215][T31112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1707.550221][T31112] R13: 00007f891d7e6038 R14: 00007f891d7e5fa0 R15: 00007f891d90fa28 [ 1707.550238][T31112] [ 1707.550250][T31112] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1707.798951][T31109] tipc: Resetting bearer [ 1707.850925][ T5905] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 1707.961507][T31109] tipc: Disabling bearer [ 1708.211383][ T5905] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1708.220447][ T5905] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1708.232528][ T5905] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1708.240938][T17760] tipc: Node number set to 3368661105 [ 1708.258501][ T5905] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1708.268020][ T5905] usb 6-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 1708.337178][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.429712][ T5905] usb 6-1: config 0 descriptor?? [ 1708.543496][T17762] tipc: Node number set to 171607797 [ 1708.679237][T31112] tipc: Resetting bearer [ 1708.696813][T31111] tipc: Resetting bearer [ 1708.810426][T31111] tipc: Disabling bearer [ 1708.892038][ T5905] usbhid 6-1:0.0: can't add hid device: -71 [ 1708.899110][ T5905] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1708.922005][ T5905] usb 6-1: USB disconnect, device number 82 [ 1709.370465][T31138] netlink: 'syz.4.6440': attribute type 10 has an invalid length. [ 1709.410829][T31138] bridge0: port 4(netdevsim0) entered blocking state [ 1709.417581][T31138] bridge0: port 4(netdevsim0) entered disabled state [ 1709.453774][T31138] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1709.479737][T31138] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1709.504779][T31138] bridge0: port 4(netdevsim0) entered blocking state [ 1709.511607][T31138] bridge0: port 4(netdevsim0) entered forwarding state [ 1709.534026][T31141] program syz.5.6442 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1709.700636][ T30] audit: type=1326 audit(1761134221.474:4129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31143 comm="syz.8.6443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891d58efc9 code=0x7ffc0000 [ 1709.772204][ T30] audit: type=1326 audit(1761134221.524:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31143 comm="syz.8.6443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891d58efc9 code=0x7ffc0000 [ 1709.801080][T17760] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1709.812688][ T30] audit: type=1326 audit(1761134221.524:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31143 comm="syz.8.6443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f891d58efc9 code=0x7ffc0000 [ 1709.835800][ T30] audit: type=1326 audit(1761134221.524:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31143 comm="syz.8.6443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891d58efc9 code=0x7ffc0000 [ 1709.858730][ T30] audit: type=1326 audit(1761134221.524:4133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31143 comm="syz.8.6443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f891d58efc9 code=0x7ffc0000 [ 1709.907310][ T30] audit: type=1326 audit(1761134221.524:4134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31143 comm="syz.8.6443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f891d52b099 code=0x7ffc0000 [ 1709.960296][ T30] audit: type=1326 audit(1761134221.524:4135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31143 comm="syz.8.6443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891d58efc9 code=0x7ffc0000 [ 1709.990853][T17752] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1710.003010][ T30] audit: type=1326 audit(1761134221.524:4136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31143 comm="syz.8.6443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f891d58efc9 code=0x7ffc0000 [ 1710.028011][ T30] audit: type=1326 audit(1761134221.524:4137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31143 comm="syz.8.6443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891d58efc9 code=0x7ffc0000 [ 1710.032910][T17760] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1710.080810][ T30] audit: type=1326 audit(1761134221.524:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31143 comm="syz.8.6443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f891d58efc9 code=0x7ffc0000 [ 1710.105573][T17760] usb 1-1: config 25 has an invalid descriptor of length 0, skipping remainder of the config [ 1710.116254][T17760] usb 1-1: config 25 has 0 interfaces, different from the descriptor's value: 1 [ 1710.136562][T17760] usb 1-1: New USB device found, idVendor=19d2, idProduct=0018, bcdDevice=2b.62 [ 1710.147067][T17760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.156567][T17760] usb 1-1: Product: syz [ 1710.162970][T17752] usb 6-1: Using ep0 maxpacket: 8 [ 1710.173857][T17752] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1710.183603][T17752] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.191977][T17760] usb 1-1: Manufacturer: syz [ 1710.201281][T17760] usb 1-1: SerialNumber: syz [ 1710.213286][T17752] usb 6-1: Product: syz [ 1710.234055][T17752] usb 6-1: Manufacturer: syz [ 1710.241904][T17752] usb 6-1: SerialNumber: syz [ 1710.260685][T17752] usb 6-1: config 0 descriptor?? [ 1710.468599][T17760] usb 1-1: USB disconnect, device number 11 [ 1710.474752][T17752] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1711.376003][T17752] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1711.400024][T17752] usb 6-1: USB disconnect, device number 83 [ 1711.402706][T31161] loop6: detected capacity change from 0 to 7 [ 1711.424887][T31161] Dev loop6: unable to read RDB block 7 [ 1711.430501][T31161] loop6: unable to read partition table [ 1711.437078][T31161] loop6: partition table beyond EOD, truncated [ 1711.447282][T31161] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1712.610621][T17760] usb 6-1: new low-speed USB device number 84 using dummy_hcd [ 1712.870688][T17760] usb 6-1: Invalid ep0 maxpacket: 64 [ 1713.042935][T17760] usb 6-1: new low-speed USB device number 85 using dummy_hcd [ 1713.083151][T31191] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1713.221586][T17760] usb 6-1: Invalid ep0 maxpacket: 64 [ 1713.261280][T17760] usb usb6-port1: attempt power cycle [ 1713.511297][T31204] loop6: detected capacity change from 0 to 524287999 [ 1713.619376][T31204] Dev loop6: unable to read RDB block 8 [ 1713.625445][T31204] loop6: unable to read partition table [ 1713.631537][T31204] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾xИCÖ) failed (rc=-5) [ 1713.650773][T17760] usb 6-1: new low-speed USB device number 86 using dummy_hcd [ 1713.701866][T17760] usb 6-1: Invalid ep0 maxpacket: 64 [ 1713.831468][T17760] usb 6-1: new low-speed USB device number 87 using dummy_hcd [ 1713.901382][T17760] usb 6-1: Invalid ep0 maxpacket: 64 [ 1713.907609][T17760] usb usb6-port1: unable to enumerate USB device [ 1714.031614][T31220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6465'. [ 1715.024089][T31245] tipc: Enabled bearer , priority 0 [ 1715.031807][T31245] syzkaller0: entered promiscuous mode [ 1715.078100][T31245] syzkaller0: entered allmulticast mode [ 1715.152995][T31245] tipc: Resetting bearer [ 1715.177635][T31244] tipc: Resetting bearer [ 1715.210482][T31244] tipc: Disabling bearer [ 1715.375240][T31261] loop6: detected capacity change from 0 to 7 [ 1715.382946][T27443] Dev loop6: unable to read RDB block 7 [ 1715.388581][T27443] loop6: AHDI p1 p2 p3 [ 1715.398748][T27443] loop6: partition table partially beyond EOD, truncated [ 1715.408917][T27443] loop6: p1 start 231046032 is beyond EOD, truncated [ 1715.419044][T27443] loop6: p2 start 373273912 is beyond EOD, truncated [ 1715.436732][T31261] Dev loop6: unable to read RDB block 7 [ 1715.446767][T31261] loop6: AHDI p1 p2 p3 [ 1715.456901][T31261] loop6: partition table partially beyond EOD, truncated [ 1715.464350][T31261] loop6: p1 start 231046032 is beyond EOD, truncated [ 1715.473020][T31261] loop6: p2 start 373273912 is beyond EOD, truncated [ 1715.583437][T31263] tipc: Enabled bearer , priority 0 [ 1715.598997][T31263] syzkaller0: entered promiscuous mode [ 1715.608993][T31263] syzkaller0: entered allmulticast mode [ 1715.648951][T31263] tipc: Resetting bearer [ 1715.660423][T31262] tipc: Resetting bearer [ 1715.681396][T31262] tipc: Disabling bearer [ 1715.870706][ T5972] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1715.960647][T17762] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1716.030640][ T5972] usb 5-1: Using ep0 maxpacket: 32 [ 1716.038301][ T5972] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 1716.046808][ T5972] usb 5-1: config 0 has no interface number 0 [ 1716.061105][ T5972] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1716.076114][ T5972] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1716.090495][ T5972] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1716.104996][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.116414][ T5972] usb 5-1: Product: syz [ 1716.121480][ T5972] usb 5-1: Manufacturer: syz [ 1716.126157][ T5972] usb 5-1: SerialNumber: syz [ 1716.132291][T17762] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1716.146053][ T5972] usb 5-1: config 0 descriptor?? [ 1716.152582][T17762] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1716.170132][T17762] usb 1-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 1716.181185][T17762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.203739][T31269] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1716.224661][T17762] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1716.369860][ T5972] radio-si470x 5-1:0.35: DeviceID=0x8249 ChipID=0x5d00 [ 1716.383329][ T5972] radio-si470x 5-1:0.35: software version 130, hardware version 73 [ 1716.479695][T17762] usb 1-1: USB disconnect, device number 12 [ 1716.571923][ T5972] radio-si470x 5-1:0.35: submitting int urb failed (-90) [ 1716.733797][ T5972] radio-si470x 5-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 1716.746171][ T5972] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -22 [ 1716.782638][ T5972] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 1716.804645][ T5972] usb 5-1: USB disconnect, device number 76 [ 1717.115708][T31302] kvm: pic: non byte write [ 1717.192271][ T5972] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1717.352635][ T5972] usb 5-1: Using ep0 maxpacket: 8 [ 1717.360470][ T5972] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1717.368971][ T5972] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1717.378860][ T5972] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1717.389664][ T5972] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1717.399595][ T5972] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1717.412877][ T5972] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1717.422084][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1717.643001][ T5972] usb 5-1: usb_control_msg returned -32 [ 1717.648800][ T5972] usbtmc 5-1:16.0: can't read capabilities [ 1717.996131][T31309] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 1718.005317][ T5972] usb 5-1: USB disconnect, device number 77 [ 1827.540971][ C1] ------------[ cut here ]------------ [ 1827.547859][ C1] WARNING: CPU: 1 PID: 17752 at kernel/rcu/tree_stall.h:1050 rcu_check_gp_start_stall+0x2e4/0x470 [ 1827.558492][ C1] Modules linked in: [ 1827.563437][ C1] CPU: 1 UID: 0 PID: 17752 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) [ 1827.572942][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1827.583001][ C1] Workqueue: events fqdir_free_fn [ 1827.588057][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470 [ 1827.594400][ C1] Code: ff ff 48 c7 c7 60 94 7d 99 be 04 00 00 00 e8 23 d7 7e 00 4c 89 f7 b8 01 00 00 00 87 05 d5 af d6 17 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff 00 26 f4 8d 74 47 48 c7 c0 90 04 7d 8f 48 c1 e8 [ 1827.614045][ C1] RSP: 0018:ffffc90000a08bb8 EFLAGS: 00010046 [ 1827.620319][ C1] RAX: 0000000000000000 RBX: 0000000000000a02 RCX: ffffffff81a6e47d [ 1827.628314][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8df42600 [ 1827.636398][ C1] RBP: ffffc90000a08e30 R08: 0000000000000003 R09: 0000000000000004 [ 1827.644572][ C1] R10: dffffc0000000000 R11: fffffbfff32fb28c R12: 0000000000002904 [ 1827.652785][ C1] R13: 1ffff11017127602 R14: ffffffff8df42600 R15: dffffc0000000000 [ 1827.660781][ C1] FS: 0000000000000000(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 [ 1827.669725][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1827.676328][ C1] CR2: 00007f3c7219cf98 CR3: 000000005dd9a000 CR4: 00000000003526f0 [ 1827.684331][ C1] Call Trace: [ 1827.687626][ C1] [ 1827.690501][ C1] rcu_core+0x5fa/0x1770 [ 1827.694801][ C1] ? __lock_acquire+0xab9/0xd20 [ 1827.699818][ C1] ? __pfx_rcu_core+0x10/0x10 [ 1827.704547][ C1] ? sched_balance_domains+0x121/0x9e0 [ 1827.710118][ C1] ? sched_balance_domains+0x8be/0x9e0 [ 1827.715613][ C1] ? sched_balance_domains+0x121/0x9e0 [ 1827.721110][ C1] handle_softirqs+0x286/0x870 [ 1827.725936][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1827.730820][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1827.736228][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1827.741629][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1827.746239][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1827.751487][ C1] irq_exit_rcu+0x9/0x30 [ 1827.756026][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1827.761693][ C1] [ 1827.764625][ C1] [ 1827.767650][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1827.773660][ C1] RIP: 0010:smp_call_function_single+0x3a9/0x590 [ 1827.780201][ C1] Code: 33 44 89 f6 83 e6 01 31 ff e8 83 8a 0b 00 41 83 e6 01 75 11 e8 38 86 0b 00 4d 89 fe eb 3f e8 2e 86 0b 00 eb 3c 4d 89 fe f3 90 <43> 0f b6 04 2c 84 c0 75 0f f7 03 01 00 00 00 74 1d e8 11 86 0b 00 [ 1827.800102][ C1] RSP: 0018:ffffc9000ee578a0 EFLAGS: 00000293 [ 1827.806201][ C1] RAX: ffffffff81b47ddf RBX: ffffc9000ee578e8 RCX: ffff888066060000 [ 1827.814291][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1827.822376][ C1] RBP: ffffc9000ee57998 R08: ffffffff8f7cd477 R09: 1ffffffff1ef9a8e [ 1827.830380][ C1] R10: dffffc0000000000 R11: ffffffff8170f180 R12: 1ffff92001dcaf1d [ 1827.838389][ C1] R13: dffffc0000000000 R14: 1ffff92001dcaf18 R15: 1ffff92001dcaf18 [ 1827.846747][ C1] ? __pfx_native_send_call_func_single_ipi+0x10/0x10 [ 1827.853551][ C1] ? smp_call_function_single+0x3bf/0x590 [ 1827.859307][ C1] ? __pfx_rcu_barrier_handler+0x10/0x10 [ 1827.864975][ C1] ? __pfx_smp_call_function_single+0x10/0x10 [ 1827.871090][ C1] ? __pfx_rcu_barrier_handler+0x10/0x10 [ 1827.876763][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1827.883134][ C1] ? __raw_spin_lock_init+0x45/0x100 [ 1827.888464][ C1] ? __init_swait_queue_head+0xa9/0x150 [ 1827.894050][ C1] rcu_barrier+0x360/0x570 [ 1827.898503][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1827.904245][ C1] fqdir_free_fn+0x33/0x140 [ 1827.908767][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1827.914510][ C1] process_scheduled_works+0xae1/0x17b0 [ 1827.920176][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.926179][ C1] worker_thread+0x8a0/0xda0 [ 1827.930817][ C1] kthread+0x711/0x8a0 [ 1827.934897][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1827.940011][ C1] ? __pfx_kthread+0x10/0x10 [ 1827.944607][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1827.949808][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1827.955010][ C1] ? __pfx_kthread+0x10/0x10 [ 1827.959616][ C1] ret_from_fork+0x4bc/0x870 [ 1827.964405][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.969795][ C1] ? __switch_to_asm+0x39/0x70 [ 1827.974559][ C1] ? __switch_to_asm+0x33/0x70 [ 1827.979320][ C1] ? __pfx_kthread+0x10/0x10 [ 1827.984125][ C1] ret_from_fork_asm+0x1a/0x30 [ 1827.990226][ C1] [ 1827.993377][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1828.000767][ C1] CPU: 1 UID: 0 PID: 17752 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) [ 1828.010251][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1828.020324][ C1] Workqueue: events fqdir_free_fn [ 1828.025390][ C1] Call Trace: [ 1828.028689][ C1] [ 1828.031637][ C1] dump_stack_lvl+0x99/0x250 [ 1828.036261][ C1] ? __asan_memcpy+0x40/0x70 [ 1828.040877][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1828.046122][ C1] ? __pfx__printk+0x10/0x10 [ 1828.050733][ C1] vpanic+0x237/0x6d0 [ 1828.054744][ C1] ? __pfx_vpanic+0x10/0x10 [ 1828.059466][ C1] panic+0xb9/0xc0 [ 1828.063218][ C1] ? __pfx_panic+0x10/0x10 [ 1828.067671][ C1] __warn+0x31b/0x4b0 [ 1828.071665][ C1] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 1828.077487][ C1] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 1828.083217][ C1] report_bug+0x2be/0x4f0 [ 1828.087555][ C1] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 1828.093291][ C1] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 1828.099109][ C1] ? rcu_check_gp_start_stall+0x2e6/0x470 [ 1828.104850][ C1] handle_bug+0x84/0x160 [ 1828.109105][ C1] exc_invalid_op+0x1a/0x50 [ 1828.113709][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1828.118585][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470 [ 1828.125200][ C1] Code: ff ff 48 c7 c7 60 94 7d 99 be 04 00 00 00 e8 23 d7 7e 00 4c 89 f7 b8 01 00 00 00 87 05 d5 af d6 17 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff 00 26 f4 8d 74 47 48 c7 c0 90 04 7d 8f 48 c1 e8 [ 1828.144891][ C1] RSP: 0018:ffffc90000a08bb8 EFLAGS: 00010046 [ 1828.150965][ C1] RAX: 0000000000000000 RBX: 0000000000000a02 RCX: ffffffff81a6e47d [ 1828.159022][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8df42600 [ 1828.166993][ C1] RBP: ffffc90000a08e30 R08: 0000000000000003 R09: 0000000000000004 [ 1828.174959][ C1] R10: dffffc0000000000 R11: fffffbfff32fb28c R12: 0000000000002904 [ 1828.182929][ C1] R13: 1ffff11017127602 R14: ffffffff8df42600 R15: dffffc0000000000 [ 1828.191617][ C1] ? rcu_check_gp_start_stall+0x2cd/0x470 [ 1828.197356][ C1] ? rcu_check_gp_start_stall+0x2cd/0x470 [ 1828.203095][ C1] rcu_core+0x5fa/0x1770 [ 1828.207376][ C1] ? __lock_acquire+0xab9/0xd20 [ 1828.212254][ C1] ? __pfx_rcu_core+0x10/0x10 [ 1828.216949][ C1] ? sched_balance_domains+0x121/0x9e0 [ 1828.222445][ C1] ? sched_balance_domains+0x8be/0x9e0 [ 1828.227929][ C1] ? sched_balance_domains+0x121/0x9e0 [ 1828.233413][ C1] handle_softirqs+0x286/0x870 [ 1828.238203][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1828.242983][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1828.248284][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1828.253510][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1828.258128][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1828.263345][ C1] irq_exit_rcu+0x9/0x30 [ 1828.267595][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1828.273426][ C1] [ 1828.276361][ C1] [ 1828.279291][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1828.285292][ C1] RIP: 0010:smp_call_function_single+0x3a9/0x590 [ 1828.291737][ C1] Code: 33 44 89 f6 83 e6 01 31 ff e8 83 8a 0b 00 41 83 e6 01 75 11 e8 38 86 0b 00 4d 89 fe eb 3f e8 2e 86 0b 00 eb 3c 4d 89 fe f3 90 <43> 0f b6 04 2c 84 c0 75 0f f7 03 01 00 00 00 74 1d e8 11 86 0b 00 [ 1828.311352][ C1] RSP: 0018:ffffc9000ee578a0 EFLAGS: 00000293 [ 1828.317431][ C1] RAX: ffffffff81b47ddf RBX: ffffc9000ee578e8 RCX: ffff888066060000 [ 1828.325406][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1828.333377][ C1] RBP: ffffc9000ee57998 R08: ffffffff8f7cd477 R09: 1ffffffff1ef9a8e [ 1828.341349][ C1] R10: dffffc0000000000 R11: ffffffff8170f180 R12: 1ffff92001dcaf1d [ 1828.349321][ C1] R13: dffffc0000000000 R14: 1ffff92001dcaf18 R15: 1ffff92001dcaf18 [ 1828.357305][ C1] ? __pfx_native_send_call_func_single_ipi+0x10/0x10 [ 1828.364081][ C1] ? smp_call_function_single+0x3bf/0x590 [ 1828.369824][ C1] ? __pfx_rcu_barrier_handler+0x10/0x10 [ 1828.375469][ C1] ? __pfx_smp_call_function_single+0x10/0x10 [ 1828.381627][ C1] ? __pfx_rcu_barrier_handler+0x10/0x10 [ 1828.387352][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1828.393687][ C1] ? __raw_spin_lock_init+0x45/0x100 [ 1828.398984][ C1] ? __init_swait_queue_head+0xa9/0x150 [ 1828.404544][ C1] rcu_barrier+0x360/0x570 [ 1828.408978][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1828.414706][ C1] fqdir_free_fn+0x33/0x140 [ 1828.419222][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1828.425031][ C1] process_scheduled_works+0xae1/0x17b0 [ 1828.430605][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1828.436602][ C1] worker_thread+0x8a0/0xda0 [ 1828.441217][ C1] kthread+0x711/0x8a0 [ 1828.445295][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1828.450405][ C1] ? __pfx_kthread+0x10/0x10 [ 1828.455004][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1828.460205][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1828.465406][ C1] ? __pfx_kthread+0x10/0x10 [ 1828.470004][ C1] ret_from_fork+0x4bc/0x870 [ 1828.474597][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1828.479720][ C1] ? __switch_to_asm+0x39/0x70 [ 1828.484482][ C1] ? __switch_to_asm+0x33/0x70 [ 1828.489240][ C1] ? __pfx_kthread+0x10/0x10 [ 1828.493834][ C1] ret_from_fork_asm+0x1a/0x30 [ 1828.498610][ C1] [ 1829.638052][ C1] Shutting down cpus with NMI [ 1829.643108][ C1] Kernel Offset: disabled [ 1829.647449][ C1] Rebooting in 86400 seconds..