last executing test programs: 30m15.377192137s ago: executing program 4 (id=29): mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ff9000/0x1000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) socket$unix(0x1, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000001c0)={0x9, 0x3, 0x3, 0x0, 0x7}) r4 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000040) sendmsg$nl_xfrm(r5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x52cd, &(0x7f0000000580)={0x0, 0x68a4, 0x3, 0xfffffffe, 0x3, 0x0, r3}, &(0x7f0000000240), &(0x7f0000000200)) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'rr\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) 30m13.269282812s ago: executing program 4 (id=33): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000001400), 0x13f}}, 0x20) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xc2a, 0x10100}, &(0x7f0000000180), &(0x7f0000000680)) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) r5 = syz_clone3(&(0x7f00000005c0)={0x200000, &(0x7f0000000100), 0x0, &(0x7f0000000240), {0x8}, &(0x7f00000003c0)=""/209, 0xd1, &(0x7f00000004c0)=""/245, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) sched_getattr(r5, &(0x7f0000000640)={0x38}, 0x38, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000030701"], 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r6 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140), &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r6, 0x1e76, 0xf728, 0x5, 0x0, 0x0) 30m9.84390773s ago: executing program 4 (id=38): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = fsopen(&(0x7f0000000240)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1eb640) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x7fffffff, 0x2, 0x1a00, 0x0, 0xffffffffffffffff, 0x2fc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x3dc, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) pipe2$watch_queue(0x0, 0x80) write$sysctl(0xffffffffffffffff, &(0x7f0000000580)='1\x00', 0x2) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x8850) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x281, 0x3) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x2, @rand_addr=0x64010101}, 0x10) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000040)={@loopback, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x3, [@remote, @loopback, @dev={0xac, 0x14, 0x14, 0x21}]}, 0x1c) r7 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r7, &(0x7f0000000040)=@profile={'stack ', ':\x00'}, 0x8) 30m5.814601937s ago: executing program 4 (id=44): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_mark(0xffffffffffffffff, 0x490, 0x12, r3, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,usey_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xe}]}, 0x30}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) r9 = syz_io_uring_setup(0x234, &(0x7f00000001c0)={0x0, 0x2804, 0x10100, 0x0, 0x362}, &(0x7f0000000540), &(0x7f0000000100)) io_uring_enter(r9, 0x7898, 0x0, 0x8, 0x0, 0x0) 30m4.106919624s ago: executing program 4 (id=47): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000200)=@ax25={{}, [@bcast, @netrom, @rose, @null, @default, @netrom, @rose]}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000340)=""/208, 0xd0}, {&(0x7f0000000280)=""/118, 0x76}, {&(0x7f0000000440)=""/21, 0x15}], 0x4, &(0x7f00000004c0)=""/120, 0x78}, 0x4}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000001c0)=@add_del={0x2, &(0x7f0000000180)='veth0_virt_wifi\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000000)={r4}, &(0x7f0000000040)=0x8) socket$inet6(0x10, 0x80000, 0x3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = gettid() sched_getattr(r5, &(0x7f0000000840)={0x38}, 0x38, 0x0) poll(0x0, 0x0, 0x1) prctl$PR_MCE_KILL_GET(0x22) r6 = socket(0x10, 0x80002, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000021c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000002200)={0x18, r8, 0xc8da923139bed765, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40810}, 0x200080c0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) 30m0.102593485s ago: executing program 4 (id=55): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r1, 0x402, 0x5) preadv(r1, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b52, &(0x7f0000000000)={0x0, 0x3524, 0x20, 0x3, 0x201, 0x0, r1}, &(0x7f0000000080), &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0xf7, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x86}, r7}}, 0x48) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000003c0)={0x2, 'ip6_vti0\x00', 0x1}, 0x18) 29m57.79394278s ago: executing program 32 (id=55): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r1, 0x402, 0x5) preadv(r1, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b52, &(0x7f0000000000)={0x0, 0x3524, 0x20, 0x3, 0x201, 0x0, r1}, &(0x7f0000000080), &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0xf7, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x86}, r7}}, 0x48) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000003c0)={0x2, 'ip6_vti0\x00', 0x1}, 0x18) 15.91509539s ago: executing program 1 (id=3931): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000000c0)) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/189, 0xbd}], 0x0, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x2, 0x71, 0x10, 0x69, 0x3}}, 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) r4 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) pwrite64(r7, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000100)) 14.201290388s ago: executing program 1 (id=3935): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xc6}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000005d40)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000400000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a54909e8441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a782182"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r4, 0xf0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x8, 0x0, 0x0}}, 0x34) sendto$inet(r3, 0x0, 0x0, 0x40040011, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x1, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) write$UHID_CREATE2(r6, 0x0, 0x118) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x35315258, 0x0, 0x0, 0x0, 0x7, 0x400}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r7, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0xaa}) 12.888084234s ago: executing program 3 (id=3938): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigaction(0x40, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f0000001700)={0x2020}, 0x2020) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newae={0xe8, 0x1e, 0x8a90027d715878d3, 0x70bd29, 0x25dfdbfc, {{@in6=@mcast1, 0x4d6, 0xa, 0xff}, @in=@local, 0x1}, [@policy={0xa8, 0x7, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x4e22, 0x1, 0x4e21, 0x7, 0x2, 0x20, 0x0, 0x3c}, {0x2, 0x6, 0xe, 0x0, 0x8000000000000001, 0x3, 0x0, 0x8}, {0x7, 0x6, 0x1, 0x5312cf02}, 0x7, 0x6e7bb3, 0x3f8337db180c5a9c, 0x0, 0x1, 0x2}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="300200007d00000005bf000000000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500002b595fcb14034354b9fd9ef196a51cd5157adc8103b494e11400cfc26dd7c500f04cd85f2a70f5e9930e3c5db45a5500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8e289da649a37002c016f6465762f6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48"], 0x230) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="090000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a00200509000300737936a0733ce808c37a30000000000900010073797a310000000014000480080002403cb140bb08000a00076595a9ad8d6c901100140000001100010000000000000000000100000a9904b03c40adaa9fe7ae0fe13f510a19056e81466d8f0297615035165f4a3c23a5b39ebbb2ca0d905ba89018f3f9ce4d8a8bdce75efe32996552fef72f772d6891dbe7d688"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$kcm(0xa, 0x922000000003, 0x11) 10.343584194s ago: executing program 5 (id=3942): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x328, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x300, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x214, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x1cc, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x328}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 10.204977585s ago: executing program 5 (id=3943): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigaction(0x40, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f0000001700)={0x2020}, 0x2020) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newae={0xe8, 0x1e, 0x8a90027d715878d3, 0x70bd29, 0x25dfdbfc, {{@in6=@mcast1, 0x4d6, 0xa, 0xff}, @in=@local, 0x1}, [@policy={0xa8, 0x7, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x4e22, 0x1, 0x4e21, 0x7, 0x2, 0x20, 0x0, 0x3c}, {0x2, 0x6, 0xe, 0x0, 0x8000000000000001, 0x3, 0x0, 0x8}, {0x7, 0x6, 0x1, 0x5312cf02}, 0x7, 0x6e7bb3, 0x3f8337db180c5a9c, 0x0, 0x1, 0x2}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x230) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="090000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a00200509000300737936a0733ce808c37a30000000000900010073797a310000000014000480080002403cb140bb08000a00076595a9ad8d6c901100140000001100010000000000000000000100000a9904b03c40adaa9fe7ae0fe13f510a19056e81466d8f0297615035165f4a3c23a5b39ebbb2ca0d905ba89018f3f9ce4d8a8bdce75efe32996552fef72f772d6891dbe7d688"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$kcm(0xa, 0x922000000003, 0x11) 10.157126898s ago: executing program 3 (id=3944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000000c0)) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/189, 0xbd}], 0x0, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x2, 0x71, 0x10, 0x69, 0x3}}, 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) r4 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) pwrite64(r7, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) 8.800531105s ago: executing program 3 (id=3946): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigaction(0x40, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f0000001700)={0x2020}, 0x2020) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newae={0xe8, 0x1e, 0x8a90027d715878d3, 0x70bd29, 0x25dfdbfc, {{@in6=@mcast1, 0x4d6, 0xa, 0xff}, @in=@local, 0x1}, [@policy={0xa8, 0x7, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x4e22, 0x1, 0x4e21, 0x7, 0x2, 0x20, 0x0, 0x3c}, {0x2, 0x6, 0xe, 0x0, 0x8000000000000001, 0x3, 0x0, 0x8}, {0x7, 0x6, 0x1, 0x5312cf02}, 0x7, 0x6e7bb3, 0x3f8337db180c5a9c, 0x0, 0x1, 0x2}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x230) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="090000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a00200509000300737936a0733ce808c37a30000000000900010073797a310000000014000480080002403cb140bb08000a00076595a9ad8d6c901100140000001100010000000000000000000100000a9904b03c40adaa9fe7ae0fe13f510a19056e81466d8f0297615035165f4a3c23a5b39ebbb2ca0d905ba89018f3f9ce4d8a8bdce75efe32996552fef72f772d6891dbe7d688"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$kcm(0xa, 0x922000000003, 0x11) 8.042569873s ago: executing program 5 (id=3948): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2d) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000080)=0x8d2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) r3 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x40) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x4001c00) r4 = io_uring_setup(0x54e5, &(0x7f00000002c0)={0x0, 0xe7cc, 0x2, 0x2, 0xee}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f00000001c0)=[0xe758, 0x8], 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r7 = eventfd2(0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r7}]) ppoll(&(0x7f0000000040)=[{r7, 0x2101}, {r5, 0x6790}], 0x2, 0x0, 0x0, 0x0) shutdown(r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 7.369350968s ago: executing program 2 (id=3949): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)=0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) io_submit(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) eventfd2(0x2, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x400caed0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upd'], 0x1a, 0xffffffffffffffff) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x401}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_emit_vhci(0x0, 0x15) 7.175784326s ago: executing program 0 (id=3950): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigaction(0x40, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f0000001700)={0x2020}, 0x2020) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newae={0xe8, 0x1e, 0x8a90027d715878d3, 0x70bd29, 0x25dfdbfc, {{@in6=@mcast1, 0x4d6, 0xa, 0xff}, @in=@local, 0x1}, [@policy={0xa8, 0x7, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x4e22, 0x1, 0x4e21, 0x7, 0x2, 0x20, 0x0, 0x3c}, {0x2, 0x6, 0xe, 0x0, 0x8000000000000001, 0x3, 0x0, 0x8}, {0x7, 0x6, 0x1, 0x5312cf02}, 0x7, 0x6e7bb3, 0x3f8337db180c5a9c, 0x0, 0x1, 0x2}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x230) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="090000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a00200509000300737936a0733ce808c37a30000000000900010073797a310000000014000480080002403cb140bb08000a00076595a9ad8d6c901100140000001100010000000000000000000100000a9904b03c40adaa9fe7ae0fe13f510a19056e81466d8f0297615035165f4a3c23a5b39ebbb2ca0d905ba89018f3f9ce4d8a8bdce75efe32996552fef72f772d6891dbe7d688"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$kcm(0xa, 0x922000000003, 0x11) 6.098701083s ago: executing program 3 (id=3951): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket(0x2b, 0x80801, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x86}}}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) pread64(0xffffffffffffffff, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000019580)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000b180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6002000043000701fefffffffcdbdf25037c00"], 0x260}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 5.898211264s ago: executing program 2 (id=3952): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket(0x2b, 0x80801, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x86}}}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) pread64(0xffffffffffffffff, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000019580)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000b180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6002000043000701fefffffffcdbdf25037c00"], 0x260}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 5.838463102s ago: executing program 5 (id=3953): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000ddc0)={0x2020}, 0x2020) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f000000fe00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r8 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000540)={0x2, 0x100, 0x7, {0x9, 0x870, 0x870, 0x2d0}}) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c096191a0b70d7a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x3fc, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000083c0)="32f46257fcb4d4840732e65be15f2600ff7f7388649aff7b1599a6bcf3d0442f7eca1b5d02b009ffc89b91ce8b5250886992c1edc522ed125a5337f8c4b39d303dd636de06f6bca465482d9e64f32b54925f8a39c3e017ba55ee9d6bf1b92665b5d083d7a644dc833dcb681eba455ab78276efd1d588e9b5daaf6044dc9f26a73fd5dc57e6fb8d9bbae761c7c5e86887d7a77a4d44c5d5b00c37f3105acffa65240cfe42909095b2879f6eb6f9d804ab8fce4813d907ef01a111aded0c20507659aaa8ea80876a369063e3e58fb6bceb6999aa729cba82f1eef30007cd65a956deec2921fbcf403b4dad56da6a74247dfb2028ef3a52a773a35156d483c3d4f14f8ef06711459c41db3cb2b0e48f47141af99e208f5c687c2193cc45cf134c92ad35b58cc17bfe80d145c1ee0adb217a277411e9886230037257897f6d6d976b113ce30cf982f3c7a941a8a2011fb0de93ab052ca71cf3375361ab09f411d3b85336adcb23b412ced08853deef5b2419b10415c5c3140309ea1b5e48206d3d505bed09e06be66f315d9ba1364260d71f05c908ddd7e7d0625c4c428e7e00ef09916a69176254f96e440a4c454d3b2cc8aec13678ea5243ff8161b31d6e18f560879c9c6fc8fd6c8f402b8a37409562a0b5da4d9d2dc7530683c1adad3725690ec51b8fd0f0cc717a40e31c6e553ff1621cc4cc970932b9b6655b460cb5f55970bb9cd7f3ed738e6dc4e008569ff67a77c430db15faa40ec0872471e096a180517d4368d133bfd839cf90bc5c6f60e07f0ed17b189f278d1a0334a7cc779d68bff3b6f539c5da365c8c74a94b5442930b8098ec90043f2fca81cea6d646119be3d3f50301e17ca0fa6a39bd8d691a12d338c7be1166232f2867764446af348aa3e3cd621875cd14cca47ce9ea9b70f5a7e31ddbcf0358f9ca84949365e9df9015f63ca80fd3938c36ab8aeaa782aa5582681ba32cf87a0e4f5de2763dff74a1e1993298ddbdc7d681cae97f6d63c9cf77d6766d71f8b2b2473fa06f67d6673da17592323498bb630eeee48972959fad41b64068d496c57c7eb233f3773e50a4166e1a075c289ee54155d3123fe4b9a0e93f04b0b0fbdd742f7e71ce1476ef6cd4226d1a5c9c65db9e246b0a0196538ce9ea27b6058cb5b0c62dd0988ac218b6bf6b38f277e8e063dbc8590f12409c1a63df1ca52f8c6c4edaaee2482d0f2034e2997100fdd5a1810b07337e8a668e25b5dc7216925e49f8c18d377f8da0b5adc008ed537f8c64a3006e29654f22d0afb118f5b6ea7ba5d087232dfb575732dc06e4c629d451f720a30c2d3694859abe23c0fb684f2cc6cbdf975693dfb95663a9b816e7c7e00b48ded8b0c06698248d53e6aef85cf2c0d0c09c2931a0daa11a2b65df57d85868e40fe2e0d7b2c8ad86436b7e6f091c681ebf5b3173087385a93eac1f57cb289034c189fe7940b26b1853d7a592f1af6b9e67a208f18157d9192785db7478ae676db55a09a90eaad99022af700a4824ef6b5f60d21841270061520579f8a6d1fe2ff0a94a3eedc9b37bd28337d0fba9a196c9370e65c4089a0dd600b60f93a31ad912bbb638e82389a0f8137587faa2e461092f7913142ce7dfa3f945444a523682c8524a94eeed8134bb918406f3a71a7fa73515f5ddec8b90a2670d2e7cc5b1015cfbcc785099ea3e5d9fd0572e1481c2a171b2037da6207d9119c3fd49cbccc0351855e3fcfacb299b7077274eea1033b0551df66f9b22c7712049c66d29068c753c8613cd11cf49fd4841af5b30523368a47546c19259c27c7f138e429da89ec94946d8f6b2c807125a4f4b504537e091a3ff3c78b5544db18670824fb985ed69502276554b2750ef9ef34d6c2b60aeac56ca707f75e77a06b5e2a4a30487fe5a44e945ade1d44218926e4e8f6c4e7ce2249cc17d3d6ecaeaed8a94f89a8fe3ec9d494d4a7ea8834cdbb0670b711749588489cbafd7905ec3652dd2235f7d838574397baa67b9d0c9cab04ad0ff02fcb098ead45607a440a0f484fbeed40bf647014528367907ef6fbf0d3dbbe8138baf3f44f98779cecdd8cf9fce2dcf958cc9d5ef3d6a0bccd65a0330565c93c48e4e6c98e283b1a78b3289c4f7b4b28e11a1d9bb6c18404ad4df66d7334113f98dafa238dd6bffeed62dc47215005251f53f96db0acb5b507c8378e862ba096887361fdd25914c1571c02842162c5b8e16b8416466d59c43a7345f7ecc74108a45899282c251f66552b6cff6cba5d50f70918d2d7d392dfc2be68425ebc00c2247598bb7f1b8338a13ee37ea39761fa00f05e09ddd74e955c2a1907f7c436439f685f58ecba52398d009284f291573decca4612d98758868b30d337076f613cbdce3578d7ba2aac90bd643c3571bce2ff3a5fad7d79e0a8377c3d8c480a4906ad42d56670930d087deef26cea1e0d5c2264666782c1d111ac6e04e569a7011319ebc43e8046951ea6fd09f487ba893168ce0990086d005e6631db690b89fcf323547b7cf9859a3d0ed3ced9553f9f31456897c1b8977563e4c76fd1ba02a8115f266f29958b1ecd9e2964776322e87c99ea08c02da1f5d75b1e2374f90013d8e3f6cd538d401f864b5c87d26ecf57b9cff820fa64fd4203f639bf77e51fcf708781507d3ef0f92f079aaf913678969aaeb919f64ada4813a9c6d3d823a7fae0032b3051c1592c83607481112cf35c851a247a86be316cc74886ffc75bc5476218b236ed2ad0e5d036e68efd8137a7e112520cd9c3b5c77ece19e449253c3694a111742bb54140cd46d644e6cbd1b3474577177a4b188d954d3b9a08eda12f71f1aabd0312704ae6fdd2b0e207afaed95b713f6be936b2222b43a80e9187aab90c624cb6e578e74458657a1b17f8caac5793704022989609340ac4a2a513c0d7fc496cd76a3024523161b16cb486fbf0edec8552f03637dc334e6c79ed2c5f216180b396f868cc7e8a73aa62f03428f4e3018274251144ccc431ba0b168ffef084ca2bbed114fc2f76c270d0d7fa34dec480ef0119f4b600f73f2925cce71f1f1e10b6ec5f6f9b9f3fac4b054af950dc4b874176cf1b2d6706b67c7de87e0c00edb34c96abdda7b1f2a5765c81a9264e7b21851ec0bda0b88e9f38ddb981f9cc56bb1d8bf556ee78ada18897e097364794ff2b41f303e6ace76fde4caaf21542afa4c004349d420aa5dfc09caa44df1c4c47cd968a6af6c627c119c84178dc5ca790ea071603d352ef8f8fdd705e6aa9f35c0fba20c6111eb095e1c225610f77ff3cf9e960fd6993f82677beb0a27ff34c62a0ef993b51d0b046572b03b5aa05eca22b05999544eec93d42e424766db7ff6b10bc03f8b722a065dca5fced274c595e8e8c09bf5e5390930b1f4aa5b144691c8be4464678e0e6d6a42ad3701b840523aa848c28c2443a5bb68c48a553a8f916e0d48e4536f6ad532144055ec244d318eaceb6ee9168b38e88db3d4027cc090ebda193ede19debb22d6b6c4129bdcfdbaec40fb9dca8432e206f56402ca87560a158663d6a883f8189bc3fdb773962c550fcab1f87472178710b4007773f671a2b8e4591649a8195a71c61f1b6f7ce8334e867704b2dbca6ce9affe969febeb46abdbced72a17cc3d8a519b6f31bcb6787c50b719367f5058cada3d8a844ef16a734f1ee82a6df823f555fe02461adf965b35fd4224fb371285ecaa29f05772c0e043c5bb77022614bd47bdf2f6a1a4c11f634eb4d1f982a80e4aeb7998eefc21c7edd2fc8825e5535b0230b8dad8dc5e3e6147a98aa42983358b1df70f9708a86aabac4050592a6d593b8a7d6b539acbdd94d4ac3c16a57c611883e53a546658d0fe00bab65aa6d89af6b2c30bc9624bd8ec6901d58606c82f555a12fee3ebedcb8c8b5cad3e76c53fd46655f3ac93c5d00b801dc9a348a86c4b580b7c2b0b44c1017c8768e0d9de659894c0854e2b3b0c75bed53673007f228c5883032294391f5a61828c9cce584782ce9a5b0a9cc306014ab562043056bb93c400e981ae6b97ac8e22e7ac7d34227afb91b47e9bf2aebd243e92886902ed99a2efc70b96b9ff02e569a4a10cd3969d7970f4696612324081fae96ffb24ecc32d68912c629f642cc560a0da579fca655ae2f98bbe9ab7d7c46c3b0b8d603f652930eca103ea58d21664b58f0a9c3471e6bd56dab9b9020300fa2ce42d59b0a1a165fd6204a68b1d1f47d6427470db2feaf8aad03d4e186cf3e5f3bf8b58cc4551c60a9d9120903d53f70f43f0497667571353511e93358e18b09f53fadf8aca2aa1e5851aa00eb55fef889fd55ce8c2377d58adbab8302feb9212a1c86792399b1180163906554b53d8b4f196d635e69ef36000dc817a1bf82b07bf7fd54eab849922b215b24a69d8f3385a1dcc19b84b379716d6be3549a50394ff348ee823f26e88262054d707d36de7ace2dac80cb5116baf3ee43f770698446f0ef6839533195cdfaf12ee0018ab12b6ac857587335f2448a4def01c45fbdff033227908efde30eaf631ead6c0eed9342e82b63d68704acb375f2055143b60eda18f88df9bd615c89a9afdc7bf77fd53f8eba06d939706a1242409d9d1f14059eb83bac6a983e6a6f2043ceb687b0bd912e65bfdfd2c9fe6fcd082d7e6de9c39c626d4935f66ab5cfa893ee1cf6909cac0531b144795f48050f835e3619b062d1b37746ca772d2be068ab630e9a1ecb97a635d45fda7dae36212f2be4c295fbabac62c90f99dd74beda80d0577a56a7d85bea9b5017745b678e5bdca87a1968002891772c4c763a25a97bfb2d00de36dde9a267ce478bdb3622dc996dd0ae1e72b04672190b83300e85d3ea1f9933413c7557852308f23f8a3b51339b57ab0420c68193a881ce0d3b33b8b7e3e2da85c24559c759aa45cccdda4ef0f15527743361c1c582d2f7be084376106bfb9dd6dc1372d014f8f3f7cdbccdb7fc2a9e7f878e5aeced525c368408950cf3972cb98f9b6e814a8a20ea441aadc0057a387983a524b852de9cda2d154a2993c9c6da6d5fb98bb51b5406516fc8d3fdcfc4d362371f4bc7945f8f926db15542a38de7a9df6675f6452430f0d1ef6a915dd61771247a8ae0c08446c03f24f45b65c6c4f03302d83a44ceff5de233626b617f8645d0f88d456e7fc6056869a1dba0f406cddeb4c4fef1d751d5a8ac6aa44e3afacd470d4c28d658ef7b9b7781d6e91fb77bd61eb0515f0b80f82627836cd0052b3e81601fceb534239aaee1fec2cedd5cd0e262164711f32b791e9843082d22cdcea0c798ee422cb7d20b4acc27cfcff5a1eff29d16a99debac5c4ae689e0428eb6344cd611aac6fef8ec9ccf32ad560947eee6de12dfa6e674731a596ca1962ffba72bed7f3d98d05d62b809cef30d8b51bf08fb3f578b50501f1aab7d49d8a0e365dda3391667ddbff13c44cb7da4f4522c3de885480e61c1e30b5e7456b91cafe57bd10e24bf9351349095f2521b6745e6d44a5dbabee413c85ca362452953375d8c38cea4fa8e97f1d04068fc0e1b9b87824d0694b674c588c6afbb8c03c5ca45257f4c2c2db7ba810bbb04c319d290f31b5d2696848f10aab76c547cd4cb53de9f2e5a2ed3ba5b78f68f0dc377ed77292cb03743109bb1f68b8a68dc26ed7572598e52bd4c18c4e509b553e66400a7611895d06a1d52daaea4a89cd5ee42a5f8521b9899e9ac7180366a8fbd317f041dc97fdf13ea413a5a202816eda176dfc9728f5fd0ecd21a3d3b0e3c37275875457e7587b4fa56aa9c53a96ef66730ed23849bde371583a3d63f86970b20a4b46635f2ac3d1e259a8da9387f59ed3c72bd092b4ae17e927a56fffee5911038a80e66c66b3f1f03adfef496003acbaf0c6aaf2728fa94ec096de1e06d392f86a2e0d9315422bb4bfe60c5de102dcf7052aad349e1561458d286de19433973bd9530bb1bc4605d1e89a9ebad18dada9b070b7e0c2daaed44ce359f12c21b31d50e66b6d963191e21ac8eeb61f08d49cdbe7fa6622ea71916041b98572b5ce2f4cc3a3758802a0f21c1715fbe039ed12157b4bd317c295998fe52308b91bc8d5a28c4a8a36a941ae1c2a913a33a84d87000643d8825033774f01c48e2f6f43a726931dfb991430c55f0b280332b6ef4f6094cde6cc7b46cdc51f5688b793eec0910efb09b356c12c1dffebcb966e999d6e9013c57ad632c0712375cebd5c563351b598b2c0af1c7f31584a05ca08bb10befd3fbd5f3f40f6c766608c3891db62d5e1565ee8eb44af50b24096f3a35da12fc80941257bc006b4d2ab5814bb512219c90936891ffc7e63bedd552700c5623931101c9407403ae532a3fee0f24422071db55dbb6dc8f010d2ad90167fb6e79328aaf857e5da7b6238cdf446dfe98d54540ccbd06d51beeaecacb53e33f22bd39e1b98374ade1c9a2dd2c54811d7172246311d3d7f0a86a33a5be94f87687e138c7e302d23e5e765ab9381166b2725f992d2464db459ee96b7b96b1cf1de1bff4b2c03276ed5bc14b0a67d4298f7fac5721d2aec6d517478b06adf5515771920162fb49351f08944216594c66a868adf4a2711b6b97b46651426f73c9874c330e8de8db0ce7c3e2304082ec83d7d436515e59739aee5aba08ca1f67b9f05e9350d2a13415a437fecb4aaaa07a5aea8e893283304f65e19af8f65324eb38e194dea5bbde4a0082323d2beccae380350e21f9d77cf86f87a1ad57b04018dac35e9b21028ec65bc8886eff1b463a8782115a1bcbf3a829a99616e95aef723d6efb80289aae132b2dfe658cd40e9d66ecb7edf50d8df3d1cc7b639e7a353f5bb8788d927f3f7ec535769fc2c880a03a4b8657ef91561bf0600af5462b289eb07030df4f8f431be46b930503d2c21eb212adfa2c1b506c761f1d429ab86b730ab0c75114634ed8207e0599cb823fb1eeb19a56ba1665ed5ff0cb3d55c993c14f186902223aa61e931ca472aa3556680409a574de477a1e094db494b073be4b88cded733fbb113807cabcbf6155989696096f73017dd6a0286617ed87f4019a0431c39fb58a20a37b6d03c245d238fa5e6e0cfe59d1b6c0120397c6ed888d46a49c14d21ddfcb6107cbfe17a61b495dcf082163f10f91331140d3bc785e457c049a7ea1ee2e13bfa894f6c0cc7aa6a4845efb8c13812c9ddb0169ec4adf441af38a8fc8ffbe4df1f7701f95937c8969718c3a53e37e260c0dc6329178d4207c1ea37e10f7650fa3c3a69387c49a89173795c5719bfc962827c30a5dc067b601316f5c9fa3af800e4e3fb1ea6eff3988e47cd52a62e83b4f808aa1ab58507aa639dfea5249bcf8a44bc65b846567304643aea196368705ebad8c8810196bf47459b3fe684510be6779da88bf0c949d3dbb35250f45ee81e64f5f45b35d66b6e008280ad27e4aa2f5b8bca82e46c46ab9f2a2266600c0e5b857d1ce4621b9abc036817c9ad734de9e93f433d859ca0c552adafd632b917ab9cbc1d4c8271dc549ac6258f4053515457b000c1e5728c8a0669313a1252e7d79a1438ded23f155df96293d9137e1db3d200d4e85c905c2d44ff1ac89a06cb6ad89992d6745e395643cc0175b66623481d4963521acbf0ea7fe300d99dceb1d395d59bd7ce2b40cb6762315ee0c4a0fb15626289721df052cfdf94d419d21a351cab9a34064a43e95416cfa7799a2570074f72a7463d900a4f1b027d9e39fc8e90446cba1bf9e05e0b6747de1257992ea5730918be2db7aa686f7ae2a73957d3476972d23776807a7fe8296396294b6a25444e911359d18a5a1a28eb4f8d43802e683f9fde7da95b9c26bb44890a6ef88d4fc44787b7821bfc9ec064ad25142e7dc5898e45c08159523184e3d2e3cc982747871361dcfa45b431be55a61dbe53dab82ed841268b2dce22a22d92b55c1f8e6a505d3cf6cebb44d93179762eeb1ed30b7d42c0e565c677064c3ca596bddbe7977b0d3829f41546c5e24085b07a545c2a842bd8ff23b03427ce1ebb7f09ac5de542a89e78968911571af297f28e7dac2b002636665e9f8a77dc23cffeb239ad1da4f36ccfe1db0117bb0dde5cfae54d6a788a34894552fd87fc11f3ef3439c8f97de904c48a54d868be619edbba1caad619e61f3a8ecbc05d38751da0393bb7438818c22b0f0fc14c3ad0911add4372d05f03161a04342758bf4d871e17873d942185f651810d95873f1eadf96928d155d1c6dd47fec7b73b8444b6b90b8ccc265079588f945d0da4817941ba02318d1ca3bce9cd4afbc835dfe53a514d19dfa53b124587d12b58f089023aa111e19daa4fb379d7b2d2245ba2deecc418d55d174902df61abb87326dd7ff6bd41599704e3fe7e147d8fdc6c542394d704d2055deb699e658a2a1a6661e071a357a3c096c414e7b4d68feba5312d71b4a6617e80135cb79393a39ea53f762a9a688ad340f41952a52524a7038d717401a5182eb0bd93562474c436f5609ae0a5c3ca0e64d14b15448ff2b609c79f263ed6cf7e0d5f8b040f8c5dab5531524837d655e751778e630514632591f3b46ab78ae493e577a641a725534f2ad65e8683aca8cba94e3c7ed7b08d74dd65517646280f9cdb6e90f495f26737321d2c7e0d8d53f53ef888efd8091345360818a38d242875dcadb616bb57a515f1212f737dd17b821e451a8feee26d511334120da99a9e3161f1d76afbf3ae71e4c0500301f3969ae6a68ec261bbfde9f80aaf63c35669a11e1845da785a32c09ac2fb41522adf8a34362c8f2a92584cbc94f496cdc2e50e11f3000ab66f1b691d1ea75c5dd27a6cfbc3d4411c590ba9ebe1e50de77650224e4d2c4246bb6ce98a441322ef560142b2dc959279d5a9eb04131c1ae95120af500d6fc3abcea149d1fc5e91b5bc82fa7e3496f262ae16d587790150fb7084738b45e45e44e1167be09fd111659cd74f0b6fab2f86fa1ada4c3cc94ebbbd75a249925200092b88f5323f042c3162d3e5b5c18dca8260b2c570a73accb84944967d57bbb3ffe7ca5f8006993281d197f8d4e0c4d11aef7ffed53ea84d8a050e10a3a43c6c11fb78f49032e10c77d16bf30228cf1f69c3aaeaf529770a0f8ebfbceb60fe1d56bfc8a26a714b6965f4e38544db021225732367a080fc4c8e6c0a84c6467bb46155eb48d5bfcf96a7af5f905ec46cd8bc8993760cfc0b6c75323091b6fda336ecd5cd31866bd8a24e410d55064ccb40c0d597d83daed8ea26c15b5e2e1c7afb1ca4ef0f4de585bf718d11b67365f424993bba467bff6d1338163b030edbeb2986064dbc14fea39cb98543c467a5978983688919095213d3b77dcb880d9ec5d0a44b300f3be71c6e1285cbd97394a79790fce292bdd265430300e1e04441c59c56e00b08f7c2f072a20e30960e0cbbc1c8630c5c53357051bd66647c707b216bf76d3fa9d434c42cfa33d1b85ee023131c9e70555ae1a92834866e4661921c6411d0fadc0821a884976283feb57350d7266a05ffaa8315d98e8e6ac032fbf1bd69ca881489cff37a1e0aee29cae0d66a97cfa6fe7de8cd783045e0c182352f67cb6bfa78375cff0c5f0bcd173844c004f2eabec53b36ce9bf8b7e32c6d4b26439bf296329a39ef2b15054b8f945aaca48d75f0aca4427b5282579c22aa746fab94b4a4d765225bcbe6b28336c6e31c088391b0399efa0b8b1209a8911193e8dd45ef51145d1c740229b8bf7e64a2313fa64d373523570206c032341ce7e35753663246b38e1b631bff85fa6014db34284b6db59381f812ebe22681bcdbf26affa2dedfedfb2447d5ee95b570eb1caaa86512488ce59d827fe96fd51a4bb1e12d3ea594a3955f0eda8b076c2408ee5d9ec4c4956a8443ee60cedcf9015671274fbef1ca850543b596aa25873ea1f6cd0bade9c85e52311d7e7f2d1a92ce064ce8660fc337315ff5444a9c39e3e95154982b7655f0a1ae670f9a1fc8b877376217c4ba8c2937879f348fdc3c2707705e4bb7be5a37b397857d97208a12d6100e0df978bdc66b73d82301e2e7fae7164d2c35272bb1d4708ed0fd164439346a1909dd50c337a4769c5acc205faededcd4a8b3ddc88fc236079bc48517ed9bdf9e4ee3965d851aa8177394d1e9a782db08f18f2079c1b2fc2f9c313b89093b0005bb2e982ac9912595cb7125ebe961737cee682bf8e8400ff8fe53b91dc20eb0ed4ef496228374010c9504b54949aef348722921375175faa211db6ce8b066cd8bb37ed0cc8c2d74b5916eff72070e1132efb2cb4d1dbb769573fc0fa1f7bac262c479ed929c92165e17b250e57872f2196986d6651e19db882acbb8e39a7506b5666925525d124933fe721e1d7e2cc70e8881c9b936ac4c602dc2f99d6f23f92dc81540d2e406a712a487864954f2ad7aa6dca0773baf38ec0968e2a46a2f167e18982f9f63ff6d73119511af4cccfa0420709b490f62c8b1611ca10f15ab4847832cc3d44301c796fb9acb30f4931cf1879ca634f8dee30ec7154eb57150ec5809884cdfd2c8c39db0a8d519b7fc7d4a51c1deba3f5605b51221b71338826540ef939c2bcb46db7608ccc839d2302d0646afa46fd4c56dd915a297d5cdfd8c9af6d62133634e853f5f97b8efbb4ef97911d4ce91b94942034c8308b17f8c13646bc7d6c179783a15964787876b302a541f580e1b7afa7d27b5133237ddeb89d2a47a2aff90d6a100aa01da6b2074ef5317cd7a4b4fbf7a62e20b5349383e66f005dbb1de9e2415242692d1a218185b3e96e0b5a0d8a99aa47d36a5a1c58ebb84afa98eed20411275e3170da483a5b3e00b33c680c54d860da7a1724ed7533d5850d82ef681c3fa4e2ff93c2b21ecbc57557da5819aae759fb9fd7db22adbaa691ebcc3d2e5cc4e72dfc52c92efa6ba0662e7d91016773e60f77dc834c895d951f2059ea64a018d0c50d6a7ce00d362038ed32af9b0e5eff3ea9c9eb1e1540c35f7d5d01d3087c19c7547dd20df08fe9155256f4bfdf5731b0bd0bda3d81dc276677a00c77afa583a019f3c26748d3d00b35f5ef945ee7946aa9bfdd0d1192373c64879456ceff5203890801ae843b91486234af68cbd4b569218004c722e852242c998c7690b350fd5de1af440f201c8b57ec8437a303b743bd8e3b71b8b0a74a71cb61bbff18422ce49ee883c3b9471ea19cfe14b328b457355362b22af6dc1698cfc80b6719ae73b6a9b0fbdfb4d6b20661800da876b0cf2b77f8680149a36fd311e1cbc49e761a921e0221c5af22982b6ec6335f3a0cc60bb8f5a0f6e9a29115683ef0f83ea50f6082c1401c29afac28e4fae0812b3ee28f2e6bd7a491ae62f52a76dfa777bea8eb5cc9245fd4694d19e09c8fc149689b2c4fd4f70cb600819a2044114c19323c3e0ea749f5667133845343f1d7faf6a5cb8b275a8dace2d944f8a293f2164821372d4cf01fe1f6a226bb84e0bdac80bc2cf664d1874deafeba857ae4412fcaaed4a08bc9b6ca797f6115b5210ab0e8192de909a8154576c908c4042bbb445d1bcc2604ee845e029cdb63730163d1839360080cb74c50d39eb14195fb8ec3335474dc000", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="b0000000000000000100000000000000010000000000000003000000000000000d00000000000000a2000000000000000700000000000000040000000000000008000000000000000400000000000000060000000000000048ffffffffffffff0a0000000000000002000000080000000500000000200000ed000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="0200000049000000000000000100000000000000f7ffffffffffffff08000000030000002e"], 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f, 0x0, r7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r9 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40041}, 0x800) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x24000080) sendmsg$key(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x10}}, 0x0) 5.631385784s ago: executing program 1 (id=3954): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigaction(0x40, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f0000001700)={0x2020}, 0x2020) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newae={0xe8, 0x1e, 0x8a90027d715878d3, 0x70bd29, 0x25dfdbfc, {{@in6=@mcast1, 0x4d6, 0xa, 0xff}, @in=@local, 0x1}, [@policy={0xa8, 0x7, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x4e22, 0x1, 0x4e21, 0x7, 0x2, 0x20, 0x0, 0x3c}, {0x2, 0x6, 0xe, 0x0, 0x8000000000000001, 0x3, 0x0, 0x8}, {0x7, 0x6, 0x1, 0x5312cf02}, 0x7, 0x6e7bb3, 0x3f8337db180c5a9c, 0x0, 0x1, 0x2}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x230) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="090000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a00200509000300737936a0733ce808c37a30000000000900010073797a310000000014000480080002403cb140bb08000a00076595a9ad8d6c901100140000001100010000000000000000000100000a9904b03c40adaa9fe7ae0fe13f510a19056e81466d8f0297615035165f4a3c23a5b39ebbb2ca0d905ba89018f3f9ce4d8a8bdce75efe32996552fef72f772d6891dbe7d688"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$kcm(0xa, 0x922000000003, 0x11) 5.621360957s ago: executing program 0 (id=3955): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x328, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x300, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x214, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x1cc, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x328}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 5.581066395s ago: executing program 0 (id=3956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000000c0)) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/189, 0xbd}], 0x0, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x2, 0x71, 0x10, 0x69, 0x3}}, 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) r4 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) pwrite64(r7, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) 4.923006943s ago: executing program 5 (id=3957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="60000000020601020000000000000000030000000200020073797a30000000000900020073797a3000000000f8ff04000700000010000300686173683a6e65742c69666163650000000001000700000005000400000000005db8a1be4c95a8c879f836b735b20638374ae5416ae036c3df851d9f65be0b262b197ad05ef756c7b3adb5b80d4fad6871abe0bc5708435b013a49a354fd2ab04cd1ca73543de5d458ccf371edc4c449fdc91f5769d93d4d5812342b121f502494838abaeef558a81c72f1bc89473d3dca2f309c5e76d1c804c371579977097bf00876c2cc122b2adcfd57413b6e14316875828571098edbca56658c51bf29446925dbe9b976728263bb74d6073d91f4b1771f34a8"], 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000090) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x989680}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='lo\x00', 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) fdatasync(0xffffffffffffffff) sendmsg$netlink(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001a00)={0x10, 0x25, 0x4, 0x70bd26, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x20000801}, 0x40010) r5 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r5, 0x0, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) recvmmsg(r2, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000880)=""/4111, 0x100f}], 0x2}, 0xa}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f00000005c0)=""/233, 0xe9}, {&(0x7f0000000100)=""/119, 0x77}, {0x0}, {0x0}], 0x5}, 0x1000}], 0x3, 0x8042, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) 4.383067135s ago: executing program 2 (id=3958): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket(0x2b, 0x80801, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x86}}}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) pread64(0xffffffffffffffff, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000019580)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000b180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6002000043000701fefffffffcdbdf25037c00"], 0x260}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 4.334705669s ago: executing program 0 (id=3959): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigaction(0x40, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f0000001700)={0x2020}, 0x2020) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newae={0xe8, 0x1e, 0x8a90027d715878d3, 0x70bd29, 0x25dfdbfc, {{@in6=@mcast1, 0x4d6, 0xa, 0xff}, @in=@local, 0x1}, [@policy={0xa8, 0x7, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x4e22, 0x1, 0x4e21, 0x7, 0x2, 0x20, 0x0, 0x3c}, {0x2, 0x6, 0xe, 0x0, 0x8000000000000001, 0x3, 0x0, 0x8}, {0x7, 0x6, 0x1, 0x5312cf02}, 0x7, 0x6e7bb3, 0x3f8337db180c5a9c, 0x0, 0x1, 0x2}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x230) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="090000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a00200509000300737936a0733ce808c37a30000000000900010073797a310000000014000480080002403cb140bb08000a00076595a9ad8d6c901100140000001100010000000000000000000100000a9904b03c40adaa9fe7ae0fe13f510a19056e81466d8f0297615035165f4a3c23a5b39ebbb2ca0d905ba89018f3f9ce4d8a8bdce75efe32996552fef72f772d6891dbe7d688"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$kcm(0xa, 0x922000000003, 0x11) 4.197147964s ago: executing program 3 (id=3960): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000140)) r3 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r5 = dup2(r2, r2) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r6, 0x6) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) r10 = dup(0xffffffffffffffff) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$can_raw(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@can={{0x4, 0x1, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "010eb7e3e7090300"}, 0x10}, 0x1, 0x0, 0x0, 0x4041810}, 0x4) readv(r5, &(0x7f0000000600)=[{0x0}], 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000380)=0x1) set_mempolicy(0x8006, 0x0, 0x5) 3.259786839s ago: executing program 1 (id=3961): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigaction(0x40, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f0000001700)={0x2020}, 0x2020) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newae={0xe8, 0x1e, 0x8a90027d715878d3, 0x70bd29, 0x25dfdbfc, {{@in6=@mcast1, 0x4d6, 0xa, 0xff}, @in=@local, 0x1}, [@policy={0xa8, 0x7, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x4e22, 0x1, 0x4e21, 0x7, 0x2, 0x20, 0x0, 0x3c}, {0x2, 0x6, 0xe, 0x0, 0x8000000000000001, 0x3, 0x0, 0x8}, {0x7, 0x6, 0x1, 0x5312cf02}, 0x7, 0x6e7bb3, 0x3f8337db180c5a9c, 0x0, 0x1, 0x2}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x230) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="090000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a00200509000300737936a0733ce808c37a30000000000900010073797a310000000014000480080002403cb140bb08000a00076595a9ad8d6c901100140000001100010000000000000000000100000a9904b03c40adaa9fe7ae0fe13f510a19056e81466d8f0297615035165f4a3c23a5b39ebbb2ca0d905ba89018f3f9ce4d8a8bdce75efe32996552fef72f772d6891dbe7d688"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$kcm(0xa, 0x922000000003, 0x11) 3.064033976s ago: executing program 3 (id=3962): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x2}, 0x90) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000280)=0x7, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=ANY=[], 0x40}, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x44}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) syz_emit_ethernet(0x2e4, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000340)={0x166422e6, 0x3, 0xe}) add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000100)={{@any, 0x2}, @any, 0x6, 0x7a00, 0x7948, 0xfff, 0x3, 0x2, 0x4}) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @auto=[0x34, 0x62, 0x38, 0x35, 0x65, 0x64, 0x38, 0x37, 0x36, 0x32, 0x62, 0x33, 0x39, 0x63, 0x66, 0x62]}, &(0x7f00000001c0)={0x0, "ed7775e65eafd28c998ed46d479658881ccacd0c245ad4d444213a00202509c5accfa410081d82ce2a4905411dee1154155efeb6111658c4224f35d6d4f57692", 0x22}, 0x48, 0xfffffffffffffffd) syz_emit_ethernet(0x12, &(0x7f00000000c0)=ANY=[@ANYBLOB="dfa473846208cc4aff"], 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x24, 0x0, 0x6, 0x23}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) 3.002552164s ago: executing program 2 (id=3963): socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x200) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000240)={0x20, 0x12, 0x34, "2b91a7837e3bf9c6aed2483f4cd49f7a122cb30a94d888e709aad0523474f574e2c5c5a8aad36792f723fd6395b5f403881e055d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000180)) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "88634d58"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x80086601, 0x0) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000210a010100a537860f47a0"], 0x14}, 0x1, 0x0, 0x0, 0x8841}, 0x40804) socket$key(0xf, 0x3, 0x2) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2.579312706s ago: executing program 0 (id=3964): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) close(0x3) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0xb, 0x0, &(0x7f00000001c0)) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bind$xdp(r2, &(0x7f0000000280)={0x2c, 0x1, r4, 0x3f}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x68, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xec}, @IFLA_GTP_LOCAL={0x8, 0x7, @remote}, @IFLA_GTP_FD0={0x8}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0xf0}, @IFLA_GTP_LOCAL={0x8, 0x7, @broadcast}]}}}]}, 0xb9}}, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r11, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x74) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c000000090601080000000000000000070000000900020073797a2900000000050001000700000004000780"], 0x2c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 2.14353827s ago: executing program 0 (id=3965): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xc6}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000005d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x40040011, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x1, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) write$UHID_CREATE2(r5, 0x0, 0x118) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x35315258, 0x0, 0x0, 0x0, 0x7, 0x400}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0xaa}) 2.065765902s ago: executing program 1 (id=3966): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigaction(0x40, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f0000001700)={0x2020}, 0x2020) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newae={0xe8, 0x1e, 0x8a90027d715878d3, 0x70bd29, 0x25dfdbfc, {{@in6=@mcast1, 0x4d6, 0xa, 0xff}, @in=@local, 0x1}, [@policy={0xa8, 0x7, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x4e22, 0x1, 0x4e21, 0x7, 0x2, 0x20, 0x0, 0x3c}, {0x2, 0x6, 0xe, 0x0, 0x8000000000000001, 0x3, 0x0, 0x8}, {0x7, 0x6, 0x1, 0x5312cf02}, 0x7, 0x6e7bb3, 0x3f8337db180c5a9c, 0x0, 0x1, 0x2}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x230) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="090000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a00200509000300737936a0733ce808c37a30000000000900010073797a310000000014000480080002403cb140bb08000a00076595a9ad8d6c901100140000001100010000000000000000000100000a9904b03c40adaa9fe7ae0fe13f510a19056e81466d8f0297615035165f4a3c23a5b39ebbb2ca0d905ba89018f3f9ce4d8a8bdce75efe32996552fef72f772d6891dbe7d688"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$kcm(0xa, 0x922000000003, 0x11) 870.299652ms ago: executing program 2 (id=3967): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x32c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x304, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x218, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x1d0, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x32c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 768.854965ms ago: executing program 2 (id=3968): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket(0x2b, 0x80801, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x86}}}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) pread64(0xffffffffffffffff, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000019580)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000b180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6002000043000701fefffffffcdbdf25037c00"], 0x260}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 658.385283ms ago: executing program 5 (id=3969): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket(0x2b, 0x80801, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x86}}}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) pread64(0xffffffffffffffff, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000019580)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000b180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6002000043000701fefffffffcdbdf25037c00"], 0x260}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 0s ago: executing program 1 (id=3970): socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_secret(0x6c2bd70012c39c6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r2 = timerfd_create(0x0, 0x800) timerfd_settime(r2, 0x3, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x6490, 0x4) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[]) ioctl$USBDEVFS_REAPURB(r5, 0x4004550c, &(0x7f00000002c0)) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x4c6) write$cgroup_int(r3, &(0x7f0000000000)=0x2b00, 0x12) kernel console output (not intermixed with test programs): 275'. [ 1622.124963][T23061] program syz.1.3274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1622.616922][T23068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3277'. [ 1623.016669][T23073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3278'. [ 1623.031384][T23073] netlink: 320 bytes leftover after parsing attributes in process `syz.3.3278'. [ 1623.315589][T23082] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3281'. [ 1623.581101][T18876] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1623.735455][T18876] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1623.745576][T18876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.773218][T18876] usb 1-1: Product: syz [ 1623.787261][T18876] usb 1-1: Manufacturer: syz [ 1623.801820][T18876] usb 1-1: SerialNumber: syz [ 1623.813477][T18876] usb 1-1: config 0 descriptor?? [ 1623.832089][T18876] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1624.252409][T23091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3283'. [ 1624.298165][T23082] netdevsim netdevsim0: Firmware load for '../file0/file0' refused, path contains '..' component [ 1624.336138][T18876] input: sonixb as /devices/platform/dummy_hcd.0/usb1/1-1/input/input50 [ 1624.523513][T18876] usb 1-1: USB disconnect, device number 62 [ 1625.122555][T23096] __nla_validate_parse: 2 callbacks suppressed [ 1625.122570][T23096] netlink: 320 bytes leftover after parsing attributes in process `syz.3.3284'. [ 1625.969808][T23113] team0: Caught tx_queue_len zero misconfig [ 1626.427747][T23109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3287'. [ 1626.454814][T23121] misc userio: The device must be registered before sending interrupts [ 1626.596533][T23118] netlink: 320 bytes leftover after parsing attributes in process `syz.3.3287'. [ 1626.970538][ T5832] usb 2-1: new low-speed USB device number 83 using dummy_hcd [ 1627.023655][T23116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3288'. [ 1627.308129][ T5832] usb 2-1: No LPM exit latency info found, disabling LPM. [ 1627.420530][ T5832] usb 2-1: config 1 interface 0 altsetting 250 endpoint 0x1 is Bulk; changing to Interrupt [ 1627.447165][ T5832] usb 2-1: config 1 interface 0 altsetting 250 endpoint 0x82 is Bulk; changing to Interrupt [ 1627.467540][ T5832] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1627.512677][ T5832] usb 2-1: string descriptor 0 read error: -22 [ 1627.519200][ T5832] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1627.538530][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.611914][T23121] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1627.649057][T23121] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1627.805901][T23131] program syz.2.3292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1627.827408][T23131] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1628.121990][T23139] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3295'. [ 1628.229261][T23119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1628.239227][T23119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1628.336263][T23143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3294'. [ 1628.451266][ T5832] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1628.705142][ T5832] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1628.724347][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.754487][ T5832] usb 4-1: Product: syz [ 1628.767935][ T5832] usb 4-1: Manufacturer: syz [ 1628.782584][ T5832] usb 4-1: SerialNumber: syz [ 1628.812582][ T5832] usb 4-1: config 0 descriptor?? [ 1628.847542][ T5832] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1629.050245][T23139] netdevsim netdevsim3: Firmware load for '../file0/file0' refused, path contains '..' component [ 1629.325445][T16456] usb 2-1: USB disconnect, device number 83 [ 1629.370864][ T5832] sonixb 4-1:0.0: Error reading register 00: -110 [ 1629.523415][T16456] usb 4-1: USB disconnect, device number 75 [ 1629.883643][T23159] netlink: 456 bytes leftover after parsing attributes in process `syz.0.3297'. [ 1631.045054][T23166] netlink: 320 bytes leftover after parsing attributes in process `syz.1.3298'. [ 1631.523074][T23183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3302'. [ 1631.546223][T23182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3303'. [ 1631.564949][T23183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3302'. [ 1632.792142][T23198] netlink: 2020 bytes leftover after parsing attributes in process `syz.3.3300'. [ 1632.812115][T23198] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3300'. [ 1634.090308][T23210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3308'. [ 1634.862167][T18876] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1635.053912][T18876] usb 3-1: Using ep0 maxpacket: 32 [ 1635.073858][T18876] usb 3-1: config index 0 descriptor too short (expected 44, got 36) [ 1635.092169][T18876] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 1635.113483][T18876] usb 3-1: config 0 has no interface number 0 [ 1635.119714][T18876] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1635.171834][T18876] usb 3-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1635.203456][T18876] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 1635.235077][T18876] usb 3-1: config 0 interface 126 has no altsetting 0 [ 1635.441542][T18876] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 1635.718074][T18876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.774529][T18876] usb 3-1: Product: syz [ 1635.778992][T18876] usb 3-1: Manufacturer: syz [ 1635.823768][T18876] usb 3-1: SerialNumber: syz [ 1635.881602][T18876] usb 3-1: config 0 descriptor?? [ 1635.889911][T23216] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1635.983105][T23231] IPVS: stopping backup sync thread 14216 ... [ 1638.053241][T23251] netlink: 456 bytes leftover after parsing attributes in process `syz.3.3313'. [ 1638.203434][T18876] ir_usb 3-1:0.126: IR Dongle converter detected [ 1638.236088][T18876] usb 3-1: IRDA class descriptor not found, device not bound [ 1638.263186][T18876] usb 3-1: USB disconnect, device number 75 [ 1639.345855][T23254] vivid-004: disconnect [ 1639.382485][T23264] netlink: 320 bytes leftover after parsing attributes in process `syz.0.3318'. [ 1639.723110][T23253] vivid-004: reconnect [ 1642.963049][T23316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3329'. [ 1643.470579][T23321] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3330'. [ 1643.660742][T23317] program syz.2.3328 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1643.810646][T16456] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1644.102001][T16456] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1644.112103][T16456] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.130042][T16456] usb 1-1: Product: syz [ 1644.205679][T16456] usb 1-1: Manufacturer: syz [ 1644.301098][T16456] usb 1-1: SerialNumber: syz [ 1644.382374][T16456] usb 1-1: config 0 descriptor?? [ 1644.445489][T16456] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1644.880946][T23321] netdevsim netdevsim0: Firmware load for '../file0/file0' refused, path contains '..' component [ 1644.906974][T16456] input: sonixb as /devices/platform/dummy_hcd.0/usb1/1-1/input/input51 [ 1644.933401][T23337] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1644.981341][T23337] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3334'. [ 1645.199093][T23337] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3334'. [ 1645.257980][T16456] usb 1-1: USB disconnect, device number 63 [ 1645.860032][T23345] tipc: Enabling of bearer rejected, already enabled [ 1645.973447][T23350] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1646.206031][T23357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3336'. [ 1646.245188][T23357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3336'. [ 1647.609844][T23383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3342'. [ 1649.680709][ T5832] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1649.797172][T23400] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3347'. [ 1649.860693][ T5832] usb 3-1: Using ep0 maxpacket: 16 [ 1649.907610][ T5832] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1649.917054][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.928724][ T5832] usb 3-1: Product: syz [ 1649.950640][ T5832] usb 3-1: Manufacturer: syz [ 1649.958222][ T5832] usb 3-1: SerialNumber: syz [ 1650.153809][ T5832] usb 3-1: config 0 descriptor?? [ 1650.180590][T16456] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1650.371690][T23407] netlink: 2020 bytes leftover after parsing attributes in process `syz.0.3344'. [ 1650.401809][T23407] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3344'. [ 1650.530771][ T5832] usb 3-1: ignoring: not an USB2CAN converter [ 1650.645262][T16456] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1650.654989][T16456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.673113][T16456] usb 2-1: Product: syz [ 1650.680225][T16456] usb 2-1: Manufacturer: syz [ 1650.690031][T16456] usb 2-1: SerialNumber: syz [ 1650.711949][T16456] usb 2-1: config 0 descriptor?? [ 1650.736778][T16456] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1651.174178][T23400] netdevsim netdevsim1: Firmware load for '../file0/file0' refused, path contains '..' component [ 1651.202714][T16456] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input52 [ 1651.246869][T23414] team0: Caught tx_queue_len zero misconfig [ 1651.478946][T16456] usb 2-1: USB disconnect, device number 84 [ 1652.273014][T23425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3349'. [ 1652.292356][T23425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3349'. [ 1654.250046][T23442] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1654.482552][T23444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3352'. [ 1654.493053][T23444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3352'. [ 1655.307121][T18876] usb 3-1: USB disconnect, device number 76 [ 1655.514746][T23456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3355'. [ 1655.526775][T23456] netlink: 320 bytes leftover after parsing attributes in process `syz.3.3355'. [ 1655.911851][T23466] syz_tun: entered allmulticast mode [ 1656.581966][T23460] syz_tun: left allmulticast mode [ 1657.429512][T23486] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1657.616261][T23486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3361'. [ 1657.628571][T23486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3361'. [ 1657.742557][T23488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3360'. [ 1658.853212][T23497] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3363'. [ 1659.170955][T16456] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1659.325387][T16456] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1659.335526][T16456] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.345726][T16456] usb 6-1: Product: syz [ 1659.350078][T16456] usb 6-1: Manufacturer: syz [ 1659.356782][T16456] usb 6-1: SerialNumber: syz [ 1659.371022][T16456] usb 6-1: config 0 descriptor?? [ 1659.385540][T16456] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1659.632423][T23501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3362'. [ 1659.795380][T23497] netdevsim netdevsim5: Firmware load for '../file0/file0' refused, path contains '..' component [ 1659.844607][T16456] input: sonixb as /devices/platform/dummy_hcd.5/usb6/6-1/input/input53 [ 1660.070572][T16456] usb 6-1: USB disconnect, device number 70 [ 1660.221212][T18876] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1660.391853][T18876] usb 2-1: Using ep0 maxpacket: 8 [ 1660.399071][T18876] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 1660.417700][T18876] usb 2-1: config 0 has no interface number 0 [ 1660.438927][T18876] usb 2-1: New USB device found, idVendor=04e2, idProduct=1422, bcdDevice=53.53 [ 1660.478627][T18876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.491851][T18876] usb 2-1: Product: syz [ 1660.496345][T18876] usb 2-1: Manufacturer: syz [ 1660.509066][T18876] usb 2-1: SerialNumber: syz [ 1660.526663][T18876] usb 2-1: config 0 descriptor?? [ 1660.536534][T18876] xr_serial 2-1:0.109: More than one union descriptor, skipping ... [ 1661.061349][T16456] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1661.222354][T16456] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1661.233890][T16456] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1661.267017][T16456] usb 6-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1661.322809][T16456] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.365728][T16456] usb 6-1: config 0 descriptor?? [ 1661.804554][T16456] usbhid 6-1:0.0: can't add hid device: -71 [ 1661.830124][T16456] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1661.877196][T16456] usb 6-1: USB disconnect, device number 71 [ 1662.278689][T23540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3370'. [ 1662.298295][T23540] netlink: 320 bytes leftover after parsing attributes in process `syz.2.3370'. [ 1662.575273][T23549] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3373'. [ 1662.960815][T16456] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1663.035184][T18876] usb 2-1: USB disconnect, device number 85 [ 1663.171718][T23557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3374'. [ 1663.184770][T16456] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1663.194518][T16456] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.203032][T16456] usb 4-1: Product: syz [ 1663.207509][T16456] usb 4-1: Manufacturer: syz [ 1663.212510][T16456] usb 4-1: SerialNumber: syz [ 1663.219272][T16456] usb 4-1: config 0 descriptor?? [ 1663.242652][T16456] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1663.252185][T23560] netlink: 320 bytes leftover after parsing attributes in process `syz.2.3374'. [ 1663.685517][T23549] netdevsim netdevsim3: Firmware load for '../file0/file0' refused, path contains '..' component [ 1663.738114][T16456] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input55 [ 1664.306280][T16456] usb 4-1: USB disconnect, device number 76 [ 1664.922720][T23577] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1664.956314][T23577] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3377'. [ 1664.983900][T23577] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3377'. [ 1665.822788][T23584] netlink: 320 bytes leftover after parsing attributes in process `syz.0.3380'. [ 1668.189430][ T30] audit: type=1326 audit(1763499056.335:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23599 comm="syz.1.3383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1668.215596][ T30] audit: type=1326 audit(1763499056.365:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23599 comm="syz.1.3383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1668.238546][ T30] audit: type=1326 audit(1763499056.365:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23599 comm="syz.1.3383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1668.262385][ T30] audit: type=1326 audit(1763499056.365:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23599 comm="syz.1.3383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1668.284546][ C0] vkms_vblank_simulate: vblank timer overrun [ 1668.294552][ T30] audit: type=1326 audit(1763499056.365:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23599 comm="syz.1.3383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1668.316750][ C0] vkms_vblank_simulate: vblank timer overrun [ 1668.655677][ T30] audit: type=1326 audit(1763499056.805:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23599 comm="syz.1.3383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1668.718892][ T30] audit: type=1326 audit(1763499056.805:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23599 comm="syz.1.3383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1668.768092][ T30] audit: type=1326 audit(1763499056.825:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23619 comm="syz.1.3383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1668.916587][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.923023][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.958488][T23617] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3387'. [ 1668.965136][ T30] audit: type=1326 audit(1763499056.865:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23599 comm="syz.1.3383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1669.039172][ T30] audit: type=1326 audit(1763499056.865:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23599 comm="syz.1.3383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1669.101533][T18876] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1669.245491][T23622] netlink: 320 bytes leftover after parsing attributes in process `syz.5.3387'. [ 1669.325580][T18876] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1669.345608][T18876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.411819][T18876] usb 2-1: Product: syz [ 1669.416173][T18876] usb 2-1: Manufacturer: syz [ 1669.423508][T18876] usb 2-1: SerialNumber: syz [ 1669.462372][T18876] usb 2-1: config 0 descriptor?? [ 1669.497408][T23636] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1669.594355][T23636] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1669.616842][T18876] ch341 2-1:0.0: ch341-uart converter detected [ 1670.588610][T23647] netlink: 320 bytes leftover after parsing attributes in process `syz.0.3392'. [ 1670.751272][T18876] usb 2-1: failed to receive control message: -110 [ 1670.758011][T18876] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 1670.950174][T16456] usb 2-1: USB disconnect, device number 86 [ 1670.957076][T16456] ch341 2-1:0.0: device disconnected [ 1671.360251][T23659] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1673.186393][T23679] program syz.2.3398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1673.679520][T23687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3409'. [ 1673.692239][T23687] netlink: 320 bytes leftover after parsing attributes in process `syz.0.3409'. [ 1674.907935][T23706] usb usb8: usbfs: process 23706 (syz.0.3402) did not claim interface 0 before use [ 1675.002603][T23706] picdev_read: 77 callbacks suppressed [ 1675.002626][T23706] kvm: pic: non byte read [ 1675.052241][T23706] kvm: pic: level sensitive irq not supported [ 1675.060260][T23706] kvm: pic: non byte read [ 1675.097725][T23706] kvm: pic: level sensitive irq not supported [ 1675.099212][T23706] kvm: pic: non byte read [ 1675.206880][T23706] kvm: pic: level sensitive irq not supported [ 1675.206929][T23706] kvm: pic: non byte read [ 1675.260830][T23706] kvm: pic: level sensitive irq not supported [ 1675.260897][T23706] kvm: pic: non byte read [ 1675.281128][T23706] kvm: pic: level sensitive irq not supported [ 1675.281195][T23706] kvm: pic: non byte read [ 1675.383767][T23706] kvm: pic: level sensitive irq not supported [ 1675.383911][T23706] kvm: pic: non byte read [ 1675.413834][T23706] kvm: pic: level sensitive irq not supported [ 1675.415537][T23706] kvm: pic: non byte read [ 1675.501944][T23706] kvm: pic: level sensitive irq not supported [ 1675.502008][T23706] kvm: pic: non byte read [ 1676.289110][T23718] program syz.5.3403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1676.367505][T23727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3404'. [ 1676.500925][T23727] netlink: 320 bytes leftover after parsing attributes in process `syz.1.3404'. [ 1676.596183][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1676.596195][ T30] audit: type=1804 audit(1763499064.745:1831): pid=23728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3407" name="/newroot/705/file1" dev="fuse" ino=1 res=1 errno=0 [ 1677.414826][T23742] binder: 23739:23742 ioctl c018620c 800002c0 returned -1 [ 1678.330502][T16456] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1678.513540][T16456] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1678.603140][T16456] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1678.622546][T16456] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1678.638998][T16456] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1678.650621][T16456] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.721733][T16456] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1678.729707][T16456] usb 2-1: invalid MIDI out EP 0 [ 1678.818617][ T6374] udevd[6374]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1678.841697][T16456] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1679.165059][T23766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3413'. [ 1679.190788][T23766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3413'. [ 1679.474253][T23765] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1681.068568][T23782] program syz.3.3412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1681.168782][T23784] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3417'. [ 1681.203975][T23783] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3416'. [ 1681.216602][T23783] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3416'. [ 1681.689095][T23784] netlink: 320 bytes leftover after parsing attributes in process `syz.5.3417'. [ 1681.875469][T16456] usb 2-1: USB disconnect, device number 87 [ 1682.498149][T23788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3418'. [ 1682.652628][T23796] netlink: 320 bytes leftover after parsing attributes in process `syz.1.3418'. [ 1682.695536][T23799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3421'. [ 1682.992676][T23804] netlink: 320 bytes leftover after parsing attributes in process `syz.2.3421'. [ 1683.575545][T23820] syz_tun: entered allmulticast mode [ 1683.720197][T23818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3422'. [ 1683.744196][T23818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3422'. [ 1683.881751][T18876] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1684.055586][T18876] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1684.065331][T18876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.074777][T18876] usb 3-1: Product: syz [ 1684.082040][T18876] usb 3-1: Manufacturer: syz [ 1684.086865][T18876] usb 3-1: SerialNumber: syz [ 1684.133841][T18876] usb 3-1: config 0 descriptor?? [ 1684.166187][T23808] syz_tun: left allmulticast mode [ 1684.184080][T18876] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1684.599256][T23819] netdevsim netdevsim2: Firmware load for '../file0/file0' refused, path contains '..' component [ 1684.618090][T18876] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input56 [ 1684.848329][T16456] usb 3-1: USB disconnect, device number 77 [ 1684.894486][T23832] hub 9-0:1.0: USB hub found [ 1684.899387][T23832] hub 9-0:1.0: 1 port detected [ 1685.290202][T23839] netdevsim netdevsim5: Firmware load for '../file0/file0' refused, path contains '..' component [ 1685.298396][T23840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3427'. [ 1685.311894][T23840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3427'. [ 1685.861857][T18876] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1686.069257][T18876] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1686.088943][T18876] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1686.111649][T18876] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1686.128928][T18876] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1686.151279][T23851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3431'. [ 1686.163519][T18876] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1686.198139][T18876] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1686.217705][T18876] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1686.237954][T18876] usb 6-1: Product: syz [ 1686.278195][T18876] usb 6-1: Manufacturer: syz [ 1686.343434][T18876] cdc_wdm 6-1:1.0: skipping garbage [ 1686.353058][T18876] cdc_wdm 6-1:1.0: skipping garbage [ 1686.360010][T18876] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1686.386992][T18876] cdc_wdm 6-1:1.0: Unknown control protocol [ 1686.618200][T23857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1686.641575][T23857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1686.666311][T23857] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1686.961510][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1686.968161][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1686.975031][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1686.981624][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1686.988471][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1686.990710][T16456] usb 6-1: USB disconnect, device number 72 [ 1686.995066][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1687.007055][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1687.022538][T23862] cdc_wdm 6-1:1.0: Tx URB error: -19 [ 1687.267038][T23870] __nla_validate_parse: 1 callbacks suppressed [ 1687.267052][T23870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3434'. [ 1687.298427][T23870] pimreg: entered allmulticast mode [ 1687.307780][T23870] pimreg: left allmulticast mode [ 1688.289956][T23877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3436'. [ 1688.302776][T23877] netlink: 320 bytes leftover after parsing attributes in process `syz.2.3436'. [ 1689.940586][T23897] netlink: 320 bytes leftover after parsing attributes in process `syz.0.3439'. [ 1690.176744][T23904] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3442'. [ 1690.262844][T23909] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1690.342052][T23903] netlink: 320 bytes leftover after parsing attributes in process `syz.2.3443'. [ 1690.451132][T18876] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1690.676822][T23917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3441'. [ 1690.690300][T23917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3441'. [ 1690.706495][T18876] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1690.732042][T18876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.751458][T18876] usb 6-1: Product: syz [ 1690.765349][T18876] usb 6-1: Manufacturer: syz [ 1690.777393][T18876] usb 6-1: SerialNumber: syz [ 1690.799716][T18876] usb 6-1: config 0 descriptor?? [ 1690.833037][T18876] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1691.282965][T18876] input: sonixb as /devices/platform/dummy_hcd.5/usb6/6-1/input/input57 [ 1692.371172][T23935] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1692.388710][T23904] netdevsim netdevsim5: Firmware load for '../file0/file0' refused, path contains '..' component [ 1692.407757][ T24] usb 6-1: USB disconnect, device number 73 [ 1693.113946][T23944] program syz.3.3447 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1694.094767][T23958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3452'. [ 1694.146141][T23958] netlink: 320 bytes leftover after parsing attributes in process `syz.3.3452'. [ 1694.429978][T23968] program syz.1.3451 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1695.573051][T23980] netlink: 320 bytes leftover after parsing attributes in process `syz.2.3456'. [ 1695.583572][T23981] program syz.5.3453 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1696.668672][T24003] netlink: 'syz.5.3460': attribute type 11 has an invalid length. [ 1696.724754][T24003] xt_hashlimit: size too large, truncated to 1048576 [ 1696.842636][T24003] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 1697.439855][T24009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3461'. [ 1697.450344][T24009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3461'. [ 1698.013095][ T24] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1698.037700][T24022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3464'. [ 1698.174111][ T24] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1698.189905][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.202742][ T24] usb 1-1: Product: syz [ 1698.210302][ T24] usb 1-1: Manufacturer: syz [ 1698.218449][ T24] usb 1-1: SerialNumber: syz [ 1698.229591][ T24] usb 1-1: config 0 descriptor?? [ 1698.239885][ T24] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1698.641602][T24014] netdevsim netdevsim0: Firmware load for '../file0/file0' refused, path contains '..' component [ 1698.655735][ T24] input: sonixb as /devices/platform/dummy_hcd.0/usb1/1-1/input/input58 [ 1698.874450][ T24] usb 1-1: USB disconnect, device number 64 [ 1699.670855][T24043] syz_tun: entered allmulticast mode [ 1699.831421][T24042] syz_tun: left allmulticast mode [ 1700.786080][T24053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3471'. [ 1700.829146][T24052] netlink: 320 bytes leftover after parsing attributes in process `syz.3.3471'. [ 1701.679841][T24061] loop6: detected capacity change from 0 to 524287999 [ 1702.514935][T24068] program syz.0.3470 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1703.764561][T24088] usb usb8: usbfs: process 24088 (syz.2.3476) did not claim interface 0 before use [ 1703.851173][T24088] kvm: pic: non byte read [ 1703.859921][T24088] kvm: pic: level sensitive irq not supported [ 1703.859991][T24088] kvm: pic: non byte read [ 1703.872336][T24088] kvm: pic: level sensitive irq not supported [ 1703.872399][T24088] kvm: pic: non byte read [ 1703.884796][T24088] kvm: pic: level sensitive irq not supported [ 1703.884861][T24088] kvm: pic: non byte read [ 1703.909722][T24088] kvm: pic: level sensitive irq not supported [ 1703.909805][T24088] kvm: pic: non byte read [ 1703.921919][T24088] kvm: pic: level sensitive irq not supported [ 1703.921989][T24088] kvm: pic: non byte read [ 1703.938442][T24088] kvm: pic: level sensitive irq not supported [ 1703.938912][T24088] kvm: pic: non byte read [ 1704.004214][T24088] kvm: pic: level sensitive irq not supported [ 1704.004366][T24088] kvm: pic: non byte read [ 1704.023246][T24088] kvm: pic: level sensitive irq not supported [ 1704.023312][T24088] kvm: pic: non byte read [ 1704.132900][T24094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3475'. [ 1704.221179][T24094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3475'. [ 1705.001583][ T24] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1705.134491][T24106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3481'. [ 1705.183213][ T24] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1705.192889][ T24] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1705.204498][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1705.221470][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1705.241277][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1705.261002][ T24] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1705.272056][ T24] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1705.280048][ T24] usb 6-1: Product: syz [ 1705.285401][ T24] usb 6-1: Manufacturer: syz [ 1705.296021][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 1705.303728][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 1705.314733][ T24] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1705.330211][ T24] cdc_wdm 6-1:1.0: Unknown control protocol [ 1705.581691][T24107] netlink: 320 bytes leftover after parsing attributes in process `syz.1.3481'. [ 1705.622419][T24110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1705.632622][T24110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1705.693171][T24110] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1705.933401][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1705.933877][ T24] usb 6-1: USB disconnect, device number 74 [ 1705.940124][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1705.940145][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1705.966110][T24115] cdc_wdm 6-1:1.0: Tx URB error: -19 [ 1706.740070][T24130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3482'. [ 1706.754291][T24130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3482'. [ 1708.383360][T24142] program syz.2.3485 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1709.786153][T24155] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3490'. [ 1709.943291][T24138] program syz.1.3487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1710.111431][ T24] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1710.275487][ T24] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1710.285727][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.295250][ T24] usb 1-1: Product: syz [ 1710.299937][ T24] usb 1-1: Manufacturer: syz [ 1710.307127][ T24] usb 1-1: SerialNumber: syz [ 1710.331359][ T24] usb 1-1: config 0 descriptor?? [ 1710.347828][ T24] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1710.817168][T24155] netdevsim netdevsim0: Firmware load for '../file0/file0' refused, path contains '..' component [ 1710.833895][ T24] input: sonixb as /devices/platform/dummy_hcd.0/usb1/1-1/input/input59 [ 1711.089990][ T24] usb 1-1: USB disconnect, device number 65 [ 1711.488812][T24175] tap0: tun_chr_ioctl cmd 1074025677 [ 1711.496365][T24175] tap0: linktype set to 270 [ 1712.047210][T24182] program syz.1.3492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1712.215364][T24188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3496'. [ 1712.685514][T24193] netlink: 584 bytes leftover after parsing attributes in process `syz.2.3497'. [ 1713.132287][T24194] netlink: 'syz.3.3495': attribute type 2 has an invalid length. [ 1713.253000][ T30] audit: type=1804 audit(1763499101.405:1832): pid=24207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3501" name="/newroot/688/file1" dev="fuse" ino=1 res=1 errno=0 [ 1714.823464][T24226] binder: 24219:24226 ioctl c018620c 800002c0 returned -1 [ 1715.195420][T24232] program syz.2.3500 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1716.059209][T24240] netlink: 'syz.5.3504': attribute type 2 has an invalid length. [ 1716.585307][T24246] loop6: detected capacity change from 0 to 524287999 [ 1717.406242][T24260] netlink: 'syz.5.3509': attribute type 1 has an invalid length. [ 1717.430100][T24260] netlink: 'syz.5.3509': attribute type 1 has an invalid length. [ 1717.449543][T24260] netlink: 'syz.5.3509': attribute type 1 has an invalid length. [ 1717.797590][T24270] netlink: 'syz.3.3512': attribute type 11 has an invalid length. [ 1717.955966][T24270] xt_hashlimit: size too large, truncated to 1048576 [ 1717.988845][T24262] netlink: 320 bytes leftover after parsing attributes in process `syz.0.3511'. [ 1718.204653][T24270] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 1719.549293][T24291] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3516'. [ 1719.669072][T24293] program syz.0.3514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1719.841578][T21508] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1720.134941][T21508] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1720.144287][T21508] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.160028][T21508] usb 2-1: Product: syz [ 1720.164811][T21508] usb 2-1: Manufacturer: syz [ 1720.180474][T21508] usb 2-1: SerialNumber: syz [ 1720.193900][T21508] usb 2-1: config 0 descriptor?? [ 1720.215144][T21508] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1720.774198][T24291] netdevsim netdevsim1: Firmware load for '../file0/file0' refused, path contains '..' component [ 1720.792840][T24306] program syz.2.3517 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1720.838850][T21508] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input60 [ 1721.303344][T21508] usb 2-1: USB disconnect, device number 88 [ 1721.915331][T24333] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3522'. [ 1721.935116][T24333] pimreg: entered allmulticast mode [ 1721.949076][T24333] pimreg: left allmulticast mode [ 1723.236876][T24348] fuse: Bad value for 'fd' [ 1723.274400][T24348] fuse: Bad value for 'fd' [ 1724.808047][T24367] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3528'. [ 1725.090750][T21508] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1725.142648][T24379] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3531'. [ 1725.275114][T21508] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1725.284614][T21508] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.450640][T21508] usb 6-1: Product: syz [ 1725.454962][T21508] usb 6-1: Manufacturer: syz [ 1725.469905][T21508] usb 6-1: SerialNumber: syz [ 1725.493546][T21508] usb 6-1: config 0 descriptor?? [ 1725.512158][T21508] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1725.680071][T24389] netlink: 'syz.0.3532': attribute type 11 has an invalid length. [ 1725.700875][T24389] xt_hashlimit: size too large, truncated to 1048576 [ 1725.886727][T24389] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 1725.909895][T24390] program syz.2.3530 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1725.947842][T24367] netdevsim netdevsim5: Firmware load for '../file0/file0' refused, path contains '..' component [ 1726.035964][T21508] input: sonixb as /devices/platform/dummy_hcd.5/usb6/6-1/input/input61 [ 1726.240261][ T24] usb 6-1: USB disconnect, device number 75 [ 1727.980113][T24399] sctp: [Deprecated]: syz.1.3534 (pid 24399) Use of int in maxseg socket option. [ 1727.980113][T24399] Use struct sctp_assoc_value instead [ 1728.898379][T24420] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3538'. [ 1729.230955][T21508] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1729.309253][T24404] program syz.5.3536 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1729.399741][T21508] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1729.419275][T21508] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.439597][T21508] usb 4-1: Product: syz [ 1729.449915][T21508] usb 4-1: Manufacturer: syz [ 1729.470571][T21508] usb 4-1: SerialNumber: syz [ 1729.491142][T21508] usb 4-1: config 0 descriptor?? [ 1729.502463][T21508] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1729.903152][T24420] netdevsim netdevsim3: Firmware load for '../file0/file0' refused, path contains '..' component [ 1729.923353][T21508] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input62 [ 1730.125718][ T24] usb 4-1: USB disconnect, device number 77 [ 1730.364876][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.371816][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.738560][T24437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3541'. [ 1730.847552][T24437] kvm: Disabled LAPIC found during irq injection [ 1731.071430][T24445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3543'. [ 1731.173366][T24445] netlink: 320 bytes leftover after parsing attributes in process `syz.1.3543'. [ 1733.420501][T21508] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1733.756058][T21508] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1733.768923][T21508] usb 4-1: config 0 has no interfaces? [ 1733.784549][T21508] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1733.797990][T21508] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.072281][T21508] usb 4-1: config 0 descriptor?? [ 1734.506608][T24500] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3553'. [ 1734.835972][T24509] delete_channel: no stack [ 1734.851238][T21508] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1735.024974][T21508] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1735.041306][T21508] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.049527][T21508] usb 6-1: Product: syz [ 1735.054368][T21508] usb 6-1: Manufacturer: syz [ 1735.069765][T21508] usb 6-1: SerialNumber: syz [ 1735.078891][T18876] usb 4-1: USB disconnect, device number 78 [ 1735.119639][T21508] usb 6-1: config 0 descriptor?? [ 1735.145977][T21508] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1735.190549][T16456] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1735.487146][T24511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3555'. [ 1735.659504][T24500] netdevsim netdevsim5: Firmware load for '../file0/file0' refused, path contains '..' component [ 1735.684435][T21508] input: sonixb as /devices/platform/dummy_hcd.5/usb6/6-1/input/input63 [ 1735.731438][T24511] netlink: 320 bytes leftover after parsing attributes in process `syz.2.3555'. [ 1735.813798][T24516] program syz.0.3556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1735.889534][T21508] usb 6-1: USB disconnect, device number 76 [ 1735.920735][T16456] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1736.005739][T16456] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1736.071670][T16456] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1736.194332][T16456] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.368302][T24512] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1736.386315][T16456] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1736.557838][T24525] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3558'. [ 1736.707599][T24523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3557'. [ 1736.735982][T24523] netlink: 320 bytes leftover after parsing attributes in process `syz.2.3557'. [ 1736.798573][T24530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1736.812024][T24530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1736.880711][T16456] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1736.896660][T24532] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1737.135674][T16456] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1737.343233][T16456] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1737.358547][T16456] usb 6-1: Product: syz [ 1737.370554][T16456] usb 6-1: Manufacturer: syz [ 1737.381049][T16456] usb 6-1: SerialNumber: syz [ 1737.466490][T16456] usb 6-1: config 0 descriptor?? [ 1737.474437][T16456] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1737.671838][T18876] usb 4-1: new low-speed USB device number 79 using dummy_hcd [ 1737.853111][T18876] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1737.863112][T18876] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1737.881524][T18876] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1737.911230][T18876] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1737.925068][T24525] netdevsim netdevsim5: Firmware load for '../file0/file0' refused, path contains '..' component [ 1737.952335][T18876] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1737.955933][T16456] input: sonixb as /devices/platform/dummy_hcd.5/usb6/6-1/input/input64 [ 1737.982212][T18876] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1737.991292][T18876] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1738.020789][T18876] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1738.051115][T18876] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1738.066173][T18876] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1738.083206][T18876] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1738.095975][T18876] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1738.137079][T18876] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1738.218382][T16456] usb 6-1: USB disconnect, device number 77 [ 1738.237570][ T5827] udevd[5827]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 1738.260742][ T5827] udevd[5827]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1738.312993][T18876] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1738.371948][T18876] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1738.553638][T18876] usb 4-1: string descriptor 0 read error: -22 [ 1738.574338][T18876] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1738.594922][T18876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.782901][T18876] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1739.122338][T18876] usb 4-1: USB disconnect, device number 79 [ 1739.256697][ T24] usb 2-1: USB disconnect, device number 89 [ 1739.632063][T24562] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3564'. [ 1739.652709][T24562] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3564'. [ 1740.062999][T24566] loop2: detected capacity change from 0 to 7 [ 1740.083471][T24566] Dev loop2: unable to read RDB block 7 [ 1740.099733][T24566] loop2: unable to read partition table [ 1740.110072][T24566] loop2: partition table beyond EOD, truncated [ 1740.181637][T24566] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1740.669236][ T5197] Dev loop2: unable to read RDB block 7 [ 1740.680497][ T5197] loop2: unable to read partition table [ 1740.690994][ T5197] loop2: partition table beyond EOD, truncated [ 1740.931442][T24571] usb usb8: usbfs: process 24571 (syz.3.3566) did not claim interface 0 before use [ 1741.017245][T24571] kvm: pic: non byte read [ 1741.044710][T24571] kvm: pic: level sensitive irq not supported [ 1741.044776][T24571] kvm: pic: non byte read [ 1741.062643][T24571] kvm: pic: level sensitive irq not supported [ 1741.062738][T24571] kvm: pic: non byte read [ 1741.074795][T24571] kvm: pic: level sensitive irq not supported [ 1741.074860][T24571] kvm: pic: non byte read [ 1741.088429][T24571] kvm: pic: level sensitive irq not supported [ 1741.088493][T24571] kvm: pic: non byte read [ 1741.100003][T24571] kvm: pic: level sensitive irq not supported [ 1741.100066][T24571] kvm: pic: non byte read [ 1741.141287][T16456] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 1741.229786][T24571] kvm: pic: level sensitive irq not supported [ 1741.229958][T24571] kvm: pic: non byte read [ 1741.243082][T24571] kvm: pic: level sensitive irq not supported [ 1741.243241][T24571] kvm: pic: non byte read [ 1741.259983][T24571] kvm: pic: level sensitive irq not supported [ 1741.260046][T24571] kvm: pic: non byte read [ 1741.303226][T16456] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1741.312507][T16456] usb 3-1: config 0 has no interface number 0 [ 1741.318765][T16456] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1741.522313][T16456] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1741.531810][T16456] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.555327][T16456] usb 3-1: Product: syz [ 1741.559515][T16456] usb 3-1: Manufacturer: syz [ 1741.582891][T16456] usb 3-1: SerialNumber: syz [ 1741.627958][T16456] usb 3-1: config 0 descriptor?? [ 1742.675270][T24575] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1742.891897][T16456] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 1743.115749][T24600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3572'. [ 1743.319528][T24606] program syz.0.3569 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1744.501452][T24625] fuse: Bad value for 'fd' [ 1744.510331][T24625] fuse: Bad value for 'fd' [ 1745.421864][T16456] usb 3-1: USB disconnect, device number 78 [ 1746.031108][T18876] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1746.192441][T18876] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1746.214513][T18876] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1746.244006][T18876] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1746.303501][T18876] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1746.323760][T18876] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1746.348001][T18876] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1746.362329][T18876] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1746.374278][T18876] usb 6-1: Product: syz [ 1746.382574][T18876] usb 6-1: Manufacturer: syz [ 1746.396980][T18876] cdc_wdm 6-1:1.0: skipping garbage [ 1746.405022][T18876] cdc_wdm 6-1:1.0: skipping garbage [ 1746.443958][T18876] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1746.459105][T18876] cdc_wdm 6-1:1.0: Unknown control protocol [ 1746.659936][T24656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3582'. [ 1746.712089][T24657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1746.738826][T24651] netlink: 320 bytes leftover after parsing attributes in process `syz.1.3582'. [ 1746.750302][T24657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1746.803506][T24657] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1747.012529][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1747.019166][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1747.028579][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1747.035273][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1747.042071][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1747.048822][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1747.055730][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1747.062415][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1747.069400][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1747.076083][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1747.083106][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1747.089791][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1747.097155][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1747.103853][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1747.111153][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1747.117868][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1747.124618][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1747.131300][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1747.137527][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1747.146415][T18876] usb 6-1: USB disconnect, device number 78 [ 1747.890307][T24665] syz_tun: entered allmulticast mode [ 1748.463482][T24661] syz_tun: left allmulticast mode [ 1748.551297][T24674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3595'. [ 1748.563993][T24674] netlink: 320 bytes leftover after parsing attributes in process `syz.1.3595'. [ 1748.653566][T24675] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3585'. [ 1751.058355][T24678] program syz.5.3586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1751.504280][T24713] netlink: 'syz.2.3592': attribute type 29 has an invalid length. [ 1751.664705][T24720] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3593'. [ 1752.220484][T16456] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1752.436296][T16456] usb 6-1: Using ep0 maxpacket: 8 [ 1752.503702][T16456] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1752.514241][T16456] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1752.524485][T16456] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1752.535719][T16456] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1752.546175][T16456] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1752.622002][T16456] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1752.762715][T16456] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.062764][T16456] usb 6-1: usb_control_msg returned -32 [ 1753.099108][T16456] usbtmc 6-1:16.0: can't read capabilities [ 1753.565696][T24739] vhci_hcd vhci_hcd.0: port 0 already used [ 1753.690982][T24739] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 1753.697797][T24739] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1753.714878][T24747] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(16) [ 1753.721581][T24747] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1753.741977][T24739] vhci_hcd vhci_hcd.0: Device attached [ 1753.752314][T24747] vhci_hcd vhci_hcd.0: Device attached [ 1753.809651][T24739] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(18) [ 1753.816636][T24739] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1753.827810][T24739] vhci_hcd vhci_hcd.0: Device attached [ 1753.837196][T24739] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(22) [ 1753.844003][T24739] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1753.853962][T24739] vhci_hcd vhci_hcd.0: Device attached [ 1753.863895][T24739] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1753.876645][T24739] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1753.887365][T24739] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1753.899507][T24739] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(32) [ 1753.906124][T24739] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1753.922693][T24739] vhci_hcd vhci_hcd.0: Device attached [ 1754.018603][T24750] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(15) [ 1754.025315][T24750] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1754.035668][T24752] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 1754.134009][T24750] vhci_hcd vhci_hcd.0: Device attached [ 1754.313647][T24751] vhci_hcd: connection closed [ 1754.313997][T14719] vhci_hcd: stop threads [ 1754.324476][T14719] vhci_hcd: release socket [ 1754.342042][T24743] vhci_hcd: connection closed [ 1754.342751][T24748] vhci_hcd: connection closed [ 1754.347664][T24753] vhci_hcd: connection closed [ 1754.353086][T24755] vhci_hcd: connection closed [ 1754.393820][T14719] vhci_hcd: disconnect device [ 1754.410557][T14719] vhci_hcd: stop threads [ 1754.415107][T14719] vhci_hcd: release socket [ 1754.445396][T14719] vhci_hcd: disconnect device [ 1754.466982][T14719] vhci_hcd: stop threads [ 1754.485011][T14719] vhci_hcd: release socket [ 1754.505715][T14719] vhci_hcd: disconnect device [ 1754.538772][T14719] vhci_hcd: stop threads [ 1754.612492][T14719] vhci_hcd: release socket [ 1754.620076][T14719] vhci_hcd: disconnect device [ 1754.820493][T14719] vhci_hcd: stop threads [ 1754.824795][T14719] vhci_hcd: release socket [ 1754.941570][T14719] vhci_hcd: disconnect device [ 1754.949660][T24757] vhci_hcd: connection closed [ 1755.014120][T14719] vhci_hcd: stop threads [ 1755.027880][T14719] vhci_hcd: release socket [ 1755.047941][T14719] vhci_hcd: disconnect device [ 1755.146256][T24772] netlink: 320 bytes leftover after parsing attributes in process `syz.2.3599'. [ 1755.619692][T21508] usb 6-1: USB disconnect, device number 79 [ 1756.064411][ T30] audit: type=1326 audit(1763499144.205:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24779 comm="syz.5.3601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1756.209160][ T30] audit: type=1326 audit(1763499144.205:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24779 comm="syz.5.3601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1756.344867][ T30] audit: type=1326 audit(1763499144.205:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24779 comm="syz.5.3601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=15 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1756.494752][ T30] audit: type=1326 audit(1763499144.205:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24779 comm="syz.5.3601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1756.580027][ T30] audit: type=1326 audit(1763499144.205:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24779 comm="syz.5.3601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1756.697463][ T30] audit: type=1326 audit(1763499144.205:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24779 comm="syz.5.3601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1756.836545][ T30] audit: type=1326 audit(1763499144.205:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24779 comm="syz.5.3601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1757.049170][ T30] audit: type=1326 audit(1763499144.205:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24779 comm="syz.5.3601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1757.113884][ T30] audit: type=1326 audit(1763499144.205:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24779 comm="syz.5.3601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1757.270647][ T30] audit: type=1326 audit(1763499144.205:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24779 comm="syz.5.3601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1757.952533][T24819] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1759.409372][T24836] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1759.851971][T24845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3611'. [ 1759.996471][T24849] loop2: detected capacity change from 0 to 7 [ 1760.006232][T24849] Dev loop2: unable to read RDB block 7 [ 1760.013394][T24849] loop2: unable to read partition table [ 1760.019489][T24849] loop2: partition table beyond EOD, truncated [ 1760.028712][T24849] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1760.040469][ T5832] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1760.179624][ T5197] Dev loop2: unable to read RDB block 7 [ 1760.185592][ T5197] loop2: unable to read partition table [ 1760.193887][ T5197] loop2: partition table beyond EOD, truncated [ 1760.210675][ T5832] usb 1-1: Using ep0 maxpacket: 16 [ 1760.230434][ T5832] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 1760.273055][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.291597][ T5832] usb 1-1: Product: syz [ 1760.306121][ T5832] usb 1-1: Manufacturer: syz [ 1760.318778][ T5832] usb 1-1: SerialNumber: syz [ 1761.004987][ T5832] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1761.260630][ T5832] snd-usb-audio 1-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 1761.278848][T24864] netlink: 'syz.5.3615': attribute type 2 has an invalid length. [ 1761.368778][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1761.438957][T18876] usb 1-1: USB disconnect, device number 66 [ 1761.466634][T24865] netlink: 320 bytes leftover after parsing attributes in process `syz.1.3613'. [ 1762.492546][T24848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3610'. [ 1763.075764][T24846] kvm: Disabled LAPIC found during irq injection [ 1764.418334][T24901] netlink: 320 bytes leftover after parsing attributes in process `syz.5.3622'. [ 1764.960883][ T5832] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1765.141261][ T5832] usb 6-1: Using ep0 maxpacket: 8 [ 1765.171846][ T5832] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1765.182078][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.193642][ T5832] usb 6-1: Product: syz [ 1765.197929][ T5832] usb 6-1: Manufacturer: syz [ 1765.206279][ T5832] usb 6-1: SerialNumber: syz [ 1765.215265][ T5832] usb 6-1: config 0 descriptor?? [ 1765.229108][ T5832] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1766.160602][ T5832] gspca_sonixj: reg_w1 err -110 [ 1766.165690][ T5832] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 1766.206480][ T5832] usb 6-1: USB disconnect, device number 80 [ 1766.385239][T24927] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3627'. [ 1766.742804][ T24] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1766.924417][ T24] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1766.934436][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.943393][ T24] usb 1-1: Product: syz [ 1766.948048][ T24] usb 1-1: Manufacturer: syz [ 1766.953436][ T24] usb 1-1: SerialNumber: syz [ 1766.959940][ T24] usb 1-1: config 0 descriptor?? [ 1766.972556][ T24] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1767.285631][T24939] netlink: 'syz.3.3629': attribute type 29 has an invalid length. [ 1767.390576][T24927] netdevsim netdevsim0: Firmware load for '../file0/file0' refused, path contains '..' component [ 1767.523426][ T24] input: sonixb as /devices/platform/dummy_hcd.0/usb1/1-1/input/input65 [ 1767.966202][ T24] usb 1-1: USB disconnect, device number 67 [ 1770.222211][T24974] tipc: Can't bind to reserved service type 2 [ 1770.223142][T24975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3636'. [ 1770.585363][T24980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3634'. [ 1771.193446][T24974] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3636'. [ 1771.206734][T24974] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3636'. [ 1771.671448][T24992] ip6tnl0: Caught tx_queue_len zero misconfig [ 1771.840937][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 1771.840960][ T30] audit: type=1326 audit(1763499159.865:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24983 comm="syz.3.3638" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1771.896966][T24999] netlink: 320 bytes leftover after parsing attributes in process `syz.5.3641'. [ 1771.915559][ T30] audit: type=1326 audit(1763499159.955:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24983 comm="syz.3.3638" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1771.985779][ T30] audit: type=1326 audit(1763499160.035:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24983 comm="syz.3.3638" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1772.016274][T25003] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3642'. [ 1772.035092][ T30] audit: type=1326 audit(1763499160.035:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24983 comm="syz.3.3638" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1772.095663][ T30] audit: type=1326 audit(1763499160.035:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24983 comm="syz.3.3638" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1772.178441][ T30] audit: type=1326 audit(1763499160.035:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24983 comm="syz.3.3638" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1772.266990][ T30] audit: type=1326 audit(1763499160.035:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24983 comm="syz.3.3638" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1772.360622][ T5832] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1772.613685][ T5832] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1772.631545][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.664274][ T5832] usb 1-1: Product: syz [ 1772.685320][ T5832] usb 1-1: Manufacturer: syz [ 1772.700014][ T5832] usb 1-1: SerialNumber: syz [ 1772.725505][ T5832] usb 1-1: config 0 descriptor?? [ 1772.744713][ T5832] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1772.774404][ T30] audit: type=1326 audit(1763499160.925:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24983 comm="syz.3.3638" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1772.837838][ T30] audit: type=1326 audit(1763499160.925:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24983 comm="syz.3.3638" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1772.965409][ T30] audit: type=1326 audit(1763499161.115:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24983 comm="syz.3.3638" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1773.224269][T25003] netdevsim netdevsim0: Firmware load for '../file0/file0' refused, path contains '..' component [ 1773.258585][ T5832] input: sonixb as /devices/platform/dummy_hcd.0/usb1/1-1/input/input66 [ 1773.489208][ T24] usb 1-1: USB disconnect, device number 68 [ 1774.474037][T25029] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3645'. [ 1775.464279][ T5832] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1775.727708][ T5832] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1775.747050][ T5832] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1775.770569][ T5832] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1775.798632][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.838233][ T5832] usb 3-1: config 0 descriptor?? [ 1776.292230][T25039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1776.305978][T25039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1776.344408][T25039] fuse: Unknown parameter 'group_id00000000000000000000' [ 1776.452572][ T5832] usb 3-1: string descriptor 0 read error: -71 [ 1776.503497][ T5832] usb 3-1: USB disconnect, device number 79 [ 1776.980819][ T5832] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1777.125267][T25053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3651'. [ 1777.152265][ T5832] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1777.163328][ T5832] usb 2-1: config 0 has no interfaces? [ 1777.168947][ T5832] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1777.190488][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1777.205102][T25053] kvm: Disabled LAPIC found during irq injection [ 1777.223636][ T5832] usb 2-1: config 0 descriptor?? [ 1777.305414][T25054] netlink: 'syz.0.3650': attribute type 2 has an invalid length. [ 1779.178606][T25089] netlink: 320 bytes leftover after parsing attributes in process `syz.3.3656'. [ 1779.780486][ T5832] usb 2-1: USB disconnect, device number 90 [ 1779.828370][T25098] netlink: 320 bytes leftover after parsing attributes in process `syz.2.3659'. [ 1780.822784][T25119] delete_channel: no stack [ 1781.241426][ T24] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1781.438107][T25126] netlink: 320 bytes leftover after parsing attributes in process `syz.0.3663'. [ 1781.480152][ T24] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1781.509832][ T24] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1781.556757][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1781.611633][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.668233][T25125] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1781.694014][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1781.724913][T25134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3664'. [ 1781.901242][T25133] netlink: 'syz.1.3665': attribute type 2 has an invalid length. [ 1782.237395][T25125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1782.266820][T25125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1783.835617][ T24] usb 6-1: USB disconnect, device number 81 [ 1783.968526][T25007] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1784.183325][T25159] netlink: 'syz.3.3670': attribute type 10 has an invalid length. [ 1784.201102][T25007] usb 3-1: Using ep0 maxpacket: 32 [ 1784.218558][T25007] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1784.277209][T25159] 8021q: adding VLAN 0 to HW filter on device team0 [ 1784.291529][T25007] usb 3-1: config 0 has no interface number 0 [ 1784.310631][T25007] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1784.322302][T25007] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.350894][T25007] usb 3-1: Product: syz [ 1784.361539][T25007] usb 3-1: Manufacturer: syz [ 1784.364802][T25159] bond0: (slave team0): Enslaving as an active interface with an up link [ 1784.378908][T25007] usb 3-1: SerialNumber: syz [ 1784.419945][T25007] usb 3-1: config 0 descriptor?? [ 1784.561033][T25007] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1785.180662][T25007] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1785.193386][T25007] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1785.363595][T25154] delete_channel: no stack [ 1785.425203][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1785.434793][T25007] usb 3-1: USB disconnect, device number 80 [ 1785.443461][T25007] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1785.521400][T25007] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1785.562960][T25007] quatech2 3-1:0.51: device disconnected [ 1785.846454][T25178] loop5: detected capacity change from 0 to 7 [ 1785.868575][T25178] Dev loop5: unable to read RDB block 7 [ 1785.879998][T25178] loop5: unable to read partition table [ 1785.894231][T25178] loop5: partition table beyond EOD, truncated [ 1785.921414][T25178] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1786.798918][T25191] netlink: 320 bytes leftover after parsing attributes in process `syz.0.3674'. [ 1787.094696][T25196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3675'. [ 1787.112598][T25196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1789.158103][T25214] netlink: 320 bytes leftover after parsing attributes in process `syz.1.3678'. [ 1789.929843][T25220] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3680'. [ 1790.222090][T24557] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1790.356676][T25200] program syz.2.3676 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1790.396381][T24557] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1790.406882][T24557] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.429380][T24557] usb 6-1: Product: syz [ 1790.467074][T24557] usb 6-1: Manufacturer: syz [ 1790.481178][T24557] usb 6-1: SerialNumber: syz [ 1790.506169][T24557] usb 6-1: config 0 descriptor?? [ 1790.605428][T24557] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1791.031752][T25220] netdevsim netdevsim5: Firmware load for '../file0/file0' refused, path contains '..' component [ 1791.055388][T24557] input: sonixb as /devices/platform/dummy_hcd.5/usb6/6-1/input/input68 [ 1791.077956][T25218] program syz.3.3679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1791.452969][T24557] usb 6-1: USB disconnect, device number 82 [ 1791.805391][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.811970][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.116485][T25252] netlink: 320 bytes leftover after parsing attributes in process `syz.2.3686'. [ 1793.520045][T25260] program syz.5.3688 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1794.193213][T25279] syz_tun: entered allmulticast mode [ 1794.790260][T25283] netlink: 320 bytes leftover after parsing attributes in process `syz.1.3692'. [ 1794.852887][T25274] syz_tun: left allmulticast mode [ 1796.060794][T24557] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1796.324814][T24557] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1796.336326][T24557] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1796.354732][T24557] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1796.370927][T24557] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1796.496992][T24557] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1796.524977][T24557] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1796.542763][T24557] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1796.552297][T24557] usb 2-1: Product: syz [ 1796.557096][T24557] usb 2-1: Manufacturer: syz [ 1796.575379][T24557] cdc_wdm 2-1:1.0: skipping garbage [ 1796.582329][T24557] cdc_wdm 2-1:1.0: skipping garbage [ 1796.591596][T24557] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1796.597740][T24557] cdc_wdm 2-1:1.0: Unknown control protocol [ 1796.920480][T25007] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1797.082402][T25007] usb 3-1: Using ep0 maxpacket: 8 [ 1797.092901][T25007] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1797.103396][T25007] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1797.116771][T25007] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1797.127091][T25007] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1797.170911][T25007] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1797.181487][T25007] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.578659][T25309] loop3: detected capacity change from 0 to 7 [ 1797.605983][ T5834] Dev loop3: unable to read RDB block 7 [ 1797.612714][T25007] usb 3-1: GET_CAPABILITIES returned 0 [ 1797.618300][T25007] usbtmc 3-1:16.0: can't read capabilities [ 1797.644160][T25302] program syz.0.3696 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1797.761478][ T5834] loop3: unable to read partition table [ 1797.767559][ T5834] loop3: partition table beyond EOD, truncated [ 1797.818454][T25007] usb 3-1: USB disconnect, device number 81 [ 1797.868211][T25309] Dev loop3: unable to read RDB block 7 [ 1797.876565][T25309] loop3: unable to read partition table [ 1797.882812][T25309] loop3: partition table beyond EOD, truncated [ 1797.889156][T25309] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1798.263753][T25314] program syz.3.3697 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1798.788074][ T5197] Dev loop3: unable to read RDB block 7 [ 1798.794059][ T5197] loop3: unable to read partition table [ 1798.800053][ T5197] loop3: partition table beyond EOD, truncated [ 1798.955011][ T5197] Dev loop3: unable to read RDB block 7 [ 1798.960988][ T5197] loop3: unable to read partition table [ 1798.966982][ T5197] loop3: partition table beyond EOD, truncated [ 1798.975706][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1798.976863][T25007] usb 2-1: USB disconnect, device number 91 [ 1798.982329][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1798.982350][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1799.463925][T25331] netlink: 320 bytes leftover after parsing attributes in process `syz.1.3701'. [ 1799.719916][T25330] netlink: 320 bytes leftover after parsing attributes in process `syz.3.3700'. [ 1800.662505][T25344] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3702'. [ 1800.752320][T25354] loop5: detected capacity change from 0 to 7 [ 1800.766006][ T5834] Dev loop5: unable to read RDB block 7 [ 1800.781317][ T5834] loop5: unable to read partition table [ 1800.797509][ T5834] loop5: partition table beyond EOD, truncated [ 1800.878513][T25354] Dev loop5: unable to read RDB block 7 [ 1800.891595][T25354] loop5: unable to read partition table [ 1800.928259][T25354] loop5: partition table beyond EOD, truncated [ 1800.946152][T25354] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1801.095344][T25357] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1801.172474][T25357] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3705'. [ 1801.264859][T25357] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3705'. [ 1801.985740][T25363] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3706'. [ 1802.361526][ T24] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1802.412448][T25367] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3707'. [ 1802.641631][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1802.657553][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.685609][ T24] usb 3-1: Product: syz [ 1802.702418][ T24] usb 3-1: Manufacturer: syz [ 1802.712683][T25374] netlink: 'syz.1.3708': attribute type 4 has an invalid length. [ 1802.725125][ T24] usb 3-1: SerialNumber: syz [ 1802.736700][ T24] usb 3-1: config 0 descriptor?? [ 1802.753423][ T24] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1802.759942][T25374] netlink: 'syz.1.3708': attribute type 4 has an invalid length. [ 1803.163930][T25363] netdevsim netdevsim2: Firmware load for '../file0/file0' refused, path contains '..' component [ 1803.239367][ T24] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input69 [ 1803.480645][T25007] usb 3-1: USB disconnect, device number 82 [ 1804.404190][T25389] netlink: 320 bytes leftover after parsing attributes in process `syz.5.3710'. [ 1804.926773][T25392] netlink: 320 bytes leftover after parsing attributes in process `syz.2.3714'. [ 1805.523467][T25410] netlink: 320 bytes leftover after parsing attributes in process `syz.5.3715'. [ 1806.429766][T25393] program syz.1.3711 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1807.317100][T25421] syz_tun: entered allmulticast mode [ 1807.655959][T25427] loop5: detected capacity change from 0 to 7 [ 1807.667085][T25427] Dev loop5: unable to read RDB block 7 [ 1807.674874][T25427] loop5: unable to read partition table [ 1807.683449][T25427] loop5: partition table beyond EOD, truncated [ 1807.699993][T25427] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1807.789757][T25418] syz_tun: left allmulticast mode [ 1807.839348][ T5197] Dev loop5: unable to read RDB block 7 [ 1807.845389][ T5197] loop5: unable to read partition table [ 1807.857109][ T5197] loop5: partition table beyond EOD, truncated [ 1808.389688][T25408] program syz.0.3716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1809.016318][ T5197] Dev loop5: unable to read RDB block 7 [ 1809.051306][T25445] netlink: 'syz.0.3722': attribute type 5 has an invalid length. [ 1809.081148][ T5197] loop5: unable to read partition table [ 1809.097000][ T5197] loop5: partition table beyond EOD, truncated [ 1810.421899][T25460] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3725'. [ 1810.447991][T25461] random: crng reseeded on system resumption [ 1812.541368][T24557] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1812.939674][T25489] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3732'. [ 1812.963005][T24557] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1812.976055][T25489] xt_time: unknown flags 0xf4 [ 1812.983950][T24557] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1813.111306][T24557] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1813.128327][T24557] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1813.303288][T24557] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1813.313555][T24557] usb 3-1: invalid MIDI out EP 0 [ 1813.438094][T24557] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1813.522619][T25471] lo: Caught tx_queue_len zero misconfig [ 1813.767901][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 1813.767917][ T30] audit: type=1326 audit(1763499201.915:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25494 comm="syz.1.3733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1813.827492][ T30] audit: type=1326 audit(1763499201.955:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25494 comm="syz.1.3733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1814.039810][ T30] audit: type=1326 audit(1763499202.185:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25494 comm="syz.1.3733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1814.069231][T25499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3733'. [ 1814.131405][ T30] audit: type=1326 audit(1763499202.185:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25494 comm="syz.1.3733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1814.204540][ T30] audit: type=1326 audit(1763499202.185:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25494 comm="syz.1.3733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1814.264455][ T30] audit: type=1326 audit(1763499202.185:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25494 comm="syz.1.3733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1814.326184][ T30] audit: type=1326 audit(1763499202.185:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25494 comm="syz.1.3733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1814.389233][ T30] audit: type=1326 audit(1763499202.185:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25494 comm="syz.1.3733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1814.472832][ T30] audit: type=1326 audit(1763499202.185:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25494 comm="syz.1.3733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1814.557532][ T30] audit: type=1326 audit(1763499202.185:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25494 comm="syz.1.3733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1814.672704][T25483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1816.627320][T25527] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3737'. [ 1816.640138][T25527] netlink: 320 bytes leftover after parsing attributes in process `syz.0.3737'. [ 1817.126451][T24557] usb 3-1: USB disconnect, device number 83 [ 1817.423920][T25534] netlink: 'syz.5.3739': attribute type 2 has an invalid length. [ 1817.738613][T25530] GUP no longer grows the stack in syz.5.3739 (25530): 80005000-80008000 (80004000) [ 1817.757756][T25530] CPU: 1 UID: 0 PID: 25530 Comm: syz.5.3739 Not tainted syzkaller #0 PREEMPT(full) [ 1817.757784][T25530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1817.757798][T25530] Call Trace: [ 1817.757807][T25530] [ 1817.757817][T25530] dump_stack_lvl+0x189/0x250 [ 1817.757857][T25530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1817.757886][T25530] ? __pfx__printk+0x10/0x10 [ 1817.757904][T25530] ? find_vma+0xe7/0x160 [ 1817.757945][T25530] fixup_user_fault+0x661/0x720 [ 1817.757977][T25530] fault_in_user_writeable+0x72/0xe0 [ 1817.758006][T25530] futex_lock_pi+0x773/0xa90 [ 1817.758036][T25530] ? __pfx_futex_lock_pi+0x10/0x10 [ 1817.758111][T25530] ? __pfx_futex_wake_mark+0x10/0x10 [ 1817.758138][T25530] ? finish_task_switch+0x266/0x950 [ 1817.758169][T25530] ? lockdep_hardirqs_on+0x9c/0x150 [ 1817.758208][T25530] ? trace_sched_exit_tp+0x36/0x110 [ 1817.758240][T25530] do_futex+0x292/0x420 [ 1817.758275][T25530] ? __pfx_do_futex+0x10/0x10 [ 1817.758312][T25530] __se_sys_futex_time32+0x360/0x3e0 [ 1817.758330][T25530] ? __pfx___schedule+0x10/0x10 [ 1817.758355][T25530] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 1817.758387][T25530] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1817.758414][T25530] ? __ia32_sys_futex_time32+0x21/0xf0 [ 1817.758433][T25530] __do_fast_syscall_32+0xb6/0x2b0 [ 1817.758456][T25530] do_fast_syscall_32+0x34/0x80 [ 1817.758472][T25530] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1817.758493][T25530] RIP: 0023:0xf70ed539 [ 1817.758509][T25530] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1817.758525][T25530] RSP: 002b:00000000f507855c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 1817.758544][T25530] RAX: ffffffffffffffda RBX: 0000000080004000 RCX: 000000000000008d [ 1817.758557][T25530] RDX: 00000000fffffffd RSI: 0000000000000000 RDI: 0000000000000000 [ 1817.758570][T25530] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1817.758580][T25530] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1817.758590][T25530] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1817.758616][T25530] [ 1817.921673][ T5832] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1818.084689][T25545] input: syz0 as /devices/virtual/input/input70 [ 1818.310485][ T5832] usb 3-1: Using ep0 maxpacket: 32 [ 1818.318866][ T5832] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1818.327763][ T5832] usb 3-1: config 0 has no interface number 0 [ 1818.343339][ T5832] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1818.368112][ T5832] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 33573, setting to 1024 [ 1818.404712][ T5832] usb 3-1: config 0 interface 2 has no altsetting 0 [ 1818.433986][ T5832] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1818.462714][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.504778][ T5832] usb 3-1: Product: syz [ 1818.519048][ T5832] usb 3-1: Manufacturer: syz [ 1818.539622][ T5832] usb 3-1: SerialNumber: syz [ 1818.565533][ T5832] usb 3-1: config 0 descriptor?? [ 1819.037062][ T5832] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1819.089801][ T5832] usb 3-1: USB disconnect, device number 84 [ 1819.135175][ T6374] udevd[6374]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1819.750939][T25560] syz_tun: entered allmulticast mode [ 1820.208830][T25551] syz_tun: left allmulticast mode [ 1820.620511][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1820.620529][ T30] audit: type=1326 audit(1763499208.765:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25567 comm="syz.2.3745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 1820.714471][T25568] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3745'. [ 1820.975439][ T30] audit: type=1326 audit(1763499208.765:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25567 comm="syz.2.3745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 1821.070530][ T30] audit: type=1326 audit(1763499208.765:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25567 comm="syz.2.3745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 1821.138672][ T30] audit: type=1326 audit(1763499208.765:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25567 comm="syz.2.3745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 1821.344071][ T30] audit: type=1326 audit(1763499208.765:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25567 comm="syz.2.3745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 1821.400446][ T30] audit: type=1326 audit(1763499208.765:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25567 comm="syz.2.3745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 1821.631884][ T30] audit: type=1326 audit(1763499208.765:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25567 comm="syz.2.3745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 1821.654192][ T30] audit: type=1326 audit(1763499208.765:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25567 comm="syz.2.3745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 1821.676575][ T30] audit: type=1326 audit(1763499208.765:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25567 comm="syz.2.3745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 1821.906588][ T30] audit: type=1326 audit(1763499208.765:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25567 comm="syz.2.3745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 1821.989732][T25579] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3747'. [ 1823.234780][T25580] program syz.5.3746 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1823.327525][T25611] hub 1-0:1.0: USB hub found [ 1823.351611][T25611] hub 1-0:1.0: 1 port detected [ 1824.258746][T25625] syz_tun: entered allmulticast mode [ 1824.494413][T25621] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3754'. [ 1824.531769][T25626] libceph: resolve '0..' (ret=-3): failed [ 1825.041820][T25620] syz_tun: left allmulticast mode [ 1825.473884][T25640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3757'. [ 1825.789659][T25651] syz_tun: entered allmulticast mode [ 1826.445363][T25642] syz_tun: left allmulticast mode [ 1827.148857][T25664] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3764'. [ 1827.708173][T24557] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1827.770478][T25007] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 1827.937535][T25007] usb 6-1: config 0 has no interfaces? [ 1827.959970][T24557] usb 2-1: config 0 has no interfaces? [ 1827.968682][T25007] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1827.995889][T25007] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.004193][T24557] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1828.013855][T24557] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.033217][T25007] usb 6-1: Product: syz [ 1828.045667][T25007] usb 6-1: Manufacturer: syz [ 1828.059036][T24557] usb 2-1: Product: syz [ 1828.059045][T25007] usb 6-1: SerialNumber: syz [ 1828.069887][T25007] usb 6-1: config 0 descriptor?? [ 1828.171562][T24557] usb 2-1: Manufacturer: syz [ 1828.176242][T24557] usb 2-1: SerialNumber: syz [ 1828.198022][T24557] usb 2-1: config 0 descriptor?? [ 1828.474352][T25666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1828.494919][T25666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1828.650900][T25678] program syz.5.3765 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1829.522266][T25673] gtp0: entered promiscuous mode [ 1829.541217][T25666] veth0_vlan: left promiscuous mode [ 1829.553171][T25666] veth0_vlan: entered promiscuous mode [ 1830.148277][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1830.148296][ T30] audit: type=1326 audit(1763499218.295:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25690 comm="syz.0.3769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1830.220135][ T30] audit: type=1326 audit(1763499218.325:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25690 comm="syz.0.3769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1830.251471][ T30] audit: type=1326 audit(1763499218.325:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25690 comm="syz.0.3769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1830.274789][T25695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3769'. [ 1830.285156][ T30] audit: type=1326 audit(1763499218.325:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25690 comm="syz.0.3769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1830.312465][ T30] audit: type=1326 audit(1763499218.325:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25690 comm="syz.0.3769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1830.338374][ T30] audit: type=1326 audit(1763499218.335:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25690 comm="syz.0.3769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1830.361412][ T30] audit: type=1326 audit(1763499218.335:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25690 comm="syz.0.3769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1830.385587][ T30] audit: type=1326 audit(1763499218.335:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25690 comm="syz.0.3769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1830.408535][ T30] audit: type=1326 audit(1763499218.335:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25690 comm="syz.0.3769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1830.449921][T25696] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3768'. [ 1830.460018][ T30] audit: type=1326 audit(1763499218.335:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25690 comm="syz.0.3769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1830.503182][T25696] netlink: 320 bytes leftover after parsing attributes in process `syz.3.3768'. [ 1830.971079][T25702] syz_tun: entered allmulticast mode [ 1831.269078][ T5832] usb 2-1: USB disconnect, device number 92 [ 1831.706337][T25698] syz_tun: left allmulticast mode [ 1831.715591][ T24] usb 6-1: USB disconnect, device number 83 [ 1831.921732][T24557] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1832.111159][T24557] usb 1-1: Using ep0 maxpacket: 8 [ 1832.122627][T24557] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1832.136057][T24557] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1832.158381][T24557] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 1832.168695][T24557] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.184402][T24557] usb 1-1: config 0 descriptor?? [ 1832.202359][T24557] usbhid 1-1:0.0: can't add hid device: -22 [ 1832.211804][T24557] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 1832.573296][T25722] syz_tun: entered allmulticast mode [ 1832.907600][T25727] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3776'. [ 1833.211946][T25718] syz_tun: left allmulticast mode [ 1833.290459][T25007] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1833.506055][T25007] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1833.551526][T25007] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.564694][T25007] usb 6-1: Product: syz [ 1833.576596][T25007] usb 6-1: Manufacturer: syz [ 1833.584333][T25007] usb 6-1: SerialNumber: syz [ 1833.591607][T25007] usb 6-1: config 0 descriptor?? [ 1833.612933][T25007] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1834.037913][T25727] netdevsim netdevsim5: Firmware load for '../file0/file0' refused, path contains '..' component [ 1834.053677][T25007] input: sonixb as /devices/platform/dummy_hcd.5/usb6/6-1/input/input72 [ 1834.256664][T25007] usb 6-1: USB disconnect, device number 84 [ 1834.619752][T24557] usb 1-1: USB disconnect, device number 69 [ 1835.276935][T25759] binder: 25753:25759 ioctl c018620c 800002c0 returned -1 [ 1835.325454][T25756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3780'. [ 1835.380475][T25760] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3780'. [ 1835.431382][T25760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3780'. [ 1835.446776][T25007] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1835.644399][T25007] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1835.657200][T25007] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1835.705636][T25007] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1835.764144][T25007] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1835.787878][T25007] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.904267][T25007] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1835.923194][T25007] usb 6-1: invalid MIDI out EP 0 [ 1836.050927][T25007] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1836.236259][T25756] netlink: 320 bytes leftover after parsing attributes in process `syz.3.3780'. [ 1836.353546][T25751] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 1836.723411][T25769] loop6: detected capacity change from 0 to 524287999 [ 1838.151739][T25787] netlink: 320 bytes leftover after parsing attributes in process `syz.3.3786'. [ 1838.469066][T24557] usb 6-1: USB disconnect, device number 85 [ 1838.756476][T25799] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3789'. [ 1838.775752][T25799] netlink: 320 bytes leftover after parsing attributes in process `syz.5.3789'. [ 1841.174038][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1841.174053][ T30] audit: type=1326 audit(1763499229.295:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25828 comm="syz.3.3796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1841.218717][ T30] audit: type=1326 audit(1763499229.305:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25828 comm="syz.3.3796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1841.270238][ T30] audit: type=1326 audit(1763499229.305:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25828 comm="syz.3.3796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1841.326526][T25832] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3796'. [ 1841.341614][ T30] audit: type=1326 audit(1763499229.305:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25828 comm="syz.3.3796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1841.391528][ T30] audit: type=1326 audit(1763499229.305:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25828 comm="syz.3.3796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1841.443385][ T30] audit: type=1326 audit(1763499229.395:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25828 comm="syz.3.3796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1841.495027][ T30] audit: type=1326 audit(1763499229.405:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25828 comm="syz.3.3796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1841.532774][ T30] audit: type=1326 audit(1763499229.405:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25828 comm="syz.3.3796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1841.609633][ T30] audit: type=1326 audit(1763499229.525:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25828 comm="syz.3.3796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1841.695281][ T30] audit: type=1326 audit(1763499229.525:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25828 comm="syz.3.3796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1841.958471][T25840] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3797'. [ 1842.235104][T25840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3797'. [ 1842.930456][T25007] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 1843.378452][T25007] usb 2-1: config 0 has no interfaces? [ 1843.399651][T25007] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1843.408978][T25007] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.417469][T25007] usb 2-1: Product: syz [ 1843.421979][T25007] usb 2-1: Manufacturer: syz [ 1843.426694][T25007] usb 2-1: SerialNumber: syz [ 1843.436436][T25007] usb 2-1: config 0 descriptor?? [ 1845.142428][T25878] netlink: 320 bytes leftover after parsing attributes in process `syz.0.3804'. [ 1845.800995][T25007] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1845.972208][T25007] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1845.989310][T25007] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1845.999807][T25007] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1846.008308][T25007] usb 4-1: Manufacturer: syz [ 1846.029214][T25007] usb 4-1: config 0 descriptor?? [ 1846.072677][ T5832] usb 2-1: USB disconnect, device number 93 [ 1846.194012][T25007] rc_core: IR keymap rc-hauppauge not found [ 1846.200706][T25007] Registered IR keymap rc-empty [ 1846.207144][T25007] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1846.245021][T25007] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input74 [ 1846.302416][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 1846.514722][T25896] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3807'. [ 1846.528719][T25896] netlink: 320 bytes leftover after parsing attributes in process `syz.1.3807'. [ 1846.982291][T25855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1847.093528][T25855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1847.713795][T24557] usb 4-1: USB disconnect, device number 80 [ 1852.442068][T25959] program syz.2.3817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1853.103899][T25963] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1853.233967][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.240808][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1855.035356][T25996] program syz.1.3823 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1855.500635][T25995] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3826'. [ 1855.552545][T25995] netlink: 320 bytes leftover after parsing attributes in process `syz.3.3826'. [ 1857.222294][T26026] tipc: Enabled bearer , priority 10 [ 1857.269663][T26013] program syz.1.3829 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1858.515088][T26045] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3834'. [ 1860.333239][T26061] program syz.0.3838 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1861.530192][T26079] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3842'. [ 1861.578107][T26081] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3843'. [ 1861.880703][T25007] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1861.941588][T24557] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1862.043893][T25007] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1862.054070][T25007] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.096014][T25007] usb 4-1: Product: syz [ 1862.101380][T25007] usb 4-1: Manufacturer: syz [ 1862.108447][T24557] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1862.121971][T24557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.122516][T25007] usb 4-1: SerialNumber: syz [ 1862.129988][T24557] usb 3-1: Product: syz [ 1862.130007][T24557] usb 3-1: Manufacturer: syz [ 1862.130021][T24557] usb 3-1: SerialNumber: syz [ 1862.169592][T24557] usb 3-1: config 0 descriptor?? [ 1862.195777][T24557] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1862.240797][T25007] usb 4-1: config 0 descriptor?? [ 1862.249038][T25007] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1862.614861][T26079] netdevsim netdevsim2: Firmware load for '../file0/file0' refused, path contains '..' component [ 1862.647207][T24557] sonixb 3-1:0.0: Error writing register 01: -71 [ 1862.655082][T24557] sonixb 3-1:0.0: probe with driver sonixb failed with error -71 [ 1862.676684][T24557] usb 3-1: USB disconnect, device number 85 [ 1862.713670][T25007] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input75 [ 1862.829950][T26089] syz_tun: entered allmulticast mode [ 1863.052968][T25007] usb 4-1: USB disconnect, device number 81 [ 1863.328385][T26084] syz_tun: left allmulticast mode [ 1864.278921][T26110] netlink: 320 bytes leftover after parsing attributes in process `syz.1.3848'. [ 1864.900465][T26103] program syz.5.3847 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1865.603017][T26121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3850'. [ 1866.068613][T26112] tipc: Resetting bearer [ 1866.402807][T26130] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3851'. [ 1866.417547][T26130] netlink: 320 bytes leftover after parsing attributes in process `syz.5.3851'. [ 1867.642317][T26141] fuse: Bad value for 'fd' [ 1867.696375][T26139] fuse: Bad value for 'fd' [ 1871.806046][T26191] program syz.1.3858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1871.911332][T26189] syz.2.3863 (26189): drop_caches: 2 [ 1872.361438][T13472] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1872.601467][T13472] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1872.641513][T13472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.675746][T13472] usb 4-1: Product: syz [ 1872.681612][T13472] usb 4-1: Manufacturer: syz [ 1872.686463][T13472] usb 4-1: SerialNumber: syz [ 1872.697914][T13472] usb 4-1: config 0 descriptor?? [ 1872.712312][T13472] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1873.192782][T26194] netdevsim netdevsim3: Firmware load for '../file0/file0' refused, path contains '..' component [ 1873.220910][T26210] program syz.0.3861 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1873.408812][T13472] sonixb 4-1:0.0: Error writing register 01: -71 [ 1873.419485][T13472] sonixb 4-1:0.0: probe with driver sonixb failed with error -71 [ 1873.451522][T13472] usb 4-1: USB disconnect, device number 82 [ 1874.400965][ T5832] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 1874.784662][T26231] syz_tun: entered allmulticast mode [ 1875.138261][T26240] netlink: 'syz.3.3870': attribute type 2 has an invalid length. [ 1875.233590][ T5832] usb 1-1: config 0 has no interfaces? [ 1875.375535][ T5832] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1875.427300][T26222] syz_tun: left allmulticast mode [ 1875.440529][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.461677][ T5832] usb 1-1: Product: syz [ 1875.465991][ T5832] usb 1-1: Manufacturer: syz [ 1875.472732][ T5832] usb 1-1: SerialNumber: syz [ 1875.488485][ T5832] usb 1-1: config 0 descriptor?? [ 1876.657396][T26256] syz_tun: entered allmulticast mode [ 1877.277298][T26259] program syz.5.3871 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1877.286061][T26248] syz_tun: left allmulticast mode [ 1877.353992][T26257] program syz.2.3876 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1878.452605][ T5832] usb 1-1: USB disconnect, device number 70 [ 1879.072165][T26279] program syz.5.3879 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1879.336289][T26285] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3882'. [ 1879.654672][T26289] program syz.2.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1879.881305][T13472] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1879.926254][T26290] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3880'. [ 1879.938041][T26290] netlink: 320 bytes leftover after parsing attributes in process `syz.0.3880'. [ 1880.045740][T13472] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1880.072060][T13472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1880.102469][T13472] usb 4-1: Product: syz [ 1880.106767][T13472] usb 4-1: Manufacturer: syz [ 1880.157420][T13472] usb 4-1: SerialNumber: syz [ 1880.171889][T13472] usb 4-1: config 0 descriptor?? [ 1880.195014][T13472] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1880.622942][T13472] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input76 [ 1881.724013][T13472] usb 4-1: USB disconnect, device number 83 [ 1885.064704][T26350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3894'. [ 1885.104370][T26350] netlink: 320 bytes leftover after parsing attributes in process `syz.2.3894'. [ 1885.610089][T26365] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3896'. [ 1885.797857][T26361] netlink: 320 bytes leftover after parsing attributes in process `syz.0.3896'. [ 1886.259541][T26375] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3900'. [ 1886.611364][T13472] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1886.987822][T13472] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1887.081614][T13472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.102218][T26391] program syz.5.3897 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1887.172407][T13472] usb 4-1: Product: syz [ 1887.184278][T13472] usb 4-1: Manufacturer: syz [ 1887.224868][T13472] usb 4-1: SerialNumber: syz [ 1887.276427][T13472] usb 4-1: config 0 descriptor?? [ 1887.369450][T13472] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1887.904062][T13472] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input77 [ 1888.108392][T13472] usb 4-1: USB disconnect, device number 84 [ 1888.699933][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1888.699946][ T30] audit: type=1326 audit(1763499276.845:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26401 comm="syz.5.3906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1888.792962][ T30] audit: type=1326 audit(1763499276.845:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26401 comm="syz.5.3906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1888.901370][ T30] audit: type=1326 audit(1763499276.845:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26401 comm="syz.5.3906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1888.906410][T26411] bridge3: entered promiscuous mode [ 1888.947874][ T30] audit: type=1326 audit(1763499276.845:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26401 comm="syz.5.3906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1889.050186][ T30] audit: type=1326 audit(1763499276.845:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26401 comm="syz.5.3906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1889.280464][ T30] audit: type=1326 audit(1763499276.845:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26401 comm="syz.5.3906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1889.358472][ T30] audit: type=1326 audit(1763499276.845:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26401 comm="syz.5.3906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1889.406392][ T30] audit: type=1326 audit(1763499276.845:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26401 comm="syz.5.3906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1889.467635][ T30] audit: type=1326 audit(1763499276.845:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26401 comm="syz.5.3906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1889.592214][ T30] audit: type=1326 audit(1763499276.845:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26401 comm="syz.5.3906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1891.345689][T26446] netlink: 320 bytes leftover after parsing attributes in process `syz.1.3912'. [ 1891.500902][T26439] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3910'. [ 1891.756269][T26445] netlink: 320 bytes leftover after parsing attributes in process `syz.3.3910'. [ 1893.502164][T26466] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3916'. [ 1893.719936][T26470] netlink: 320 bytes leftover after parsing attributes in process `syz.3.3916'. [ 1896.508351][T26499] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3924'. [ 1896.771532][T13472] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1896.871469][ T24] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1896.942534][T13472] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1896.952161][T13472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.971347][T13472] usb 2-1: Product: syz [ 1896.991056][T13472] usb 2-1: Manufacturer: syz [ 1897.001478][T13472] usb 2-1: SerialNumber: syz [ 1897.042538][T13472] usb 2-1: config 0 descriptor?? [ 1897.060277][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1897.074405][ T24] usb 3-1: config 0 has an invalid interface number: 247 but max is 0 [ 1897.125479][T13472] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1897.132899][ T24] usb 3-1: config 0 has no interface number 0 [ 1897.142313][ T24] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1897.153682][ T24] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1897.171708][ T24] usb 3-1: Product: syz [ 1897.177240][ T24] usb 3-1: Manufacturer: syz [ 1897.213684][ T24] usb 3-1: config 0 descriptor?? [ 1897.473750][T13472] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input78 [ 1897.824905][T13472] usb 2-1: USB disconnect, device number 94 [ 1898.768941][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 1898.768954][ T30] audit: type=1326 audit(1763499286.915:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26519 comm="syz.3.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1898.812158][ T30] audit: type=1326 audit(1763499286.965:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26519 comm="syz.3.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1898.835972][ T30] audit: type=1326 audit(1763499286.985:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26519 comm="syz.3.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1898.901691][ T30] audit: type=1326 audit(1763499287.025:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26519 comm="syz.3.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1898.938567][ T30] audit: type=1326 audit(1763499287.025:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26519 comm="syz.3.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1898.963347][T26525] pim6reg: entered allmulticast mode [ 1898.971248][ T30] audit: type=1326 audit(1763499287.025:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26519 comm="syz.3.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1898.995337][ T30] audit: type=1326 audit(1763499287.025:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26519 comm="syz.3.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1898.999766][T26525] pim6reg: left allmulticast mode [ 1899.029679][ T30] audit: type=1326 audit(1763499287.175:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26519 comm="syz.3.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1899.097296][ T30] audit: type=1326 audit(1763499287.175:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26519 comm="syz.3.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1899.206884][T13472] usb 3-1: USB disconnect, device number 86 [ 1899.222521][ T30] audit: type=1326 audit(1763499287.175:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26519 comm="syz.3.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1899.562465][T26541] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3932'. [ 1899.593777][T26541] netlink: 320 bytes leftover after parsing attributes in process `syz.5.3932'. [ 1900.991138][T25006] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1901.145061][T25006] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1901.180238][T25006] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1901.195427][T26562] fuse: Bad value for 'fd' [ 1901.213455][T25006] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1901.222929][T25006] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1901.231411][T25006] usb 6-1: Product: syz [ 1901.235692][T25006] usb 6-1: Manufacturer: syz [ 1901.241326][T25006] usb 6-1: SerialNumber: syz [ 1901.247740][T25006] usb 6-1: config 0 descriptor?? [ 1901.906016][T13472] usb 6-1: USB disconnect, device number 86 [ 1902.369380][T26570] bond5: Unable to set down delay as MII monitoring is disabled [ 1902.410387][T26570] bond5 (unregistering): Released all slaves [ 1903.075711][T26582] netlink: 320 bytes leftover after parsing attributes in process `syz.0.3939'. [ 1906.494543][T26623] netdevsim netdevsim5: Direct firmware load for . [ 1906.494543][T26623] failed with error -2 [ 1906.506955][T26623] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1906.506955][T26623] [ 1908.866084][T26652] netlink: 320 bytes leftover after parsing attributes in process `syz.3.3951'. [ 1909.177365][T26661] netlink: 320 bytes leftover after parsing attributes in process `syz.2.3952'. [ 1909.778602][T26667] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3957'. [ 1910.041032][T13472] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1910.215183][T13472] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1910.282187][T13472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1910.302023][T26674] netlink: 320 bytes leftover after parsing attributes in process `syz.2.3958'. [ 1910.356075][T13472] usb 6-1: Product: syz [ 1910.362010][T13472] usb 6-1: Manufacturer: syz [ 1910.366784][T13472] usb 6-1: SerialNumber: syz [ 1910.452490][T13472] usb 6-1: config 0 descriptor?? [ 1910.549625][T13472] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1910.963500][T26667] netdevsim netdevsim5: Direct firmware load for ut/event# failed with error -2 [ 1910.973521][T26667] netdevsim netdevsim5: Falling back to sysfs fallback for: ut/event# [ 1911.015972][T13472] input: sonixb as /devices/platform/dummy_hcd.5/usb6/6-1/input/input79 [ 1912.852958][T13472] usb 6-1: USB disconnect, device number 87 [ 1913.434323][T26715] program syz.0.3965 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1914.013841][T26727] netlink: 320 bytes leftover after parsing attributes in process `syz.2.3968'. [ 1914.125658][T26728] netlink: 320 bytes leftover after parsing attributes in process `syz.5.3969'. [ 1914.701212][ T31] INFO: task kworker/0:2:16456 blocked for more than 143 seconds. [ 1914.720845][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.727268][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.791123][ T31] Not tainted syzkaller #0 [ 1914.807138][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1914.831908][ T31] task:kworker/0:2 state:D stack:20616 pid:16456 tgid:16456 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1914.875233][ T31] Workqueue: usb_hub_wq hub_event [ 1914.903688][ T31] Call Trace: [ 1914.926172][ T31] [ 1914.938257][ T31] __schedule+0x1798/0x4cc0 [ 1914.953323][ T31] ? __pfx___schedule+0x10/0x10 [ 1914.971119][ T31] ? schedule+0x91/0x360 [ 1914.980957][ T31] schedule+0x165/0x360 [ 1914.991769][ T31] schedule_preempt_disabled+0x13/0x30 [ 1915.014952][ T31] __mutex_lock+0x7e6/0x1350 [ 1915.024440][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1915.040747][ T31] ? hub_event+0x21e5/0x4a20 [ 1915.045478][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1915.075599][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1915.083364][ T31] hub_event+0x21e5/0x4a20 [ 1915.087984][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1915.101762][ T31] ? __pfx_hub_event+0x10/0x10 [ 1915.107897][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1915.123372][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1915.128750][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1915.135605][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1915.142299][ T31] process_scheduled_works+0xae1/0x17b0 [ 1915.148101][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1915.155116][ T31] worker_thread+0x8a0/0xda0 [ 1915.159917][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1915.167544][ T31] ? __kthread_parkme+0x7b/0x200 [ 1915.173698][ T31] kthread+0x711/0x8a0 [ 1915.177950][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1915.189458][ T31] ? __pfx_kthread+0x10/0x10 [ 1915.197124][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1915.204810][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1915.211382][ T31] ? __pfx_kthread+0x10/0x10 [ 1915.217276][ T31] ret_from_fork+0x4bc/0x870 [ 1915.223766][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1915.231526][ T31] ? __switch_to_asm+0x39/0x70 [ 1915.238835][ T31] ? __switch_to_asm+0x33/0x70 [ 1915.245692][ T31] ? __pfx_kthread+0x10/0x10 [ 1915.252222][ T31] ret_from_fork_asm+0x1a/0x30 [ 1915.274010][ T31] [ 1915.282022][ T31] [ 1915.282022][ T31] Showing all locks held in the system: [ 1915.293388][ T31] 1 lock held by khungtaskd/31: [ 1915.301220][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1915.316451][ T31] 2 locks held by getty/5588: [ 1915.328902][ T31] #0: ffff88802fc960a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1915.362516][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1915.426715][ T31] 5 locks held by kworker/1:3/5824: [ 1915.441562][ T31] #0: ffff888144abf548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1915.470443][ T31] #1: ffffc900040e7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1915.482674][ T31] #2: ffff888145bee198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1915.492085][ T31] #3: ffff888145f41518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 1915.502428][ T31] #4: ffff8881457db968 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 1915.512578][ T31] 5 locks held by kworker/1:4/5870: [ 1915.517872][ T31] #0: ffff888144abf548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1915.529404][ T31] #1: ffffc90004707ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1915.541722][ T31] #2: ffff888145b8c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1915.550961][ T31] #3: ffff888145b8f518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 1915.561365][ T31] #4: ffff888027415968 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 1915.571532][ T31] 5 locks held by kworker/0:2/16456: [ 1915.576866][ T31] #0: ffff888144abf548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1915.588551][ T31] #1: ffffc9000c95fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1915.600828][ T31] #2: ffff888028a81198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1915.609962][ T31] #3: ffff888028ad1518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 1915.620810][ T31] #4: ffff888027415968 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 1915.631026][ T31] 8 locks held by kworker/u8:1/25597: [ 1915.636429][ T31] 2 locks held by syz.0.3965/26710: [ 1915.641821][ T31] 1 lock held by syz.1.3970/26730: [ 1915.646969][ T31] #0: ffff88805b736988 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1915.657582][ T31] 1 lock held by syz.1.3970/26732: [ 1915.663304][ T31] 2 locks held by dhcpcd/26734: [ 1915.668486][ T31] #0: ffff88805b730d88 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1915.678802][ T31] #1: ffffffff8df43178 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1915.690017][ T31] 2 locks held by dhcpcd/26735: [ 1915.694953][ T31] #0: ffff888078e48260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 1915.704937][ T31] #1: ffffffff8df43178 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1915.719397][ T31] [ 1915.723796][ T31] ============================================= [ 1915.723796][ T31] [ 1915.732977][ T31] NMI backtrace for cpu 0 [ 1915.732988][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1915.733001][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1915.733007][ T31] Call Trace: [ 1915.733012][ T31] [ 1915.733017][ T31] dump_stack_lvl+0x189/0x250 [ 1915.733038][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1915.733052][ T31] ? __pfx__printk+0x10/0x10 [ 1915.733070][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1915.733084][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1915.733097][ T31] ? __pfx__printk+0x10/0x10 [ 1915.733110][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1915.733128][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1915.733141][ T31] watchdog+0xf60/0xfa0 [ 1915.733155][ T31] ? watchdog+0x1e2/0xfa0 [ 1915.733168][ T31] kthread+0x711/0x8a0 [ 1915.733183][ T31] ? __pfx_watchdog+0x10/0x10 [ 1915.733193][ T31] ? __pfx_kthread+0x10/0x10 [ 1915.733207][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1915.733221][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1915.733235][ T31] ? __pfx_kthread+0x10/0x10 [ 1915.733248][ T31] ret_from_fork+0x4bc/0x870 [ 1915.733261][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1915.733274][ T31] ? __switch_to_asm+0x39/0x70 [ 1915.733283][ T31] ? __switch_to_asm+0x33/0x70 [ 1915.733291][ T31] ? __pfx_kthread+0x10/0x10 [ 1915.733304][ T31] ret_from_fork_asm+0x1a/0x30 [ 1915.733321][ T31] [ 1915.733326][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1915.879327][ C1] NMI backtrace for cpu 1 [ 1915.879357][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1915.879377][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1915.879389][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1915.879417][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 b1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1915.879432][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1915.879448][ C1] RAX: 5c0aff4c7c757f00 RBX: ffffffff81967b47 RCX: 5c0aff4c7c757f00 [ 1915.879462][ C1] RDX: 0000000000000001 RSI: ffffffff8d70e34e RDI: ffffffff8bbf08e0 [ 1915.879474][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 1915.879487][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7ced70 [ 1915.879500][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d3b58 [ 1915.879512][ C1] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 1915.879533][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1915.879545][ C1] CR2: 000055bc1ab144b0 CR3: 0000000077472000 CR4: 00000000003526f0 [ 1915.879560][ C1] Call Trace: [ 1915.879569][ C1] [ 1915.879577][ C1] default_idle+0x13/0x20 [ 1915.879594][ C1] default_idle_call+0x73/0xb0 [ 1915.879611][ C1] do_idle+0x1e7/0x510 [ 1915.879633][ C1] ? __pfx_do_idle+0x10/0x10 [ 1915.879659][ C1] cpu_startup_entry+0x44/0x60 [ 1915.879677][ C1] start_secondary+0x101/0x110 [ 1915.879707][ C1] common_startup_64+0x13e/0x147 [ 1915.879738][ C1]