last executing test programs: 14m57.843936321s ago: executing program 4 (id=66): stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000bc0)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @broadcast}}, 0x24) r4 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5803, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r8}, 0x14) madvise(&(0x7f00005b5000/0x2000)=nil, 0x2000, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000180)) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r9, 0x10001, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000004d63300000000000000000000000000ffff0a0101019e30000000000000060000000000000000080000000000000200000000000000010000000000008001000000000000006e0000000000000008000000000000000100000000000000030000000000000001800000000000000700000000000000040000000f0000000300000027bd7000073500000a00010d220000000000000000000000000100001c000400ffff4e214e260000e000000200"/204], 0x238}, 0x1, 0x0, 0x0, 0x80}, 0x4000) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x80003519, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 14m55.939893313s ago: executing program 4 (id=74): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)={0x0, 0x0, 0x9, {0x9, 0x0, "2a53fb8991f8e0"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0x9}, @main=@item_012={0x2, 0x0, 0xb, "c15f"}, @local=@item_012={0x2, 0x2, 0x8, "ce0e"}, @local=@item_012={0x2, 0x2, 0x3, "f39c"}, @main=@item_4={0x3, 0x0, 0xc, "11dbbf07"}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002480), 0x0, 0x404) 14m53.565527176s ago: executing program 4 (id=80): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x4000, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000160000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 14m52.933352609s ago: executing program 4 (id=83): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') fremovexattr(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000f8ff0000000000000000"]) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'vlan1\x00'}}, 0x1e) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800a4c0ad6aa787c7cc000002060500000000000000000000000000050004000000d78fc888020073797a3100000000140007800500150029000000080012400000002f050005000200000005000100060000000c000300686173683a697000d300414c6f49d747947afc86c93c10398ee10a4f5f9c543d7fea0f1207167ded4a8b57e2458f2ae806c19cb5403e5b5acebeb1e2d80d8c2a4e322338f9d0caaa16419d7ee81ebb5fde3180c4b2afe5e3d89c3b4b153cf1618e0e72702ea2dada3c98e50b07de29544c93894b5551a6a8e10a4814c0768e7345849665aa443f5f55ca8ec9c6d2669e"], 0x58}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2810, 0x0, 0x0, 0x0, {{0x10, 0x4, 0x0, 0x5, 0x40, 0x66, 0x0, 0x7, 0x2f, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0xf5, 0x3, 0x4, [{@multicast1, 0xfffffffb}, {@remote, 0x10000}, {@remote, 0x4}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3}]}]}}}}}) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f00000001c0)={0x18, 0x0, {0x1, @local, 'wg0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x3, @random="b2a5a2261824", 'veth0_to_batadv\x00'}}, 0x1e) 14m50.774311527s ago: executing program 4 (id=94): io_setup(0xfff, &(0x7f0000000000)=0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8) r2 = eventfd2(0x8, 0x1) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)) r4 = syz_io_uring_setup(0x6f13, &(0x7f0000000280)={0x0, 0x6636, 0x10100, 0x2, 0x38b}, &(0x7f0000001580)=0x0, &(0x7f0000000040)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_LINKAT={0x27, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, r7}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r11, {0x1, 0xb}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x800) io_submit(r0, 0x1, &(0x7f0000001840)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa, r1, 0x0, 0x0, 0x4, 0x0, 0x1, r2}]) 14m50.045376097s ago: executing program 4 (id=99): r0 = syz_open_dev$loop(&(0x7f0000000540), 0x4, 0x2) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000600)={'\x00', 0x81, 0x10001, 0xfff, 0x9, 0x8}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000001280)=ANY=[@ANYRES16=r0], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) socket$isdn(0x22, 0x3, 0x21) socket$pppoe(0x18, 0x1, 0x0) pipe2(&(0x7f0000000180), 0x4880) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000009c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010100}, @IFLA_VTI_REMOTE={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2f}}, @IFLA_VTI_LOCAL={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x58840}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000140)={0x1, 'ip6tnl0\x00', {}, 0x7ff}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9b0950, 0x0, '\x00', @ptr=0x8}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x9c, &(0x7f0000000840)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "fde9e2", 0x66, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @local}, {[], "c004f375623c331caf754132e78f1d4438bdc2d1b3def82ef01c11b4f896942aa14427591a294a7aed74f0ddd6a61d06392bc3dea9e7c1200b555bb6209870e86a8d6a128ca9ba37c365dfbba68a4c4e185b48d904202e84bcfe92303078017066d600000000"}}}}}, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x101002) writev(r5, &(0x7f0000000540)=[{&(0x7f00000007c0)="03e6b107e445a7d8276efefff13dfeff50e9d3d14a90a55ec1b3726eb4c0838db63c3594182fdcdf2fcc333c99c565920c0ac34bb23dcf42331c75af98c268be29e63fe7c43ee3825d016e37c073d8ca", 0x50}, {&(0x7f0000000300)="a4", 0x1}, {&(0x7f0000000640)="c35cae255f560718fd89dfd92a4c9aa1b53c151f6f57ec01afa574fa29846fb39c293c826bf1e6b28cff1749f6c76806cff16c096fea098694bbfdf2b5761ddfafd7be30c45b44ea565e4b2dd6b2561a0b0e2587f26bf53d90f5c7a05025e3e0614b24a7b66a49c621a3ec09630fe1e201000000b226fee50bbd1965780da36e56d9231951b0734fe951538f117da22419c3fd067dc9131ad49c4d38babe", 0x9e}, {&(0x7f00000003c0)="00008287334aec085cd2b31681554c0bc55254e3cc223af9d1be", 0x1a}, {&(0x7f0000000100)="6de7000018f973826fb4fc42bcce2f52e8a318536a2061", 0x17}, {&(0x7f0000000140)}], 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a3100"], 0xc8}}, 0x0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x62, 0x1, 0x3031334d, 0x3, 0xa, [{0x3, 0x6}, {0x2, 0x2}, {0x3, 0x411}, {0x10001, 0x8}, {0x6, 0x8}, {0x4, 0xd}, {0x8, 0xfffffff8}, {0x5, 0x1}], 0xc, 0x2, 0x1, 0x0, 0x2}}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) 14m34.397087173s ago: executing program 32 (id=99): r0 = syz_open_dev$loop(&(0x7f0000000540), 0x4, 0x2) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000600)={'\x00', 0x81, 0x10001, 0xfff, 0x9, 0x8}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000001280)=ANY=[@ANYRES16=r0], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) socket$isdn(0x22, 0x3, 0x21) socket$pppoe(0x18, 0x1, 0x0) pipe2(&(0x7f0000000180), 0x4880) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000009c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010100}, @IFLA_VTI_REMOTE={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2f}}, @IFLA_VTI_LOCAL={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x58840}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000140)={0x1, 'ip6tnl0\x00', {}, 0x7ff}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9b0950, 0x0, '\x00', @ptr=0x8}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x9c, &(0x7f0000000840)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "fde9e2", 0x66, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @local}, {[], "c004f375623c331caf754132e78f1d4438bdc2d1b3def82ef01c11b4f896942aa14427591a294a7aed74f0ddd6a61d06392bc3dea9e7c1200b555bb6209870e86a8d6a128ca9ba37c365dfbba68a4c4e185b48d904202e84bcfe92303078017066d600000000"}}}}}, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x101002) writev(r5, &(0x7f0000000540)=[{&(0x7f00000007c0)="03e6b107e445a7d8276efefff13dfeff50e9d3d14a90a55ec1b3726eb4c0838db63c3594182fdcdf2fcc333c99c565920c0ac34bb23dcf42331c75af98c268be29e63fe7c43ee3825d016e37c073d8ca", 0x50}, {&(0x7f0000000300)="a4", 0x1}, {&(0x7f0000000640)="c35cae255f560718fd89dfd92a4c9aa1b53c151f6f57ec01afa574fa29846fb39c293c826bf1e6b28cff1749f6c76806cff16c096fea098694bbfdf2b5761ddfafd7be30c45b44ea565e4b2dd6b2561a0b0e2587f26bf53d90f5c7a05025e3e0614b24a7b66a49c621a3ec09630fe1e201000000b226fee50bbd1965780da36e56d9231951b0734fe951538f117da22419c3fd067dc9131ad49c4d38babe", 0x9e}, {&(0x7f00000003c0)="00008287334aec085cd2b31681554c0bc55254e3cc223af9d1be", 0x1a}, {&(0x7f0000000100)="6de7000018f973826fb4fc42bcce2f52e8a318536a2061", 0x17}, {&(0x7f0000000140)}], 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a3100"], 0xc8}}, 0x0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x62, 0x1, 0x3031334d, 0x3, 0xa, [{0x3, 0x6}, {0x2, 0x2}, {0x3, 0x411}, {0x10001, 0x8}, {0x6, 0x8}, {0x4, 0xd}, {0x8, 0xfffffff8}, {0x5, 0x1}], 0xc, 0x2, 0x1, 0x0, 0x2}}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) 8m0.474839365s ago: executing program 1 (id=1555): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000021c0)={0x2, &(0x7f0000002180)=[{0x64, 0x0, 0x0, 0x1}, {0x6}]}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) preadv2(r0, &(0x7f0000000100), 0x0, 0x6, 0x0, 0x8b836ff951b70adf) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'pimreg1\x00', @broadcast}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000000600000000004730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 7m59.420228533s ago: executing program 1 (id=1559): r0 = socket$inet6(0xa, 0x3, 0x26) syz_emit_vhci(&(0x7f00000012c0)=ANY=[@ANYBLOB="04221fffff0f05068c207406000200"/34], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x80, 0xc9}}}, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x6) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@rand_addr=' \x01\x00', 0x4e20, 0x0, 0x4e22, 0x3, 0xa}, {0x8, 0x0, 0x0, 0x200000000002f1b, 0xfffffffffffffffe, 0x0, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in6=@empty, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0xd4}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/143, 0x8f) 7m59.222950095s ago: executing program 1 (id=1562): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@migrate={0xec, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote}}, [@migrate={0x9c, 0x11, [{@in=@empty, @in=@private=0xa010100, @in=@multicast2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010100, @in6=@remote, @in6=@mcast2, 0x33, 0x2, 0x0, 0x0, 0xa, 0xa}]}]}, 0xec}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x41de, 0xfffffffe, 0xfffffff8}, 0x10) write(r1, &(0x7f0000000040)="240000001e005f0214fffffffffffff80700000001000000000000000500090002000000", 0x24) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = epoll_create(0x2f48) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)={0x2000000a}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000000}, 0x4c000) ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x6, &(0x7f0000000140)={0x35, 0xffff, 0xdc83}) 7m57.364043211s ago: executing program 1 (id=1567): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x20000000) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x3, [], [0x10]}) r6 = userfaultfd(0x80800) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x412}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x5, 0xed, 0x20b1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1201000000000040c50f80b0000000000001090224000100000000090400000100000921000000012203000905810300000000000000"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)={0x40, 0x21, 0x3e, {0x3e, 0x23, "b9e4880a9ff78b6ee52a29a7932432d3a594ee97f4a858b2d05ffbc2f27e69f02b1b7865d2ad4c5bd86107e41c1010b96e3d82b019ef8d81e736bdff"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0}) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x84, &(0x7f0000000000)={r10, @in={{0x2, 0x0, @empty}}, 0x100}, 0x90) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0xa2}, &(0x7f0000000200)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571103f00000000006600000003800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 7m52.588179009s ago: executing program 1 (id=1575): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x5}}, @qdisc_kind_options=@q_blackhole={0xe}]}, 0x3c}}, 0x4000010) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_deladdr={0x58, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x60, 0xc8, r4}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xffffffff}, @IFA_LOCAL={0x14, 0x2, @local}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r9 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r9, &(0x7f0000000d80)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x10001}, 0x80, 0x0}, 0x20000800) sendmsg$kcm(r9, &(0x7f0000000580)={&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @dev}, 0x18, 0x0}, 0x20000804) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7m51.608101787s ago: executing program 1 (id=1581): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r1, 0x8100, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @empty, 0xbff}, @ib={0x1b, 0xd9, 0xfff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x8, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) close_range(r0, r0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x9, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000140)=0x7) accept4(r2, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xeca3, 0x8, 0x2, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/224, 0xe0}], 0x1}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r7 = getpgrp(0x0) syz_pidfd_open(r7, 0x0) waitid(0x1, r7, 0x0, 0x1000000, &(0x7f0000000240)) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7m36.511636705s ago: executing program 33 (id=1581): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r1, 0x8100, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @empty, 0xbff}, @ib={0x1b, 0xd9, 0xfff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x8, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) close_range(r0, r0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x9, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000140)=0x7) accept4(r2, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xeca3, 0x8, 0x2, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/224, 0xe0}], 0x1}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r7 = getpgrp(0x0) syz_pidfd_open(r7, 0x0) waitid(0x1, r7, 0x0, 0x1000000, &(0x7f0000000240)) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m31.691849775s ago: executing program 0 (id=2858): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x73, &(0x7f00000000c0)=@can, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x20, r9, 0x333, 0x0, 0x4, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) io_setup(0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80001, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000002480)={'ip6_vti0\x00', &(0x7f0000002400)={'syztnl2\x00', 0x0, 0x4, 0x81, 0x0, 0xc4b, 0x77, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x57, 0x7, 0x4c}}) sendmmsg(r7, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@l2={0x1f, 0x9d5c, @any, 0x6, 0x1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)="15bfac3f3c1b33f33af46ebdb35ac511d28c63fd6238c64d90beb52731b18596e0934f795da724e45ad769bae2bd54dfbd568961d09e1bb2609dac10599612cc04a9d8d6a5ceb3feca80889eeb2fbf7d673bf24d4ec86248022b7f434aba0296d2eae8d9db4a39d3adac266a39de76e068b42efe445601100a0dbb9399ed76878c60654b27e24851b6b4ccbbd1fee2", 0x8f}], 0x1, &(0x7f0000000580)=[{0xc8, 0x0, 0x8, "5cdfff01a3a23f142599c7f50470e771c787b30f3c4e9f6769cdaf92bf8bec1d225df3870f42de1245d26deee19ec01d072ca11b94b74536fad74645dcc36c1b84dfe7a930c370e3aca1d435e1e9fc0654ebf4574b4d58d39498576f52e4725a2930bc2798603e922629f1f682bdcbd78bf9247b67c2dc9da8cee69e10ce5957d5b88aab2dabe30b64815c339f12e9dbf20678866ce4b1768dbef4bb9f5ac6e97f726799d89f7d2b1de8230fb61e73f49d"}, {0x80, 0x112, 0x4, "2afdf93075da215dbe51451ad018e996629baa0daf8b2af22ccec67db22b764f6b6d6be47fd43284786f0f236a83348b028de78a1249b79f69968162603621c4b0ca5433b9e4d47c428348f2053adef567e7c563de78d90b831bafe4f12272e6cb90edda5ba3e32fabe9"}, {0xa0, 0x17, 0x9, "e88cd4f560e02e87d8015cb5450e9a8726bba669689964dca94bca50609a692dc36d1bc70f0be34fee397256db502f9630257da97f9f7e81367b88d2b9755c9ef6bed267737577a9e43b2d7025981f23a26990ed37f7409472b46392173939cd789b9193dc75516082e8bd5928faf11656cd632904ac32a5206da5b8131d434f0844a0ce24da0c68d715"}, {0xb8, 0x116, 0xb35, "1e6bb7e4d0a0322f4ab4437c08df37272150d13f6010c0d2c01d40db594f5aa943d625c63c291142cff971f3089fe7eca039f7e3a95c84a4126e57082eea1f8e3053f31fe9a452e37d769541ce9c27f7936709ad987a70dd6d0489c03c5b459477b65814391ac4975f175d406c66e93bce7093da70bd46489ef033b3b73db297e25493d35b985f2b35a00dec4e6ca072b9b05aa7aa50623d0c6dd892b48e050f53375f01fa"}], 0x2a0}}, {{&(0x7f0000000300)=@qipcrtr={0x2a, 0xffffffff, 0x7fff}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000380)="c540849e7c0904a5d46156156902435912402cd769d86367347dd403008d394279c169fd3e5b47336812563b5c883ca94d80453e6e2961fc8073fe17177a96d5753bb5a38d9a6bc9c01a5dc934afa1930ddbfe1e30470cc33e800b7478c38c9d5a4c5fdb2ec0a7fe6412d7390b2cc446d8972db67293ce994d0bf9030abfa438a4c2eae14d258edc2caf9d0b132d95ebf0f282c9cbab051099141d8861c8ce414663a3299746ad2b65ffc2a1a01794d88aa73fa4ebb6b4368bc7b2ff5c352d46be9234a68382e075f86876225983dd920f26ddc901506ad57bee7ceb160d78a8d7dae37327", 0xe5}, {&(0x7f0000000840)="43d388381c8fd381b6d37dedf15ffa049b5a95fd2e9203e429b5d3ec7a4cfd687c1ac65f4af19a5da003ca6d2b51fe648503e92f17c6b88868acc753920f42cc0199597d4fcbde99dde3ef2d6a5923573e4c624574cfdf17fa7c167664ecd2e09cfff535929f4c504bd2d9ab626002df3e37c441056220c62b2dfea088c13544bb7e147e29db55a4d69419d876c0548473b6725a22c986ed40c9ad8384d6bdd2457fb01a70af78b855e712f225edf3b2b639177520ad17f4824c462c2dc103e70b3f33894045986e7475ad", 0xcb}, {&(0x7f00000000c0)}, {&(0x7f0000000140)="2272565800622d17778a805de408af1a3c2c3a16b3394b210a7f54f50a1ed0df36f71dfa", 0x24}, {&(0x7f0000000480)="096974e4f23a66f042ca274ef293418276b19b554a2fd24c5642cc1da9c014eb49bbb96451b7e937f2246157a4e9a2bba0df083c171ce53dc3ea2150e794e267607f5eae6c74520ad7f6762ffc1bf05c05fd0eb25c4ea099a5", 0x59}, {&(0x7f0000000940)="0287fb4c0ff4382bf2fb09638930841191d07155b46605d641954c2e4348bc320657046878eb2969c18f82150c621ecf6540915833bdf3bc96caf1cfe35e72d36d86081cade5d23e464496c8940785eef30b8ba08d91b6b4cc13024c25c14025cf806a77743a84426817b3ab4ccde2f2bad450dc181412b39f3ac52c3f3725503cc714dbf0b3605d0f8a381449c95b161942e1af52a553b72ffbf01cddb0281c2c987c04f7271a196913937f98ad77", 0xaf}, {&(0x7f0000000a40)="4b3c92f92acb080a0da94ba181f5ac6e99aa782c037a08e1bbff02a90cf14cce2ca85af29ed57476980d5cb446b95b5454248d25155c3d9ca6b3ca8bda2ac464f4fbd124dfceaa9778bab72a021b0cd1e1ebfcfbb2546dfcb257153208f90f659ec2766c5084fd6c087fc56e3d3b792968e157d0c0cdb6ed018f70f5eb915507ae45886b52ce21f239a97e3fc07d96dc87a271b986d4acc79c6c9986691295e8f5c6256619ea4b98b1ad86a6ddc0a4a9c4c182b1fe2b34079c465809f0477110c9f4a4ab6873c4aac5fb0e26589d9cd4c5311cebb22ef55103ee44f76505c84fe77e7c3c105e8d1ef4492f785c27865451f4d9e18b130a7e0ff8ab8e", 0xfc}], 0x7, &(0x7f0000000bc0)=[{0xc0, 0xff, 0x33b, "8f4964e83242598cb482241173818e3ddce8e5ee39c1f96ac045fc7e9357554cd9de3ea311f8c603b3b3c1bd315171ae6c30f04e78b67b310eb717de7bafefe2a7bf68874e164cb9b9c1350b16d669249e5425e3c7581af816a2b172f9c0097181a892b4db68ab79f44bd10c6040abb86a479f0359edf3e8a031226b540766b18a38bf99506a778ec357379ade62123fcf4392a23fa571d7f9182ce08490292f505ae17847689993ec22"}, {0x48, 0x107, 0x3, "b049b076bc8acbc19853fa251df39396d20919742bd3eb38e44a3d773e0c49e9a1a824d7bf030b0d6615a2e4322b3208870dceb90324397e"}, {0xc0, 0x88, 0x3, "0bf3246cc25d2462b0da8a86f155a5a7033765a1bbc4fbc9a5c9bd22c9fc96aa7fda2a9971c4c8085b72f2b9f0ecc5dc73ef9bf97335a97b7e724a080dc0269a8377e01a4b2fe863033e764773ab1e2f27f9b3c15b23e930331a76b0bcb3c3e00f7784c1cc43b46178eb194bc3bf8e40841e721e846d72fc6a1563cd77be5d355b4a4f68c16a1abdf5f271c59bf327e7130844ddcdc91e1f9240db4e9cb394218f565c6eeeb055968d155adb"}, {0xf0, 0x6, 0x9, "379ac2312960c0803abdd5ea17ea8f0f7744f22a09649df119081970437377cc510848e5b673fa42db5a756c434dc624e2628afef4d5e8d08b1361abac6bcaa77aff9c0bf6c71328cead73e8a34ebdeb2c58fb84ffa73d0091a05d091e58745fa37d6ca021fb97bb494a526cab2a4c81c00af0fe6659f78e2eb29632091feb75b30cffc078bb08d76b4118834e2917677ed8f4da9ad05d5eb4007c0f8aea995a2793f29913ed3cf29329fc4bb0809609ae49dac263da98eff61d6dc4f9a8d33fc4429f55d3ff3afc8087aa45636f9c18c4c74843f4a17189b724380efd10"}, {0x38, 0x10e, 0xa14e, "bf5bbb49780e013a0043d6ebcae1da481892790586bebb2c6a80bfdbcca934b6c7"}, {0x100, 0x108, 0x10000, "e637c935e8f7f05023fc5c71a867f6de0df0b9a266decbd3b7bad21e750c4bad53e938c37ae7a587f4a2594186772875fceb5ac3d84b4f37a32fec66d83f5a906740600aaa463b6e1826e5f888e0ee4942161a94ea1a0db29da28a94b59269c563be7e40966330cbfe812e0aaf439836528a5536142d528b55f131ecaac390e439fa1ca888a7e9bc2516f76fd7a17a0ac0f3a07c4d47bebdd76d7c200542e19a966062ed6c4591d3541298e52dd62e9a75f7975e6b6d9b481fb5920ec4ecffd9f477463ed6a44593423a924c016297243b9c1929493f0e56bfc9e1a9950d3243d19dcde31b7ea579ac"}, {0x70, 0x103, 0x7, "0ae4d52e66ffa9d5772d3f4e1c50c7a7d54b4b4b0a09556f11527a73d144318631f75211ad45156d210d9b8edef2153597702ffdeb66f89521ba29a16c3daa46a6b22a3c3b140afc3455fb0664162017c0d8b782e9fad5584c27"}, {0x60, 0xff, 0x6, "9579faf662b2598d0bb76c15fa8258fd8ef86dc33acf02cc06bb459356fc7503f380ceac98fd36c101bba8522761e7f900d2913d58229e6a6673d441b8aa169eacd7331b68ca12f9f0"}, {0xa0, 0x10c, 0x1, "2bed030b8d39ed059bc35279f2dcbc04e130a800b64ae021a847e02d4d179b5741f178c570553e231e871dd563a9601798a14a2604c3a367a14959ddcfe588a05b401d4d4d79252dee546e8c5182acedb7389e5207dd249a7106547dd4b22ac0d6c7962a1672630f13534d4a1182db31970a532e9657ea0e9c19a837cf35214531f713d59153b9a80ceca0f8"}], 0x560}}, {{&(0x7f0000001140)=@pppoe={0x18, 0x0, {0x2, @empty, 'wg2\x00'}}, 0x80, &(0x7f0000001240)=[{&(0x7f00000011c0)="f431c7af98cce7f59ae757c3f53eb01462c342604f2e8740428a0ae17bbdb3d7b18c5807e71c54bf6cd78a24cfcda0cd09daa5c0ad73937cb3ab423a35af3efc7b1bf6ca97f2c10f0d50f34b8113c8c0385b63f97db92d48b1a1e2ec689da29e7f9b217531825efc14fd5e88ddb40d450a2186efe96c43a2f06ab9041c", 0x7d}], 0x1, &(0x7f0000001280)=[{0x1010, 0x107, 0x3, "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"}, {0xa0, 0x119, 0xff, "2b5466090dd703a649961ce94a8b9c73a8bf7f2fe07c78885b0aa6039fc53bb6ff86d0c065602b7907a8aeb7fd7c56f754749373478299b5e74968932d26d095240615dcc06975b069dcd136f805303cc3935623c0be0629a263a0c40ff66225c97098b2649c403112505c586ed0288dbfba59385c09f44b4f99e11b2279ba74a8681d7e1b38891ae34038d089a280"}, {0xa8, 0x1db, 0x10000, "63808257df0ca1ba2a430227cddf7a16aff6ceb002d1bd6e25d44b43f8dbfa873229e1684e731689c993fd95eef2fa48437badf3b8c01b912d7edebeb229f62336603b6d4c62a2e042fd2135d7dcc47fc10a5fd9ad95639889b5c0141ee01314142d38cdd616b8de2d96c462ad7735c958506a47713f3da4df0816f9b2e4c5fe0155edeb216c69c41c2ae58b7d9922b1287f10"}], 0x1158}}, {{&(0x7f00000024c0)=@xdp={0x2c, 0x7, r11, 0xb}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002540)="8258dbedd1a79aff8ea36cf94a65ce3e87e3eee40c24d0746ececeb3c422c262888e4d4e69679447fcdd5142d7fc3477c3202fdbded5e8aa928f843ee9229853196b414dcfc8608ddf3883dc76e5388b869260a6a297cc664743d666b27d690dcc64adbf3bf78aff827586c76c6e470bce215fb27a7e0d89dfce11282ff5265af836bddd7c35c483ef2eb9d79373a3f6ce50102d0d44e5d587da5280088e8bd062dce92b78a6fe3b8bb5e7a254", 0xad}, {&(0x7f0000002600)="55d504cfd2", 0x5}, {&(0x7f0000002640)="de878a938fac543b55420d92e57a0bf4becf43b10b1671bd6d7511c3862315479c23d616a36ce46a4e0ff5fec0562c75ff8727ca9530b68dbb275d", 0x3b}, {&(0x7f0000002680)="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", 0xfa}, {&(0x7f0000002780)="0146149879", 0x5}], 0x5, &(0x7f0000002840)=[{0x110, 0x116, 0x2, "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"}, {0x30, 0x10a, 0x3, "337cd54cbb9b639ee144da3155e30ce6d52d0fa0fff7a84cedab974bed22"}, {0x108, 0x1, 0x2, "fa54bfd689c976f99f5a80bde45e83f2da8b140c2d2a229b95044d6aaea28ca91d28508267639890ee6a8c4659b9dfe7f2fd156974db5de7b69c2eaf25aa8b078dddf5e87bddfede9405699b8ca896bab0d57157d4ccaf7b097730ddf8b599ce98a303d51150a333244498ea05e631c269621b7eef1614fe4b15869e49e6bf38520b5378d345e80b5b61d0ba375a6b22427540b8bd85168f4aaf5138575888a05520beeec8f1c7be11fc7ab449ee76265a80bba7213286bf96e94640c0b64c78d9361c55e9d1898a61e646e87d4ffba676172af68204bae1dde93e30cf96e387d00e177b00cf703efc6dd6d0c43ad276c202a8975c38"}, {0xc8, 0x108, 0x8, "ac80568de868c03dec17f0c6f485ef87f93b36de8598739554cc3ab3c2e5a5988b545589c1e7de991b0bbb19fb711396a5c7f3a0ffa1e489494d5cf10a2b9b96bf6fa78698eb91830b12e62b5bf98f98294090a8bb0999ef1042f4c95d2956adce35dbd1e43faa260e4cc82032a8de4b6a284bfef4aacb052dce3e52646f8b0509b9138ea9b04fc690394930537a8868223b3ccc3014e1bcb6ecb2ab61442c44dc295472d4fa561c67d168b6b3ff1a7287e111c47429"}, {0x38, 0x0, 0x3, "04484a5f893b13bf786ed332f10daec9c093132b3887237c6e591df44a5b196283c65c01ca9a52"}], 0x348}}], 0x4, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) sync() 1m29.156578695s ago: executing program 0 (id=2865): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 1m28.425477454s ago: executing program 0 (id=2867): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x5fc4, 0x800, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) io_uring_enter(r5, 0x773c, 0x5, 0x9, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x9, 0x800400) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb, 0x2, &(0x7f0000000380)) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x4b4a00, 0x80) syz_usb_connect(0x2, 0x36, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x9c201, 0x0) ioctl$KDDISABIO(r8, 0x4b37) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$SG_NEXT_CMD_LEN(r9, 0x2283, &(0x7f0000000140)=0x5) 1m25.096224083s ago: executing program 0 (id=2879): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r1, &(0x7f00000003c0)='./file0\x00', 0x231) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'wg1\x00', {0x6}, 0x1}) 1m24.91721478s ago: executing program 0 (id=2881): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00ba19ce670d25010000020000040000009fc40400d2532e764975f03f1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200a011ea665c45a3449abe802f5ab3e89cf40b858e217ce740068720000074e468eea3fcfcf498278ad15f5f87e1c26433a8acdc0e65888b2007f00000000000000000100000000000000010000000000000053350000000034a70c2ab40c7cf5691db43a5c00000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d01000000520655a8056085f4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891e7d87a79d6fce424c2200af6cb784a1975fa657de38a3a32a4fd67ce446adb431d07db79240aca1dd9ba02450500000000000000e645f091231b986e77d05d988d6edc6f9b4eb883ec8f878300cabf2b5543ffc1bdb92618242852e6e8b3e56fefbfff81669557b3809d8c396d2c0361629d1822f722ec23812770d72cd0010000007889b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b0a0ae6feb6737c275dc2740f742b5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fe7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff251845d0fff45bdbaeba4d4e3c6f7f623579435b2c505fb711300000000040000000000000000000000004c00e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7611589906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6cfa4966e5937562a5649a1a0000a042a7097ddefe0671a5767014b09b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7be49833f3c435f9700bc84680549f9eb16682ecb72277ffaca907a3eac4bfc8e0a47c0076d7"], &(0x7f0000000140)='GPL\x00'}, 0x94) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0xff80, 0x1}, 0x4) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x800, @mcast2, 0x4}}, [0x5000000000, 0x0, 0x0, 0x800, 0x3, 0x5, 0x0, 0x81, 0x9, 0x101, 0x5, 0xf, 0x86bb, 0x9, 0x7]}, &(0x7f0000000100)=0x100) io_uring_enter(r7, 0x0, 0x7721, 0x16, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1m23.540208391s ago: executing program 0 (id=2886): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x2, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000040)={0x2, 0xa000, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000280)=""/97, 0x61}], 0x2}) io_uring_enter(r2, 0x847ba, 0x79c, 0xe, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m22.061575351s ago: executing program 34 (id=2886): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x2, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000040)={0x2, 0xa000, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000280)=""/97, 0x61}], 0x2}) io_uring_enter(r2, 0x847ba, 0x79c, 0xe, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13.760341593s ago: executing program 2 (id=3076): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000e39000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x100) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000200)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000007000000002400000000000000290000003200000000000000000000000000ffff", @ANYRESHEX=r2], 0x40}, 0x6048090) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x8800, &(0x7f0000000940)=ANY=[@ANYRES32=r1, @ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYBLOB="2c67726375705f696452d70000000000499a621c0002780db0c6b164ea3d90343615058577721d22321921612e0f832e57fc3edc61ff3ce54500dd55345d6e0a5dd5dada6614054fe06e29e3f93d5bef4a030b44ba24fb5d154aea3b3e5d7bb97552dc", @ANYRESOCT=r2, @ANYRES64=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000b5216cb15c0fc40ab1000000000300000a4c000000060a0904000000000000000002000000200004801c0001800a00010072616e67650000000c00028008000140000000080900010073797a30000000000900020073797a32000000001400000011004100000000"], 0x74}}, 0x0) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c272074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca36507002b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x406, {0x1, 0x5, 0x0, '\x00', {0x200, 0xad4, 0x8, 0x8, r6, r7, 0xc000, '\x00', 0x5, 0x8, 0x100000000, 0x6, {0x6, 0x6}, {0x6, 0xb}, {0x1, 0x2}, {0xa, 0xa04}, 0x3, 0x80000b, 0x5, 0x3}}}}) r8 = fanotify_init(0x200, 0x0) r9 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r10 = dup(r9) fanotify_mark(r8, 0x1, 0x48000047, r10, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x300, &(0x7f0000000180)=[0x6bd1a312, 0xec63, 0xff, 0x8, 0x98b9, 0x80000000000000c, 0x0, 0x100000000000004, 0x10000, 0x100, 0xfe51, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3fc, 0x4, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0x1, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x3, 0x4, 0x8, 0x6, 0x6, 0x8000003, 0xa3de, 0x4e, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffff8, 0x4, 0xe, 0x7, 0x0, 0xe6, 0x200000000000101, 0x5, 0x100004, 0x63, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x5929, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0x2, 0x7, 0x7, 0x3, 0x2, 0x8, 0xfff, 0x101, 0x4, 0x6, 0xab6, 0x4, 0x4, 0x1, 0x80000007, 0xb, 0x39790, 0x6, 0xe, 0x5, 0x400000000008061d, 0x10000003, 0x8, 0x6, 0x4, 0x4, 0x200, 0xfffffffffffffffc, 0xe53e, 0x2c, 0x8, 0x3, 0x6, 0x5, 0x0, 0xd, 0x3, 0x5, 0x1, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4cb, 0x8, 0x3, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb690, 0x3ffc00000, 0x8, 0x3]}) r11 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) write$binfmt_elf32(r11, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8) execveat(r11, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) write$FUSE_INIT(r3, &(0x7f0000001200)={0x50, 0x0, r5}, 0x50) r12 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0) 12.640003411s ago: executing program 2 (id=3080): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x7f, 0x10000, 0x0, 0x6}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000000fd000400000000000000000a00005c69ae5d0ecaa4eb0c09c9400400038004000280"], 0x1c}}, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r5, &(0x7f00000000c0)=""/4082, 0xff2, 0x7) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r7], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000100)={0x2010}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000600)=@x86={0x7, 0x0, 0x8, 0x0, 0x8, 0x8, 0x4, 0xb, 0x3, 0xf, 0x5, 0x70, 0x0, 0x9, 0xffffffd3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x4, 0xd}) 11.883061392s ago: executing program 6 (id=3088): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4536, 0x10100, 0x0, 0x24c, 0x0, r2}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r3, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004cc0), 0x0, 0x40) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x4, &(0x7f0000000080)=0x24, 0x4) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x2) 11.326571954s ago: executing program 6 (id=3090): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x73, &(0x7f00000000c0)=@can, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x20, r9, 0x333, 0x0, 0x4, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) io_setup(0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80001, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000002480)={'ip6_vti0\x00', &(0x7f0000002400)={'syztnl2\x00', 0x0, 0x4, 0x81, 0x0, 0xc4b, 0x77, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x57, 0x7, 0x4c}}) sendmmsg(r7, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@l2={0x1f, 0x9d5c, @any, 0x6, 0x1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)="15bfac3f3c1b33f33af46ebdb35ac511d28c63fd6238c64d90beb52731b18596e0934f795da724e45ad769bae2bd54dfbd568961d09e1bb2609dac10599612cc04a9d8d6a5ceb3feca80889eeb2fbf7d673bf24d4ec86248022b7f434aba0296d2eae8d9db4a39d3adac266a39de76e068b42efe445601100a0dbb9399ed76878c60654b27e24851b6b4ccbbd1fee2", 0x8f}], 0x1, &(0x7f0000000580)=[{0xc8, 0x0, 0x8, "5cdfff01a3a23f142599c7f50470e771c787b30f3c4e9f6769cdaf92bf8bec1d225df3870f42de1245d26deee19ec01d072ca11b94b74536fad74645dcc36c1b84dfe7a930c370e3aca1d435e1e9fc0654ebf4574b4d58d39498576f52e4725a2930bc2798603e922629f1f682bdcbd78bf9247b67c2dc9da8cee69e10ce5957d5b88aab2dabe30b64815c339f12e9dbf20678866ce4b1768dbef4bb9f5ac6e97f726799d89f7d2b1de8230fb61e73f49d"}, {0x80, 0x112, 0x4, "2afdf93075da215dbe51451ad018e996629baa0daf8b2af22ccec67db22b764f6b6d6be47fd43284786f0f236a83348b028de78a1249b79f69968162603621c4b0ca5433b9e4d47c428348f2053adef567e7c563de78d90b831bafe4f12272e6cb90edda5ba3e32fabe9"}, {0xa0, 0x17, 0x9, "e88cd4f560e02e87d8015cb5450e9a8726bba669689964dca94bca50609a692dc36d1bc70f0be34fee397256db502f9630257da97f9f7e81367b88d2b9755c9ef6bed267737577a9e43b2d7025981f23a26990ed37f7409472b46392173939cd789b9193dc75516082e8bd5928faf11656cd632904ac32a5206da5b8131d434f0844a0ce24da0c68d715"}, {0xb8, 0x116, 0xb35, "1e6bb7e4d0a0322f4ab4437c08df37272150d13f6010c0d2c01d40db594f5aa943d625c63c291142cff971f3089fe7eca039f7e3a95c84a4126e57082eea1f8e3053f31fe9a452e37d769541ce9c27f7936709ad987a70dd6d0489c03c5b459477b65814391ac4975f175d406c66e93bce7093da70bd46489ef033b3b73db297e25493d35b985f2b35a00dec4e6ca072b9b05aa7aa50623d0c6dd892b48e050f53375f01fa"}], 0x2a0}}, {{&(0x7f0000000300)=@qipcrtr={0x2a, 0xffffffff, 0x7fff}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000380)="c540849e7c0904a5d46156156902435912402cd769d86367347dd403008d394279c169fd3e5b47336812563b5c883ca94d80453e6e2961fc8073fe17177a96d5753bb5a38d9a6bc9c01a5dc934afa1930ddbfe1e30470cc33e800b7478c38c9d5a4c5fdb2ec0a7fe6412d7390b2cc446d8972db67293ce994d0bf9030abfa438a4c2eae14d258edc2caf9d0b132d95ebf0f282c9cbab051099141d8861c8ce414663a3299746ad2b65ffc2a1a01794d88aa73fa4ebb6b4368bc7b2ff5c352d46be9234a68382e075f86876225983dd920f26ddc901506ad57bee7ceb160d78a8d7dae37327", 0xe5}, {&(0x7f0000000840)="43d388381c8fd381b6d37dedf15ffa049b5a95fd2e9203e429b5d3ec7a4cfd687c1ac65f4af19a5da003ca6d2b51fe648503e92f17c6b88868acc753920f42cc0199597d4fcbde99dde3ef2d6a5923573e4c624574cfdf17fa7c167664ecd2e09cfff535929f4c504bd2d9ab626002df3e37c441056220c62b2dfea088c13544bb7e147e29db55a4d69419d876c0548473b6725a22c986ed40c9ad8384d6bdd2457fb01a70af78b855e712f225edf3b2b639177520ad17f4824c462c2dc103e70b3f33894045986e7475ad", 0xcb}, {&(0x7f00000000c0)}, {&(0x7f0000000140)="2272565800622d17778a805de408af1a3c2c3a16b3394b210a7f54f50a1ed0df36f71dfa", 0x24}, {&(0x7f0000000480)="096974e4f23a66f042ca274ef293418276b19b554a2fd24c5642cc1da9c014eb49bbb96451b7e937f2246157a4e9a2bba0df083c171ce53dc3ea2150e794e267607f5eae6c74520ad7f6762ffc1bf05c05fd0eb25c4ea099a5", 0x59}, {&(0x7f0000000940)="0287fb4c0ff4382bf2fb09638930841191d07155b46605d641954c2e4348bc320657046878eb2969c18f82150c621ecf6540915833bdf3bc96caf1cfe35e72d36d86081cade5d23e464496c8940785eef30b8ba08d91b6b4cc13024c25c14025cf806a77743a84426817b3ab4ccde2f2bad450dc181412b39f3ac52c3f3725503cc714dbf0b3605d0f8a381449c95b161942e1af52a553b72ffbf01cddb0281c2c987c04f7271a196913937f98ad77", 0xaf}, {&(0x7f0000000a40)="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", 0xfc}], 0x7, &(0x7f0000000bc0)=[{0xc0, 0xff, 0x33b, "8f4964e83242598cb482241173818e3ddce8e5ee39c1f96ac045fc7e9357554cd9de3ea311f8c603b3b3c1bd315171ae6c30f04e78b67b310eb717de7bafefe2a7bf68874e164cb9b9c1350b16d669249e5425e3c7581af816a2b172f9c0097181a892b4db68ab79f44bd10c6040abb86a479f0359edf3e8a031226b540766b18a38bf99506a778ec357379ade62123fcf4392a23fa571d7f9182ce08490292f505ae17847689993ec22"}, {0x48, 0x107, 0x3, "b049b076bc8acbc19853fa251df39396d20919742bd3eb38e44a3d773e0c49e9a1a824d7bf030b0d6615a2e4322b3208870dceb90324397e"}, {0xc0, 0x88, 0x3, "0bf3246cc25d2462b0da8a86f155a5a7033765a1bbc4fbc9a5c9bd22c9fc96aa7fda2a9971c4c8085b72f2b9f0ecc5dc73ef9bf97335a97b7e724a080dc0269a8377e01a4b2fe863033e764773ab1e2f27f9b3c15b23e930331a76b0bcb3c3e00f7784c1cc43b46178eb194bc3bf8e40841e721e846d72fc6a1563cd77be5d355b4a4f68c16a1abdf5f271c59bf327e7130844ddcdc91e1f9240db4e9cb394218f565c6eeeb055968d155adb"}, {0xf0, 0x6, 0x9, "379ac2312960c0803abdd5ea17ea8f0f7744f22a09649df119081970437377cc510848e5b673fa42db5a756c434dc624e2628afef4d5e8d08b1361abac6bcaa77aff9c0bf6c71328cead73e8a34ebdeb2c58fb84ffa73d0091a05d091e58745fa37d6ca021fb97bb494a526cab2a4c81c00af0fe6659f78e2eb29632091feb75b30cffc078bb08d76b4118834e2917677ed8f4da9ad05d5eb4007c0f8aea995a2793f29913ed3cf29329fc4bb0809609ae49dac263da98eff61d6dc4f9a8d33fc4429f55d3ff3afc8087aa45636f9c18c4c74843f4a17189b724380efd10"}, {0x38, 0x10e, 0xa14e, "bf5bbb49780e013a0043d6ebcae1da481892790586bebb2c6a80bfdbcca934b6c7"}, {0xc0, 0x108, 0x10000, "e637c935e8f7f05023fc5c71a867f6de0df0b9a266decbd3b7bad21e750c4bad53e938c37ae7a587f4a2594186772875fceb5ac3d84b4f37a32fec66d83f5a906740600aaa463b6e1826e5f888e0ee4942161a94ea1a0db29da28a94b59269c563be7e40966330cbfe812e0aaf439836528a5536142d528b55f131ecaac390e439fa1ca888a7e9bc2516f76fd7a17a0ac0f3a07c4d47bebdd76d7c200542e19a966062ed6c4591d3541298e52dd62e"}, {0x70, 0x103, 0x7, "0ae4d52e66ffa9d5772d3f4e1c50c7a7d54b4b4b0a09556f11527a73d144318631f75211ad45156d210d9b8edef2153597702ffdeb66f89521ba29a16c3daa46a6b22a3c3b140afc3455fb0664162017c0d8b782e9fad5584c27597a186552"}, {0x60, 0xff, 0x6, "9579faf662b2598d0bb76c15fa8258fd8ef86dc33acf02cc06bb459356fc7503f380ceac98fd36c101bba8522761e7f900d2913d58229e6a6673d441b8aa169eacd7331b68ca12f9f0"}, {0xa0, 0x10c, 0x1, "2bed030b8d39ed059bc35279f2dcbc04e130a800b64ae021a847e02d4d179b5741f178c570553e231e871dd563a9601798a14a2604c3a367a14959ddcfe588a05b401d4d4d79252dee546e8c5182acedb7389e5207dd249a7106547dd4b22ac0d6c7962a1672630f13534d4a1182db31970a532e9657ea0e9c19a837cf35214531f713d59153b9a80ceca0f8"}], 0x520}}, {{&(0x7f0000001140)=@pppoe={0x18, 0x0, {0x2, @empty, 'wg2\x00'}}, 0x80, &(0x7f0000001240)=[{&(0x7f00000011c0)="f431c7af98cce7f59ae757c3f53eb01462c342604f2e8740428a0ae17bbdb3d7b18c5807e71c54bf6cd78a24cfcda0cd09daa5c0ad73937cb3ab423a35af3efc7b1bf6ca97f2c10f0d50f34b8113c8c0385b63f97db92d48b1a1e2ec689da29e7f9b217531825efc14fd5e88ddb40d450a2186efe96c43a2f06ab9041c", 0x7d}], 0x1, &(0x7f0000001280)=[{0x1010, 0x107, 0x3, "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"}, {0xa0, 0x119, 0xff, "2b5466090dd703a649961ce94a8b9c73a8bf7f2fe07c78885b0aa6039fc53bb6ff86d0c065602b7907a8aeb7fd7c56f754749373478299b5e74968932d26d095240615dcc06975b069dcd136f805303cc3935623c0be0629a263a0c40ff66225c97098b2649c403112505c586ed0288dbfba59385c09f44b4f99e11b2279ba74a8681d7e1b38891ae34038d089a280"}, {0xa8, 0x1db, 0x10000, "63808257df0ca1ba2a430227cddf7a16aff6ceb002d1bd6e25d44b43f8dbfa873229e1684e731689c993fd95eef2fa48437badf3b8c01b912d7edebeb229f62336603b6d4c62a2e042fd2135d7dcc47fc10a5fd9ad95639889b5c0141ee01314142d38cdd616b8de2d96c462ad7735c958506a47713f3da4df0816f9b2e4c5fe0155edeb216c69c41c2ae58b7d9922b1287f10"}], 0x1158}}, {{&(0x7f00000024c0)=@xdp={0x2c, 0x7, r11, 0xb}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002540)="8258dbedd1a79aff8ea36cf94a65ce3e87e3eee40c24d0746ececeb3c422c262888e4d4e69679447fcdd5142d7fc3477c3202fdbded5e8aa928f843ee9229853196b414dcfc8608ddf3883dc76e5388b869260a6a297cc664743d666b27d690dcc64adbf3bf78aff827586c76c6e470bce215fb27a7e0d89dfce11282ff5265af836bddd7c35c483ef2eb9d79373a3f6ce50102d0d44e5d587da5280088e8bd062dce92b78a6fe3b8bb5e7a254", 0xad}, {&(0x7f0000002600)="55d504cfd2", 0x5}, {&(0x7f0000002640)="de878a938fac543b55420d92e57a0bf4becf43b10b1671bd6d7511c3862315479c23d616a36ce46a4e0ff5fec0562c75ff8727ca9530b68dbb275d", 0x3b}, {&(0x7f0000002680)="f476b5f2be6879f77308929c5fff657d4d2ace1ac26932267dea9dc1f000d7d6eb340bff4965469df831be0a3bcdf0addefbb870f59b933e387258573f4f1f27d5b91c48214a1dd28367a0a4897d4ef55eb13e8f257231e46adbcec65ffa0eea5a8e0cbef636056d096eebc200ad0844780f636878ae4376fd2b182c3e5b559f8f13b44389a4a880835c3907ee35c8335c3b1fa430bea065be7eaa637d2f1cbad9a48b06276cbb5972a44cbb3b3299760802006c66d01a2a40b44f73c6cd830929c8c758d11e5834de395afa787f3712242163bc2be24541e50bc95242cace0d5f93abf69d7b9e035ef00d35222a2f540241e21fae0eaa1f5a2d", 0xfa}, {&(0x7f0000002780)="0146149879", 0x5}], 0x5, &(0x7f0000002840)=[{0x110, 0x116, 0x2, "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"}, {0x30, 0x10a, 0x3, "337cd54cbb9b639ee144da3155e30ce6d52d0fa0fff7a84cedab974bed22"}, {0x108, 0x1, 0x2, "fa54bfd689c976f99f5a80bde45e83f2da8b140c2d2a229b95044d6aaea28ca91d28508267639890ee6a8c4659b9dfe7f2fd156974db5de7b69c2eaf25aa8b078dddf5e87bddfede9405699b8ca896bab0d57157d4ccaf7b097730ddf8b599ce98a303d51150a333244498ea05e631c269621b7eef1614fe4b15869e49e6bf38520b5378d345e80b5b61d0ba375a6b22427540b8bd85168f4aaf5138575888a05520beeec8f1c7be11fc7ab449ee76265a80bba7213286bf96e94640c0b64c78d9361c55e9d1898a61e646e87d4ffba676172af68204bae1dde93e30cf96e387d00e177b00cf703efc6dd6d0c43ad276c202a8975c38"}, {0xc8, 0x108, 0x8, "ac80568de868c03dec17f0c6f485ef87f93b36de8598739554cc3ab3c2e5a5988b545589c1e7de991b0bbb19fb711396a5c7f3a0ffa1e489494d5cf10a2b9b96bf6fa78698eb91830b12e62b5bf98f98294090a8bb0999ef1042f4c95d2956adce35dbd1e43faa260e4cc82032a8de4b6a284bfef4aacb052dce3e52646f8b0509b9138ea9b04fc690394930537a8868223b3ccc3014e1bcb6ecb2ab61442c44dc295472d4fa561c67d168b6b3ff1a7287e111c47429"}, {0x38, 0x0, 0x3, "04484a5f893b13bf786ed332f10daec9c093132b3887237c6e591df44a5b196283c65c01ca9a52"}], 0x348}}], 0x4, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) sync() 10.191428747s ago: executing program 2 (id=3092): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0xff80, 0x1}, 0x4) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_enter(0xffffffffffffffff, 0x0, 0x7721, 0x16, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) 8.628267311s ago: executing program 3 (id=3095): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 8.336607248s ago: executing program 3 (id=3096): capset(0x0, &(0x7f0000000040)={0x81, 0x21fff8, 0xc, 0x0, 0x3fffff, 0xfffffffe}) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000fe0100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 8.072229667s ago: executing program 6 (id=3098): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00ba19ce670d25010000020000040000009fc40400d2532e764975f03f1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200a011ea665c45a3449abe802f5ab3e89cf40b858e217ce740068720000074e468eea3fcfcf498278ad15f5f87e1c26433a8acdc0e65888b2007f00000000000000000100000000000000010000000000000053350000000034a70c2ab40c7cf5691db43a5c00000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d01000000520655a8056085f4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891e7d87a79d6fce424c2200af6cb784a1975fa657de38a3a32a4fd67ce446adb431d07db79240aca1dd9ba02450500000000000000e645f091231b986e77d05d988d6edc6f9b4eb883ec8f878300cabf2b5543ffc1bdb92618242852e6e8b3e56fefbfff81669557b3809d8c396d2c0361629d1822f722ec23812770d72cd0010000007889b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b0a0ae6feb6737c275dc2740f742b5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fe7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff251845d0fff45bdbaeba4d4e3c6f7f623579435b2c505fb711300000000040000000000000000000000004c00e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7611589906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6cfa4966e5937562a5649a1a0000a042a7097ddefe0671a5767014b09b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7be49833f3c435f9700bc84680549f9eb16682ecb72277ffaca907a3eac4bfc8e0a47c0076d7"], &(0x7f0000000140)='GPL\x00'}, 0x94) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0xff80, 0x1}, 0x4) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x7721, 0x16, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) 7.839956173s ago: executing program 3 (id=3099): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000001640)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10, 0x80800) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@newtclass={0x60, 0x28, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xd, 0x8}, {0x0, 0xd}, {0x9, 0x1}}, [@c_atm={{0x8}, {0x34, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x3, 0xffff}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x8, 0x6}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0xf}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xf, 0x4}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x3, 0x3}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x9, 0x10}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r9 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r10 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x1f, {0x1f, 0xa, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3027c59ccb7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12321, 0x1, {0x1}}) r11 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r13, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x10, 0x0, @fd=r11, 0x6, 0x0, 0x0, 0x10, 0x0, {0x3, r14}}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x41, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r14}}) 6.670356923s ago: executing program 2 (id=3103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x20044085) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x400600, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x80}}, 0x0) r2 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) pipe2$watch_queue(0x0, 0x80) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) getsockopt(r5, 0x1, 0x3, 0x0, &(0x7f00000001c0)) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000007, 0x11, r7, 0x0) 6.098048372s ago: executing program 7 (id=3106): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 5.810857787s ago: executing program 7 (id=3108): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r2, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="0000007c00000000000000000000000000d06a9e95ec77c01cffdf1557bc2c4ba4ed43c29d8b325340fec54ca5faa5f3a9b905226c475332b6cf3fb4273bcb8fbc215e09acd395e29f5ae9588de6f77219e381b7981796b53adf9a347ed1b6d6b5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800, r3}, 0x38) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}}, 0x10) write$sndseq(r4, &(0x7f0000000240), 0x0) 5.236454755s ago: executing program 5 (id=3109): capset(0x0, &(0x7f0000000040)={0x81, 0x21fff8, 0xc, 0x0, 0x3fffff, 0xfffffffe}) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 4.944117737s ago: executing program 3 (id=3110): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x100000008, 0x0) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) (fail_nth: 1) 4.943807099s ago: executing program 5 (id=3111): prctl$PR_SCHED_CORE(0x3e, 0x0, 0xffffffffffffffff, 0x2, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001100)={&(0x7f0000000040)={0x10b0, 0x12, 0x400, 0x70bd2a, 0x25dfdbff, {0x9, 0x1, 0x4, 0x4, {0x4e23, 0x4e23, [0x4efb, 0x4, 0x8, 0xea0c], [0x101, 0x7, 0x4, 0x2], 0x0, [0x4, 0x56]}, 0x7, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x5f, 0x1, "3a42302457eb555ff026730bd2a8919b43dc7834ba179f84e8139d0ba1be55854feaf2fe1e574abd134b16d687b2af120a0cf27c233ddd7cb4f82c429cb497118396bccc168203881c534642007f157b9c61fe3eb803f1512eedb5"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x10b0}}, 0x4000) 4.939248223s ago: executing program 6 (id=3112): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)={'#! ', './file1/../file0', [{0x20, 'cgroup.st\xc9\x87(\x16\x83!at\x00M\xdc\xac\xa4,h\x84\x9e \xa3\xc9&!\xe6\x9fc\x89\xa0\x9d\x01d\xd3gR\x8dQ!\xb4O\x13m\x90\xa3\x7f\xde\xec\\\xf8\x7f\xd7%p\xb7i\xc1\xf8\xbd&\x8c/\x83\xd9\xbb\xb0\xb8\x0f\x82.>X\xa5d|\x13\xce\fy\xa8\x04\x9e\xfe\x94;l\\\x19>d\xe9\xcf\x9e4`\xa6\xdf\xb33\x90\xca\x93\xc4-\x05H\x00\x00\x00'}, {0x20, '1\x01\x9e\x00\x00\x00\x00'}, {0x20, ' '}, {0x20, '\xe8/#/{#/!^\\{@+}\x00'}, {0x20, 'cgroup.stat\x00'}, {0x20, '#:[(@'}, {0x20, 'D\xd4 ,xq\x92z\x12\xf3q`\xf2\x9f\x04\xca\xdf\x1bpL\xea\xd3\x7f6t8\xc9\xb8\xdc\x1b?s\xaf\a\xf3\x97\xac\xa33\x10\xea\xac\xeb\xd3Uyog\xc6\xcc\xea\xec0\xdfh\xd7\x00\x04E7\x1f/R\xc4\xb1g\xadt\xd3\xb3\xc7J\x15\xe7\r\xee\x99\xd7+\x9a\xafi\t\x19\xc3\x10\xb2Y\xba\xc5O\xca\'\xf4/\xde\v\x04Pzi\x8c(\x84K\x1f\xf9s\xc6\x9d\x92\xca\xac\xbd\xc6\x82\xc8W\x06\xcdC\x9c\xd4=r\a\x90\x87Y\xe15\x11hW\x8d!\xbb\xeb\xfee\xe5+\xc2\x01\x85\xe5\x8b=\xf2y`\x1c\x98\xec$\xdd\xef\x06>\xedd\xa74\x87u\x14J\x96\x1b\xcce\x10\xc1\xac\xbfag/\xf9FM\xa7dN\v\xc7x\x02\x92_\xb8'}, {0x20, '\x97\x01\x00\x00\x00\x00\x00\x00\x00\xff\x17S'}, {0x20, '.'}, {0x20, '-@\\:'}], 0xa, "b524be350e7611b133a163b4ab1b0400000000000000010000000000200080ca925f71fc333721e47820f690d177cb3b9ccb356ef82d4e99eeb9081f5368ceaf6067e058d300bdc61c081d4ecd87d9fd9196c54d8ffdec9eb1df365f076dc0f4b98fac8d4657cf1fdbe0550da8f2a1098c2153ee7b9bf8532b646c93f0943f7284"}, 0x20a) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xa, 0x10000000000, 0x0, 0x0, 0x11, 0x1c, "fee8a2ab78000000002000e60080b8785d9600010000000000000000000000000000000800", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) 3.944276463s ago: executing program 5 (id=3113): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x4440) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x23, 0x28, 0x0, 0x20, 0xfd, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @timestamp_reply={0xe, 0x0, 0x0, 0x3, 0x6, 0x2, 0xd, 0x1}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @empty}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0x0, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x70, 0x1, 0x1d, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x29, 0x0, &(0x7f0000000100)=0xfffffeae) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "fc79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r7, 0xc0945662, &(0x7f00000000c0)={0xe4, 0x0, '\x00', {0x0, @bt={0x200, 0x3, 0x0, 0x3, 0xffffffff, 0x5, 0x4a, 0x4, 0x8, 0x6, 0x2353, 0x8, 0x2, 0x5, 0x10, 0x20, {0xb5, 0x7}, 0x9, 0x1}}}) 3.894199846s ago: executing program 6 (id=3114): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da05000000000001090224"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x100000000, 0xfa11, 0xffffffff}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071103a00000000009c050100000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="129d10030000004081179808400060c009040066020301010c09210e000401226f08090581032000060505"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x5a, 0x0, 0x0) close_range(r1, r2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x84) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x5) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5f, 0xfffffffc) close(0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0xffffffffffffffff, 0x0, 0x4004) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000740)=""/187, 0xbb}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f00000004c0)={r6, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x5, 0x800000, 0x3, 0x12, 0x200}, 0x9c) 3.299368291s ago: executing program 7 (id=3115): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) (async, rerun: 32) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) (rerun: 32) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x44, 0xf, 0x7, 0x100, 0x6, 0x1000002}) (async, rerun: 32) r4 = socket(0x2, 0x80805, 0x0) (async, rerun: 32) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0xfffffffffffffffb, 0x20100) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f00000000c0)=0x8) sendmmsg$inet_sctp(r4, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x4f, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) read$alg(r4, &(0x7f0000000200)=""/149, 0x95) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000380)={'sit0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x40, 0x7, 0x8, 0x1, {{0x5, 0x4, 0x3, 0x3, 0x14, 0x68, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast1}}}}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000280)={0x0, 0xfffffff7}, &(0x7f00000002c0)=0x8) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) (rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000007c0)={0x81, 0x2, r8}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r8, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) 3.144320408s ago: executing program 2 (id=3116): ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000600), 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, {0xac7c, 0x8001, 0x3, 0x69, 0xf4b, 0x1, 0x2, 0x8, 0x412f, 0xe154, 0x1000, 0x5, 0x6, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x60642, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x50, 0x0, &(0x7f0000000180)) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000080)={{0xadd6, 0x9}, {0x0, 0xfffffffe}, 0x1001, 0x7}) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r5 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x83, 0x66, 0x7d, 0x10, 0x2040, 0x264, 0x4ed1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x90, 0xf1, 0x9c}}]}}]}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) 3.13055031s ago: executing program 3 (id=3117): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa}}, './file0\x00'}) syz_io_uring_setup(0x4bf9, &(0x7f0000000140)={0x0, 0xb89f, 0x800, 0xfffffffb, 0x169, 0x0, r0}, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x0, 0x0, 0x2}}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r3, 0x6d}, 0x8) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000080)={&(0x7f00000001c0)=[{0x1, 0xb210, 0x0, 0x0}, {0x9, 0xb801, 0x0, 0x0}], 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000840)=[{{&(0x7f0000000300)={0xa, 0x4e25, 0x40000, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000340)='P', 0x1}], 0x1}}], 0x1, 0x24004001) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x9, 0x1, 0x2, 0x1d7b, 0x5}, 0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x543, 0xe621, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x6b}}}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009f1000/0x4000)=nil, 0x4000, 0x3000003, 0x1010, r7, 0x62405000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0001253fbd7000fddbdf2503000000140001000018000000000000000000ffff0000000004030400080003000300000005000500050000000800020004000000080002000500000005000500030000000400040008000200000000005371e94171a3f6dc1c626ad65e989c9e09dd2196d9fdd01036dded844161812ccacd17b96b2b91e6f6211510d0ab521643c56693858f041e1abc5720642c0f4d8e1008810d01f5"], 0x60}, 0x1, 0x0, 0x0, 0x8005}, 0x810) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f00000001c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, r9, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20040094) r10 = inotify_init1(0x80800) inotify_add_watch(r10, &(0x7f0000000040)='.\x00', 0x24000420) inotify_rm_watch(r10, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0a00180003030303030300000800700004000300"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c894) 2.481228583s ago: executing program 7 (id=3118): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 2.315128494s ago: executing program 7 (id=3119): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)={'#! ', './file1/../file0', [{0x20, 'cgroup.st\xc9\x87(\x16\x83!at\x00M\xdc\xac\xa4,h\x84\x9e \xa3\xc9&!\xe6\x9fc\x89\xa0\x9d\x01d\xd3gR\x8dQ!\xb4O\x13m\x90\xa3\x7f\xde\xec\\\xf8\x7f\xd7%p\xb7i\xc1\xf8\xbd&\x8c/\x83\xd9\xbb\xb0\xb8\x0f\x82.>X\xa5d|\x13\xce\fy\xa8\x04\x9e\xfe\x94;l\\\x19>d\xe9\xcf\x9e4`\xa6\xdf\xb33\x90\xca\x93\xc4-\x05H\x00\x00\x00'}, {0x20, '1\x01\x9e\x00\x00\x00\x00'}, {0x20, ' '}, {0x20, '\xe8/#/{#/!^\\{@+}\x00'}, {0x20, 'cgroup.stat\x00'}, {0x20, '\x7f}'}, {0x20, '#:[(@'}, {0x20, 'D\xd4 ,xq\x92z\x12\xf3q`\xf2\x9f\x04\xca\xdf\x1bpL\xea\xd3\x7f6t8\xc9\xb8\xdc\x1b?s\xaf\a\xf3\x97\xac\xa33\x10\xea\xac\xeb\xd3Uyog\xc6\xcc\xea\xec0\xdfh\xd7\x00\x04E7\x1f/R\xc4\xb1g\xadt\xd3\xb3\xc7J\x15\xe7\r\xee\x99\xd7+\x9a\xafi\t\x19\xc3\x10\xb2Y\xba\xc5O\xca\'\xf4/\xde\v\x04Pzi\x8c(\x84K\x1f\xf9s\xc6\x9d\x92\xca\xac\xbd\xc6\x82\xc8W\x06\xcdC\x9c\xd4=r\a\x90\x87Y\xe15\x11hW\x8d!\xbb\xeb\xfee\xe5+\xc2\x01\x85\xe5\x8b=\xf2y`\x1c\x98\xec$\xdd\xef\x06>\xedd\xa74\x87u\x14J\x96\x1b\xcce\x10\xc1\xac\xbfag/\xf9FM\xa7dN\v\xc7x\x02\x92_\xb8'}, {0x20, '\''}, {0x20, '.'}, {0x20, '-@\\:'}], 0xa, "b524be350e7611b133a163b4ab1b0400000000000000010000000000200080ca925f71fc333721e47820f690d177cb3b9ccb356ef82d4e99eeb9081f5368ceaf6067e058d300bdc61c081d4ecd87d9fd9196c54d8ffdec9eb1df365f076dc0f4b98fac8d4657cf1fdbe0550da8f2a1098c2153ee7b9bf8532b646c93f0943f728472ffd3b74010ded7"}, 0x20a) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xa, 0x10000000000, 0x0, 0x0, 0x11, 0x1c, "fee8a2ab78000000002000e60080b8785d9600010000000000000000000000000000000800", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) 1.884316098s ago: executing program 7 (id=3120): syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000f0ff0000002c00128009000100626f6e64000000001c0002800500010004000000060018"], 0x4c}}, 0x0) 1.294087042s ago: executing program 3 (id=3121): rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0xa}, 0x20, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r0 = io_uring_setup(0x58cd, &(0x7f0000000240)={0x0, 0x9cc5, 0x800, 0x0, 0x345}) r1 = io_uring_setup(0x1b7b, &(0x7f00000002c0)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f6, 0x0, r0}) r2 = syz_open_dev$swradio(&(0x7f0000001c80), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000001d00)={0x0, 0x0, 0xafd8, 0xffffffffffffffff, 0x0, 0x0}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') rseq(&(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x2, 0x5, 0x2, 0x2}, 0xa}, 0x20, 0x0, 0x0) (async) preadv(r3, &(0x7f0000000580)=[{&(0x7f0000000100)=""/212, 0xd4}], 0x1, 0x225, 0x12) (async) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800b000100736f636b657400000c00028008000240000000030900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a5c31e09c01b670348af4f2405ffd18020000001ed0d9295a7e8f98d25665ee8adbea29b518f34d535d981c39d0c7955aaf7ff895bfb0ec88c2fa02fcd2c66546d7e53af53c784baeeeadaee0ee04536468829ba080df4ac54cae49e6e23d4ab2b28ebcd73204423a0dc3dfb7f0fe4386fd"], 0x74}}, 0x0) (async) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 789.967579ms ago: executing program 5 (id=3122): ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000000)) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x1, 0x0, 0x0, 0x1}) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000080)="8b92b615ed27501e9e4e642c2e4b843780bae8ab699ec78737e3ab931f8e9e75c2855fecb70a942eefbdbc158e950d45b00a13e4da289146ec08ebfc5149775cdb4658265620d3a1226edd99ae7e40f7efc9810e27b9eebfe3042e670c05ad9d94fa2b06783850debc", {0x8, 0x50f, 0x20303159, 0x8, 0x6f72, 0x6, 0xc, 0x1}}) r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x3015, 0x83b1b2ada9deccc3) ioctl$RTC_UIE_ON(r0, 0x7003) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x105080, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x72}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x8060) splice(r1, &(0x7f0000000300)=0x7fffffff, r1, &(0x7f0000000340), 0xb4, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x7, 0x10}, &(0x7f00000003c0)=0xc) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r3, 0x1}, &(0x7f0000000440)=0x8) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000480)=0x4) r4 = syz_open_dev$dri(&(0x7f00000004c0), 0x6, 0x40) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000900)={{r0}, {@val={r5}, @max}}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000940), 0x10401, 0x0) sendto$inet6(r6, &(0x7f0000000980)="5cc2fef0a18b1f2bdabb6578174624d433e5f9995c11e03ad92eafca22be0480b7eb53ba988f73f23fc59845700fd81a9417278ee817404a5dbee4f6891d0b4f0c14626284eb479cf253c82136a80e7624cad15d2c49e30dd3ec1fe365a271acaa406556a501284de93cc572c34362024d", 0x71, 0x0, 0x0, 0x0) ioctl$PIO_FONTX(r6, 0x4b6c, &(0x7f0000000e00)={0x165, 0x19, &(0x7f0000000a00)="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"}) syz_clone(0x0, &(0x7f0000000e40)="6bced35d33c547997ce1afe1dc786f68b53a5abf90e53d7d702e752601b576b0eccd4f2d8b811314f72544967eb030a2e7750b8514bc26fd3d06e7e9fb7fa97b2049c1437922d2a9a077a223d3215dff8b1d4b2b20fd221d3ca91e54eaa75b5bf1a78b7ce8e19894c381cfd96b5153cdb2d55bafec3826761f2a1c6d98918414bd3d9272a69f1b7a44a459752d80b81b5468eaf0ff4e57b42f52e7f313ddae7af6d480637162b7677e38193a6c858325e1925aef3fb87b6ab0fa76a6a5d6ae093eadbb6475213f44285a4b075a5d29dc8979987b5fa228efd211e75d1ead117b6006c93654022a06f07890fc76e3a9f02d1609ea8a25c6cf59ea0e7a08934f331b2206232bd8661bb2e978283328ddd0346157549ead6c4cd1ce9bc0ab16d1a2745d238dca307a5acef07ea7f2fdbe24a3004fd0e655ddf51cd576c0139ba2d941469a682aa3e6fd5cf7f50ddccd21ad499bbb5adddd94e2a1a2908e55a32ae9cec899251791d4979b99ca3fb3827f752a3bf81d347430545ff2d503f0db5bdba2f4257200a7a4a0c4c82428d38a11d53613d66f0dcb68ab077e67b62346776597fed9d9652d243ac05b715a8b5d6950c0889a90d0f8f99566164269c0b44035b30224bd4dd2bfe4cb3d25a71a4cd6796cbd3f7696b17eeb948f7c4eecb26340fd9bf82b575ae92f0ed4df50638299e13898b726bf3763989bca12ddcc125ea5913dc3c5ec63091e0ff8e4f4279de12971357365c5ece2381e634d1c3e15bcc36fd75911e8e0890a4aaaa82ba59013ef91fea29de9dd24ffa7444fdf6fdde7ee169fed611d961969637344f7a72cfa75fd1f4f1a4095a46899a157beb5ae448d7c1cf9ee20247711c451836c06c40ce02429882a0a550f44c611c0ccf52a326b437a69849e48882879a48854b3217d4350ae79392e26a4e2a7acb220a87d05311ff8564f91e0750923aaa23ad780450282e32afad6874b61e4deb05b02e6b85af84b048272698dbc1635f0aeba1481f20b0eb110f67349de0ee8abbd399f6193b6ff2fe616b12bc390ee04aacea4ceb8a8e78cf77aaf0e1981f6c7f22d12fd8fb6b9fb2988779ee1d1b4057e6350384038eb2c037e68ceb919859e8acad6a61fd62c99e98705300a92696aa87a67f1453c0752b9b311cf5c1c3107c7d8b70c74f65b35f69f13e315773740c6c218ce15051f8a7886e366735372ed4c8af65f169804427bf2a7b0575212ca8be6937f78eed470979c8c7149df60112e83d866803d48b7535a85b0dd3445b8b2c9b44fd66c924b50da7b3da4fef0649cef56fabf8aeb17a4dc152401da9db98eeeca2a4ecdda53332d26c317abb338f7de026a14cb1b09428caa1fe7faaf1d64de825be396f16839f6a3bdedaeec39e08915ef24e63081b2b89b140da733107e484b7598a78c6e3cb27e5d3341f7a528f0450a66b782c0f2259feace74f25152509763be18504acc22820d05f7131ec533a385eb425ca97ad63d4c9af63e2db8d6a14f13dc16a32f9a05f1c59a0fb7575bdea8efe13533aa139d40de30fb816b4a7198450cae81f52e03ac7edf89140dd921be6052c9e577db8f02756b386715ea6b1fd04c0b690867d4dfcebba02f09a0a256ee4f48e559772597bbf3878bb7bf96c7f87fe0e6a0307f84572184242790b0a265765af468e6f4e5a11843e70bc8e9cbf8deda055839817ebda3315b6f3c3257a66ac7c97458a43788692f1f3fbbeae28f3e544613979cefe6f9ba7b138e11ee9f5d007507817ecb36913740ec01065940d3606aafd85d7dbbba5953b8fc4d7c9491fddc001d288880dde4327da936488d4ae27d97797000cfad254e533908f15c091cd2bd35af3f243be8c1d8d9b59591faf46d9fed1f1c5b82a1fc6658383406120cfcb9e1c6c881b39eba85fc299751d66e2cad5a22b7c1d4f8eeaf7d47014ffe08d70a6ccce47d33e408785d1261f64c7fcd64dfaa481bfb09c231eb908bf6fde5f5f00d98df72382648a97092e893f6a201996a4782b3ecfb4f646ecc0bbe54b4d686b41494fc8f624be7405fc5a88501d27b4b4c6739130590720228ff64fc2155f8ffead8d0cf6ebc4202bcaa467bdb5f6500c9ee16e97b5da217226b20d7f5a7a0994779242bb16d44c7dde75a32a8504f83be23ca27f5d42f42fcc6e32cea0447c5fc5f585874e74283269c4a6fe4310a26e03f333415db107f134b13a953240a429958fb7ecb892cd594eb884d7256c960f39cee1074c84beec9d97bc27ba6263a022dc38e932044b2cdd1db938048af383ef90a7958c7aacb068f4fd49760514c44f12cb4254a3f46e10519a049d5f98c79d2dc9151aa3b1be3fea452f5f9a3a12c443f5928c299d33ba4670ca0158ff6ff5d7982ef7da3881981c9c8294d1537aa25b2af6e669ad50711186cd5a9048960937386a46f2508febf18716b78ad0b4dc2d2717a1b7add21f94b6f6629bdcddfb89470fe775de459abfa8e6035d78b9885e19e75321d39df1bea00bd95d81f1d9f9aa94fd9fdf56a435eb426113644685f3b0d0e019d190ef4a4bd32423dc843b90289b4e32474dacd071238588aaf5d68a863535497fb62a28967ef67bca6317f51b6f9de183dc3344988c37ad7482c292d255161ca524709acdc2c2b7f83b8bde71de24c1c922e6262d96f8066d7c0bfd6eeabd570e11393da31522edac24c139e5103798448383d0f3573060aa9cc9d0dc4522a84f0b074f899c094e7c2be87c7e1568f1ad10742b7730959f756bf8011183c7579cd1f6b5837f5d6a737ee6cf9aa9e1de4e1d656102044e016d16edec6588f1ccc376af40b983ecf58575468bddb33ac060b6818f63165573755ad52f1bab9a8e8efcdeca19c90fa9f1e0d4c71dceed9a0e9449d6f9fd7434aecb31a2efdf436195cbb12c95f87a25c83aba173419d8103c51972f1c6122a4227a114897046f6e6e11e2048e3719d59539d745123c0f66cb966837a7e0f8f00042055ab03233ea5f5251e66f2d913fd966bf65123fa81a3c6182a3597e073f07be210165b0524cf432e79d1470a7aa74617f4f3eccabc55842c273c2d565c71731b48916ada304f1833c08a828b3c66fd45baae818d9e184dca2c367440e6cfe9f081165a029a41e8a2e3d537bcb991364fcafa69e0e740805d6e3fef974623eb281a211ff5dd64c5e7eff759f63e6c8fa34a6f1803ca37b0350f470092e271849c93c2e69dcd7f42afd0259647f54d36b326d5e0375d30017196b5cbeaa5314a43c0fce04388aea8fa5c0a4448dbcdab8027a1d26c1a3f181bd48435d834adaa467d13ee5c175e25be65e257f0cff822e0358587e7a4db408c18aea9184829f2d87f13c656de2f4bd451843714e7af1ea4bbfefadd20340f3984d38d030f5765f5a7045f24979ab2babce868d91d3c3435e59aca3f2999a911368b09a0952904aebf57474161b8b826b68e2c951203a2f36dfe8b48f36e124d7d494dfc6384932773e000e257f060577708639fbf6987a7d89ef9a61f2d704a05bd45b8229052f526b9a63f50c9541437a0921e720970ffc76b24987a259c02f7256a5f01e7382db00fc24287bbe8242ea8079579a52f0c63741875b89e878466442ff03f4b0db7c43f1156b12b506cc9ceaaa291dc1fb63d6b9afd276a84ff0a7d4f245ead3b89468030ef3951aa0c276cc204308c01130459479a6322c73db59647af2725a574d1f03e2fcf93a82d2eb53ea3b767363e4a5b019ff7c774e844f15b7b5fd46339d2b8f331f77def2203e35a2f6093020769e8a1e0285db424ac83fa921b45de49be55e0c0260bb7ca5919fca7fae8c779ffe3183ead1b1e3ca1359ebb951723f79e7021c9eee99331b36f2261faf9f0897897da81861d088b8c0ee8d7903b4c98bd34a41e75625ce91b4cc8bf6068a746e913836394d5f57b5165f6ef8fe525b890314654e793595c8d7ab0a7c5ff2df3dc329c605ad486145ba2e9ed656395b123bd77b3b7a0416b5a9e00e881759bd7b22d1ff9973288beacb866f1c57d053ad75c617862ed5274f663738d91ee5086f95f84fb26e987b95327fea575b52894d6eaf7141aa6d298624bde3cfd5ed9cc49b2279c5fd1043fe2f99fe4d501aaf63a2a9e8a4d9fc1d0f3883937490a548bdaa5240d710f99c3a638bb8fdc0bda801b5745b93f4d1b19070473ca8a3d2614ce463d849b6797d078033145d0ecc1468dc53af66ef9f070c0d949856bb4bbdef6984e42fefe221704417332b860ef988ed8bb721c39d8c573f5e80614c57131328874cdb71f73927524ec5de86417679d3155e41b4dfcac0a7dfa08f232d892b61c7939c2fae0d7a6db77132b5926a1d3dc15f451bb2bfe1dbf42a857ec0b6d501c6396e127eb47299f572378d36ac190586d70c2eb47c05f3ed7d8fb357dcca6fcf5db9efeef499960c37475ca1c0195bca10bb70e0eb5625bbd784aa5c28c09ef60b0b3a22b39dc913b1d880a169d0b5b09d9c7af3ecd0e8d9b31c1f4b8e861d528c6f4d29ecc4e42ad98e484949b0c0b945e5f1c1bc02f693cec1bdd1eded962f2a8dc078bd0af4fb39af030b2f7040d750c184394c586b7a6e9ac062b0ca18f6531bde2e134611b55a85aceed8e97e9ca45bfee2025fb5f70d3c5ba67588030b9e4cfd05e84486e87044cf20e2f8712489ad96fe9cdab72cce746afde164bb66f02003a899de1a8398f1f162a7603d8e66823562c9446c83c710d1ce29f38ad5e9c115946b80d0696d3e4a485c9a1f43bd9f93d110693f15eb78c201a54d514bc0245b8669825552d67be20ee0efded51dc6ef85b7dc44a078973a2bdf933321dfce03d2369574b4822dbdf56e54980a31750f40d85d7dd79bd9223e2c8cb2a54a00c4f6eea86747e60afc62f9044c24e8bb347479430c2d03f87350a8dfa9006bb48e6d66fe82e0eb2a24472f5c8d1760c4eafa0ed1c8e8bb0f9c9fcfcaa2ca9d5de1d8277be269c7ceb57fd66374019b3d07fb3d5bc9b539eb3ae59c733bcf73c5459b1c65eb7ee4dde9f3a82afc6e9f931ebe96588bb3912427206dd75c497e402704062d0ddb79cd308f56bdc85acddfbf0aa49762b2da443dbf5200f511be466456e30d5b9faf4d1fcb47178f41f7ad5e91eb9adf50caa9855d5b75116c2f2f86dd0872b804e471ca387b8852af9d74f416470151f5d209996b2a52a772713d74ecf01583b5e33e29a4490d549266eb70c3c41289af4a00fe74da602ad17843f3c3c36242f00f291fde47221389a168b530fcd295e4d7a962c93d58c3a9dec8aa390e0f5f336450aa436a04a9c9cbdca569b38caa5a6585864d07ce4288129af79e87c7f58ab14bb0f670757b30670841cea90045a585d70a33f5e3c60060e856f4c01176a343722474a65d2c81a56586f19e12f9aa40a2bfd7d14e5a26ec601bcbc99b53c562943f56a0beaebd1af279636c61a77c764a3ff1497fb42b669bfdd240c65cbd4887230698c0ada96dbd2866b6990458dbfaf395435a131d8ee4a346e662735fa599da7855cca9ab09b62e13a7bf9f76795f7fbbad36ef42df911d9de45184faf7d36c30db57d10df4a6a03e215c995ac6b50c53a7c3e33e538c7fdc54947bf6dd94594b1ef9b3e8610c25042d02883e78d13ab51b987dd3ae0cef2eb352257c50b9a853b90c2dd170be5e520552afd7caae8c79d6ad367987cfbeec0f38413c88138ae4a1afd8740d21ebcffc05af9163e379dd83232ac5312c0f307710582bb0823a03484218aebb955cc037cc3e7aabc6c2dd544f5d984623d2edf010f3d", 0x1000, &(0x7f0000001e40), &(0x7f0000001e80), &(0x7f0000001ec0)="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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002ec0)='./cgroup/syz1\x00', 0x1ff) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000002f00)={{0x8}, {0x6, 0x10}, 0x73, 0x1, 0xe7}) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, &(0x7f0000002f80)=0x3) read$FUSE(r6, &(0x7f0000002fc0)={0x2020}, 0x2020) close_range(r6, r0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000005000)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r1, 0x3b8c, &(0x7f0000005080)={0x30, r7, 0x1, 0x0, 0x2, 0x3, 0x3ff, 0xfffffffffffffffe}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000005100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000050c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000005140)={r8}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000005180)=0x2) msgsnd(0x0, &(0x7f00000051c0)={0x1, "a4c472a2a6ae613dbd341170ed6e5689035bf27995f32f572919aa728ca02d9f22c73c65a7b120992fcfae6de0594941d3baf7aa767807f0b9d0822a9a4e3a049767a0750c1d0f77c6110df9e579cdf212f0d228d71bbba51ebfaf3828a8366a9cbdd8eaff9a4dc77f59728409bc75196fa7d64f079f6f2809849ee82828e217ee255c43845f56128d7581939f17bf740d30f9688899d937"}, 0xa0, 0x800) 591.853477ms ago: executing program 5 (id=3123): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x200, 0xfffffffd}}, 0x10) r5 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205647, &(0x7f00000001c0)={0xf030000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f027, 0x0, '\x00', @p_u8=0x0}}) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = syz_open_procfs(r2, &(0x7f0000000000)='ns\x00') ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000000c0)={'nr0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf3}}) bind$tipc(r6, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000440)='encrypted\x00', 0x0, &(0x7f00000008c0)="e669111c1c7f7abf587cf31966db77fc058035383e3d69c057fbf23853d30ece634fd62c41f6b5da79eea4ced24e1e61e8d63736065ccd2d19877d4522cac105349ef1955a3f8c06f082d97b33702dab4a11b2ccf0cd3866318511a5bca2eedc0f5f164eba4f220d61acb961bc11b20388ee2d09eedb378a2bf1abccf21d37eddfa20d6204873d04000000000000009c741dd88ed4dd011ab6aeff3e4b04703a0145d27845d405b7a0958058b9f4f405c1224ce52e65e8c9e951dfdccc2a2d64f53cae7a1796837af02e410be44a4e91587b334605f0999d9041d888da3c8bf69781f75470a470", 0xfffffea2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x5}]}}}]}, 0x50}}, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000002c0)=@alg, 0x80, &(0x7f0000000240)=[{&(0x7f0000000500)=""/195, 0xc3}, {&(0x7f0000000100)=""/64, 0x40}, {&(0x7f0000000700)=""/203, 0xcb}], 0x3, &(0x7f0000000800)=""/139, 0x8b}, 0x10040) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x0, 0xffffffffffffffff, 0x2, 0x0) 526.094809ms ago: executing program 5 (id=3124): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)={'#! ', './file1/../file0', [{0x20, 'cgroup.st\xc9\x87(\x16\x83!at\x00M\xdc\xac\xa4,h\x84\x9e \xa3\xc9&!\xe6\x9fc\x89\xa0\x9d\x01d\xd3gR\x8dQ!\xb4O\x13m\x90\xa3\x7f\xde\xec\\\xf8\x7f\xd7%p\xb7i\xc1\xf8\xbd&\x8c/\x83\xd9\xbb\xb0\xb8\x0f\x82.>X\xa5d|\x13\xce\fy\xa8\x04\x9e\xfe\x94;l\\\x19>d\xe9\xcf\x9e4`\xa6\xdf\xb33\x90\xca\x93\xc4-\x05H\x00\x00\x00'}, {0x20, '1\x01\x9e\x00\x00\x00\x00'}, {0x20, ' '}, {0x20, '\xe8/#/{#/!^\\{@+}\x00'}, {0x20, 'cgroup.stat\x00'}, {0x20, '#:[(@'}, {0x20, 'D\xd4 ,xq\x92z\x12\xf3q`\xf2\x9f\x04\xca\xdf\x1bpL\xea\xd3\x7f6t8\xc9\xb8\xdc\x1b?s\xaf\a\xf3\x97\xac\xa33\x10\xea\xac\xeb\xd3Uyog\xc6\xcc\xea\xec0\xdfh\xd7\x00\x04E7\x1f/R\xc4\xb1g\xadt\xd3\xb3\xc7J\x15\xe7\r\xee\x99\xd7+\x9a\xafi\t\x19\xc3\x10\xb2Y\xba\xc5O\xca\'\xf4/\xde\v\x04Pzi\x8c(\x84K\x1f\xf9s\xc6\x9d\x92\xca\xac\xbd\xc6\x82\xc8W\x06\xcdC\x9c\xd4=r\a\x90\x87Y\xe15\x11hW\x8d!\xbb\xeb\xfee\xe5+\xc2\x01\x85\xe5\x8b=\xf2y`\x1c\x98\xec$\xdd\xef\x06>\xedd\xa74\x87u\x14J\x96\x1b\xcce\x10\xc1\xac\xbfag/\xf9FM\xa7dN\v\xc7x\x02\x92_\xb8'}, {0x20, '\x97\x01\x00\x00\x00\x00\x00\x00\x00\xff\x17S'}, {0x20, '.'}, {0x20, '-@\\:'}], 0xa, "b524be350e7611b133a163b4ab1b0400000000000000010000000000200080ca925f71fc333721e47820f690d177cb3b9ccb356ef82d4e99eeb9081f5368ceaf6067e058d300bdc61c081d4ecd87d9fd9196c54d8ffdec9eb1df365f076dc0f4b98fac8d4657cf1fdbe0550da8f2a1098c2153ee7b9bf8532b646c93f0943f7284"}, 0x20a) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xa, 0x10000000000, 0x0, 0x0, 0x11, 0x1c, "fee8a2ab78000000002000e60080b8785d9600010000000000000000000000000000000800", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) 101.035199ms ago: executing program 6 (id=3126): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x28, 0x5, 0x0) r3 = syz_io_uring_setup(0x4f6, &(0x7f0000000200)={0x0, 0x80fd, 0x1000, 0x1, 0x2cf}, &(0x7f0000000080)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=3127): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000001c0)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tee(r0, r1, 0x9, 0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x100000008, 0x0) r5 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r6 = dup2(r5, 0xffffffffffffffff) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioctl$KDGETLED(r6, 0x4b31, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x8, 0x7800, 0x7, 0xfffffffa, {{0x2a, 0x4, 0x3, 0x6, 0xa8, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@generic={0x94, 0x12, "dfe218bf26fda220f3532278d1d430da"}, @noop, @timestamp_addr={0x44, 0x2c, 0x39, 0x1, 0x5, [{@empty, 0x7fff}, {@local, 0x12}, {@rand_addr=0x64010100, 0x2}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x7}, {@local, 0x10001}]}, @timestamp_addr={0x44, 0x54, 0xba, 0x1, 0x6, [{@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffff800}, {@multicast1, 0x400}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@empty, 0x5}, {@remote, 0x3}, {@private=0xa010101, 0x2232d594}, {@private=0xa010101, 0x1023}]}]}}}}}) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000380)=@bloom_filter={0x1e, 0x4, 0xc, 0x3, 0x1, r6, 0x9, '\x00', r8, r6, 0x1, 0x4, 0x0, 0x401}, 0x50) kernel console output (not intermixed with test programs): unexpected long global item [ 855.546800][ T5909] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 855.548188][ T43] topre 0003:0853:0148.0028: probe with driver topre failed with error -22 [ 855.569382][ T5909] usb 4-1: device descriptor read/8, error -71 [ 855.687005][ T5909] usb usb4-port1: unable to enumerate USB device [ 856.497938][T16188] sctp: [Deprecated]: syz.2.2699 (pid 16188) Use of struct sctp_assoc_value in delayed_ack socket option. [ 856.497938][T16188] Use struct sctp_sack_info instead [ 857.006799][ T43] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 857.424658][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.436034][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.471145][ T43] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 857.476672][ T5925] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 857.481546][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.509370][ T43] usb 7-1: config 0 descriptor?? [ 857.823580][ T5925] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 857.844192][ T5925] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 857.866863][ T5925] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 857.896384][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.222885][T16199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2702'. [ 858.550407][T16204] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2703'. [ 858.694106][ T43] usbhid 7-1:0.0: can't add hid device: -32 [ 858.700444][ T43] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 858.733399][ T43] usb 7-1: USB disconnect, device number 49 [ 860.801567][ T5896] usb 4-1: USB disconnect, device number 34 [ 860.863919][ T5925] usb 6-1: USB disconnect, device number 12 [ 860.925634][T16212] netlink: 'syz.2.2705': attribute type 8 has an invalid length. [ 861.782308][T16226] netlink: 'syz.6.2708': attribute type 1 has an invalid length. [ 861.892923][ T5925] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 862.078890][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 862.116599][ T5925] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.167111][ T5925] usb 4-1: config 0 has no interfaces? [ 862.172647][ T5925] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 862.192364][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.285803][ T5925] usb 4-1: config 0 descriptor?? [ 862.649913][T16232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2709'. [ 863.018832][ T5896] usb 4-1: USB disconnect, device number 35 [ 863.403121][T16255] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 863.414408][T16255] block device autoloading is deprecated and will be removed. [ 863.676733][ T5896] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 863.692486][T16264] fuse: Unknown parameter '1)Qš×ÓÂÆâ' [ 863.698381][ T5909] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 863.828640][ T5896] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 863.845895][ T5896] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 863.869885][ T5909] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 863.906415][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.911513][ T5896] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 863.933800][ T5909] usb 3-1: Product: syz [ 863.943925][ T5909] usb 3-1: Manufacturer: syz [ 863.946828][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.961337][ T5909] usb 3-1: SerialNumber: syz [ 864.101493][T16270] netlink: 'syz.3.2721': attribute type 8 has an invalid length. [ 864.166718][ T5925] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 864.330646][ T5925] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 864.343424][ T5925] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 864.363491][ T5925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 864.374742][ T5925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 864.391768][ T5925] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 864.405336][ T5925] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 864.414998][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.451279][ T5925] usb 7-1: config 0 descriptor?? [ 864.483827][T16266] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 864.913289][ T5925] hid_parser_main: 175 callbacks suppressed [ 864.913312][ T5925] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 864.934091][ T5925] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 864.942097][ T5925] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 864.957182][ T5925] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 864.965093][ T5925] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 864.982740][ T5925] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 865.014532][ T5925] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 865.194866][T16266] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 865.202903][T16266] IPv6: NLM_F_CREATE should be set when creating new route [ 865.210230][T16266] IPv6: NLM_F_CREATE should be set when creating new route [ 865.223300][T16266] netlink: 308 bytes leftover after parsing attributes in process `syz.6.2719'. [ 865.243303][ T5896] usb 7-1: USB disconnect, device number 50 [ 865.512279][ T5909] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 865.554674][ T5909] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 865.832541][T16288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2726'. [ 865.984446][ T5909] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 866.015638][ T5909] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 866.035331][ T5909] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 866.052255][ T5909] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 866.076170][ T5909] usb 3-1: USB disconnect, device number 24 [ 866.156765][ T5925] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 866.318408][ T5925] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.329982][ T5925] usb 1-1: config 0 interface 0 has no altsetting 0 [ 866.339672][ T5925] usb 1-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 866.349144][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.428580][T16296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2728'. [ 866.450764][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 866.450781][ T30] audit: type=1326 audit(1759383570.235:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16292 comm="syz.3.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009b98eec9 code=0x7ffc0000 [ 866.479338][ C0] vkms_vblank_simulate: vblank timer overrun [ 866.497246][ T5909] usb 6-1: USB disconnect, device number 13 [ 866.505946][ T5925] usb 1-1: config 0 descriptor?? [ 866.512606][ T30] audit: type=1326 audit(1759383570.235:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16292 comm="syz.3.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009b98eec9 code=0x7ffc0000 [ 866.571803][ T30] audit: type=1326 audit(1759383570.235:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16292 comm="syz.3.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f009b98eec9 code=0x7ffc0000 [ 866.594149][ C0] vkms_vblank_simulate: vblank timer overrun [ 866.703672][ T30] audit: type=1326 audit(1759383570.235:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16292 comm="syz.3.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009b98eec9 code=0x7ffc0000 [ 866.726038][ C0] vkms_vblank_simulate: vblank timer overrun [ 866.770026][ T30] audit: type=1326 audit(1759383570.235:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16292 comm="syz.3.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009b98eec9 code=0x7ffc0000 [ 866.792464][ C0] vkms_vblank_simulate: vblank timer overrun [ 866.842599][ T30] audit: type=1326 audit(1759383570.235:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16292 comm="syz.3.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f009b98eec9 code=0x7ffc0000 [ 866.921807][ T30] audit: type=1326 audit(1759383570.235:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16292 comm="syz.3.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009b98eec9 code=0x7ffc0000 [ 866.944177][ C0] vkms_vblank_simulate: vblank timer overrun [ 866.965235][ T5925] hid-alps 0003:044E:1215.002A: unknown main item tag 0x1 [ 867.003337][ T5925] hid-alps 0003:044E:1215.002A: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.0-1/input0 [ 867.061510][ T30] audit: type=1326 audit(1759383570.235:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16292 comm="syz.3.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009b98eec9 code=0x7ffc0000 [ 867.146494][T16303] loop8: detected capacity change from 0 to 1 [ 867.162074][T13800] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 867.171696][ T5925] usb 1-1: USB disconnect, device number 10 [ 867.174013][T16303] Dev loop8: unable to read RDB block 1 [ 867.230707][T16301] fido_id[16301]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 867.231407][ T30] audit: type=1326 audit(1759383570.235:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16292 comm="syz.3.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f009b98eec9 code=0x7ffc0000 [ 867.245599][T16303] loop8: unable to read partition table [ 867.277666][ T30] audit: type=1326 audit(1759383570.235:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16292 comm="syz.3.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009b98eec9 code=0x7ffc0000 [ 867.320404][T16303] loop8: partition table beyond EOD, truncated [ 867.346706][T13800] usb 3-1: Using ep0 maxpacket: 16 [ 867.355610][T13800] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.374134][T16303] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 867.385040][T13800] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 867.399899][T13800] usb 3-1: config 0 interface 0 has no altsetting 0 [ 867.446044][T13800] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 867.457922][T16307] netlink: 'syz.6.2733': attribute type 8 has an invalid length. [ 867.467191][T13800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.483634][T13800] usb 3-1: config 0 descriptor?? [ 867.586677][ T5896] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 867.737038][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 867.750457][ T5896] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 867.786921][ T5896] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 867.802784][ T5896] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 867.822385][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.836605][ T5896] usb 4-1: Product: syz [ 867.844715][ T5896] usb 4-1: Manufacturer: syz [ 867.884909][ T5896] usb 4-1: SerialNumber: syz [ 868.066929][ T5838] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 868.116137][T16305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.125123][T16305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.128242][T13800] usb 3-1: string descriptor 0 read error: -71 [ 868.162095][T13800] usbhid 3-1:0.0: can't add hid device: -71 [ 868.169156][T13800] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 868.188789][T13800] usb 3-1: USB disconnect, device number 25 [ 868.197079][ T5896] usb 4-1: USB disconnect, device number 36 [ 868.234709][ T5838] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 868.244505][ T5838] usb 1-1: config 0 has no interface number 0 [ 868.263066][ T5838] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 868.272825][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.276386][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 868.281562][ T5838] usb 1-1: Product: syz [ 868.297321][ T43] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 868.303738][ T5838] usb 1-1: Manufacturer: syz [ 868.315022][ T5838] usb 1-1: SerialNumber: syz [ 868.342559][ T5838] usb 1-1: config 0 descriptor?? [ 868.466648][ T43] usb 6-1: device descriptor read/64, error -71 [ 868.717561][ T43] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 868.767481][ T5838] usb 1-1: Firmware: major: 165, minor: 244, hardware type: UNKNOWN (159) [ 868.877873][ T43] usb 6-1: device descriptor read/64, error -71 [ 868.977406][ T5838] usb 1-1: failed to fetch extended address, random address set [ 868.996626][ T5838] usb 1-1: atusb_probe: initialization failed, error = -524 [ 868.997386][ T43] usb usb6-port1: attempt power cycle [ 869.015318][ T5838] atusb 1-1:0.128: probe with driver atusb failed with error -524 [ 869.023478][T13800] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 869.201572][T13800] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 869.211211][T13800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.219422][T13800] usb 4-1: Product: syz [ 869.223770][T13800] usb 4-1: Manufacturer: syz [ 869.228614][T13800] usb 4-1: SerialNumber: syz [ 869.235327][T13800] usb 4-1: config 0 descriptor?? [ 869.366748][ T43] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 869.399230][ T43] usb 6-1: device descriptor read/8, error -71 [ 869.444442][T13800] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 869.649499][ T43] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 869.707841][ T43] usb 6-1: device descriptor read/8, error -71 [ 869.827017][ T43] usb usb6-port1: unable to enumerate USB device [ 869.988281][T16348] loop8: detected capacity change from 0 to 1 [ 869.995922][ T5987] Dev loop8: unable to read RDB block 1 [ 870.003496][ T5987] loop8: unable to read partition table [ 870.009929][ T5987] loop8: partition table beyond EOD, truncated [ 870.021052][T16348] Dev loop8: unable to read RDB block 1 [ 870.031853][T16348] loop8: unable to read partition table [ 870.041379][T16348] loop8: partition table beyond EOD, truncated [ 870.049214][T16348] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 870.111670][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.122204][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.245833][T16350] netlink: 'syz.6.2746': attribute type 8 has an invalid length. [ 870.660189][T13800] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 870.686165][T13800] usb 4-1: USB disconnect, device number 37 [ 871.081008][T13800] usb 1-1: USB disconnect, device number 11 [ 871.706774][T13800] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 871.801465][T16373] bridge13: entered promiscuous mode [ 871.949477][T13800] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.238939][T16382] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2755'. [ 872.253646][T13800] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 872.417137][T16377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2756'. [ 872.652052][T13800] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 872.754935][T13800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.948773][T13800] usb 1-1: config 0 descriptor?? [ 873.381746][T16362] sctp: [Deprecated]: syz.0.2750 (pid 16362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 873.381746][T16362] Use struct sctp_sack_info instead [ 873.424076][T16398] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2758'. [ 873.836434][ T5924] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 874.163431][ T5924] usb 6-1: Using ep0 maxpacket: 16 [ 874.191531][ T5924] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 874.206133][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 874.215226][ T5924] usb 6-1: Product: syz [ 874.240883][ T5924] usb 6-1: SerialNumber: syz [ 874.355157][ T5924] usb 6-1: config 0 descriptor?? [ 874.419858][ T5924] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 874.429300][ T5924] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 874.494544][ T5924] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 874.581937][ T5924] dvb_usb_af9035 6-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 875.482429][T13800] usb 1-1: string descriptor 0 read error: -71 [ 875.493371][T13800] usb 1-1: USB disconnect, device number 12 [ 876.526720][T13800] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 876.691947][T13800] usb 1-1: device descriptor read/64, error -71 [ 876.976764][T13800] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 877.025138][ T5896] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 877.055760][ T5924] usb 6-1: USB disconnect, device number 18 [ 877.106616][T13800] usb 1-1: device descriptor read/64, error -71 [ 877.187204][ T5896] usb 7-1: Using ep0 maxpacket: 32 [ 877.195648][ T5896] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.219231][ T5896] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 877.236852][T13800] usb usb1-port1: attempt power cycle [ 877.251126][ T5896] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 877.276721][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.295018][ T5896] usb 7-1: Product: syz [ 877.305134][ T5896] usb 7-1: Manufacturer: syz [ 877.326733][ T5896] usb 7-1: SerialNumber: syz [ 877.349576][ T5896] usb 7-1: config 0 descriptor?? [ 877.505345][T16444] loop8: detected capacity change from 0 to 1 [ 877.527148][ T5964] Dev loop8: unable to read RDB block 1 [ 877.532760][ T5964] loop8: unable to read partition table [ 877.541857][ T5964] loop8: partition table beyond EOD, truncated [ 877.553333][T16444] Dev loop8: unable to read RDB block 1 [ 877.591646][T16444] loop8: unable to read partition table [ 877.596676][T13800] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 877.605358][T16444] loop8: partition table beyond EOD, truncated [ 877.617037][ T5924] usb 7-1: USB disconnect, device number 51 [ 877.617437][T13800] usb 1-1: device descriptor read/8, error -71 [ 877.629761][T16444] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 877.697359][ T5896] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 877.858780][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 877.871411][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49250, setting to 1024 [ 877.882704][ T5896] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 877.886883][T13800] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 877.892095][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.911346][ T5896] usb 6-1: config 0 descriptor?? [ 877.927308][T13800] usb 1-1: device descriptor read/8, error -71 [ 877.976805][ T5925] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 878.038841][T13800] usb usb1-port1: unable to enumerate USB device [ 878.131635][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 878.131654][ T30] audit: type=1326 audit(1759383581.965:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16438 comm="syz.5.2770" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a7078eec9 code=0x0 [ 878.165089][ T5925] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 878.185458][ T5925] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 878.204784][ T5925] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 878.215396][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.484463][ T5924] usb 4-1: USB disconnect, device number 38 [ 878.789766][ T5896] usbhid 6-1:0.0: can't add hid device: -71 [ 878.795827][ T5896] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 878.842730][ T5896] usb 6-1: USB disconnect, device number 19 [ 878.961596][T16463] loop8: detected capacity change from 0 to 1 [ 878.969367][T16463] Dev loop8: unable to read RDB block 1 [ 878.975090][T16463] loop8: unable to read partition table [ 878.981570][T16463] loop8: partition table beyond EOD, truncated [ 878.988541][T16463] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 879.085337][T16466] netlink: 'syz.3.2780': attribute type 8 has an invalid length. [ 879.107042][ T5924] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 879.186807][ T5896] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 879.256704][ T5924] usb 7-1: Using ep0 maxpacket: 32 [ 879.263859][ T5924] usb 7-1: config 0 interface 0 has no altsetting 0 [ 879.273213][ T5924] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 879.282428][ T5924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.291545][ T5924] usb 7-1: Product: syz [ 879.295888][ T5924] usb 7-1: Manufacturer: syz [ 879.300906][ T5924] usb 7-1: SerialNumber: syz [ 879.311562][ T5924] usb 7-1: config 0 descriptor?? [ 879.330058][ T5838] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 879.347411][ T5896] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 879.372443][ T5896] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 879.377146][T16473] loop8: detected capacity change from 0 to 1 [ 879.384688][ T5896] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 879.399100][ T5896] usb 6-1: config 1 has no interface number 0 [ 879.399446][T16473] Dev loop8: unable to read RDB block 1 [ 879.405250][ T5896] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 879.416921][T16473] loop8: unable to read partition table [ 879.424697][ T43] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 879.428707][T16473] loop8: partition table beyond EOD, truncated [ 879.443273][ T5896] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 879.452198][T16473] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 879.469834][ T5896] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 879.479368][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.487809][ T5896] usb 6-1: Product: syz [ 879.502676][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 879.503207][ T5896] usb 6-1: Manufacturer: syz [ 879.513733][ T5896] usb 6-1: SerialNumber: syz [ 879.515867][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 879.543335][ T5838] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 879.559681][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.571385][ T5838] usb 3-1: Product: syz [ 879.575602][ T5838] usb 3-1: Manufacturer: syz [ 879.590517][ T5838] usb 3-1: SerialNumber: syz [ 879.607474][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 879.613578][ T5838] usb 3-1: config 0 descriptor?? [ 879.624322][ T43] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 879.626807][ T5838] hub 3-1:0.0: bad descriptor, ignoring hub [ 879.634070][ T43] usb 4-1: config 0 has no interface number 0 [ 879.644918][ T5838] hub 3-1:0.0: probe with driver hub failed with error -5 [ 879.656349][ T5838] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 879.671924][ T43] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 879.683609][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.693021][ T43] usb 4-1: Product: syz [ 879.701720][ T43] usb 4-1: Manufacturer: syz [ 879.706497][ T43] usb 4-1: SerialNumber: syz [ 879.718947][ T43] usb 4-1: config 0 descriptor?? [ 879.765203][ T5924] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 879.777458][ T43] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 879.790978][ T5896] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 879.819751][ T5896] usb 6-1: USB disconnect, device number 20 [ 879.835536][T16467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.850121][T16467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.862167][ T43] usb 3-1: USB disconnect, device number 26 [ 879.944969][ T5840] usb 4-1: USB disconnect, device number 39 [ 880.376653][ T43] usb 7-1: USB disconnect, device number 52 [ 881.207634][T16498] geneve0: entered promiscuous mode [ 881.273997][T16490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2788'. [ 881.302938][T16501] gtp0: entered promiscuous mode [ 881.387055][T16501] gtp0: entered allmulticast mode [ 881.404215][ T49] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 40105 - 0 [ 881.429211][ T49] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 40105 - 0 [ 881.442556][ T49] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 40105 - 0 [ 881.454882][ T49] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 40105 - 0 [ 881.484526][T16513] loop8: detected capacity change from 0 to 1 [ 881.506677][ T5924] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 881.535402][T16513] Dev loop8: unable to read RDB block 1 [ 881.547261][T16513] loop8: unable to read partition table [ 881.553146][T16513] loop8: partition table beyond EOD, truncated [ 881.595968][T16513] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 881.611767][T16518] netlink: 'syz.2.2793': attribute type 8 has an invalid length. [ 881.667979][ T5924] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 881.693549][ T5924] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 881.724620][ T5924] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 881.753743][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.987822][T16528] loop8: detected capacity change from 0 to 1 [ 882.045320][T16528] Dev loop8: unable to read RDB block 1 [ 882.068592][T16528] loop8: unable to read partition table [ 882.096959][T16528] loop8: partition table beyond EOD, truncated [ 882.161557][T16528] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 882.793682][T16548] netlink: 'syz.2.2797': attribute type 8 has an invalid length. [ 882.976664][ T43] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 882.998369][ T5924] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 883.058706][T16537] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 883.128915][ T43] usb 6-1: device descriptor read/64, error -71 [ 883.148569][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 883.162738][ T5924] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 883.220506][ T5924] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 883.236407][ T5924] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 883.246846][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 883.254991][ T5924] usb 4-1: SerialNumber: syz [ 883.270362][ T5924] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 883.279698][ T5924] usb-storage 4-1:1.0: USB Mass Storage device detected [ 883.322800][ T5924] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 883.341273][ T5924] scsi host1: usb-storage 4-1:1.0 [ 883.456658][ T43] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 883.470664][T16547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.481599][T16547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.599016][ T43] usb 6-1: device descriptor read/64, error -71 [ 883.827384][ T43] usb usb6-port1: attempt power cycle [ 883.918457][T16567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.937092][T16567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.955982][T16567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.995500][T16567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.006670][ T5840] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 884.064243][ T5924] usb 4-1: USB disconnect, device number 40 [ 884.166746][ T43] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 884.175251][ T5840] usb 1-1: Using ep0 maxpacket: 32 [ 884.220022][ T5840] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 884.231430][ T43] usb 6-1: device descriptor read/8, error -71 [ 884.261842][ T5840] usb 1-1: config 0 has no interface number 0 [ 884.296078][ T5840] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 884.309421][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.327711][ T5840] usb 1-1: Product: syz [ 884.342527][ T5840] usb 1-1: Manufacturer: syz [ 884.360065][ T5840] usb 1-1: SerialNumber: syz [ 884.408013][ T5840] usb 1-1: config 0 descriptor?? [ 884.465312][ T5840] smsc95xx v2.0.0 [ 884.507559][ T5924] usb 7-1: USB disconnect, device number 53 [ 884.534251][ T43] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 884.587157][ T43] usb 6-1: device descriptor read/8, error -71 [ 884.707833][ T43] usb usb6-port1: unable to enumerate USB device [ 884.920340][ T5840] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 884.961714][ T5840] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 885.241900][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 885.818573][ T5840] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 885.920505][ T5840] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 886.626718][ T5838] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 886.790829][ T5838] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 886.803083][ T5838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.822651][ T5838] usb 7-1: Product: syz [ 886.831211][ T5838] usb 7-1: Manufacturer: syz [ 886.841539][ T5838] usb 7-1: SerialNumber: syz [ 887.437347][T16601] trusted_key: encrypted_key: master key parameter 'uRer:Ây·¼syz' is invalid [ 887.456313][T16601] trusted_key: encrypted_key: keylen parameter is missing [ 887.688713][ T5925] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 887.847092][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 887.864600][ T5925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 887.885000][ T5925] usb 3-1: config 0 has no interfaces? [ 887.898271][ T5925] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 887.920711][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.947828][ T5925] usb 3-1: config 0 descriptor?? [ 888.018579][T16591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.034293][T16591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.242875][T16600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2807'. [ 888.327657][ T5840] usb 1-1: USB disconnect, device number 17 [ 888.494756][ T5924] usb 3-1: USB disconnect, device number 27 [ 888.622673][T16612] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2805'. [ 889.866692][ T5840] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 890.055143][ T5840] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 890.097715][ T5840] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 890.132842][ T5840] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 890.167370][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.391533][ T5925] usb 4-1: USB disconnect, device number 41 [ 890.584741][ T5838] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 890.621117][ T5838] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 890.710783][ T5838] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 890.752834][ T5838] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 890.829077][ T5838] usb 7-1: USB disconnect, device number 54 [ 890.947533][ T5840] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 891.072098][ T30] audit: type=1326 audit(1759383594.915:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16646 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653978eec9 code=0x7ffc0000 [ 891.126676][ T5840] usb 3-1: Using ep0 maxpacket: 16 [ 891.142555][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.164772][ T30] audit: type=1326 audit(1759383594.915:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16646 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f653978eec9 code=0x7ffc0000 [ 891.190088][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.220541][ T5840] usb 3-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 891.243058][ T30] audit: type=1326 audit(1759383594.915:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16646 comm="syz.0.2820" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f653978eec9 code=0x0 [ 891.247024][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.283423][T16652] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2821'. [ 891.441261][ T5840] usb 3-1: config 0 descriptor?? [ 891.667194][T16664] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 891.767286][ T5838] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 891.968113][T16664] nvme_fabrics: missing parameter 'transport=%s' [ 892.090917][ T5840] zeroplus 0003:0C12:0030.002B: hidraw0: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.2-1/input0 [ 892.120415][T16664] nvme_fabrics: missing parameter 'nqn=%s' [ 892.188010][ T5838] usb 1-1: Using ep0 maxpacket: 16 [ 892.203822][ T5838] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.214202][ T5838] usb 1-1: config 0 has no interfaces? [ 892.222837][ T5838] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 892.239800][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.476589][ T5840] zeroplus 0003:0C12:0030.002B: no inputs found [ 892.498435][ T5838] usb 1-1: config 0 descriptor?? [ 892.519717][ T5840] usb 3-1: USB disconnect, device number 28 [ 892.790477][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2823'. [ 892.810871][T16669] fido_id[16669]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 892.936402][ T5840] usb 1-1: USB disconnect, device number 18 [ 893.094484][T16679] fuse: Bad value for 'fd' [ 893.224816][T16679] macsec0: entered allmulticast mode [ 893.261160][T16683] netlink: 'syz.3.2827': attribute type 8 has an invalid length. [ 893.761240][ T43] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 893.906828][ T5840] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 893.922734][T16697] binder: 16688:16697 ioctl c0306201 200000000080 returned -14 [ 893.932045][ T43] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 893.932073][ T43] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 893.932096][ T43] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 893.932109][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.092832][ T5840] usb 6-1: unable to get BOS descriptor or descriptor too short [ 894.093927][ T5840] usb 6-1: config 7 has an invalid interface number: 112 but max is 0 [ 894.093954][ T5840] usb 6-1: config 7 has no interface number 0 [ 894.093994][ T5840] usb 6-1: config 7 interface 112 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 894.094019][ T5840] usb 6-1: config 7 interface 112 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023 [ 894.148311][ T5840] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=d0.57 [ 894.148381][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.148402][ T5840] usb 6-1: Product: syz [ 894.148452][ T5840] usb 6-1: Manufacturer: syz [ 894.148467][ T5840] usb 6-1: SerialNumber: syz [ 894.430482][ T43] usb 4-1: USB disconnect, device number 42 [ 894.440758][T16692] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 894.486983][T16692] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 895.867652][T16713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 896.096766][ T5909] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 896.326947][ T5909] usb 1-1: Using ep0 maxpacket: 8 [ 896.338178][ T5909] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 896.346918][ T5909] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 896.376771][ T5909] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 896.408466][ T5909] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 896.455727][ T5909] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 896.469431][ T5909] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 896.479288][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.697920][ T5909] usb 1-1: usb_control_msg returned -32 [ 896.752957][ T5909] usbtmc 1-1:16.0: can't read capabilities [ 896.817353][ T5840] pn533_usb 6-1:7.112: NFC: Could not find bulk-in or bulk-out endpoint [ 896.892968][ T5840] usb 6-1: USB disconnect, device number 25 [ 897.396684][ T43] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 897.414908][T16730] loop8: detected capacity change from 0 to 1 [ 897.425152][ T5964] Dev loop8: unable to read RDB block 1 [ 897.430931][ T5964] loop8: unable to read partition table [ 897.438940][ T5964] loop8: partition table beyond EOD, truncated [ 897.460024][T16729] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 897.465614][T16730] Dev loop8: unable to read RDB block 1 [ 897.476902][T16730] loop8: unable to read partition table [ 897.484139][T16730] loop8: partition table beyond EOD, truncated [ 897.495240][T16730] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 897.519910][T16718] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2838'. [ 897.547095][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 897.563697][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 897.574140][ T43] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 897.587293][T16718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 897.598071][T16727] fuse: Invalid gid '00000000000000000000007' [ 897.634508][ T43] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 897.671326][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.692399][ T43] usb 3-1: Product: syz [ 897.698376][T16733] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2842'. [ 897.707782][ T43] usb 3-1: Manufacturer: syz [ 897.712506][ T43] usb 3-1: SerialNumber: syz [ 897.718044][T16733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2842'. [ 897.758185][ T43] usb 3-1: config 0 descriptor?? [ 897.887079][ T30] audit: type=1326 audit(1759383601.735:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16734 comm="syz.3.2843" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f009b98eec9 code=0x0 [ 897.986012][ T43] usb 3-1: USB disconnect, device number 29 [ 898.176976][ T5909] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 898.337088][ T5909] usb 4-1: Using ep0 maxpacket: 16 [ 898.353730][ T5909] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 898.376741][ T5909] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 898.399192][ T5909] usb 4-1: config 0 interface 0 has no altsetting 0 [ 898.456927][ T5909] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 898.531709][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.591574][ T5909] usb 4-1: config 0 descriptor?? [ 898.936767][ T5925] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 899.106756][ T5838] usb 7-1: new low-speed USB device number 55 using dummy_hcd [ 899.147601][ T5945] usb 1-1: USB disconnect, device number 19 [ 899.182178][ T5909] hid (null): unknown global tag 0xc [ 899.219287][ T5909] hid (null): invalid report_size 37757 [ 899.229827][ T5909] hid (null): unknown global tag 0xc [ 899.235349][ T5909] hid (null): unknown global tag 0xe [ 899.242987][ T5909] hid (null): unknown global tag 0xc [ 899.258466][ T5925] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 899.269906][ T5909] hid (null): global environment stack overflow [ 899.278453][ T5925] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 899.296247][ T5925] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 899.333622][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.356820][ T5838] usb 7-1: device descriptor read/64, error -71 [ 899.616921][ T5838] usb 7-1: new low-speed USB device number 56 using dummy_hcd [ 899.788342][ T5838] usb 7-1: device descriptor read/64, error -71 [ 899.856633][ T43] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 899.951683][ T5838] usb usb7-port1: attempt power cycle [ 900.026730][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 900.101424][ T43] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 900.120540][ T43] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 900.136672][ T43] usb 1-1: Product: syz [ 900.144968][ T43] usb 1-1: Manufacturer: syz [ 900.154940][ T43] usb 1-1: SerialNumber: syz [ 900.187115][ T43] usb 1-1: config 0 descriptor?? [ 900.307371][ T5838] usb 7-1: new low-speed USB device number 57 using dummy_hcd [ 900.337829][ T5838] usb 7-1: device descriptor read/8, error -71 [ 900.382682][ T5945] usb 3-1: USB disconnect, device number 30 [ 900.403372][T16755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.412125][T16755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.424915][T16755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2850'. [ 900.480249][T16755] 8021q: VLANs not supported on nlmon0 [ 900.497417][ T43] usb 1-1: USB disconnect, device number 20 [ 900.606806][ T5838] usb 7-1: new low-speed USB device number 58 using dummy_hcd [ 900.627487][ T5838] usb 7-1: device descriptor read/8, error -71 [ 900.642571][T16756] delete_channel: no stack [ 900.741327][ T5838] usb usb7-port1: unable to enumerate USB device [ 900.914584][ T5840] usb 4-1: USB disconnect, device number 43 [ 900.955183][T16766] loop8: detected capacity change from 0 to 1 [ 900.998474][T16766] Dev loop8: unable to read RDB block 1 [ 901.033395][T16766] loop8: unable to read partition table [ 901.076851][T16766] loop8: partition table beyond EOD, truncated [ 901.083173][T16766] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 901.779043][ T5945] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 902.078949][T16793] netlink: 'syz.6.2859': attribute type 4 has an invalid length. [ 902.090273][ T5945] usb 6-1: Using ep0 maxpacket: 32 [ 902.146810][ T5945] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 902.829767][ T5945] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 903.157245][ T5945] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 903.166672][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.174661][ T5945] usb 6-1: Product: syz [ 903.196577][ T5945] usb 6-1: Manufacturer: syz [ 903.211438][ T5945] usb 6-1: SerialNumber: syz [ 903.264093][ T5945] usb 6-1: config 0 descriptor?? [ 903.398238][T16784] delete_channel: no stack [ 903.536495][ T5945] usb 6-1: USB disconnect, device number 26 [ 904.056774][ T5945] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 904.215734][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 904.239444][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 904.287898][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 904.319400][ T5945] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 904.331125][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.357860][ T5945] usb 3-1: Product: syz [ 904.378494][ T5945] usb 3-1: Manufacturer: syz [ 904.409071][ T5945] usb 3-1: SerialNumber: syz [ 904.429592][ T5945] usb 3-1: config 0 descriptor?? [ 904.689238][ T5945] usb 3-1: USB disconnect, device number 31 [ 905.761937][ T5945] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 905.967021][ T5945] usb 7-1: Using ep0 maxpacket: 16 [ 906.030458][ T5945] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.041428][ T5945] usb 7-1: config 0 has no interfaces? [ 906.052996][ T5945] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 906.074933][ T5945] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.201836][ T5945] usb 7-1: config 0 descriptor?? [ 906.445454][T16824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2869'. [ 906.497057][ T43] usb 7-1: USB disconnect, device number 59 [ 906.516950][ T5945] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 906.671890][ T5945] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 906.683328][ T5945] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 906.728642][ T5945] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 906.749463][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.802350][T16830] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 906.815894][ T5945] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 906.867272][ T5909] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 907.032465][ T5909] usb 4-1: Using ep0 maxpacket: 16 [ 907.042373][ T5909] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.054766][ T5909] usb 4-1: config 0 interface 0 has no altsetting 0 [ 907.064394][ T5909] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 907.074065][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.082262][ T5909] usb 4-1: Product: syz [ 907.089043][ T5909] usb 4-1: Manufacturer: syz [ 907.097614][ T5909] usb 4-1: SerialNumber: syz [ 907.108310][ T5909] usb 4-1: config 0 descriptor?? [ 907.134380][ T5909] hub 4-1:0.0: bad descriptor, ignoring hub [ 907.140344][ T5896] usb 3-1: USB disconnect, device number 32 [ 907.152366][ T5909] hub 4-1:0.0: probe with driver hub failed with error -5 [ 907.177567][ T5909] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 907.205532][ T1155] usb 4-1: Failed to submit usb control message: -71 [ 907.226131][ T1155] usb 4-1: unable to send the bmi data to the device: -71 [ 907.255413][ T1155] usb 4-1: unable to get target info from device [ 907.268188][ T1155] usb 4-1: could not get target info (-71) [ 907.274184][ T1155] usb 4-1: could not probe fw (-71) [ 907.286835][ T5945] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 907.298204][T16842] netlink: 308 bytes leftover after parsing attributes in process `syz.6.2873'. [ 907.335920][T16835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.344775][T16835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.420045][T16847] loop2: detected capacity change from 0 to 7 [ 907.430458][T16847] loop2: [ 907.433424][T16847] loop2: partition table partially beyond EOD, truncated [ 907.453146][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 245, setting to 64 [ 907.457227][ T43] usb 4-1: USB disconnect, device number 44 [ 907.482148][ T5945] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 907.493445][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.520496][ T5945] usb 6-1: config 0 descriptor?? [ 907.761360][T16837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.773854][T16837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.793049][ T5945] ath6kl: Failed to submit usb control message: -71 [ 907.823908][ T5945] ath6kl: unable to send the bmi data to the device: -71 [ 907.853797][ T5945] ath6kl: Unable to send get target info: -71 [ 907.891492][ T5945] ath6kl: Failed to init ath6kl core: -71 [ 907.911763][ T5945] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 907.925073][ T5945] usb 6-1: USB disconnect, device number 27 [ 909.879288][T16882] netlink: 'syz.6.2884': attribute type 13 has an invalid length. [ 909.890661][T16882] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2884'. [ 910.410370][T16887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2885'. [ 911.221628][ T1143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 911.276282][ T1143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.281661][T16893] loop2: detected capacity change from 0 to 7 [ 911.334648][T16893] loop2: [ 911.347381][ T1143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 911.361423][T16893] loop2: partition table partially beyond EOD, truncated [ 911.623568][ T1143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 911.665963][ T1143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.702750][ T1143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 911.923115][T16904] loop8: detected capacity change from 0 to 1 [ 911.942001][ T1143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 911.970404][ T1143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.989023][T16904] Dev loop8: unable to read RDB block 1 [ 911.997945][T16904] loop8: unable to read partition table [ 912.001661][ T1143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 912.035396][T16904] loop8: partition table beyond EOD, truncated [ 912.074272][T16904] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 912.144135][T15818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 912.194176][T15818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 912.202615][T15818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 912.211793][T15818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 912.229975][T15818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 912.452428][ T1143] bond0: (slave netdevsim0): Releasing backup interface [ 912.498988][ T1143] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 912.542843][ T1143] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.567201][ T1143] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 912.569955][T16912] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2894'. [ 912.726645][ T5896] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 912.842318][T16898] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2891'. [ 912.879860][T16898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 912.881681][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 912.905811][T16898] fuse: Invalid gid '00000000000000000000007' [ 912.959451][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.994186][ T5896] usb 6-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 913.132737][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.200220][ T5896] usb 6-1: config 0 descriptor?? [ 913.317158][ T1143] bridge_slave_1: left allmulticast mode [ 913.330327][T16920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2896'. [ 913.377532][ T1143] bridge_slave_1: left promiscuous mode [ 913.383404][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.729548][ T1143] bridge_slave_0: left allmulticast mode [ 913.735698][ T1143] bridge_slave_0: left promiscuous mode [ 913.749504][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.777332][ T5896] samsung 0003:0419:0001.002D: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.5-1/input0 [ 914.406208][T15818] Bluetooth: hci0: command tx timeout [ 915.554365][ T5896] usb 6-1: USB disconnect, device number 28 [ 916.448548][T15818] Bluetooth: hci0: command tx timeout [ 916.572167][ T1143] erspan0 (unregistering): left promiscuous mode [ 916.646508][ T1143] gretap0 (unregistering): left promiscuous mode [ 916.772796][ T1143] bond22 (unregistering): (slave gretap1): Releasing active interface [ 916.944558][ T1143] dvmrp1 (unregistering): left allmulticast mode [ 916.980091][ T1143] bond9 (unregistering): (slave geneve2): Releasing active interface [ 917.591245][T16972] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2904'. [ 918.048231][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 918.061840][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 918.087532][ T1143] bond0 (unregistering): Released all slaves [ 918.154307][ T1143] bond1 (unregistering): Released all slaves [ 918.173908][ T1143] bond2 (unregistering): Released all slaves [ 918.215941][ T1143] bond3 (unregistering): Released all slaves [ 918.250120][ T1143] bond4 (unregistering): Released all slaves [ 918.519758][T15818] Bluetooth: hci0: command tx timeout [ 918.528942][ T1143] bond5 (unregistering): Released all slaves [ 918.775251][ T1143] bond6 (unregistering): Released all slaves [ 918.793952][ T1143] bond7 (unregistering): Released all slaves [ 918.808431][ T1143] bond8 (unregistering): Released all slaves [ 918.822310][ T1143] bond9 (unregistering): Released all slaves [ 918.844059][ T1143] bond10 (unregistering): Released all slaves [ 918.860976][ T1143] bond11 (unregistering): Released all slaves [ 918.875674][ T1143] bond12 (unregistering): Released all slaves [ 918.890714][ T1143] bond13 (unregistering): Released all slaves [ 918.905538][ T1143] bond14 (unregistering): Released all slaves [ 918.923422][ T1143] bond15 (unregistering): Released all slaves [ 918.939188][ T1143] bond16 (unregistering): Released all slaves [ 918.954135][ T1143] bond17 (unregistering): Released all slaves [ 919.089571][ T1143] bond18 (unregistering): Released all slaves [ 919.102652][ T1143] bond19 (unregistering): Released all slaves [ 919.116028][ T1143] bond20 (unregistering): Released all slaves [ 919.132608][ T1143] bond21 (unregistering): Released all slaves [ 919.152222][ T1143] bond22 (unregistering): Released all slaves [ 919.165794][ T1143] bond23 (unregistering): Released all slaves [ 919.183072][ T1143] bond24 (unregistering): Released all slaves [ 919.878668][ T1143] tipc: Left network mode [ 920.051941][T16907] chnl_net:caif_netlink_parms(): no params data found [ 920.104043][T16986] netlink: zone id is out of range [ 920.112582][T16986] netlink: zone id is out of range [ 920.139301][T16986] netlink: zone id is out of range [ 920.144530][T16986] netlink: zone id is out of range [ 920.153873][T16986] netlink: zone id is out of range [ 920.159371][T16986] netlink: zone id is out of range [ 920.164527][T16986] netlink: zone id is out of range [ 920.169758][T16986] netlink: zone id is out of range [ 920.174878][T16986] netlink: zone id is out of range [ 920.180089][T16986] netlink: zone id is out of range [ 920.380592][T16993] loop2: detected capacity change from 0 to 7 [ 920.424549][T16993] loop2: [ 920.430361][T16993] loop2: partition table partially beyond EOD, truncated [ 920.605891][T15818] Bluetooth: hci0: command tx timeout [ 921.317493][T17007] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2906'. [ 921.739991][T17015] tipc: Started in network mode [ 921.794485][T17015] tipc: Node identity , cluster identity 4711 [ 921.837422][T17015] tipc: Failed to obtain node identity [ 921.923852][T17015] tipc: Enabling of bearer rejected, failed to enable media [ 922.221827][T16907] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.249515][T16907] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.450124][T16907] bridge_slave_0: entered allmulticast mode [ 922.481625][T16907] bridge_slave_0: entered promiscuous mode [ 922.502106][T17025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 922.670438][T16907] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.716777][T16907] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.724069][T16907] bridge_slave_1: entered allmulticast mode [ 922.766213][T16907] bridge_slave_1: entered promiscuous mode [ 922.792509][ T5838] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 923.186801][T16907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 923.213021][T16907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 923.259156][ T5838] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 923.339399][ T5838] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 923.366721][ T5840] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 923.413824][ T5838] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 923.569629][ T5840] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 923.588080][ T5838] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 923.601598][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.614969][ T5838] usb 6-1: Product: syz [ 923.629888][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.708848][ T5838] usb 6-1: Manufacturer: syz [ 923.726580][ T5838] usb 6-1: SerialNumber: syz [ 923.775973][ T5840] usb 4-1: config 0 descriptor?? [ 923.784294][ T5838] hub 6-1:1.0: bad descriptor, ignoring hub [ 923.816985][ T5840] gspca_main: spca508-2.14.0 probing 8086:0110 [ 923.887384][ T5838] hub 6-1:1.0: probe with driver hub failed with error -5 [ 924.018325][ T5838] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 924.125621][ T1143] hsr_slave_0: left promiscuous mode [ 924.222186][ T1143] hsr_slave_1: left promiscuous mode [ 924.251519][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 924.328196][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 924.367866][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 924.406185][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 924.526904][ T5840] gspca_spca508: reg_read err -110 [ 924.601798][ T5840] gspca_spca508: reg_read err -32 [ 924.667253][ T1143] batman_adv: batadv0: Interface deactivated: dummy0 [ 924.679599][ T1143] batman_adv: batadv0: Removing interface: dummy0 [ 924.686912][ T5840] gspca_spca508: reg_read err -32 [ 924.735938][ T1143] veth1_macvtap: left promiscuous mode [ 924.786060][ T5840] gspca_spca508: reg_read err -32 [ 924.857655][ T5840] gspca_spca508: reg write: error -32 [ 924.953350][ T5840] spca508 4-1:0.0: probe with driver spca508 failed with error -32 [ 925.229799][ T1143] pim6reg (unregistering): left allmulticast mode [ 926.083085][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 926.140519][ T5896] usb 4-1: USB disconnect, device number 45 [ 926.327831][T17072] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2922'. [ 926.347065][ T5925] usb 6-1: USB disconnect, device number 29 [ 926.383029][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 926.405382][ T5925] usblp0: removed [ 927.316649][ T43] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 927.496865][ T43] usb 7-1: Using ep0 maxpacket: 16 [ 927.514102][ T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.524656][ T43] usb 7-1: config 0 has no interfaces? [ 927.530232][ T43] usb 7-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 927.539637][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.550941][ T43] usb 7-1: config 0 descriptor?? [ 927.590321][ T5925] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 927.603308][T16907] team0: Port device team_slave_0 added [ 927.648687][T16907] team0: Port device team_slave_1 added [ 927.747761][ T5925] usb 6-1: Using ep0 maxpacket: 32 [ 927.762818][ T5925] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.776222][T16907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 927.783998][ T5925] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 927.791773][T16907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.809013][ T5925] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 927.826622][T16907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 927.877142][T17069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.886770][T17069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.955977][T16907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 927.974707][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.986665][T16907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.225940][ T5925] usb 6-1: Product: syz [ 928.236966][ T5925] usb 6-1: Manufacturer: syz [ 928.241645][ T5925] usb 6-1: SerialNumber: syz [ 928.254904][T16907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.273701][ T5925] usb 6-1: config 0 descriptor?? [ 928.444336][T16907] hsr_slave_0: entered promiscuous mode [ 928.535138][T16907] hsr_slave_1: entered promiscuous mode [ 928.718525][ T5896] usb 6-1: USB disconnect, device number 30 [ 929.433522][T17107] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 929.819019][T16907] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 929.866330][ T5896] usb 7-1: USB disconnect, device number 60 [ 929.913584][T16907] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 930.082913][T16907] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 930.200751][T17122] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2930'. [ 930.213392][T17115] veth0_to_team: entered promiscuous mode [ 930.224089][T17115] veth0_to_team: entered allmulticast mode [ 930.243628][T16907] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 930.346808][ T5840] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 930.457090][ T5896] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 930.516841][ T5840] usb 6-1: Using ep0 maxpacket: 8 [ 930.531579][ T5840] usb 6-1: config 1 has an invalid descriptor of length 13, skipping remainder of the config [ 930.571674][ T5840] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 6720, setting to 1024 [ 930.601915][ T5840] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 930.605859][T16907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 930.612334][ T5896] usb 7-1: Using ep0 maxpacket: 32 [ 930.630993][ T5840] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 930.644793][ T5896] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 2 [ 930.655538][ T5896] usb 7-1: config 0 interface 0 has no altsetting 0 [ 930.670873][ T5896] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 930.690881][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.706786][ T5896] usb 7-1: Product: syz [ 930.716957][ T5896] usb 7-1: Manufacturer: syz [ 930.743337][ T5840] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 930.764666][ T5896] usb 7-1: SerialNumber: syz [ 930.772117][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.792378][ T5896] usb 7-1: config 0 descriptor?? [ 930.808782][T17123] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 930.820212][ T5840] usb 6-1: Product: syz [ 930.824718][T16907] 8021q: adding VLAN 0 to HW filter on device team0 [ 930.832502][ T5840] usb 6-1: Manufacturer: syz [ 930.844049][ T5840] usb 6-1: SerialNumber: syz [ 930.865502][T17119] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 930.884460][ T5840] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 930.885945][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.899985][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 930.907045][ T5840] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 930.913630][ T5840] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 931.002433][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.009658][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.091444][T17116] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2929'. [ 931.153542][T17119] loop2: detected capacity change from 0 to 7 [ 931.167268][ T5838] usb 6-1: USB disconnect, device number 31 [ 931.437651][T17142] netlink: 'syz.3.2934': attribute type 33 has an invalid length. [ 931.461129][T16907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 931.485994][T17142] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2934'. [ 931.497101][ T5896] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 931.553839][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.560447][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.818725][T17149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2936'. [ 931.843407][T16907] veth0_vlan: entered promiscuous mode [ 931.912173][T16907] veth1_vlan: entered promiscuous mode [ 931.932440][ T5896] gs_usb 7-1:0.0: Disabling termination support for channel 0 (-EREMOTEIO) [ 932.154429][T16907] veth0_macvtap: entered promiscuous mode [ 932.298730][T16907] veth1_macvtap: entered promiscuous mode [ 932.322694][ T5838] usb 7-1: USB disconnect, device number 61 [ 932.390838][T17155] loop7: detected capacity change from 0 to 1 [ 932.476003][T17154] Dev loop7: unable to read RDB block 1 [ 932.482017][T17154] loop7: unable to read partition table [ 932.489129][T17154] loop7: partition table beyond EOD, truncated [ 932.495603][T17154] loop_reread_partitions: partition scan of loop7 (îÝ·ÂU@™:ÖB$Œ{W) failed (rc=-5) [ 932.506177][T16907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 932.582224][ T5896] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 932.599856][T16907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 932.653565][ T1143] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.663449][ T1143] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.691455][ T1143] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.707299][ T1143] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.759788][ T5896] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 932.815276][ T5896] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 932.851240][ T5896] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 932.891448][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.939001][ T5896] usb 3-1: Product: syz [ 932.943217][ T5896] usb 3-1: Manufacturer: syz [ 932.971289][ T5896] usb 3-1: SerialNumber: syz [ 933.043421][ T7986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.089351][ T7986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.160549][T16956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.180898][T16956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.196996][ T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 933.227669][ T5896] usb 3-1: 0:2 : does not exist [ 933.232716][ T5896] usb 3-1: unit 9 not found! [ 933.253477][ T5896] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4) [ 933.312612][ T5896] usb 3-1: USB disconnect, device number 33 [ 933.378654][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 933.393952][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.430510][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 933.449418][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 933.497025][ T24] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 933.506111][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.535691][ T24] usb 4-1: Product: syz [ 933.543652][ T24] usb 4-1: Manufacturer: syz [ 933.557656][ T24] usb 4-1: SerialNumber: syz [ 933.572831][ T24] usb 4-1: config 0 descriptor?? [ 933.756711][T17184] netlink: 'syz.5.2943': attribute type 10 has an invalid length. [ 933.874230][ T24] usb 4-1: USB disconnect, device number 46 [ 933.979499][T17184] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 934.803589][T17193] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2947'. [ 934.954437][T17182] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2944'. [ 935.004456][T17182] net_ratelimit: 458 callbacks suppressed [ 935.004531][T17182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 935.108566][T17182] fuse: Invalid gid '00000000000000000000007' [ 935.227495][T17201] syzkaller0: entered promiscuous mode [ 935.252660][T17201] syzkaller0: entered allmulticast mode [ 935.385683][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 935.417212][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 935.429719][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 935.457215][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 935.464973][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 936.009238][T17204] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (3) [ 936.037580][ T5925] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 936.138117][T17213] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2952'. [ 936.278731][ T5925] usb 7-1: config 0 has an invalid interface number: 84 but max is 0 [ 936.295650][ T5925] usb 7-1: config 0 has an invalid interface number: 66 but max is 0 [ 936.304236][ T5925] usb 7-1: config 0 has an invalid descriptor of length 100, skipping remainder of the config [ 936.328913][ T5925] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 936.421249][ T5925] usb 7-1: config 0 has no interface number 0 [ 936.472315][ T5925] usb 7-1: config 0 has no interface number 1 [ 936.505148][ T5925] usb 7-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 936.567327][ T5925] usb 7-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 936.589390][ T5925] usb 7-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 936.612771][ T5925] usb 7-1: config 0 interface 66 altsetting 153 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 936.655918][T17217] macvtap0: entered allmulticast mode [ 936.662343][T17217] veth0_macvtap: entered allmulticast mode [ 936.668627][ T5925] usb 7-1: config 0 interface 66 has no altsetting 0 [ 936.689334][ T5925] usb 7-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 936.709800][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.717954][ T5925] usb 7-1: Product: syz [ 936.722540][ T5925] usb 7-1: Manufacturer: syz [ 936.727239][ T5925] usb 7-1: SerialNumber: syz [ 936.765551][ T5925] usb 7-1: config 0 descriptor?? [ 936.843259][ T5925] ljca 7-1:0.84: bulk endpoints not found [ 937.710688][ T5837] Bluetooth: hci2: command tx timeout [ 939.158025][T17242] fuse: Bad value for 'fd' [ 939.628637][ T7986] bridge_slave_1: left allmulticast mode [ 939.636708][ T7986] bridge_slave_1: left promiscuous mode [ 939.677051][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.737628][ T7986] bridge_slave_0: left allmulticast mode [ 939.786228][ T7986] bridge_slave_0: left promiscuous mode [ 939.792368][ T5837] Bluetooth: hci2: command tx timeout [ 939.858237][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.722326][ T5925] ljca 7-1:0.66: bulk endpoints not found [ 940.747411][ T5925] usb 7-1: USB disconnect, device number 62 [ 941.866686][ T5837] Bluetooth: hci2: command tx timeout [ 942.053991][ T7986] bond6 (unregistering): (slave gretap1): Releasing active interface [ 942.066080][T17266] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2960'. [ 942.103033][T17266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 942.123528][T17266] fuse: Invalid gid '00000000000000000000007' [ 943.040921][ T7986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 943.053357][ T7986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 943.064398][ T7986] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 943.075568][ T7986] bond0 (unregistering): Released all slaves [ 943.089358][ T7986] bond1 (unregistering): Released all slaves [ 943.103933][ T7986] bond2 (unregistering): Released all slaves [ 943.118836][ T7986] bond3 (unregistering): Released all slaves [ 943.288830][ T7986] bond4 (unregistering): Released all slaves [ 943.456249][ T7986] bond5 (unregistering): Released all slaves [ 943.470553][ T7986] bond6 (unregistering): Released all slaves [ 943.483796][ T7986] bond7 (unregistering): Released all slaves [ 943.496786][ T7986] bond8 (unregistering): Released all slaves [ 943.513455][ T7986] bond9 (unregistering): Released all slaves [ 943.525769][ T7986] bond10 (unregistering): Released all slaves [ 943.555111][ T7986] bond11 (unregistering): Released all slaves [ 943.568243][ T7986] bond12 (unregistering): Released all slaves [ 943.797183][ T7986] IPVS: stopping backup sync thread 15981 ... [ 943.950263][ T5837] Bluetooth: hci2: command tx timeout [ 944.005920][T17255] delete_channel: no stack [ 944.142880][T17209] chnl_net:caif_netlink_parms(): no params data found [ 944.560571][T17297] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 946.643483][T17209] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.657485][T17209] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.664971][T17209] bridge_slave_0: entered allmulticast mode [ 946.675009][T17209] bridge_slave_0: entered promiscuous mode [ 946.697321][T17324] delete_channel: no stack [ 946.708505][T17334] netlink: 'syz.5.2970': attribute type 1 has an invalid length. [ 946.810531][T17209] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.834013][T17209] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.846070][T17209] bridge_slave_1: entered allmulticast mode [ 946.874013][T17209] bridge_slave_1: entered promiscuous mode [ 946.914828][ T7986] hsr_slave_0: left promiscuous mode [ 946.922708][ T7986] hsr_slave_1: left promiscuous mode [ 946.946414][ T7986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 946.980078][ T7986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 947.056506][ T7986] team0 (unregistering): Port device batadv1 removed [ 947.155865][T17338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 947.434542][T14642] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 947.596816][T14642] usb 7-1: Using ep0 maxpacket: 32 [ 947.625706][T14642] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 947.649613][T14642] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.675661][T14642] usb 7-1: Product: syz [ 947.681282][T14642] usb 7-1: Manufacturer: syz [ 947.700230][T14642] usb 7-1: SerialNumber: syz [ 947.709618][T14642] usb 7-1: config 0 descriptor?? [ 947.939518][T17338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 947.948254][T14642] snd-usb-6fire 7-1:0.0: unknown device firmware state received from device: [ 947.954533][T17338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.958541][T14642] b3 c1 69 eb 50 3d 29 15 [ 947.970568][T14642] snd-usb-6fire 7-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 948.020099][ T7986] team0 (unregistering): Port device team_slave_1 removed [ 948.078862][ T7986] team0 (unregistering): Port device team_slave_0 removed [ 948.142272][ T5945] usb 7-1: USB disconnect, device number 63 [ 948.707705][T17209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 948.757842][T17209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.005070][T17362] fuse: Bad value for 'user_id' [ 949.010240][T17362] fuse: Bad value for 'user_id' [ 949.018628][T17209] team0: Port device team_slave_0 added [ 949.161820][T17367] loop2: detected capacity change from 0 to 7 [ 949.162036][T17209] team0: Port device team_slave_1 added [ 949.202452][T17367] loop2: [ 949.205465][T17367] loop2: partition table partially beyond EOD, truncated [ 949.416917][T17209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 949.481345][T17209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 949.522035][T17209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 949.599755][T17377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2979'. [ 949.806143][T17371] geneve2: entered allmulticast mode [ 949.992400][T17209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.000360][T17209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.032939][T17209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 950.046497][T17380] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 950.138327][T17383] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2977'. [ 950.185020][ T7986] IPVS: stop unused estimator thread 0... [ 950.473011][T17209] hsr_slave_0: entered promiscuous mode [ 950.521947][T17209] hsr_slave_1: entered promiscuous mode [ 950.553957][T17209] debugfs: 'hsr0' already exists in 'hsr' [ 950.570031][T17209] Cannot create hsr debugfs directory [ 951.527822][ T24] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 951.689111][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 951.714497][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 951.727133][ T24] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 951.802867][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 952.002513][ T24] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 952.077897][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 97, changing to 10 [ 952.127111][T17433] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2988'. [ 952.142410][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 952.168302][ T24] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 952.190662][ T24] usb 7-1: config 168 interface 0 has no altsetting 0 [ 952.205150][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 952.216602][ T24] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 952.243365][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 952.275153][ T24] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 952.312528][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 97, changing to 10 [ 952.340470][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 952.353467][ T24] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 952.367317][ T24] usb 7-1: config 168 interface 0 has no altsetting 0 [ 952.377044][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 952.384865][ T24] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 952.397027][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 952.434540][ T24] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 952.466317][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 97, changing to 10 [ 952.495005][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 952.554842][ T24] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 952.614046][ T24] usb 7-1: config 168 interface 0 has no altsetting 0 [ 952.645479][ T24] usb 7-1: string descriptor 0 read error: -22 [ 952.652345][ T24] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 952.665787][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.704360][ T24] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 952.906173][ T5945] usb 7-1: USB disconnect, device number 64 [ 952.925471][T17209] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 952.950582][T17209] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 952.957889][ T5840] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 952.983524][T17209] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 953.005828][T17209] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 953.113113][ T5840] usb 4-1: device descriptor read/64, error -71 [ 953.123856][T17410] adutux: No device or device unplugged -19 [ 953.358927][ T5840] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 953.398784][T17209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.426823][T17209] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.442535][ T7987] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.449911][ T7987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.476056][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.483237][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.498022][ T5840] usb 4-1: device descriptor read/64, error -71 [ 953.619524][ T5840] usb usb4-port1: attempt power cycle [ 953.633104][T17209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.731786][T17209] veth0_vlan: entered promiscuous mode [ 953.761190][T17209] veth1_vlan: entered promiscuous mode [ 953.859983][T17209] veth0_macvtap: entered promiscuous mode [ 953.887383][T17209] veth1_macvtap: entered promiscuous mode [ 953.901411][T17458] loop2: detected capacity change from 0 to 7 [ 953.914747][T17458] loop2: [ 953.933612][T17458] loop2: partition table partially beyond EOD, truncated [ 953.938218][T17209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 953.966652][ T5840] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 954.016414][T17209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 954.030034][ T5840] usb 4-1: device descriptor read/8, error -71 [ 954.085167][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.111804][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.133148][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.164513][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.277156][ T5840] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 954.305841][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.319960][ T5840] usb 4-1: device descriptor read/8, error -71 [ 954.335578][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.390455][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.399211][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.416763][ T5909] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 954.438389][ T5840] usb usb4-port1: unable to enumerate USB device [ 954.531649][T17471] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2946'. [ 954.568353][ T5909] usb 7-1: Using ep0 maxpacket: 8 [ 954.583558][ T5909] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 954.595926][ T5909] usb 7-1: config 0 has no interface number 0 [ 954.612081][ T5909] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 954.654876][ T5909] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 954.670730][ T5909] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 954.692432][ T5909] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 954.751373][ T5909] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 954.815755][ T5909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.854034][ T5909] usb 7-1: config 0 descriptor?? [ 954.953808][ T5909] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 956.731743][ T5945] usb 7-1: USB disconnect, device number 65 [ 956.776179][ T5945] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 957.247600][T15818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 957.277559][T15818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 957.286806][T15818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 957.312685][T15818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 957.321220][T15818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 958.788225][T17531] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 959.397677][ T5837] Bluetooth: hci1: command tx timeout [ 959.702779][T17518] chnl_net:caif_netlink_parms(): no params data found [ 959.908691][T17544] netlink: 'syz.5.3003': attribute type 10 has an invalid length. [ 959.959420][T17544] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 960.098590][T17544] 8021q: adding VLAN 0 to HW filter on device bond11 [ 960.426500][T17518] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.460715][T17518] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.476930][T17518] bridge_slave_0: entered allmulticast mode [ 960.499990][T17518] bridge_slave_0: entered promiscuous mode [ 960.546316][T17518] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.568840][T17518] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.576451][T17518] bridge_slave_1: entered allmulticast mode [ 960.947342][T17518] bridge_slave_1: entered promiscuous mode [ 961.252977][T17596] xt_time: unknown flags 0xf4 [ 961.486619][ T5837] Bluetooth: hci1: command tx timeout [ 961.865803][T17518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.937296][T17518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.161359][T17518] team0: Port device team_slave_0 added [ 962.228052][T17518] team0: Port device team_slave_1 added [ 962.468937][T17518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.488752][T17518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.605459][T17518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.674232][T17518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.731961][T17518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.822730][T17518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.155630][T17518] hsr_slave_0: entered promiscuous mode [ 963.164494][T17518] hsr_slave_1: entered promiscuous mode [ 963.181063][T17518] debugfs: 'hsr0' already exists in 'hsr' [ 963.190922][T17518] Cannot create hsr debugfs directory [ 963.550918][ T5837] Bluetooth: hci1: command tx timeout [ 963.898680][T17518] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.978300][T17658] fuse: Bad value for 'fd' [ 964.217782][T17518] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.585296][T17518] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.784398][T17518] bond0: (slave netdevsim0): Releasing backup interface [ 964.976692][ T5838] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 965.167581][T17518] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.205905][ T5838] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 965.251795][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.288885][ T5838] usb 3-1: Product: syz [ 965.329513][ T5838] usb 3-1: Manufacturer: syz [ 965.334145][ T5838] usb 3-1: SerialNumber: syz [ 965.443350][ T5838] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 965.525480][ T5945] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 965.636753][ T5837] Bluetooth: hci1: command tx timeout [ 965.668033][ T43] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 965.696451][T17652] delete_channel: no stack [ 965.827776][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 965.848983][ T5840] usb 3-1: USB disconnect, device number 34 [ 965.881227][ T43] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 965.926847][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.970311][T17518] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 965.991266][T17518] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 966.033166][T17518] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 966.040457][ T43] usb 6-1: Product: syz [ 966.064867][ T43] usb 6-1: Manufacturer: syz [ 966.068612][T17518] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 966.131483][ T43] usb 6-1: SerialNumber: syz [ 966.147516][ T43] usb 6-1: config 0 descriptor?? [ 966.250966][T17518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 966.320321][T17518] 8021q: adding VLAN 0 to HW filter on device team0 [ 966.359728][T17681] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.366956][T17681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 966.377165][ T43] usb read operation failed. (-32) [ 966.408202][ T43] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 966.429714][T17684] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.436964][T17684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.438117][ T43] usb 6-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 966.501620][ T43] usb 6-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 966.594812][ T5945] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 966.656507][ T5945] ath9k_htc: Failed to initialize the device [ 966.679200][ T5840] usb 3-1: ath9k_htc: USB layer deinitialized [ 966.814738][T17518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 967.079715][T17710] warning: `syz.2.3025' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 967.270485][T17518] veth0_vlan: entered promiscuous mode [ 967.284443][T17518] veth1_vlan: entered promiscuous mode [ 967.367865][T17518] veth0_macvtap: entered promiscuous mode [ 967.377331][T17518] veth1_macvtap: entered promiscuous mode [ 967.511923][T17518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 967.696488][T17518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 968.149958][T17681] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.160261][T17681] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.175498][T17681] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.372719][T17681] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.804368][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.852880][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.906919][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.935617][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.458098][T17748] loop8: detected capacity change from 0 to 1 [ 969.474241][ T5987] Dev loop8: unable to read RDB block 1 [ 969.481730][ T5987] loop8: unable to read partition table [ 969.493759][ T5987] loop8: partition table beyond EOD, truncated [ 969.502992][T17748] Dev loop8: unable to read RDB block 1 [ 969.530268][T17748] loop8: unable to read partition table [ 969.536320][T17748] loop8: partition table beyond EOD, truncated [ 969.544478][T17748] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 969.626826][ T5909] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 969.947483][ T5909] usb 7-1: Using ep0 maxpacket: 8 [ 969.981362][ T5909] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 969.992140][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.026252][ T5909] usb 7-1: Product: syz [ 970.068094][ T5909] usb 7-1: Manufacturer: syz [ 970.107260][ T5909] usb 7-1: SerialNumber: syz [ 970.159001][ T5909] usb 7-1: config 0 descriptor?? [ 970.574110][ T5909] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 970.672431][T17745] delete_channel: no stack [ 970.995556][T17767] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3038'. [ 971.724023][ T5909] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 972.001480][ T24] usb 7-1: USB disconnect, device number 66 [ 972.066663][T14642] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 972.246780][T14642] usb 4-1: Using ep0 maxpacket: 8 [ 972.274721][T14642] usb 4-1: unable to get BOS descriptor or descriptor too short [ 972.300408][T14642] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 972.317159][T14642] usb 4-1: config 4 has no interface number 0 [ 972.323516][T14642] usb 4-1: config 4 interface 30 has no altsetting 0 [ 972.344332][T14642] usb 4-1: string descriptor 0 read error: -22 [ 972.354213][T14642] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 972.381681][T14642] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.445470][T14642] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 972.466852][ T24] usb 7-1: new full-speed USB device number 67 using dummy_hcd [ 972.508148][T14642] dw2102: su3000_power_ctrl: 1, initialized 0 [ 972.528187][T14642] dvb-usb: bulk message failed: -22 (2/0) [ 972.545510][T14642] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 972.576427][T14642] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 972.595968][T14642] usb 4-1: media controller created [ 972.601619][T14642] dvb-usb: bulk message failed: -22 (6/0) [ 972.612425][T14642] dw2102: i2c transfer failed. [ 972.631430][T17773] sctp: [Deprecated]: syz.3.3040 (pid 17773) Use of struct sctp_assoc_value in delayed_ack socket option. [ 972.631430][T17773] Use struct sctp_sack_info instead [ 972.648735][T14642] dvb-usb: bulk message failed: -22 (6/0) [ 972.681613][ T24] usb 7-1: config 0 has no interfaces? [ 972.689507][T14642] dw2102: i2c transfer failed. [ 972.712390][T14642] dvb-usb: bulk message failed: -22 (6/0) [ 972.729851][T14642] dw2102: i2c transfer failed. [ 972.735647][T14642] dvb-usb: bulk message failed: -22 (6/0) [ 972.741911][ T24] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 972.779120][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.792753][T14642] dw2102: i2c transfer failed. [ 972.816644][ T24] usb 7-1: Product: syz [ 972.818226][T17773] dvb-usb: bulk message failed: -22 (3/0) [ 972.831073][ T24] usb 7-1: Manufacturer: syz [ 972.835705][ T24] usb 7-1: SerialNumber: syz [ 972.851419][T17790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.861778][T17773] dw2102: i2c transfer failed. [ 972.863004][ T24] usb 7-1: config 0 descriptor?? [ 972.877364][T17773] dvb-usb: bulk message failed: -22 (4/0) [ 972.886201][T17790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.922486][T12854] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 972.926439][T17773] dw2102: i2c transfer failed. [ 972.946088][T14642] dvb-usb: bulk message failed: -22 (6/0) [ 972.972385][T14642] dw2102: i2c transfer failed. [ 972.989381][T14642] dvb-usb: bulk message failed: -22 (6/0) [ 973.002883][T14642] dw2102: i2c transfer failed. [ 973.010053][T14642] dvb-usb: MAC address: 02:02:02:02:02:02 [ 973.070640][T14642] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 973.088512][T12854] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 973.111066][T12854] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 973.162353][T12854] usb 3-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 973.174541][T17798] loop8: detected capacity change from 0 to 1 [ 973.182292][T14642] dvb-usb: bulk message failed: -22 (3/0) [ 973.194042][T17798] Dev loop8: unable to read RDB block 1 [ 973.201742][T14642] dw2102: command 0x0e transfer failed. [ 973.209910][T12854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.212182][T17798] loop8: unable to read partition table [ 973.221011][T14642] dvb-usb: bulk message failed: -22 (3/0) [ 973.238190][T17784] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 973.254588][T14642] dw2102: command 0x0e transfer failed. [ 973.255961][T17798] loop8: partition table beyond EOD, [ 973.265225][T12854] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 973.265902][T17798] truncated [ 973.305355][T17798] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 973.581732][T14642] dvb-usb: bulk message failed: -22 (3/0) [ 973.592000][T14642] dw2102: command 0x0e transfer failed. [ 973.600425][T14642] dvb-usb: bulk message failed: -22 (3/0) [ 973.608936][ T5840] usb 3-1: USB disconnect, device number 35 [ 973.642610][T14642] dw2102: command 0x0e transfer failed. [ 973.657453][T17804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.680908][T14642] dvb-usb: bulk message failed: -22 (1/0) [ 973.691776][T17804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.716267][T14642] dw2102: command 0x51 transfer failed. [ 973.741048][T14642] dvb-usb: bulk message failed: -22 (5/0) [ 973.760888][T14642] dw2102: i2c probe for address 0x68 failed. [ 973.780242][T14642] dvb-usb: bulk message failed: -22 (5/0) [ 973.792655][T14642] dw2102: i2c probe for address 0x69 failed. [ 973.800325][T14642] dvb-usb: bulk message failed: -22 (5/0) [ 973.809748][T14642] dw2102: i2c probe for address 0x6a failed. [ 973.816011][T14642] dw2102: probing for demodulator failed. Is the external power switched on? [ 973.824983][T14642] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 973.988792][T14642] rc_core: IR keymap rc-tt-1500 not found [ 973.998678][T14642] Registered IR keymap rc-empty [ 974.007505][T14642] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 974.030860][T14642] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input80 [ 974.060740][T14642] dvb-usb: schedule remote query interval to 250 msecs. [ 974.233824][T14642] dw2102: su3000_power_ctrl: 0, initialized 1 [ 974.261702][T14642] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 974.303561][T14642] usb 4-1: USB disconnect, device number 51 [ 974.432266][T14642] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 974.782611][T17818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.798046][T17818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.833129][T17818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.842107][T17818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.023539][ T5840] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 975.076819][T14642] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 975.145670][ T5909] usb 7-1: USB disconnect, device number 67 [ 975.249138][T14642] usb 4-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 975.292793][T14642] usb 4-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 975.317925][T14642] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 975.361468][T14642] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 975.394681][T14642] usb 4-1: Manufacturer: syz [ 975.402675][T14642] usb 4-1: SerialNumber: syz [ 975.658708][T14642] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 975.682663][T14642] usb 4-1: USB disconnect, device number 52 [ 975.993804][T17839] loop8: detected capacity change from 0 to 1 [ 976.007844][T17839] Dev loop8: unable to read RDB block 1 [ 976.013614][T17839] loop8: unable to read partition table [ 976.019610][T17839] loop8: partition table beyond EOD, truncated [ 976.025928][T17839] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 976.368184][T14642] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 976.526656][ T5909] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 976.538553][T14642] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 976.547789][T14642] usb 3-1: config 0 has no interface number 0 [ 976.564565][T14642] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 976.576662][T14642] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 976.604374][T14642] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 976.616812][T14642] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.633306][T14642] usb 3-1: Product: syz [ 976.638012][T14642] usb 3-1: Manufacturer: syz [ 976.642626][T14642] usb 3-1: SerialNumber: syz [ 976.658979][T14642] usb 3-1: config 0 descriptor?? [ 976.666023][T17841] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 976.676123][T14642] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 976.690261][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 976.699775][T14642] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 976.699956][ T5909] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.744664][ T5909] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 976.769571][ T5909] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 976.791423][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.813642][ T5909] usb 4-1: Product: syz [ 976.817989][ T5909] usb 4-1: Manufacturer: syz [ 976.822615][ T5909] usb 4-1: SerialNumber: syz [ 976.839476][ T5909] usb 4-1: config 0 descriptor?? [ 977.074097][T17810] delete_channel: no stack [ 977.079568][ T5840] usb 3-1: USB disconnect, device number 37 [ 977.119207][ T5840] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 977.159591][ T5840] cyberjack 3-1:0.69: device disconnected [ 977.419111][ T5945] usb 4-1: USB disconnect, device number 53 [ 978.697091][T17879] loop8: detected capacity change from 0 to 1 [ 978.714730][T17879] Dev loop8: unable to read RDB block 1 [ 978.731971][T17881] loop2: detected capacity change from 0 to 7 [ 978.773958][T17879] loop8: unable to read partition table [ 978.783146][T17881] loop2: [ 978.848044][T17881] loop2: partition table partially beyond EOD, truncated [ 978.848191][T17879] loop8: partition table beyond EOD, truncated [ 978.863068][T17879] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 979.173272][T17892] loop8: detected capacity change from 0 to 1 [ 979.197690][T17892] Dev loop8: unable to read RDB block 1 [ 979.203318][T17892] loop8: unable to read partition table [ 979.241042][T17892] loop8: partition table beyond EOD, truncated [ 979.250520][T17892] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 979.905020][ T5925] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 979.946653][T17902] fuse: Unknown parameter '' [ 980.136842][ T5925] usb 7-1: Using ep0 maxpacket: 32 [ 980.183822][ T5925] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.222833][ T5925] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 980.249927][ T5925] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 980.266429][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.289416][ T5925] usb 7-1: Product: syz [ 980.294954][ T5925] usb 7-1: Manufacturer: syz [ 980.315942][ T5925] usb 7-1: SerialNumber: syz [ 980.349181][ T5925] usb 7-1: config 0 descriptor?? [ 980.592596][ T5925] usb 7-1: USB disconnect, device number 68 [ 980.802172][T17919] loop2: detected capacity change from 0 to 7 [ 980.832439][T17919] loop2: [ 980.835442][T17919] loop2: partition table partially beyond EOD, truncated [ 980.869995][T17922] loop8: detected capacity change from 0 to 1 [ 980.886102][T17922] Dev loop8: unable to read RDB block 1 [ 980.912172][T17922] loop8: unable to read partition table [ 980.927679][T17922] loop8: partition table beyond EOD, truncated [ 980.939712][T17922] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 981.213591][T17932] loop8: detected capacity change from 0 to 1 [ 981.244206][T17932] Dev loop8: unable to read RDB block 1 [ 981.259071][T17932] loop8: unable to read partition table [ 981.265062][T17932] loop8: partition table beyond EOD, truncated [ 981.286084][T17932] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 981.366199][T17934] input: syz1 as /devices/virtual/input/input81 [ 981.986742][ T5925] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 982.196622][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 982.218318][ T5925] usb 4-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 982.232970][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.273170][ T5925] usb 4-1: config 0 descriptor?? [ 982.345816][ T5925] go7007 4-1:0.0: The Lifeview TV Walker Ultra is not supported. Sorry! [ 983.134680][T17953] overlayfs: missing 'lowerdir' [ 983.964496][T17942] delete_channel: no stack [ 984.056893][T17948] delete_channel: no stack [ 984.570885][ T5925] usb 4-1: USB disconnect, device number 54 [ 985.117887][T17972] loop2: detected capacity change from 0 to 7 [ 985.165097][T17972] loop2: [ 985.179482][T17972] loop2: partition table partially beyond EOD, truncated [ 986.256638][T12854] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 986.423245][T17989] tipc: Started in network mode [ 986.437392][T17989] tipc: Node identity 5ea472f6e2e9, cluster identity 4711 [ 986.438739][T12854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.455037][T17989] tipc: Enabled bearer , priority 0 [ 986.477423][T12854] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 986.508859][T17992] syzkaller0: entered promiscuous mode [ 986.532443][T17992] syzkaller0: entered allmulticast mode [ 986.548893][T12854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.575609][T17994] netlink: 'syz.5.3102': attribute type 8 has an invalid length. [ 986.620352][T12854] usb 4-1: config 0 descriptor?? [ 986.738516][T17989] tipc: Resetting bearer [ 986.830941][T17987] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3100'. [ 986.903004][T17986] tipc: Resetting bearer [ 986.990474][T17986] tipc: Disabling bearer [ 987.110417][T12854] lenovo 0003:17EF:6047.002E: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 987.195863][ T30] audit: type=1326 audit(1759383691.035:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18001 comm="syz.5.3105" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a7078eec9 code=0x0 [ 987.253576][T12854] lenovo 0003:17EF:6047.002E: Failed to switch F7/9/11 mode: -71 [ 987.277959][T12854] lenovo 0003:17EF:6047.002E: Failed to switch middle button: -71 [ 987.426708][T12854] lenovo 0003:17EF:6047.002E: Fn-lock setting failed: -71 [ 987.456473][T12854] lenovo 0003:17EF:6047.002E: Sensitivity setting failed: -71 [ 987.594939][T12854] usb 4-1: USB disconnect, device number 55 [ 987.674207][T18010] loop8: detected capacity change from 0 to 1 [ 987.703908][T18005] fido_id[18005]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 987.739231][T18010] Dev loop8: unable to read RDB block 1 [ 987.751434][T18010] loop8: unable to read partition table [ 987.783258][T18010] loop8: partition table beyond EOD, truncated [ 987.846661][T18010] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 988.070539][T18018] loop2: detected capacity change from 0 to 7 [ 988.080878][ T5987] loop2: [ 988.084229][ T5987] loop2: partition table partially beyond EOD, truncated [ 988.101668][T18018] loop2: [ 988.110289][T18018] loop2: partition table partially beyond EOD, truncated [ 988.654162][T18023] loop8: detected capacity change from 0 to 1 [ 988.696433][T18023] Dev loop8: unable to read RDB block 1 [ 988.703674][T18023] loop8: unable to read partition table [ 988.739358][T18023] loop8: partition table beyond EOD, truncated [ 988.778888][T18023] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 988.854748][T18029] FAULT_INJECTION: forcing a failure. [ 988.854748][T18029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 988.873397][T18029] CPU: 0 UID: 0 PID: 18029 Comm: syz.3.3110 Not tainted syzkaller #0 PREEMPT(full) [ 988.873424][T18029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 988.873437][T18029] Call Trace: [ 988.873454][T18029] [ 988.873463][T18029] dump_stack_lvl+0x189/0x250 [ 988.873493][T18029] ? __pfx____ratelimit+0x10/0x10 [ 988.873513][T18029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 988.873535][T18029] ? __pfx__printk+0x10/0x10 [ 988.873553][T18029] ? __might_fault+0xb0/0x130 [ 988.873588][T18029] should_fail_ex+0x414/0x560 [ 988.873617][T18029] _copy_from_user+0x2d/0xb0 [ 988.873640][T18029] __sys_bpf+0x1e3/0x860 [ 988.873661][T18029] ? __pfx___sys_bpf+0x10/0x10 [ 988.873708][T18029] __x64_sys_bpf+0x7c/0x90 [ 988.873731][T18029] do_syscall_64+0xfa/0x3b0 [ 988.873750][T18029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.873766][T18029] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 988.873780][T18029] ? clear_bhb_loop+0x60/0xb0 [ 988.873796][T18029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.873810][T18029] RIP: 0033:0x7f385378eec9 [ 988.873824][T18029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 988.873836][T18029] RSP: 002b:00007f385457b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 988.873853][T18029] RAX: ffffffffffffffda RBX: 00007f38539e6180 RCX: 00007f385378eec9 [ 988.873864][T18029] RDX: 0000000000000048 RSI: 0000200000000140 RDI: 2000000000000000 [ 988.873875][T18029] RBP: 00007f385457b090 R08: 0000000000000000 R09: 0000000000000000 [ 988.873884][T18029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 988.873893][T18029] R13: 00007f38539e6218 R14: 00007f38539e6180 R15: 00007f3853b0fa28 [ 988.873916][T18029] [ 989.637191][ T5909] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 989.798990][ T5909] usb 7-1: Using ep0 maxpacket: 16 [ 989.828771][ T5909] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 989.842980][ T5909] usb 7-1: config 0 has no interfaces? [ 989.886676][ T5909] usb 7-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 989.925770][ T5909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.032034][ T5909] usb 7-1: config 0 descriptor?? [ 990.385802][T18044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.395353][T18044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.415174][T18044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.424557][T18044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.506936][ T5909] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 990.559200][ T5925] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 990.716764][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 990.756372][ T5909] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 990.765951][ T5909] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 990.792547][ T5909] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 990.803486][ T5925] usb 4-1: unable to get BOS descriptor or descriptor too short [ 990.814199][ T5925] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 990.824609][ T5925] usb 4-1: config 4 has no interface number 0 [ 990.843464][ T5909] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 990.854869][ T5925] usb 4-1: config 4 interface 30 has no altsetting 0 [ 990.862118][ T5909] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 990.877511][ T5909] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 990.886745][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 990.898819][ T5925] usb 4-1: string descriptor 0 read error: -22 [ 990.905056][ T5909] usb 3-1: Product: syz [ 990.912272][ T5925] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 990.921920][ T5909] usb 3-1: Manufacturer: syz [ 990.944716][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.992305][ T5909] cdc_wdm 3-1:1.0: skipping garbage [ 991.016096][ T5925] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 991.031470][ T5909] cdc_wdm 3-1:1.0: skipping garbage [ 991.031801][T18048] loop8: detected capacity change from 0 to 1 [ 991.046283][ T5925] dw2102: su3000_power_ctrl: 1, initialized 0 [ 991.053314][ T6079] Dev loop8: unable to read RDB block 1 [ 991.063576][ T5909] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 991.063955][ T6079] loop8: unable to read partition table [ 991.076956][ T5925] dvb-usb: bulk message failed: -22 (2/0) [ 991.084525][ T6079] loop8: partition table beyond EOD, truncated [ 991.091116][ T5909] cdc_wdm 3-1:1.0: Unknown control protocol [ 991.098888][T18048] Dev loop8: unable to read RDB block 1 [ 991.105950][T18048] loop8: unable to read partition table [ 991.107524][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 991.114917][T18048] loop8: partition table beyond EOD, truncated [ 991.135283][T18048] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 991.145692][ T5925] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 991.197874][ T5925] usb 4-1: media controller created [ 991.204811][ T5925] dvb-usb: bulk message failed: -22 (6/0) [ 991.212320][T18042] sctp: [Deprecated]: syz.3.3117 (pid 18042) Use of struct sctp_assoc_value in delayed_ack socket option. [ 991.212320][T18042] Use struct sctp_sack_info instead [ 991.230901][ T5925] dw2102: i2c transfer failed. [ 991.252923][T18042] dvb-usb: bulk message failed: -22 (3/0) [ 991.259329][T18042] dw2102: i2c transfer failed. [ 991.264416][T18042] dvb-usb: bulk message failed: -22 (4/0) [ 991.274001][T18042] dw2102: i2c transfer failed. [ 991.283328][ T5925] dvb-usb: bulk message failed: -22 (6/0) [ 991.299842][ T5925] dw2102: i2c transfer failed. [ 991.312592][T18042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.321368][ T5925] dvb-usb: bulk message failed: -22 (6/0) [ 991.330852][ T5925] dw2102: i2c transfer failed. [ 991.336090][ T5925] dvb-usb: bulk message failed: -22 (6/0) [ 991.336625][T18042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.358560][ T5925] dw2102: i2c transfer failed. [ 991.363490][ T5925] dvb-usb: bulk message failed: -22 (6/0) [ 991.372739][ T5925] dw2102: i2c transfer failed. [ 991.418363][ T5925] dvb-usb: bulk message failed: -22 (6/0) [ 991.450033][ T5925] dw2102: i2c transfer failed. [ 991.464745][ T5925] dvb-usb: MAC address: 02:02:02:02:02:02 [ 991.517102][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 991.560251][T18040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.569384][T18040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.634704][ T5925] dvb-usb: bulk message failed: -22 (3/0) [ 991.659333][ T5925] dw2102: command 0x0e transfer failed. [ 991.669289][ T5925] dvb-usb: bulk message failed: -22 (3/0) [ 991.682070][ T5925] dw2102: command 0x0e transfer failed. [ 991.834888][T18049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.847407][T18049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.006816][ T5925] dvb-usb: bulk message failed: -22 (3/0) [ 992.013358][ T5925] dw2102: command 0x0e transfer failed. [ 992.020383][ T5925] dvb-usb: bulk message failed: -22 (3/0) [ 992.026491][ T5925] dw2102: command 0x0e transfer failed. [ 992.032474][ T5925] dvb-usb: bulk message failed: -22 (1/0) [ 992.039011][ T5925] dw2102: command 0x51 transfer failed. [ 992.044773][ T5925] dvb-usb: bulk message failed: -22 (5/0) [ 992.051196][ T5925] dw2102: i2c probe for address 0x68 failed. [ 992.057429][ T5925] dvb-usb: bulk message failed: -22 (5/0) [ 992.063644][ T5925] dw2102: i2c probe for address 0x69 failed. [ 992.070235][ T5925] dvb-usb: bulk message failed: -22 (5/0) [ 992.076336][ T5925] dw2102: i2c probe for address 0x6a failed. [ 992.083218][ T5925] dw2102: probing for demodulator failed. Is the external power switched on? [ 992.093600][ T5925] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 992.109507][T18052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 992.118956][T18052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.207028][ T5925] rc_core: IR keymap rc-tt-1500 not found [ 992.214451][ T5925] Registered IR keymap rc-empty [ 992.232722][ T5925] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 992.251874][ T5925] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input82 [ 992.265890][ T5925] dvb-usb: schedule remote query interval to 250 msecs. [ 992.279221][ T5925] dw2102: su3000_power_ctrl: 0, initialized 1 [ 992.285640][ T5925] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 992.309139][ T5925] usb 4-1: USB disconnect, device number 56 [ 992.381484][ T5925] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 992.777698][T18066] loop8: detected capacity change from 0 to 1 [ 992.784919][T18066] Dev loop8: unable to read RDB block 1 [ 992.791338][T18066] loop8: unable to read partition table [ 992.798616][T18066] loop8: partition table beyond EOD, truncated [ 992.806072][T18066] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 992.993205][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.999810][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.124457][ T5840] usb 7-1: USB disconnect, device number 69 [ 993.208744][ T5838] usb 3-1: USB disconnect, device number 38 [ 993.391085][T10530] ------------[ cut here ]------------ [ 993.396824][T10530] ida_free called for id=2038 which is not allocated. [ 993.409718][T10530] WARNING: CPU: 0 PID: 10530 at lib/idr.c:592 ida_free+0x280/0x310 [ 993.417887][T10530] Modules linked in: [ 993.421798][T10530] CPU: 0 UID: 0 PID: 10530 Comm: syz.5.1212 Not tainted syzkaller #0 PREEMPT(full) [ 993.431286][T10530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 993.441379][T10530] RIP: 0010:ida_free+0x280/0x310 [ 993.446324][T10530] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 71 2c 0c 00 90 48 c7 c7 c0 69 76 8c 44 89 fe e8 41 f1 53 f6 90 <0f> 0b 90 90 eb 34 e8 95 82 90 f6 49 bd 00 00 00 00 00 fc ff df eb [ 993.466744][T10530] RSP: 0000:ffffc90002ef7820 EFLAGS: 00010246 [ 993.472835][T10530] RAX: 6356d4c09343cd00 RBX: 0000000000000a06 RCX: ffff88802e8f5ac0 [ 993.481159][T10530] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 993.489212][T10530] RBP: ffffc90002ef7908 R08: ffff8880b8824293 R09: 1ffff11017104852 [ 993.497249][T10530] R10: dffffc0000000000 R11: ffffed1017104853 R12: 1ffff920005def08 [ 993.505259][T10530] R13: dffffc0000000000 R14: ffff88801f2f9a00 R15: 00000000000007f6 [ 993.513307][T10530] FS: 0000000000000000(0000) GS:ffff888126372000(0000) knlGS:0000000000000000 [ 993.522289][T10530] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 993.528915][T10530] CR2: 0000000000000000 CR3: 0000000075e3e000 CR4: 00000000003526f0 [ 993.536963][T10530] Call Trace: [ 993.540230][T10530] [ 993.543142][T10530] ? __pfx_ida_free+0x10/0x10 [ 993.547882][T10530] ? namespace_unlock+0x486/0x760 [ 993.552938][T10530] free_mnt_ns+0x52/0xe0 [ 993.557635][T10530] namespace_unlock+0x529/0x760 [ 993.562515][T10530] ? __pfx_namespace_unlock+0x10/0x10 [ 993.568297][T10530] ? free_nsproxy+0x3e/0x350 [ 993.572909][T10530] free_nsproxy+0x3e/0x350 [ 993.577390][T10530] do_exit+0x6b0/0x2300 [ 993.581569][T10530] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 993.587082][T10530] ? do_raw_spin_lock+0x121/0x290 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 993.592124][T10530] ? __pfx_do_exit+0x10/0x10 [ 993.596756][T10530] ? irqentry_exit+0x74/0x90 [ 993.601404][T10530] do_group_exit+0x21c/0x2d0 [ 993.606018][T10530] get_signal+0x1285/0x1340 [ 993.610627][T10530] arch_do_signal_or_restart+0xa0/0x790 [ 993.616204][T10530] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 993.621657][T10530] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 993.628785][T10530] ? exit_to_user_mode_loop+0x40/0x110 [ 993.634281][T10530] exit_to_user_mode_loop+0x72/0x110 [ 993.639794][T10530] ? ret_from_fork+0x4af/0x7d0 [ 993.644582][T10530] ret_from_fork+0x4bc/0x7d0 [ 993.649290][T10530] ? __pfx_ret_from_fork+0x10/0x10 [ 993.654428][T10530] ? __switch_to_asm+0x39/0x70 [ 993.659803][T10530] ? __switch_to_asm+0x33/0x70 [ 993.664594][T10530] ret_from_fork_asm+0x1a/0x30 [ 993.669781][T10530] [ 993.672828][T10530] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 993.680114][T10530] CPU: 0 UID: 0 PID: 10530 Comm: syz.5.1212 Not tainted syzkaller #0 PREEMPT(full) [ 993.689496][T10530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 993.699571][T10530] Call Trace: [ 993.702861][T10530] [ 993.705800][T10530] dump_stack_lvl+0x99/0x250 [ 993.710413][T10530] ? __asan_memcpy+0x40/0x70 [ 993.715017][T10530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 993.720220][T10530] ? __pfx__printk+0x10/0x10 [ 993.724813][T10530] vpanic+0x281/0x750 [ 993.728785][T10530] ? __pfx__printk+0x10/0x10 [ 993.733359][T10530] ? __pfx_vpanic+0x10/0x10 [ 993.737850][T10530] ? is_bpf_text_address+0x26/0x2b0 [ 993.743061][T10530] panic+0xb9/0xc0 [ 993.746796][T10530] ? __pfx_panic+0x10/0x10 [ 993.751227][T10530] __warn+0x31b/0x4b0 [ 993.755202][T10530] ? ida_free+0x280/0x310 [ 993.759527][T10530] ? ida_free+0x280/0x310 [ 993.763844][T10530] report_bug+0x2be/0x4f0 [ 993.768166][T10530] ? ida_free+0x280/0x310 [ 993.772489][T10530] ? ida_free+0x280/0x310 [ 993.776807][T10530] ? ida_free+0x282/0x310 [ 993.781124][T10530] handle_bug+0x84/0x160 [ 993.785359][T10530] exc_invalid_op+0x1a/0x50 [ 993.789857][T10530] asm_exc_invalid_op+0x1a/0x20 [ 993.794699][T10530] RIP: 0010:ida_free+0x280/0x310 [ 993.799626][T10530] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 71 2c 0c 00 90 48 c7 c7 c0 69 76 8c 44 89 fe e8 41 f1 53 f6 90 <0f> 0b 90 90 eb 34 e8 95 82 90 f6 49 bd 00 00 00 00 00 fc ff df eb [ 993.819243][T10530] RSP: 0000:ffffc90002ef7820 EFLAGS: 00010246 [ 993.825320][T10530] RAX: 6356d4c09343cd00 RBX: 0000000000000a06 RCX: ffff88802e8f5ac0 [ 993.833280][T10530] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 993.841242][T10530] RBP: ffffc90002ef7908 R08: ffff8880b8824293 R09: 1ffff11017104852 [ 993.849206][T10530] R10: dffffc0000000000 R11: ffffed1017104853 R12: 1ffff920005def08 [ 993.857169][T10530] R13: dffffc0000000000 R14: ffff88801f2f9a00 R15: 00000000000007f6 [ 993.865151][T10530] ? __pfx_ida_free+0x10/0x10 [ 993.869832][T10530] ? namespace_unlock+0x486/0x760 [ 993.874859][T10530] free_mnt_ns+0x52/0xe0 [ 993.879097][T10530] namespace_unlock+0x529/0x760 [ 993.883953][T10530] ? __pfx_namespace_unlock+0x10/0x10 [ 993.889355][T10530] ? free_nsproxy+0x3e/0x350 [ 993.893936][T10530] free_nsproxy+0x3e/0x350 [ 993.898346][T10530] do_exit+0x6b0/0x2300 [ 993.902501][T10530] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 993.907865][T10530] ? do_raw_spin_lock+0x121/0x290 [ 993.912893][T10530] ? __pfx_do_exit+0x10/0x10 [ 993.917476][T10530] ? irqentry_exit+0x74/0x90 [ 993.922066][T10530] do_group_exit+0x21c/0x2d0 [ 993.926653][T10530] get_signal+0x1285/0x1340 [ 993.931196][T10530] arch_do_signal_or_restart+0xa0/0x790 [ 993.936732][T10530] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 993.942099][T10530] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 993.948258][T10530] ? exit_to_user_mode_loop+0x40/0x110 [ 993.953712][T10530] exit_to_user_mode_loop+0x72/0x110 [ 993.958983][T10530] ? ret_from_fork+0x4af/0x7d0 [ 993.963737][T10530] ret_from_fork+0x4bc/0x7d0 [ 993.968322][T10530] ? __pfx_ret_from_fork+0x10/0x10 [ 993.973432][T10530] ? __switch_to_asm+0x39/0x70 [ 993.978189][T10530] ? __switch_to_asm+0x33/0x70 [ 993.982946][T10530] ret_from_fork_asm+0x1a/0x30 [ 993.987713][T10530] [ 993.991029][T10530] Kernel Offset: disabled [ 993.995348][T10530] Rebooting in 86400 seconds..