last executing test programs: 10m29.450129899s ago: executing program 32 (id=10): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x7, 0x2, 0xfffffffffffffffd, 0x8, 0x5, 0x0, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0x53e5, 0x20}, 0xfffffff7, 0x1, 0x1, 0x0, 0x3, 0x2}, {{@in=@rand_addr=0x64010100, 0x1, 0x32}, 0x2, @in6=@local, 0x3506, 0x4, 0x3, 0x0, 0xc36, 0xfffffffd}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty, 0xfffffffd}, 0x1c) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x8, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0}) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x26, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x20, 0x2, 0x5, {0x5, 0x6, "820037"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x6, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0xfffffffa, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000000, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x3, 0x3, 0x107fff, 0x4c74, 0xfbf5, 0x0, 0xb, 0xa, 0x200, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0x6, 0x3, 0x4, 0x4, 0x8, 0x0, 0x7f, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x8, 0x129432e6, 0xcb, 0xfa, 0xd, 0x2bf, 0x6c9, 0xfffff000, 0x10001, 0x8, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x801, 0x8, 0x4, 0x0, 0x106, 0x2, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xd, 0x9, 0x48c93690, 0x1ff, 0xff], [0x7, 0x4, 0x0, 0x650, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x80002, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x7c, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x20005, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0x5, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x2000008, 0x2], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x100, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0xfffffffe, 0x5, 0x1, 0x5, 0xffffffff, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x3, 0x80ffff, 0x200003, 0x5, 0x80000000, 0x9602, 0xa, 0x2, 0x4, 0x10, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x3, 0x8, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0xff5b, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="e4a15cae709c40a1666f571448d706f7d166d1b2ffea40221976a9cfdc6c990796ae8c6cb449de5e1f96d0585d98196fe7d1cf8f6b09a75d4188c41c08937395c3a02d2fe637593bf0de14eff17b684d1456d1de383912c07a5cac4316ea"], 0x0}, 0x0) 8m46.040787948s ago: executing program 33 (id=581): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x41040, &(0x7f0000000200)=ANY=[@ANYBLOB]) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0xc8, 0x0, 0x0) (async) chdir(&(0x7f0000000080)='./file0\x00') (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000100)={0x14, 0x0, 0x0}, &(0x7f00000003c0)={0x44, &(0x7f0000000540)={0x40, 0x14, 0x80, "53384fa5484e893d00afc80518941a187cd4c9d72884a261d44bb6f5481a9c7906d0c29473c0e9627393a31fb650178f156be3661901e367d72be6bee806c6a6af61eebe593ad7a0ce0dbb7427ec696b4fe2dd0683655d5ee66fa41bbebccff2fd27aec6a2f2cd5a958d54f6f50570fd171c16785ac939f2093f7e9c6bc03cea"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x84, 0x1, '\x00'}, 0x0}) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x1) 5m25.550959496s ago: executing program 34 (id=1432): r0 = syz_open_dev$sg(&(0x7f0000000080), 0xa, 0x12800) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f00000000c0)) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@any, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000440)=0x5) ioctl$TCSETA(r3, 0x8925, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0xeeee0000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2}, {0x0, 0x2000, 0x10, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0xdddd0000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x58, 0x8, 0x4}, {0x0, 0x8000000, 0xb, 0x0, 0x0, 0xfd, 0xfc}, {0xe000, 0x100000, 0x3, 0x8, 0x9, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x10}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xff, 0x0, 0x0, 0x7, 0x5}, {0xeeef0000, 0x6}, {}, 0xddf8ffdb, 0x0, 0x1, 0x0, 0xa, 0x8000, 0x2000, [0xdd41, 0x0, 0xa, 0xffffffffffffffff]}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) 4m51.431878866s ago: executing program 1 (id=1627): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x58) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff6, 0x2, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x8, 0x7ff, 0x25cd, 0x3, 0xa4, 0x6, 0xa2b9, 0x40000006, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0x9, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x8001, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0xa, 0xfffffffb, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0x9, 0x71, 0x8e, 0x10001, 0xa, 0x6, 0x3164, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x401, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x8001, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x9, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x800001cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff5, 0x4, 0x1000, 0xfffff801, 0x5], [0x2, 0x2, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x7ffffffe, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x401, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0x3, 0x1, 0x5, 0x1afe, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xb, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0x2, 0x3, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaeb, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0x2, 0x10000, 0x0, 0x8001, 0x7fff, 0xfff, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000280)={0xb, 0xd9b, 0x8, 0x2800, 0xf, "ff71ff0f00006d07"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000700)={0x0, &(0x7f0000000340)=[@out_dx={0xaa, 0x28, {0x60, 0x2, 0x80000000}}, @out_dx={0xaa, 0x28, {0x5a55, 0x0, 0x4}}, @out_dx={0xaa, 0x28, {0xe2bc, 0x3, 0x2}}, @rdmsr={0x32, 0x18, {0xaaf}}, @rdmsr={0x32, 0x18, {0x4000009b}}, @code={0xa, 0x64, {"66baf80cb85020bc86ef66bafc0cedb9321001c00f32b97b010000b87a000000ba000000000f30b95b0900000f3266470f3a0b1474e30f019a00000000c48161123a6567450f01c5410f01c9b9100600000f32"}}, @wr_drn={0x6e, 0x20, {0x0, 0x5}}, @wr_crn={0x46, 0x20, {0x2, 0x24}}, @code={0xa, 0x74, {"420f01c30f20d835080000000f22d81d007000000f01b2000000003e410f01c9b9800000c00f3235002000000f30c4e1f162acbe7300000066baa000b809000000eff3410fc7b6f000c0fe48b8c72b262e000000000f23d80f21f835800000300f23f8"}}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18, 0x4}, @wrmsr={0x1e, 0x20, {0x9cf}}, @wr_drn={0x6e, 0x20, {0x0, 0xfff}}, @set_irq_handler={0xbe, 0x20, {0x94, 0x1}}, @in_dx={0x82, 0x20, {0x9a5a, 0x4}}, @wr_crn={0x46, 0x20, {0x8, 0x7c72}}, @in_dx={0x82, 0x20, {0x3f1c, 0x2}}, @in_dx={0x82, 0x20, {0x5ca4, 0x6}}, @rdmsr={0x32, 0x18}, @code={0xa, 0x6a, {"0fc7a9f80400003e660f38db31c4217e6f571948b800000000008000000f23c80f21f8350400d0000f23f8c74424007103e7e6c7442402ee000000c7442406000000000f011c2443831fda0f320f01d1f3e0b866ba410066ed"}}, @rdmsr={0x32, 0x18, {0x990}}], 0x382}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000000001010200000000000000000a000005280004802400018005000100c0000000050001008400000005000200000000000500020008000000140010800800024000010000080001400000c0003c3c9f79f7f1f71d672152740e01c853f5c400c4f0e3113937c1446cfdb263e1bc464b327f4c127bc0f47dcdd818d78aa274a3b40a48224571a71186781539218370dc1f0bc43a1dbac678ef432457ec454f46f5a7824717fa4a1be236fb7a0a14367dab"], 0x50}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x44, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r5) pread64(r5, &(0x7f0000000740)=""/59, 0x3b, 0x5df) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x1000, &(0x7f000000b000/0x1000)=nil}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x8, &(0x7f0000000300)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x15}, 0x0) 4m51.205643379s ago: executing program 1 (id=1628): madvise(&(0x7f00005e6000/0x1000)=nil, 0x1000, 0x3) r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0x0, &(0x7f0000000280)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000400)="b700000006005abeef4ba0d5984462732834d1", 0x13}, {&(0x7f0000000100)="37a8a6c41ef711513a5554633f6ecf2512425af281e453256f101699c31d746d9751dcb9435402dbc98277", 0x2b}], 0x3) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) r4 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x100, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 4m50.738392503s ago: executing program 1 (id=1633): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) mmap(&(0x7f0000202000/0x2000)=nil, 0x2000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x55b23000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="070000007b0000b0156f5111c5fa1834262a01577016f263840cdd7593a0c09923fc8e6a1bace8ff00a32f14729032fcf2f6a92b5c32ab5d840e2f4b3c9aa7978e85022f90676a4cef3fb18eed7cc0fe92552d603d06c571090761cce3f7d86a2e4264dd4be1720aaf83a2df882a4c84ffdb934171b9c5dbb41ab6375ed6d9e264ebb8a5f914fb95bb2edf68c31a39c3d452d06d753b3f1a936c49773152b03aba6912e2433f75a124ed033079e00fe5195d4b322af280"], 0x14}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000000c0)="350587a2122ec31c96ed463c43ccdccdbbc22caa8d1c0ee64f26f316a5563521fa6aa33cf5cca9fde940773fc0f198b954e1cb3d2167405698e21b4fd6d68ba6748b1c5d1d633c9130c6751c11fab59f847b2523bfcdc6ae70c2f91fd6439b08a6ea51e461ed4f2d6b36a6158e0c823a3f7f", 0x72}], 0x1) syz_usb_connect(0x4, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000319021808fd070100e56a010203010902240001080a40040904000702b95fc303090588032000060204090583"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000500)={0x1100, &(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000340), {0xb}, &(0x7f0000000380)=""/166, 0xa6, &(0x7f0000000440)=""/117, &(0x7f00000004c0)=[0x0, 0x0], 0x2}, 0x58) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) syz_open_procfs$pagemap(r2, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) r4 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000580)={'filter\x00', 0x0, 0x0, 0x0, [0xffff, 0x3, 0xfffffffffffffffc, 0x4, 0x8000000000000000]}, &(0x7f0000000600)=0x78) 4m50.364400981s ago: executing program 35 (id=1633): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) mmap(&(0x7f0000202000/0x2000)=nil, 0x2000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x55b23000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="070000007b0000b0156f5111c5fa1834262a01577016f263840cdd7593a0c09923fc8e6a1bace8ff00a32f14729032fcf2f6a92b5c32ab5d840e2f4b3c9aa7978e85022f90676a4cef3fb18eed7cc0fe92552d603d06c571090761cce3f7d86a2e4264dd4be1720aaf83a2df882a4c84ffdb934171b9c5dbb41ab6375ed6d9e264ebb8a5f914fb95bb2edf68c31a39c3d452d06d753b3f1a936c49773152b03aba6912e2433f75a124ed033079e00fe5195d4b322af280"], 0x14}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000000c0)="350587a2122ec31c96ed463c43ccdccdbbc22caa8d1c0ee64f26f316a5563521fa6aa33cf5cca9fde940773fc0f198b954e1cb3d2167405698e21b4fd6d68ba6748b1c5d1d633c9130c6751c11fab59f847b2523bfcdc6ae70c2f91fd6439b08a6ea51e461ed4f2d6b36a6158e0c823a3f7f", 0x72}], 0x1) syz_usb_connect(0x4, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000319021808fd070100e56a010203010902240001080a40040904000702b95fc303090588032000060204090583"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000500)={0x1100, &(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000340), {0xb}, &(0x7f0000000380)=""/166, 0xa6, &(0x7f0000000440)=""/117, &(0x7f00000004c0)=[0x0, 0x0], 0x2}, 0x58) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) syz_open_procfs$pagemap(r2, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) r4 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000580)={'filter\x00', 0x0, 0x0, 0x0, [0xffff, 0x3, 0xfffffffffffffffc, 0x4, 0x8000000000000000]}, &(0x7f0000000600)=0x78) 2m34.146097081s ago: executing program 7 (id=2260): r0 = socket$caif_stream(0x25, 0x1, 0x2) connect$caif(r0, &(0x7f0000000000), 0x18) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x1, 0x0, 0x5, 0x199c0c, 0x3e2773}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x0, 0x2, [0x4, 0x49]}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000200)={r4}, 0x8) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x9c, r5, 0x2, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x1}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8009) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r3) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r6, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x44040) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000580)=0x7f, 0x4) connect$caif(r0, &(0x7f00000005c0), 0x18) (async, rerun: 32) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000600), 0x402440, 0x0) (rerun: 32) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r2, 0x0, 0x7, 0xd8, &(0x7f0000000640)="5d9ae62b6d269f90602dc134aa751d5ad5876dcdd19e7c0f8d9ca04320b3085e8b54bc377702c725240c3b79c03fefb45a3e971fcc34c5c34def95b360a0a2b95ff25c55d3b05a2586f88b6898a9f07733e4ce83359ed1169949deab062e4c2810d1e0466fe19531536a2767eef40e849e92aec2f15e68714ffc2778149a5e74fc6a233418dfeb1867a4909e7a9906bb7bbaf98352f4dfe5ad460341285b9a6e3594eec709751d604372bd2cc2cc00cf0012d490effa09962b66bb0ed1e0c30622ee06efd1ddc72aa2a6de84ee28ca50e46236f8ee7ec18c", 0x5}) (async) r8 = accept(r3, &(0x7f00000007c0)=@l2tp={0x2, 0x0, @empty}, &(0x7f0000000840)=0x80) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, &(0x7f0000000880)={r4, 0x46}, 0x8) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000900)={&(0x7f00000008c0)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000940)) (async) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000a00)={0x20, 0x0, &(0x7f0000000980)="6dc8eedaad1d3d8987d603d43ad41c079fc876bf13eaa27592f5e981fe5722202f5ff932a51128ce011538db37b86c139fd725c907c8a5529a63f80f7df83ffb09874f98e33e64a579fc648f05594a7367be0d", 0x101, 0x9}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r9, 0x3b88, &(0x7f0000000a40)={0xc, 0x0}) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000a80)={0x8, r10}) (async, rerun: 32) getsockopt$inet6_buf(r9, 0x29, 0x2b, &(0x7f0000000ac0)=""/209, &(0x7f0000000bc0)=0xd1) (async, rerun: 32) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x33c) (async) fcntl$setflags(r0, 0x2, 0x1) r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, r11, 0x4, 0x50, r9, 0x0) (async, rerun: 64) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), r8) (rerun: 64) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, r12, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x24}}, 0x4000000) 2m34.041627836s ago: executing program 7 (id=2262): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fe1d0c223edc04a6a770f5dbbd0b0bd17b480240438ece397736ec0268208f7d"}}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r4}) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0x7, 0x0, 0x7ffe}]}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) close_range(r1, r5, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x2770c2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd2(0x0, 0x80801) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000340)={0x3, 0xdddd0000, 0x2, r8, 0x2}) ioctl$KVM_GET_NR_MMU_PAGES(r7, 0xae45, 0xfff) write$cgroup_int(r2, &(0x7f00000022c0)=0x3, 0x12) connect$inet6(r0, &(0x7f0000001c00)={0xa, 0x4e20, 0xfc, @private0, 0x6}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) 2m33.141570266s ago: executing program 7 (id=2267): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f0000000540), 0x4) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2m32.847890685s ago: executing program 7 (id=2269): r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x3, 0x3, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0x0, 0x8500, 0x1003, 0x4, 0xffff, 0xffff, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x0, 0x2, 0x8049]}) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000802, r2, &(0x7f0000000000)={0x5, 0x544, 0xff, 0x101, 0x3, 0x4, 0x28000000, 0xffff, 0x7}) 2m32.763169177s ago: executing program 7 (id=2271): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000000414000000110001"], 0xd8}}, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x5, 0xffffffff, 0x4}, 0xc) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, 0x0, 0xb97534d5fe9704cf, 0x0, 0xfffffffc, {{0x12}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x2c}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) 2m30.701609541s ago: executing program 4 (id=2289): r0 = syz_usb_connect(0x6, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="9365ee9ae7e22731826532bd7bcccf1193d64d62bcfe2273d61899139ca53fe1347ba3e4211cebe6c7db2729f36d9afe998c1d0471e03a05c0f5283d21eac541f33288ddea020a96379e98d84a3e499922cdca159fa5536c05db5927ddc7a05a36a60a571384", @ANYRESHEX=0x0, @ANYRES64], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x141202, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000012c0)=@broute={'broute\x00', 0x20, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004c0], 0x0, 0x0, 0x0}, 0xe40) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xd) r5 = dup(r4) read$FUSE(r5, 0x0, 0x2) write$FUSE_INIT(r5, &(0x7f0000002100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x41912a08, 0xffff, 0x0, 0x1f, 0x1, 0x0, 0x0, 0x515244b379a1e22c, 0x7}}, 0x50) ioctl$EVIOCGVERSION(r5, 0x80044501, &(0x7f0000000140)=""/100) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x54) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2m30.104489383s ago: executing program 4 (id=2290): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x1310, 0x80, 0x0, 0x30, 0x0, 0x4, 0x0, 0x0, {}, {}, {0x3, 0x3}, {0x0, 0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6}, 0x14) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x6}, 0x8) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r2, r2, 0x0) (async, rerun: 32) fsmount(0xffffffffffffffff, 0x0, 0x7c) (rerun: 32) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty}, 0x1c) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) r6 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000300)={'s526\x00', [0x0, 0x5, 0x81, 0xffffffff, 0x13, 0x10001, 0x3, 0x6, 0xffe, 0xe3b3, 0x4, 0x80006, 0x4, 0x100005, 0xa9, 0x6, 0x7, 0x40000009, 0x830, 0x5, 0xfffd, 0x8, 0xa4df, 0x8001, 0x5, 0x0, 0x100007, 0x3, 0x8, 0x8, 0x713]}) (async, rerun: 64) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0xffffffff) (async) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_PANIC(r7, 0x541b) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008d1e50f239102021a70201020301090212000100ffc00009047df600e4409802"], 0x0) syz_usb_disconnect(r9) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="12011003020000ff2505a1a440000102030109025c000201ea30050904000001020d0000052406000105248080000d240f0109000000fcff07000206e6ac98001309058103400005ff030904010004020d00000904010102020d00004976058202ff0300050f0905030210000e020c"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX=r8], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) unshare(0x66000080) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x40041, 0x0) 2m29.71405512s ago: executing program 7 (id=2292): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000040000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x50, r3, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "d0c75af033b28f1c0f000000000000af"}, @NL80211_ATTR_PMK={0x14, 0xfe, "d708320d5ddf3dfe1082501dda9a74a9"}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0x20040000) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="16010107f748be08f41515002b6f0102030109021200010902200b0904"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x46}) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {}, 0xfffffff7, 0x60, 0x0, 0x0, 0xdd, 0x40, 0x0, 0x0, 0x401, 0x0}) 2m29.016499705s ago: executing program 4 (id=2296): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYBLOB="0b0600fcdbdf25300000408d660005003300030000009c1dcb70a515f059fffaa0d694860a0001007770616e30000000000000"], 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000001200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="58a4081392b2368657e57ab38063dec45f3abc6162563d21f15cfa17dda11a3079b88171a1b3c3c135360e8ef6e9eecf80dbb8c5fb08e1102ae4dbfc707bc65d44fde639b91bbd15e1d1206928a2715df05670bcffb8e5027ca62a7e334a37d361a5", @ANYBLOB="00012abd7000fcdbdf251000000808000600"/30], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8004) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000001200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="58a4081392b2368657e57ab38063dec45f3abc6162563d21f15cfa17dda11a3079b88171a1b3c3c135360e8ef6e9eecf80dbb8c5fb08e1102ae4dbfc707bc65d44fde639b91bbd15e1d1206928a2715df05670bcffb8e5027ca62a7e334a37d361a5", @ANYBLOB="00012abd7000fcdbdf251000000808000600"/30], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8004) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x0, 0x3c90, 0x7, &(0x7f0000000640)="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"}, {0x2, 0x0, 0x41ff7485, 0x0}, {0x2, 0x0, 0x100d5ba, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x1, 0x0, 0xa, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x1f, 0x70, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x0, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x1, 0x0}]}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000380)=ANY=[]) getsockopt$MRT6(r2, 0x29, 0xce, &(0x7f0000001040), &(0x7f0000001080)=0x4) (async) getsockopt$MRT6(r2, 0x29, 0xce, &(0x7f0000001040), &(0x7f0000001080)=0x4) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000e00)="67f9434c45865d140608573fcdb3029048c826ba8cfeea26c89bed9c3a79a5322599aa558606476310fb19c3b3e493ed49e1a95b32f9144a8fb30eeaf4f3548f000d2131e15b046b19b71d83b1f3340264c3a10b9adbe4708df5fcfe0efd904595bc566d1fc1b7a6aa0d9514887c62dad394eca94fa59320eecb4f8a1bf35c397bf34dc92225226d1e685aa7647bc82644a4e0b78bde5af7672d7faadc76901fe3b94254298df35ed5d7f37c71a4a8dbbaa546f7b460dad7dff0f432c85763557692703b1b48c7fc9bc27bbe93780504eab19dc3110ecd58531c67926a91f6fe4235d0af7ed6", 0xe6}, {&(0x7f0000000300)="d9b877cb5ae6cd623e07a1a4ab95a5c753b39c5b222aa60eeeedef4380e7ae427cbd6396e23b", 0x26}], 0x2, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x150}}], 0x1, 0x404c041) (async) sendmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000e00)="67f9434c45865d140608573fcdb3029048c826ba8cfeea26c89bed9c3a79a5322599aa558606476310fb19c3b3e493ed49e1a95b32f9144a8fb30eeaf4f3548f000d2131e15b046b19b71d83b1f3340264c3a10b9adbe4708df5fcfe0efd904595bc566d1fc1b7a6aa0d9514887c62dad394eca94fa59320eecb4f8a1bf35c397bf34dc92225226d1e685aa7647bc82644a4e0b78bde5af7672d7faadc76901fe3b94254298df35ed5d7f37c71a4a8dbbaa546f7b460dad7dff0f432c85763557692703b1b48c7fc9bc27bbe93780504eab19dc3110ecd58531c67926a91f6fe4235d0af7ed6", 0xe6}, {&(0x7f0000000300)="d9b877cb5ae6cd623e07a1a4ab95a5c753b39c5b222aa60eeeedef4380e7ae427cbd6396e23b", 0x26}], 0x2, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x150}}], 0x1, 0x404c041) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) (async) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000580)=[{0x3, 0xc, 0x10, 0x6, @tick=0x7fff, {0x6}, {0x2}, @raw32={[0x0, 0x8001, 0x9]}}, {0x80, 0x1, 0xf, 0xfc, @time={0x8, 0x5}, {0xc}, {0x9, 0x3}, @control={0x2, 0x5, 0x7}}], 0x38) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001100)={0x0, 0xfffffffffffffedc, &(0x7f00000010c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="7479fb1cf1795eb4ef631bdd2dae17fec9fb4706e2da75a98678f8a6178fec5a5e6adb3fdf28dadb442afb6aa75e75d61700d092937177be96d1d1c71a2c5a9799021042742390f3359ff157c17292c5f85976f40f2b90e120fa53a730210b95"], 0x6f4}, 0x1, 0x0, 0x0, 0x2040080}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001100)={0x0, 0xfffffffffffffedc, &(0x7f00000010c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="7479fb1cf1795eb4ef631bdd2dae17fec9fb4706e2da75a98678f8a6178fec5a5e6adb3fdf28dadb442afb6aa75e75d61700d092937177be96d1d1c71a2c5a9799021042742390f3359ff157c17292c5f85976f40f2b90e120fa53a730210b95"], 0x6f4}, 0x1, 0x0, 0x0, 0x2040080}, 0x0) syz_clone3(&(0x7f0000000280)={0x1011c2000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) pidfd_send_signal(r5, 0x3b, &(0x7f00000005c0)={0x3, 0x200, 0x71b}, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000000540)="43210098") (async) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000000540)="43210098") setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000040)=0x10009, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) write$sndseq(r5, &(0x7f0000000fc0)=[{0x3, 0x8, 0xe4, 0x4, @time={0x6, 0x80}, {0x7, 0x7f}, {0x5, 0xf}, @raw8={"22840200000000001e00d6c1"}}, {0xd, 0x3, 0x0, 0x3, @time={0x80, 0x6}, {0x9, 0x3}, {0xd2, 0xfb}, @connect={{0x40, 0x2}, {0x1a, 0x1}}}, {0x9, 0x6, 0x5, 0x4, @tick=0x401, {0x5, 0x6}, {0x2, 0xaf}, @raw8={"977d18ed11ad5d6d10e1a748"}}], 0x54) 2m28.313286325s ago: executing program 4 (id=2298): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000380)) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000080)=0x14a81, 0x4) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='befs\x00', 0x214003, 0x0) 2m28.234384914s ago: executing program 4 (id=2299): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x42000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8000000000000000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m27.979014848s ago: executing program 4 (id=2301): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f907, 0x0, '\x00', @p_u32=0x0}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, &(0x7f00000002c0)={0x80, 0x0, 0x8}) syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d4ee0620cf10618012b70102030109022d00010000100009040600024f1ce80009050202000202000009058202"], 0x0) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000280)={0x5, 0x140, 0x100, &(0x7f0000000980)=[0x9, 0x7ff, 0x7, 0x1, 0x6, 0x7fffffff, 0x4, 0x8000000000000001, 0x7a39405d, 0x1, 0xffffffffffffffff, 0x7, 0x100, 0x42, 0xffffffff, 0x1, 0x4, 0x0, 0x7f, 0x4, 0x8, 0x9fc9, 0x4, 0x2, 0x7, 0xd06, 0x0, 0x20, 0x7, 0xa53, 0x5, 0x9, 0x6, 0x1, 0x93, 0xeac, 0x8, 0x40, 0x25, 0xc05, 0x4, 0x9, 0x6, 0x3, 0x3, 0x6, 0x8, 0xb32f, 0x8, 0x3, 0xfa6, 0xfff, 0xfffffffffffffffc, 0x3, 0x7, 0x10003, 0x3, 0x1, 0x3, 0x2, 0x800000000000ff, 0x40000004000008, 0x9, 0x6, 0x4, 0x2, 0x2, 0x5b3, 0x8000, 0x3, 0x6, 0xffff, 0x4, 0x847b, 0x2, 0x5, 0x6, 0xfffffffffffffffe, 0x31ed, 0xd, 0xb5, 0x0, 0x8, 0x4, 0x3, 0xfffffffffffffff4, 0x9, 0x3, 0x400, 0x1ce4, 0x6a3, 0x1000, 0x5, 0x9, 0x3, 0x7, 0x10000, 0x5b800000000, 0x6, 0x6, 0xb, 0x6, 0x6, 0x1e01, 0x4, 0xfffffffffffffffa, 0x9, 0x805e, 0x8, 0x6, 0x6cd, 0x8, 0x10001, 0x4, 0x2, 0x7fff, 0x1, 0x3, 0x8001, 0x1, 0x8, 0x8, 0x4, 0x80000004, 0x94ca, 0x3, 0x6, 0x6de43615]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000340)=@arm64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000080)={0x0, 0x2, 0x8000, 0x960, 0x3}) r6 = dup3(r0, r4, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000200), 0x4) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi4\x00', 0x20000, 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f00000005c0)='fd', 0x0, r7) ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000100)={0x2, 0x48c, 0x65e, 0x4800}) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x10000) r9 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000000)={0x0, 0x10, 0xf18, 0x7, 0x0, 0x1, 0x0}) 2m15.762699754s ago: executing program 5 (id=2326): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@remote, @in6=@remote, 0x0, 0x33, 0x0, 0x0, 0xa, 0x60, 0x30}, {0x0, 0x7f, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x200, 0xfeffffffffffffff}, {0x3, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@remote, @in6=@empty, 0x4e22, 0x0, 0x4e24, 0xe14f, 0xa, 0x0, 0x40, 0x0, 0x0, 0xee01}, {0x0, 0x1000000000000401, 0xfffffffffffffffc, 0x9, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x75, 0x203, 0x0, 0x100000000007fff}, 0xffffffff, 0x6e6bb1, 0x1, 0x0, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 2m15.693052944s ago: executing program 5 (id=2327): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000002c0)={[&(0x7f0000000580)='/dev/ppp\x00(\xc0\x91D\x83\xb4\x7f0\x02~Z(ex\a\x90%\x9fx0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x50, r3, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "d0c75af033b28f1c0f000000000000af"}, @NL80211_ATTR_PMK={0x14, 0xfe, "d708320d5ddf3dfe1082501dda9a74a9"}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0x20040000) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="16010107f748be08f41515002b6f0102030109021200010902200b0904"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x46}) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {}, 0xfffffff7, 0x60, 0x0, 0x0, 0xdd, 0x40, 0x0, 0x0, 0x401, 0x0}) 2m12.838418163s ago: executing program 37 (id=2301): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f907, 0x0, '\x00', @p_u32=0x0}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, &(0x7f00000002c0)={0x80, 0x0, 0x8}) syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d4ee0620cf10618012b70102030109022d00010000100009040600024f1ce80009050202000202000009058202"], 0x0) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000280)={0x5, 0x140, 0x100, &(0x7f0000000980)=[0x9, 0x7ff, 0x7, 0x1, 0x6, 0x7fffffff, 0x4, 0x8000000000000001, 0x7a39405d, 0x1, 0xffffffffffffffff, 0x7, 0x100, 0x42, 0xffffffff, 0x1, 0x4, 0x0, 0x7f, 0x4, 0x8, 0x9fc9, 0x4, 0x2, 0x7, 0xd06, 0x0, 0x20, 0x7, 0xa53, 0x5, 0x9, 0x6, 0x1, 0x93, 0xeac, 0x8, 0x40, 0x25, 0xc05, 0x4, 0x9, 0x6, 0x3, 0x3, 0x6, 0x8, 0xb32f, 0x8, 0x3, 0xfa6, 0xfff, 0xfffffffffffffffc, 0x3, 0x7, 0x10003, 0x3, 0x1, 0x3, 0x2, 0x800000000000ff, 0x40000004000008, 0x9, 0x6, 0x4, 0x2, 0x2, 0x5b3, 0x8000, 0x3, 0x6, 0xffff, 0x4, 0x847b, 0x2, 0x5, 0x6, 0xfffffffffffffffe, 0x31ed, 0xd, 0xb5, 0x0, 0x8, 0x4, 0x3, 0xfffffffffffffff4, 0x9, 0x3, 0x400, 0x1ce4, 0x6a3, 0x1000, 0x5, 0x9, 0x3, 0x7, 0x10000, 0x5b800000000, 0x6, 0x6, 0xb, 0x6, 0x6, 0x1e01, 0x4, 0xfffffffffffffffa, 0x9, 0x805e, 0x8, 0x6, 0x6cd, 0x8, 0x10001, 0x4, 0x2, 0x7fff, 0x1, 0x3, 0x8001, 0x1, 0x8, 0x8, 0x4, 0x80000004, 0x94ca, 0x3, 0x6, 0x6de43615]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000340)=@arm64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000080)={0x0, 0x2, 0x8000, 0x960, 0x3}) r6 = dup3(r0, r4, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000200), 0x4) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi4\x00', 0x20000, 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f00000005c0)='fd', 0x0, r7) ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000100)={0x2, 0x48c, 0x65e, 0x4800}) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x10000) r9 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000000)={0x0, 0x10, 0xf18, 0x7, 0x0, 0x1, 0x0}) 2m12.36389389s ago: executing program 5 (id=2335): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) (async) syz_clone(0x800211, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) (async) listen(r0, 0x100) (async, rerun: 32) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x38, 0x8000}, 0x20000000) (rerun: 32) 2m12.111287028s ago: executing program 5 (id=2336): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r1, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffc00, 0x2, 0x6, "54d208b5bdf6814e8f260754f98b3cc2d53db1"}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) close(0x4) r2 = signalfd4(r0, &(0x7f0000000000)={[0xd46]}, 0x8, 0x80000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r3, 0x4b4c, &(0x7f0000000080)) ioctl$KDMKTONE(r3, 0x4b30, 0x101) setsockopt$sock_int(r2, 0x1, 0x1e, &(0x7f0000000080)=0x7, 0x4) 2m11.93507891s ago: executing program 5 (id=2337): syz_open_dev$usbmon(&(0x7f0000000080), 0x6a2, 0x20000) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) mbind(&(0x7f0000730000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x400, 0x2) 2m4.829793522s ago: executing program 9 (id=2359): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x4}) mount$9p_unix(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x841, &(0x7f00000004c0)) 2m4.745842299s ago: executing program 9 (id=2361): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000002100), 0x4010, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75708256643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) utime(&(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0xc0c719fe1969ce50, 0x0, 0x0, 0x0, 0x1}}, 0x50) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000c31000/0x14000)=nil, 0x14000}, 0x2}) syz_fuse_handle_req(r2, &(0x7f00000082c0)="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", 0x2000, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x9, 0xfffffffe, 0x0, {0x6, 0xffffffffffffffff, 0x80000005, 0x2d, 0x7, 0x5, 0x3, 0x1, 0x9, 0x2000, 0x6, r4, r5, 0x1, 0x365}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) pwritev2(r6, &(0x7f0000000d80)=[{&(0x7f0000000900)="7f", 0x1}], 0x1, 0xf09, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1, 0x900}) 2m4.618421723s ago: executing program 9 (id=2362): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x1a1081, 0x18) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014001000000006010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1000000000100103f5aeb4edbb57a5025ccca9ea2360db70100000040fad95e67e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000", 0xd8}], 0x1}, 0x4080044) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000480)={0x20, 0xe, 0x4, "e15ff9f3"}, 0x0, 0x0, 0x0, 0x0}) 2m2.146451099s ago: executing program 9 (id=2371): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3}], 0x1, 0x40800) socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000034709d405f0530c2a4b6010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r2, 0x6, 0x74, &(0x7f0000000540)="dd76d9f09cc96f52567750ae418c30dbb906c5c2e28c460d59ee1ad9d3df2b33d6cec97c3dfce5bfbcab5364780d792f641e619bde5cc8d833e5aa49c3bef2fa6c355c3f6f1fb920a272d84d1e7b5b2f5919b52003e7f82e95d476499ebd32da82da8e0ab57142fffe87e5b0264456dd566348c4") syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x1}}) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000200)='btrfs\x00', 0x0, &(0x7f0000000380)='acl') 2m0.046542258s ago: executing program 9 (id=2380): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) pread64(r1, &(0x7f00000000c0)=""/75, 0x4b, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="200322000000222495989bdbe73f444901dabc7bd815968059ec27772854ba39acb2"], 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0}, 0x0) 1m58.353044133s ago: executing program 9 (id=2387): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x181281, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x2, 0xa, 0x4, 0x0, 0x20000001, 0xc4, 0x2, 0x4, 0x1, 0x1, 0x7f, 0xf, 0x0, 0x200, 0x1, 0x6, 0x80, 0x8, 0x1, '\x00', 0x3, 0x4}) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000540)={0x80000, 0x0, {[0x9, 0x1000000001, 0x8000000000000000, 0x67d, 0x5, 0x3, 0x3, 0x2]}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x494000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f00000000c0)=0xffffa592, 0x4) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=0x0, @ANYBLOB="04000b00"], 0x20}}, 0x400c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r10 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r10, 0x40045730, &(0x7f0000002780)) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(xts-twofish-avx)\x00'}, 0x58) ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x8108551b, &(0x7f0000000380)={0x3ff, 0x0, "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"}) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_TUNNEL_GET(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) utime(&(0x7f0000000040)='./file2\x00', &(0x7f0000000100)={0x7fffffffffffffff, 0x10000}) 1m56.898906304s ago: executing program 38 (id=2337): syz_open_dev$usbmon(&(0x7f0000000080), 0x6a2, 0x20000) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) mbind(&(0x7f0000730000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x400, 0x2) 1m43.026554868s ago: executing program 39 (id=2387): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x181281, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x2, 0xa, 0x4, 0x0, 0x20000001, 0xc4, 0x2, 0x4, 0x1, 0x1, 0x7f, 0xf, 0x0, 0x200, 0x1, 0x6, 0x80, 0x8, 0x1, '\x00', 0x3, 0x4}) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000540)={0x80000, 0x0, {[0x9, 0x1000000001, 0x8000000000000000, 0x67d, 0x5, 0x3, 0x3, 0x2]}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x494000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f00000000c0)=0xffffa592, 0x4) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=0x0, @ANYBLOB="04000b00"], 0x20}}, 0x400c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r10 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r10, 0x40045730, &(0x7f0000002780)) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(xts-twofish-avx)\x00'}, 0x58) ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x8108551b, &(0x7f0000000380)={0x3ff, 0x0, "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"}) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_TUNNEL_GET(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) utime(&(0x7f0000000040)='./file2\x00', &(0x7f0000000100)={0x7fffffffffffffff, 0x10000}) 1m21.294860174s ago: executing program 6 (id=2607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x894b, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1m21.166429353s ago: executing program 6 (id=2608): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x20000, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) pidfd_getfd(r1, r2, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r4, 0xaea2, 0x8) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000be6000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x7c, {"b805000000440f20c03509000000440f22c00f01c181038000c0fe0f01cf2e66410fda3fc4a1c961643de5f30faec6f30f09c744240200480000c7442406000000000f011c24c7442400db000000c744240209000000ff2c24b9800000c00f32c40212f5a3050000000f30"}}], 0x7c}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x7e, 0x25}, {@rand_addr=0xac1414aa, 0x4e22, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) r7 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r7, &(0x7f0000001940)={0xa, 0x0, 0x4, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) 1m21.084904809s ago: executing program 6 (id=2609): r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="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", 0x3ec}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0) r4 = gettid() r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x308, 0x0, 0x110, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) r7 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000c00)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220500000074a2"], 0x0}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000007a00010600000004fedb00"/24], 0x18}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) 1m17.990226178s ago: executing program 6 (id=2621): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1a) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r1, 0x0, 0x22, 0x0, &(0x7f0000002680)) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000180)=0x60, 0x2) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r6, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x28, 0x0, 0x0}) r8 = socket$kcm(0x29, 0x5, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x110a, 0x2}) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r12, 0x3ba0, &(0x7f00000037c0)={0x48, 0x2, r13, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r12, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r14}) sendmsg$kcm(r8, &(0x7f0000000100)={&(0x7f0000000200)=@ethernet={0x1, @broadcast}, 0x80, &(0x7f0000002580)=[{&(0x7f00000027c0)="16d94c807769a68cdb05ca65a6630b50657c0ce73edd5f5dadea3298b286a0d29ea53550d56af70a51b2a9563eebba51b9304fef8e190f2ea901053fec37c355a0b9046206188fccd0169ada8fa8203d2180aaac5329cc9afa7fc3df8d70eb49181873f5d110832f6b1e1d65c77c1ae3078707c80e5953bb06df86dbe92d22a1a217941a9c5849fb16698d89cbc7b5ae51ae96c596149341261ca2bec6eaa9d61ae2fe39b125b8471c38ee4254af7f180cb5016e6263f0a9695f74819ece4ecd85cf7670f5c862680be7fef038c9cc18dcac0bcd7aa2101e4c8c20e7f6e4fedad9d725620cf5cb5c57b3dc5a0207c8ea7d26a1bcceda0047e976a71f93ade8cd17ca867a96e2abe4c046dd18da35534c2c03936c805c75db87bb1ee5c762674a4c762f41a021319cd35b68d68d00f4ea9739978fe8ea3821cb34f35bdc52db89af9dc7e9e6e7113370bf0fa682e6f70ebc34f73258538c79cf5a295564e195abb3574c83ed1029d0c7a2131ec354a58b98fe8df546e8a20145c023bac40749411b32850578349ded9016e589ce08f3444b67a62e5c45bf92eb3f77ae677df5cd52e57e1f1d002ad8cd47da9e66ea9aa28cadeaee3ac65465056200109ebdcfc84a435fe856e417651ec799f4511a222c46e7a2d4c18225829923d72cd5642302624293ab8ae683365785f752f5b9b657acc2c54885660645a170c890ab7523468201beb472070c5f0e7afd6e85fe2138b1512f061d47c4e81af99b4fb6a4485b83840873cd6aba3415f12e3abbdccd052cf9616a1cc84aea97181bcb42f55f1bb388cb54f3f90de10144538c52b235d87f0bb4ef682f063d9f536e1dd6f0230ee708b56e9bffdf687e9abfd0b96f32fa28bf3f8b614d6ed7baf93bc6a563264330cd4f635f3df2f4b3ef1762a67e5803716a21141e876347ef9556d1c0925d94fe50caad47ec118fa8861a075787bb164dfd92d248e99a25589027680f5234b2ba00a3bcfebdf5c08322c7c78cb8a1d64f520c6d41a9a01d45a5a3832274bbc544da013f2d0a7e3cec27ada3f38b1375b1f90829bf1e28aa53fa44be3c9e90d13aaafb766e3ead237e90b31d402b8e2ffc846f201762b076bf82fc9c3dd4cca60727c124cf80afd0d018e9d41983bd24088f528315dd8807c035d9251eb9b7a6dd525b6e60e724a29d73721dd20bdfdc4154459a2ef441f657a963e73a3b7f4da206864ad21314c6837d6c4852293d4f127b7535cb11da66249d7f863320ba7e715700dfac92e9423223d0c8c6994ebe7dc85d374d975fbe28a74af3b4810807a1395407fb30bbd307ff3cd8b7b8a119c9f5832200d365e1e9d2db7ee9ed336e6e99817fe372b962c76cafeabcb4ddccb148f5e9a4a0bf3b80a7dd8cced6fabc08d55884a1de9731342a2f728b16b9072cea095e84ed9d6a7b64d61420e858665a2f182529eaf7f5f12d99aaa9d6411d7f2498353dc3a3b2857ea051db0ff3d9735b6cc5052fc7cf3d59774eb65f01128daafc82a7f50349f3a745bf393c8520669b3add6a9914e08db787cedfd5116368a29be1d4672dc51366031e93f65262deff09b7a13a5350715418e8e65b73309ed10da49196fb2ebf1fcc23ed9a84c0d41bef429f8645ef5852d73a630026e778d2c11da7f67c805a4dee13be25b50146481c51315a7960027c349da5ea5a88135628bc37026e5b27761d13c9dac788227e641f22df3be47ba9a395ed1be85b2dae24e2cd524a745c0233554de3f80e9a01ab54269795732a9809830b27da6b272ae9770c042686c78bfbf004e8aab757f797504b967c45f0956c2e9cdbffa563ec02610fc40f50861996a8fddd89fc1d22e097f3338327d54d452d0a7ce6432c7fc9ad6fa54d0d75e0dc9ac2712445ed8fe9298d2531ef71a04a384a4cb136196fc4f9fc934467dad176c46d6fa64b0e64190a1f818aab56c684444922264fe64e20211952b013d36df155bdb2017a585ff6dd244166cb47a9f3e5a6abbf8d50279f0420288d05253178f6f31aa7043ad3402104cc991af3cd6bc11f9d02f6568ce34b467351d00a65636ed82537fd8f9aa0fad04bc8f1d894bf6f3c062ad90498b43030fc465f81fb30d6b6a89959b22e8dd175b6947c972ccbf9ee9ba175d6f839f9ec8555be1b748cbe05142f7ba57c32e5a7c7d82e860363b3a8a50274addb199724b1786618cc13551bd0496e3fe46ce6d4c826d6bc3603535ddaaa3b44120c8538b36e04cfb3da14030439ee1884036a8c06d68137a45267b07c79512ff7ed6e162a90ad5448b56b21a3b20c663194eee3f4893695737c1f9bae8c266fa79a56cdc333102af6185f533dfc99aa53132550e122ee6c4abca7b4bec58f2454e29dd2278b5a738c682c222ccb26288b05099e35081bbdacff58cb047e0fa6d5b515893192ac81f7ebffb771ffe1f65f44848699c4c225224e49c94c56d5cf9d3e3291cb7a8811a5b7ac0ac1c7fff4f3db54b676ec9fb2593693d6dc8f112c744b35c8f237eeca863f8a1fa49de8bef3496b5365e6583a4f1231a85f9c43d1cd3969e71523ffa4a3162c8e702e25f212fa3c776095f310bb610170032b771c64c739381e3d82d9ef8b513655e8443cef67321ccd27989cd936e53cde70611902fb106fb38d9e0c3394574f5b34d148c747380493708043c0765146204815f96992a3b2f3440f4f2b1b79fd24aaaa48503e8e8951eb095e702423db3a802818730182cb9dee97ce48e57f18d803b31e0e7e70c30417fdfabdc4b378d463e495ed84019de29ce3ec34716cc7724f8c74c0e0d59613dde872053b3421ddc0e62f16815dd736ad973016770bfccbc6ae35c57a6374f897c131048b5e58c94e172793f8fb7c447c11d12b4f29ad7de0c9e56d965002610d2bbb35475f27229af375a13e8fdea436f0be9ebdeb57e05d2cdd72c809b5af07fb9363135333b94932bda7422b38bec016ef409117a90a5ddea5aa353df0cd9ad5afa5e97aedd8cbbf3d75e854b8728b420d29973cf96c5a16dd4be7a3d847e113a170e63dfc52cfe1ac625f6be97cfa894c56159121908e88fa6550666cd9ca0146527e7854a85feebd54d57642f856babc38852727152898ac1cde8d89a21f263c21af95fb922932aa0c7c959a53b16b45b029e5562be1ca1629dc68f62618325669530c1b5498bf330f17ae98ca2407df8a658f711d776b3a433cd13ff92519e2ecbd2bc9c15aeb0318634c8a00520a4d9930ae8b23ef76a22c9d9631855f3abed0831b2e2b8d879f9b821f82940d8e23a735ffd127049153b926c429a2675b130ce78737adb52cc91ca559d52f3718a14b101d14fab83e2698fbf9a1245d726f25d368f4391b8952f1dffd2f28bb655bef30091e8ac189b286e03cba9fcac691205a409c96af2be417b4ceb9fb4785b7b89d74ae2b77c1f4a79ed6cc7f700a44ae5885954d07abedc29f8985a95ca3f1d1a4b5ce3ced9cde2487f2446990f393f31dc1069876419ba82c4e4016402c59d178fff02f6371faf14581280bd4f42bbc016f069e41da33a8cd8f5b3b35675d72e25131c5ffe010719da1ff84d3827803ad40caf1468fdf3bc6086f2e91f461c76bd603cc7479f981882651a2fd4dc8124ca982ee088464272e3a79cd684b6e2f3d4b8d7eb802487f7018335f7c80945fdb57dc920e33a7d417fdfbd63a97728a18e453fe5cebf1437f19516cf1681d2ca968e76312dfd11e94773d1d362e9ebf4f81e6d50301f6e941e15f3c53779aa34e572bb97e372af116bfe1f09088644f0bb220f9c28d9eac20697ec0f7dae9ca0cd02df75e356936d2d6958c95604ad6c5028ff22bad5522ff8f56207f0b49db4c918e99fc2a11c7794064cfab9d1c2b2f172d60ae538d824b0496222ae29c400f7551bf110fd4595d2ffe2394204b404d230095273c40840f3a68253c7cbadcea37f990b3bc35e6e8e099553e90bafd2bd555f28af2acbec94faa8f55ce15115c67682dff1f867617237a030d43fdf1f8a2d464b81eae4090246091ffbfb5c23b58a0253eeb115f2d09e257675c0af9ef4d7453fd4976e4a657f720ef1c842fb5e1a5aeea600354900a19a4773f024dda358bd7dab40c6fb5c5fd9c57f4ff22da7ead735da29c7808c3766ccb761ed0a21f7f304ad2f051b64062494ca3954cd74360d6258ca94306f599b6d99826f9e721cae63584cd642f73fbf3ff05851e3eba3cab7b7e9e35202eb81285dbfb79e46a1c5023aeb1f20433e02f963dbe776bcbaddd8b926a41510400dda7e19b3ab4bda0c98105b6723029ae6e2dd9cea4c6e270084014fee00d94e4c5c92e4e5e92b973e62d92e1bdd82c492a49d283d8be316ecc34259bd80c0a66ebbbae9f8e104d96cb9ff910cbf7402e4ef838ffff61fe41163fecc77ccfec5f96f95d3198136c1e9f064f5daf002d8db6d9df5fb83ab93ebbe3dd843dec1686881551e3f006b9ae1a27e4e28b7be2ac17f23f514ef75d23935b3edc3aa92f9366e8c6233d6e68fd6576a5220d913b23f3ec5fd5fa277fb18e63f2a7084eb2179ce1be2ead302a42bcc117d0295d58628b1ff6c5d062cf84dcc607a362dc6d9131229dc5d5a0248f3fad7267e0177f6b0b89207e49d110239a874ea0c7b2e52470b7fb8cc9298cc5706a2a3f8babcfc5f7b890aba80ae2b5fffeea3c8949c5b644cf78af94a756d59cb59637fd7063b563d113099aef21536f103e595afd3cfcf4c865fdb3efec911d1fc1a8e6dda32c90ce58eeaf03620ca8db73536efaf563c36f43794d22629469527f70d6b638129c12b43a1ccf0dfdd25b3c35458f9983cc4794dd8b8e90abc9ae8f9b4e8c97a5db562a623f576fe6ae39ad5af9aef6e5ba5aef314af1ccc1dcb20a7f6c5e0ac193259d885f960e8d3b518704501674938b4ff759c4479bd3afd7dad64d5f46d307b865eee48fd6d92c1dc56c603376fcd9ca21449f05eda65e91d2765928d909e92521c0a0534d98ede24aeb70a38eeb3782a8f0216950406e6d779f5608142e71144d47640d8962eafd146d458145859f90de8a93c9d5c9eb84cc4e6cfc44b8b54a5496ed4fe302501b54cc572c28753a3ecc8dee050c71761ec1315d8edd6c933186dc697f9cca1db08a03f9ebdd80d4716992a36da42b8eae91e58398a964919c3ee84030936ad47d50607d6b9afddcca6013cdd542f32a643df90d72d8c3cc9eca6c9bbcfc5ce0ef4968a859f383608af6b8738cee3a86a84a795239dd45ddf35aee924833e200c979864e59bea0baf157359bccb4ad948bae37047da42a6c6bafb0937e8657b78c5c17c364e5cfe8589c55f49d3df10111ff50e842e08eee191c703bfc2981029d6e0d2088bc3ff1af495f2e0850b30f9204577cacc781d89658a317a01bdea460147fee091fb10f2f42fa788f4f462402cd3dca9de3d0a59555aeec624eb290f2272e2ad98e76da520f293612df22afc38334e4d79733ff5abd165eff29a6f9c4bf89e343b34e248ebe4f06f6440d3447ef16afc8b0d539651c129c8622a32a78eb1b2e484eed33094bd38f96052f206bb44dd0e120fdceefd4fb02ee28b20469be98f64a6fcd8b329c7e5b884e1a7ca29730464b858351b979a6bcd6999616f9fbb974489ca0b4216da711f4dc9c34803a503c866b5ab36f2c7304a9ca8709d0c0f4c69e01707201483a3e242a50054627aaa45b09c02512bbdbad6384ec2baf6cf8ffde289ae9de4a666207be05340c1cda6c2a4950658e37a9f63c958c049697546ef03f53d1cff01deab374cab67e37", 0x1000}, {&(0x7f0000000080)="dc266a751e26894f687c64e96e2e71419abc0000daf5b4da08ac436269815704e3789cfc12af7d8404f9aef3d872f5b8446f", 0x32}, {&(0x7f0000000280)="af3f971371631691f772246271d6225c8f582f0a49b53597f44e4f6618efb0db72500d28f6c757187301033888a039227398564b75380c7af8565b3c9a7cc3000f609fd1c59a1c26d4b602ff110e06fdf8526cca07a6911b24cc5af5bb4b1d1361022744a8de7e521dad2e3cf309add7a45fb11985e0b7bbd68447251482f9", 0x7f}, {&(0x7f00000024c0)="f5ec47cacd679f624f6046ef8a85ecad0a3f4eafcf0397de6a4b1ccb2f689b9e0a947628be32dd23058e43cdddaf95eabfcfad926b342acb0441bcc3d375abea2a17b3ce9cd2121babbe807f849b700a2b561296fac6c403c47f06cb13c4c741698d633a567051d089d5b63c16f2dd5c0a4ab2708a091344d427e55c40b8cd38ba5f09512a9f9ff49b650e4a627e9a8ee4f828f0511fb1a98253a56c", 0x9c}, {&(0x7f00000026c0)="d67c31d78680d37ac4f4e5bcc7dc122924e0004f25f231a6e9dc5648b2d74c01954819cea91de3122c55b5f9b0dbc229b55963aa4dd8029c0525abbd6114fc410687b4b91d555accfa06bf11cde8a335052ca030c30dc7a10be13888c69944dcd4801dced3b198dcd45236fa0f85e872f9a05eaadfc118d66dee00acbbc96d4655fdadd77ef51b891b30230c2636b80232b404902f9c07cf7dd826fbeaded28c311e4009fdcff29fe81e857e736e", 0xae}], 0x5, &(0x7f0000002640)=ANY=[@ANYRES32=r7], 0x12c0}, 0x4005) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x57, &(0x7f0000001140)=ANY=[], 0x48}, 0x4000) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000002600)={0x20, 0x0, &(0x7f0000000000)=[@clear_death, @clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) read$FUSE(r9, &(0x7f0000000480)={0x2020}, 0x2020) 1m17.863904736s ago: executing program 6 (id=2623): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000d455b4da00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd1d8811cd8a942e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x2, {0x7, 0x29, 0x7, 0x2110029, 0x100, 0x0, 0x1, 0x57, 0x0, 0x0, 0x80, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, 0x1, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x100000000, {0xf, 0xcbff, 0x0, {0x5, 0x4, 0x3, 0x6c, 0x7, 0x3, 0x3, 0x6, 0x101, 0x4000, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000080)={0x1d, r2}, 0x10) r3 = fsmount(0xffffffffffffffff, 0x1, 0xcb) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000040), 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="06"], 0x48}}, 0x0) 1m16.948219655s ago: executing program 6 (id=2627): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r2 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x8000}) madvise(&(0x7f000022c000/0x1000)=nil, 0x1000, 0x64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_clone(0x80001000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000001b00)=@urb_type_iso={0x0, {0x1, 0x1}, 0xc475, 0x2, 0x0, 0x0, 0x9f8, 0x4, 0x0, 0x4, 0xff, 0x0}) ioctl$UFFDIO_POISON(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000000)={{&(0x7f00000dd000/0x1000)=nil, 0x1000}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008200800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r8, 0x0, 0x1, &(0x7f0000001280)=0x2, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x7d, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x5, 0xc0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x6, 0x4, 0x1}, {0x6, 0x24, 0x1a, 0x4, 0x10}, [@dmm={0x7, 0x24, 0x14, 0x2, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x9, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x9, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x5, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x220, 0x7, 0xb, 0x80}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x6, 0x7, 0x2, 0x10, 0x3}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0x8, [{0x95, &(0x7f0000000340)=@string={0x95, 0x3, "1bc9b1daa54cca1a6b0d4554ab78dafdcca6d49ac0b485d8ee49cc265698e3a2b5546e70195e56b84435b26fcc353768d854852aad15aefbb6345d280b40f719c7434fb1af2b547a1711c9a9a49222568a6f182be0df0f80cd4fad48c4022eae358f7d8141e9b2b986f0df92d42670e187bc7be6cba431f23e93d899530fe1b72356ba1fa43843620daf0351d4289290d746fd"}}, {0x83, &(0x7f0000000480)=@string={0x83, 0x3, "b9765e969d889175612b4567dadc967a5701288943df3e31f72a3683eb44651151bac6b84f6399df758e50c18a9edd682b533777df4fa2ab9e585e88b5bd7e313caedddeb043cf2a87ca9a1b1f11f9c0bf851062c8f76b10b57128b143a7788980f43364d9097f0a923386ed06795c263c6721e943876b2750710c8129c30d1cce"}}, {0xd1, &(0x7f00000006c0)=@string={0xd1, 0x3, "ccce5e01554dd4e84627caa60310834a0e71c1b156c9dde38de05e016971bb35fc16e931c18759364a3a318bec74e4798c4234d56f03e148c7ec58782183a0eb0a514cbc53c8c33af3192ef37858ea087a9fc2bb31edc11e882d26fa919957bca40465828ac6a89ec43b2f7aec26e2221656cfce3ee25ded04d8a8ab87f31d36f572394f4282ede4fdd57a8105eae2ac3b6e438b3080aa77045edad2d32b4f879518338fa90462dbdd8da5c95acda69237b6f25d79e7510f9b681e4581105640e0af7f2c3453f5821f379a4d54d475"}}, {0x5c, &(0x7f00000007c0)=@string={0x5c, 0x3, "82e03f48c34b90fe8aed79ef27b027d4c175bb1a59d657830feb9f5ca56caf861345041e391e79ab76ce7158be705da5c06d2c328fb1cd4cf0105ed8d725cd8c4303a32da5dbe078eeeea9c787b4317e74a4f66c2f388ef6acd2"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x83e}}, {0x13, &(0x7f0000000540)=@string={0x13, 0x3, "b79ba5622e117b6ea70ce5af1550ab6232"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x814}}, {0xc5, &(0x7f0000000880)=@string={0xc5, 0x3, "137c4812e163fa1acef0cdab30f4312c4b4b18d6cc63d86a5ece8f247c58eaad38db569a7b6f8da2f766d93cde9a1f7fed0db2681be972552b85408c7fe2527b2262fc64ca2527cacaec105a70fec10d71695c318a4fb965a851c0681cd4af7675a893ce1b217d63aedd87495b0dac7c1d209571a81721965539e8d1b7f67cdbb62f9a76d9aef9e4f25c0621ff2bca0a5cbcd5c21a4cb987ceccb7211fda5d58acba202bab901e3b5f4f383b1bfbff479ee4e1866571b023561e14035dc9bc2d762bab"}}]}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) r13 = syz_open_dev$evdev(&(0x7f0000000080), 0x81, 0x24042) dup3(r0, r13, 0x80000) 1m1.813100028s ago: executing program 40 (id=2627): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r2 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x8000}) madvise(&(0x7f000022c000/0x1000)=nil, 0x1000, 0x64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_clone(0x80001000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000001b00)=@urb_type_iso={0x0, {0x1, 0x1}, 0xc475, 0x2, 0x0, 0x0, 0x9f8, 0x4, 0x0, 0x4, 0xff, 0x0}) ioctl$UFFDIO_POISON(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000000)={{&(0x7f00000dd000/0x1000)=nil, 0x1000}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008200800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r8, 0x0, 0x1, &(0x7f0000001280)=0x2, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x7d, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x5, 0xc0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x6, 0x4, 0x1}, {0x6, 0x24, 0x1a, 0x4, 0x10}, [@dmm={0x7, 0x24, 0x14, 0x2, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x9, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x9, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x5, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x220, 0x7, 0xb, 0x80}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x6, 0x7, 0x2, 0x10, 0x3}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0x8, [{0x95, &(0x7f0000000340)=@string={0x95, 0x3, "1bc9b1daa54cca1a6b0d4554ab78dafdcca6d49ac0b485d8ee49cc265698e3a2b5546e70195e56b84435b26fcc353768d854852aad15aefbb6345d280b40f719c7434fb1af2b547a1711c9a9a49222568a6f182be0df0f80cd4fad48c4022eae358f7d8141e9b2b986f0df92d42670e187bc7be6cba431f23e93d899530fe1b72356ba1fa43843620daf0351d4289290d746fd"}}, {0x83, &(0x7f0000000480)=@string={0x83, 0x3, "b9765e969d889175612b4567dadc967a5701288943df3e31f72a3683eb44651151bac6b84f6399df758e50c18a9edd682b533777df4fa2ab9e585e88b5bd7e313caedddeb043cf2a87ca9a1b1f11f9c0bf851062c8f76b10b57128b143a7788980f43364d9097f0a923386ed06795c263c6721e943876b2750710c8129c30d1cce"}}, {0xd1, &(0x7f00000006c0)=@string={0xd1, 0x3, "ccce5e01554dd4e84627caa60310834a0e71c1b156c9dde38de05e016971bb35fc16e931c18759364a3a318bec74e4798c4234d56f03e148c7ec58782183a0eb0a514cbc53c8c33af3192ef37858ea087a9fc2bb31edc11e882d26fa919957bca40465828ac6a89ec43b2f7aec26e2221656cfce3ee25ded04d8a8ab87f31d36f572394f4282ede4fdd57a8105eae2ac3b6e438b3080aa77045edad2d32b4f879518338fa90462dbdd8da5c95acda69237b6f25d79e7510f9b681e4581105640e0af7f2c3453f5821f379a4d54d475"}}, {0x5c, &(0x7f00000007c0)=@string={0x5c, 0x3, "82e03f48c34b90fe8aed79ef27b027d4c175bb1a59d657830feb9f5ca56caf861345041e391e79ab76ce7158be705da5c06d2c328fb1cd4cf0105ed8d725cd8c4303a32da5dbe078eeeea9c787b4317e74a4f66c2f388ef6acd2"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x83e}}, {0x13, &(0x7f0000000540)=@string={0x13, 0x3, "b79ba5622e117b6ea70ce5af1550ab6232"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x814}}, {0xc5, &(0x7f0000000880)=@string={0xc5, 0x3, "137c4812e163fa1acef0cdab30f4312c4b4b18d6cc63d86a5ece8f247c58eaad38db569a7b6f8da2f766d93cde9a1f7fed0db2681be972552b85408c7fe2527b2262fc64ca2527cacaec105a70fec10d71695c318a4fb965a851c0681cd4af7675a893ce1b217d63aedd87495b0dac7c1d209571a81721965539e8d1b7f67cdbb62f9a76d9aef9e4f25c0621ff2bca0a5cbcd5c21a4cb987ceccb7211fda5d58acba202bab901e3b5f4f383b1bfbff479ee4e1866571b023561e14035dc9bc2d762bab"}}]}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) r13 = syz_open_dev$evdev(&(0x7f0000000080), 0x81, 0x24042) dup3(r0, r13, 0x80000) 30.69383544s ago: executing program 2 (id=2923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x40044103, &(0x7f0000000080)) (async) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000000a0a01080000000000000000020000000900010073797a300000000009200200d06452a600000000d67e30c83dcd9c5c15d56f53abe9728b03c426"], 0x2c}}, 0x0) 30.648545345s ago: executing program 2 (id=2925): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xe0, 0xb, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x7, 0x1a, '-\xde\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x14}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x98}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_COMMENT={0x7, 0x1a, '}*\x00'}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x2d}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300070004000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0xffffffffffffff08, 0x1f00c00e}, 0x300) 30.550339288s ago: executing program 2 (id=2926): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r3 = openat$rdma_cm(0xffffff9c, &(0x7f0000000f00), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000fc0)={0x16, 0x40, 0xfa00, {{0xa, 0x4e23, 0xccf1, @private0}, {0xa, 0x4e23, 0x0, @local}}}, 0x48) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0xf7}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xa, 0x1000}}, './file0\x00'}) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000331000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000100)="66b8000001000f23c80f21f866350c00e0000f23f80fb639baf80c66b8bbcaf38f66efbafc0cecdde366650f0887a44f000f0d4a2e0f35660f3a42f80026dbe2", 0x40}], 0x1, 0x40, &(0x7f0000000180), 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f0000000240)="f36f643e0f01c80f0966ba4300b9800000c00f3235008000000f30efb8973985c50f23c80f21f8350400d0000f23f88ee80f08440f20c0350a000000440f22c00f60e00b0b004000000ba81d23233ef390", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) (async) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000440)={0x40, 0x11, 0xfffffffffffffdf6, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) (async) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000b00)={0x40, 0x8, 0x1, "bc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 27.45455289s ago: executing program 2 (id=2948): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0118000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) syz_usb_disconnect(r0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) 24.467690278s ago: executing program 2 (id=2965): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x47}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="33000e0080000000ffffffffffffffffffffffff50505050505000000000000000000000040001000301b6760600012b00060000080026080009001608000c006400000008000d000000000004005a80"], 0x6c}, 0x1, 0x0, 0x0, 0x84}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, &(0x7f00000002c0)={0x1fd, 0x200, 0x300, &(0x7f0000001080)=[0x8, 0xfffffffffffffff9, 0xbdab, 0x6, 0x5, 0x8000, 0x9, 0xb384, 0xf, 0x0, 0x4, 0x7, 0x1, 0x80, 0x9a, 0x8001, 0x9, 0x358, 0x0, 0x7fffffff, 0x5, 0x5, 0x8, 0x9, 0x85b3, 0x0, 0x2, 0x4000000000000000, 0x3, 0x7, 0x7, 0x401, 0x2, 0xb8e5, 0xfffffffffffffffc, 0x3, 0x9, 0xd, 0xcd05, 0x6, 0x3, 0x7, 0x1, 0x0, 0xfffffffffffffffc, 0xffff, 0xffffffff, 0x17, 0x2, 0x14ce, 0xad73, 0x5, 0x0, 0x9, 0x400, 0x3cc, 0xffffffff, 0x8001, 0x1, 0x1, 0x5893, 0x40, 0x2, 0x9, 0xb, 0xdc, 0x1, 0x5, 0x5, 0x100000000, 0x7, 0xa, 0x0, 0x4c, 0xdd, 0x7, 0x3, 0x7, 0x5d60, 0xffff, 0x401, 0x3, 0x7, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x8, 0x8, 0x10001, 0xe607, 0xe1d, 0xc504, 0x8000, 0x7, 0x2, 0x1, 0x6, 0x624, 0x7, 0x752f093f, 0x2, 0x2, 0x7, 0x8, 0x4, 0x10000, 0x4, 0x3, 0x9, 0x5e3e, 0xffffffff, 0xd5, 0x7, 0x17a86eb9, 0x4, 0x1, 0x1, 0x2, 0x6, 0x8000000000000001, 0x80000001, 0x5, 0x2d9e5929, 0x0, 0x6]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x10201, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r7 = socket$inet_icmp(0x2, 0x2, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r8) mount$9p_unix(&(0x7f0000000780)='./mnt\x00', &(0x7f0000000040)='./mnt\x00', 0x0, 0x291095, 0x0) ioctl$sock_SIOCBRADDBR(r7, 0x89a0, &(0x7f0000000180)='erspan0\x00') ioctl$KVM_CAP_MAX_VCPU_ID(r5, 0x4068aea3, &(0x7f0000000240)={0x80, 0x0, 0xfffffffffffffff8}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000880)="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", 0x7d7, 0x4044044, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 24.339792763s ago: executing program 2 (id=2966): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x8014) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x8, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e20, 0x7, @remote, 0x3}, r4, 0x5}}, 0x48) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000180)=0x9, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_BULK(r7, 0xc0185502, &(0x7f0000000180)={{{0x1, 0x1}}, 0x0, 0x6, 0x0}) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000000), 0x4) sendto$inet6(r6, 0x0, 0x0, 0x24000800, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @empty}, 0x1c) recvmmsg(r6, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket(0xa, 0x5, 0x0) connect$inet(r9, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r8) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r8, 0x0, &(0x7f0000000700)=""/4096) 9.114389814s ago: executing program 41 (id=2966): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x8014) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x8, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e20, 0x7, @remote, 0x3}, r4, 0x5}}, 0x48) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000180)=0x9, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_BULK(r7, 0xc0185502, &(0x7f0000000180)={{{0x1, 0x1}}, 0x0, 0x6, 0x0}) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000000), 0x4) sendto$inet6(r6, 0x0, 0x0, 0x24000800, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @empty}, 0x1c) recvmmsg(r6, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket(0xa, 0x5, 0x0) connect$inet(r9, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r8) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r8, 0x0, &(0x7f0000000700)=""/4096) 5.642459302s ago: executing program 3 (id=3078): fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x5}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r0, 0x0) accept$inet6(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/llc/socket\x00') 5.530666014s ago: executing program 3 (id=3079): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYRESOCT=0x0], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000004000004e4e4a62605ca500fccb60d1cd0fea03d68bb54c34b9afd69906af4fa5132722995a1f96afdc764dcbba1df6cfa4bd58c04632b4be670b6ccf59bc6c8497a926b1ba0fb88986a4e0c9d65541d50be31d814818a6a28351cbaa7b0b465e0ff8e929783bd22b7ba2b09acc23fb22df24c6fcf4e6cebed7ecae80b3f7c8772642e3856a1e0895983fcf9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.861910785s ago: executing program 3 (id=3083): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0xa80002, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000300)='./file0\x00') bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="000c00000000000000ee"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = dup(r3) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000000), 0x0, 0x0, 0x2) flistxattr(r3, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw\x00') pread64(r5, &(0x7f0000000040)=""/48, 0x30, 0x200087) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="68d7f5c9a2dc8997adf0876fc521832568d1197a71da9bc16378550e8893e9d27bd2bdeee1d4ecc0767f8d41ae1e92b17c33fd7eed08840df87bae4cb73c42770cd02fe6571f8a09c516257fd9c7138bfd88e8e9145400"/105], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000140)={0x34, &(0x7f0000000500)={0x3f, 0x6, 0x43, "a9bbfafda43db00b07552f3623bdb8ce41d69761db8ecf0e0cee2a652fe5fb531cb0920f6b4f371816657f46f49254cdb775c70c285015d147a8cd6cb5660ed291561d"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)) 4.420353068s ago: executing program 8 (id=3087): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d2c0df01b1f32435e996728d7cc7e4963b13ccceaecfe6bd67b8a9bdfdd96addb9edfc577a4bfb70e8acd3fb1126a776c7c01c1df4b3133d12d5f2dc853a907d9516f693176aa5df0d94292cc01e6beaa7e4911a98d85fb227e430961e5a62215df5e585226edea4ecc", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',access=', @ANYRESDEC=r7, @ANYBLOB=',k']) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="51daeec4efd6c197010000000000000000000200000014000200626f6e6430000000000000000000000009000100"], 0x34}}, 0x800) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r10, 0x29, 0x3b, 0x0, 0x52) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800002093b6f6079f1d146cccc88b1e09db6573eb530a", @ANYRES16=r8, @ANYBLOB="00012cbd7000fcdbdf25020000001400020076657468315f766c616e000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x90) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000280)) read$FUSE(r5, &(0x7f0000000700)={0x2020}, 0x2020) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="016f0800010027000000270000004600802900000000008490783fffffffac1414aa0000000096b5d16d80cb8b63a474850d9c632454920e455d28cd489d65612c4354cdc8902990317500c4a1c2bd13e4973d6470e57ce02d15557a54df2cde3e0c4ca764b2a54cbcc35cd33027230500bff7a0512c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0005809078002809c400050200000000000007000002d58838000391000000"], 0xfd6c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xa, 0x1}) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f00000000c0)={0x14, 0xa, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x880) 3.073657268s ago: executing program 8 (id=3091): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}, 0x1, 0x0, 0x0, 0x24040800}, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newsa={0x144, 0x10, 0x633, 0x0, 0x0, {{@in6=@empty, @in=@broadcast, 0x0, 0x4000, 0xfffe, 0x8004, 0xa, 0x20}, {@in=@dev={0xac, 0x14, 0x14, 0x1}, 0x0, 0x32}, @in=@broadcast, {0x326, 0x0, 0x0, 0x0, 0x1000, 0xfffffffffffffff9}, {0x40}, {0x1, 0x800000, 0xfffffffc}, 0x70bd25, 0x3503, 0xa, 0x4, 0xf7}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sec_ctx={0xc, 0x8, {0x8107, 0x8, 0x0, 0x7, 0x80ff}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8000}, 0x48014) write(r2, &(0x7f0000000780)="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", 0x1ad) r3 = dup(r0) read$char_usb(r3, &(0x7f0000000080)=""/139, 0xfdef) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000006c40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000190015000000ffffffffffff02"], 0x1c}], 0x1}, 0x0) 2.923532189s ago: executing program 1 (id=3063): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x931766f6319eed44) (async) syz_usb_connect(0x4, 0x1a2, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) (async) userfaultfd(0x800) (async) syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x4, 0x8400, 0x3655, 0x7fffffff}, &(0x7f0000000180)=0x10) 2.539275589s ago: executing program 0 (id=3092): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000140)="d9f30f3808d1430f015a00c744240098000000c7442402c0720000ff1c2448b80d00010000000000000023d00d21f835100000000f23f8440f060f20d835200000000f22d8440f20c03505000000440f22c0f26f360f09", 0x57}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.387441683s ago: executing program 0 (id=3093): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x10002, 0x5, 0x1, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f479143fd", 0x4e}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000000000000010000003c42000000000100b35d43106b"]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000100)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) socket(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close(0xffffffffffffffff) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="0e030e", 0x3, 0x0, 0x0, 0x0) 2.059186604s ago: executing program 8 (id=3094): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x4000001, 0x0, 0x0, 0x0, 0x4000}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f00002c2000/0x3000)=nil, 0x2000}) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) r2 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0002040000080904000065d4695e000905", @ANYBLOB="e739bf"], 0x0) ioctl$int_out(r2, 0x7e52, &(0x7f0000000040)) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r3], 0x18}, 0x1, 0x0, 0x0, 0x46004}, 0xc080) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000080)="bc", 0x1, r4) (async) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000540)="8ad13e", 0x3, 0xfffffffffffffffd) ioctl$FIBMAP(0xffffffffffffffff, 0x401070ca, &(0x7f0000000040)=0x3) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000400)={&(0x7f0000000380)=[0x0, 0x0, 0x0], 0x3}) (async) r8 = syz_open_dev$dri(&(0x7f0000000700), 0xd23, 0x20000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000005c0)={0x0, 0x0, r9}) (async) r10 = syz_open_dev$dri(&(0x7f0000000040), 0x1fffffff, 0x40800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r11, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r10, 0xc06864ce, &(0x7f0000000380)={r12, 0x6, 0x1ff, 0x0, 0x3, [], [0x7, 0x0, 0x0, 0x8], [0x6, 0x20000004, 0x100, 0xd], [0x1000010000000, 0x800, 0x7fffffffffffffff, 0x4]}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000006c0)={r7, r9, r12, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0x0, 0x0, 0x0]}) (async) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, 0x0, 0x0, 0x0) r13 = userfaultfd(0x800) keyctl$dh_compute(0x17, &(0x7f0000000200)={r5, r5, r6}, &(0x7f0000000480)=""/166, 0xa6, &(0x7f0000000340)={&(0x7f0000000240)={'sha1_mb\x00'}, &(0x7f00000005c0)="c739ec61af357f9e3bacb876d72164a1c49f2eea7f24f5ac97ec0b794c24c70e2e78717dcf38469c96ba35f4614ad91ab0ba70a70e40964690a1a8f90f2da4d4bdf709bceb0b0f0ed2ae08ceba6abddf2b98632cce820647746fbef1ef67fc6976a0a892c755ccb6844f09b00c70f6cea0161a7c636f254f347b1bab5a745875cbeeba3eefd8eb1827559e67814a8254b133ffdff7a46aa85faa020ce500fcb36573c6495048ea3ebaf0016bfe5e99d4851360c47de9569a566dc7138d1c56fc", 0xc0}) (async, rerun: 64) ioctl$UFFDIO_UNREGISTER(r13, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000087000/0x4000)=nil, 0x4000}) (rerun: 64) 1.890239379s ago: executing program 1 (id=3095): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0xf32, 0x200) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x10dd72) (async) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0}, {r0, 0x6}, {r0, 0x4000}, {r1, 0x80}, {r0, 0x42}, {r0, 0x2000}], 0x6, &(0x7f00000000c0)={r2, r3+10000000}, &(0x7f0000000100)={[0x4]}, 0x8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/rt_cache\x00') ioctl$UI_SET_RELBIT(r4, 0x40045566, 0xb) ioctl$UI_DEV_CREATE(r4, 0x5501) (async) r5 = mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, 0x0, 0x6c94d8e7427d2808, 0x80010, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000180)="4da36dd15b04e017141fcde6e0110c7cef891158949bafaf3636dc79cae146f51f236c304424206e4aa21a49bdf19e849d50f7981d87b2e7f6d9ff6c33abb7d3acbed623f117b314", 0x0, 0x48) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x10}) fcntl$getownex(r4, 0x10, &(0x7f0000000240)) (async) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300), 0x10001, 0x0) r7 = getuid() mount$9p_fd(0x0, &(0x7f0000000280)='\x00', &(0x7f00000002c0), 0x2020008, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x9}}, {@version_u}, {@aname={'aname', 0x3d, 'net/rt_cache\x00'}}, {@mmap}, {@version_u}, {@aname={'aname', 0x3d, 'net/rt_cache\x00'}}, {@cache_loose}, {@noxattr}, {@privport}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@dont_hash}, {@measure}]}}) (async) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000480)={0x4, 0x6, 0x2, 0x6, 0x8, 0x2, "91aa4aff7fc3b7b9eea79e7ee4c21cfb", 0x5, 0x0, 0x12, 0x18, 0x9, 0x6, 0x9}) (async) close(r6) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f00000004c0)=0x1, 0x4) (async) fallocate(r6, 0x1d, 0x4, 0x5) (async) listen(r6, 0xb4) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f0000000500)={0x2, 0x81, 0x7}) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000540)={0x37cdc6d3, 0x1, 0x3, "9df19ece7b8b60491af5e09a634066ae22c372d51d2543e4c2989fa5a53dd74c", 0x7b756717}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) (async) ioctl$FIONCLEX(r1, 0x5450) (async) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x65) (async) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000005c0), &(0x7f0000000600)={0x0, 0xfb, 0xce, 0x4, 0x0, "060e9e6438d13db8d889bfaa4a15dda1", "c94226d9ec16eb5a0ac6c2983c347229aa5285465b3ea5aac0d3880718cd59d6dd892c90f3fdc8d400f7fba14bc4f01b4177031e334a9c7befbf531f9c205dcaedbce13ab2314be5f8aed594021536f324a930a46c81bc0542a7b5d72322670e012ad3633a02789e81d8edee4dbed7d771c8554653368c78b5e2382eb95db58830dceb52f59924160e6f4983568ac72f0b8b9f905319caf0902d9873bfff050a824d5711b8267014ff0c536e97b07da3af7c94ed0b06b868ca"}, 0xce, 0x1) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r6) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x15c, r8, 0x10, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000000000000000) 1.72527164s ago: executing program 0 (id=3096): r0 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabh\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)r\xdc\x17\x99J\xaeE\xbdt\xe2L^2\xca\x8f\x1cZ\x84\xe3\xe6\x86iC\xcc\xa9\xbf\xeb\x92\r \xa86\x82\xc3\xa8\xf1\xb4\x0f\x9b\x88\x0f\xc8U\x99;\x9c\x17\xfc7\xdd\xd6\x8e%4\x17~\x9d\xe1\a\x00\x00\x00\xa5\x8fG\\\xd8\x80\x15\xcaw\x7f\xac\x063\xbaE\x11\xcc~Q\xcb/\x8bv\xf2B_\xc5\x8d\xb3\xdd\xbd\x1e\xde\x19\xb5\xc4\xcf%p\x89\xa2\xda\xc7', 0x2) r1 = msgget$private(0x0, 0x108) msgsnd(r1, &(0x7f00000010c0)=ANY=[@ANYBLOB="020000eaff"], 0x8, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$dmmidi(&(0x7f00000000c0), 0x200, 0x4a4640) msgrcv(r1, &(0x7f0000001100)={0x0, ""/4096}, 0x1008, 0x0, 0x6800) fanotify_init(0x0, 0x800) r2 = dup(r0) fanotify_mark(r2, 0x281, 0x48001038, r2, 0x0) ftruncate(r2, 0x1) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.663648674s ago: executing program 0 (id=3097): r0 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x22000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000100)={0x0, 0x59455247, 0x640, 0x3c4, 0x0, @stepwise={{0x4, 0x5}, {0x9, 0x7}, {0x8, 0x9}}}) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x602, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000340)='\t^', 0x2}], 0x1) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000140)={0x3, 0xe, 0x5, "e3feeb46d5e13f3471742055fdf1fb2e8c9600cc8c0df38441c18618c64929142df7ccd08557a508e1a5591ab1810e6bf99913ea36be0bd1b0b0fc5c", 0x34, "b16089b26ff1d1fbaa08eca434e871993849929f92020b48a62f105414c929e11776957db9023ba2bee708128a0bd9663ee4c6ff58868872b4509fe9", 0x7809b364e01ebba6}) close_range(r1, 0xffffffffffffffff, 0x0) 1.562248807s ago: executing program 0 (id=3098): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x1, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0xffffffffffffffda, 0xfffffffffffffffd, {0x2, 0x0, 0x0, 0xa6, 0x4000, 0x3, {0x5, 0x100000000000, 0xb, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x800, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, r1, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x107, 0x1ff, 0x9, 0x0, 0x0, 0x0, 0x8}}, 0x50) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/net\x00') ioctl$NS_GET_NSTYPE(r5, 0x8004b709, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) r7 = openat(r4, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x43) ioctl(r7, 0x2275, &(0x7f0000000340)="bb71278e") syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) socket(0xa, 0x3, 0x3a) write$FUSE_LK(r4, &(0x7f0000000180)={0x28, 0xffffffffffffffda, r1, {{0x7f, 0x7fff, 0x0, r2}}}, 0x28) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x6805, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on}, {@redirect_dir_off}, {@xino_auto}, {@metacopy_on}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fsname={'fsname', 0x3d, '!'}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@smackfsroot}, {@fsname}, {@fsmagic={'fsmagic', 0x3d, 0xaa5}}, {@smackfshat}]}) r8 = socket(0x2b, 0x80801, 0x1) getsockname$packet(r8, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x4d, 0x0, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r11, 0x8b2c, &(0x7f0000000040)) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd70100400000008"], 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x4044) socket$inet6_sctp(0xa, 0x5, 0x84) 1.445885163s ago: executing program 8 (id=3099): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00002ba000/0x1000)=nil, 0x1000, 0x16) r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f907, 0x0, '\x00', @p_u32=0x0}}) syz_clone(0x15808880, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a2010203010902240001000021000904000002923350000905060bff030000000905ba"], 0x0) 856.278109ms ago: executing program 8 (id=3100): r0 = fsopen(&(0x7f00000002c0)='affs\x00', 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRESHEX=r1], 0x244}}, 0x8000) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423", @ANYBLOB=',rootmo']) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)="8238117c6de896dd27cbb23f6a37bbc76c94beea3c2549fe07e6e8dacd725e2a2f8c49f4d391f27ccc73a9a20e2efe86535d6ae285df26cbc8d880e4b0f6947c452c1e6d6ea5d5c178a34d4110cb8e4e417c21d0a18e1cee1e7a7c51c5360452333d6345db96ab048048f7f9d37813ed4cc7705b9012dc9b21adf9e6d28407345859fc8503295d81e72fa9616e9e0ee802b50d7da02221719bd179053dbe", 0x9e}, {&(0x7f00000006c0)="0342c3082e946a319feb220a707a6dc5f1fef9b5373c67a6faafe45b71ad83ab7085865607707ba727f4829fb5350db678c33ef127be122ca97c0e2aff78348106b90ac13c", 0x45}, {&(0x7f0000000740)="14ecf51084ecc8f3e6562ab80375681fcbad02b9427591e86b2284687dafae36dfbb661b8edf0bdbdcb263d1df3a498aa235c770c41666d01b38512bb0a193cb79505e44d2d3133628f140357a1404b26c888bdcd3ef789cc61514aeb5bc8427b30c", 0x62}, {&(0x7f00000007c0)="8bfed3869ba98c0b6ddf3a67828167c9eeb24a397096e410533524d75824444bb66769fcd373767f57a33e2527b16962222de315cd61bbe444eff7ac01985ed6cd01da9a73093e37da55cbe7a1cc0b03d21cec8d98d4d75a24d398ca3380", 0x5e}], 0x4, &(0x7f0000000980)=[@assoc={0x18, 0x117, 0x4, 0x7b}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x20008801}, {0x0, 0x0, &(0x7f0000000e00), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x140, 0x28}], 0x3, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000900)=""/77, 0x4d}, {&(0x7f0000000540)=""/96, 0x60}, {&(0x7f0000000880)=""/107, 0x6b}, {&(0x7f0000003840)=""/4081, 0xff1}], 0x4}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000d80)="6766c7442400000000006766c74424020001c0fe6766c744240600000000670f011424baf80c66b87ed2c48666efbafc0cedf2d9ebc9650fd1aef700baf80c66b8da42fb8966efbafc0cb80000ef0f30355e240f01cff20f42708f", 0x5b}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0xe26953fc690010cb, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r0, 0x0, 0x0) fchdir(r8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_io_uring_setup(0x7b71, &(0x7f0000000380)={0x0, 0x400001, 0x20000, 0x0, 0x205, 0x0, r4}, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x50) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 702.279167ms ago: executing program 3 (id=3101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000440)={0x0, 0x5}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={r4, @in={{0x2, 0x4e28, @loopback}}, 0x400005, 0xfffd, 0xe652, 0x2, 0x35, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x1, 0xf06, 0x4, 0xac, 0x81, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0xfffffa, 0x31, 0xffff1896, 0x5, 0xae, 0x0, 0x6}, 0x9c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000080)={0x39c1, 0xd000, 0x0, 0xffffffffffffffff, 0x1}) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x8) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r9, 0x3b88, &(0x7f00000002c0)={0xc, r10}) ioctl$IOMMU_VFIO_SET_IOMMU(r9, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r9, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"]) write$cgroup_int(r8, &(0x7f0000000040)=0x1f00, 0x12) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x1000, 0x10, 0x0, 0x8, 0x2, 0x1, 0x4, 0x10, 0x4, 0x9, 0x14}, {0x0, 0x0, 0xc, 0x0, 0x4, 0x0, 0x2, 0x1, 0x7, 0x6}, {0x2000, 0xdddd0000, 0x0, 0x11, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xffff1000, 0x0, 0x0, 0xfc, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x8}, {0xeeee8000, 0x3000, 0xb, 0x0, 0x0, 0x4, 0xb, 0xe, 0x0, 0x3c}, {0x5000, 0xeeee0000, 0x4, 0x3, 0xc, 0x0, 0x2, 0x0, 0x7, 0x10, 0x80}, {0xdddd1000, 0x100000, 0xa, 0x6, 0x0, 0x0, 0x2, 0x4, 0x10}, {0x8080000, 0x3000, 0x0, 0x1, 0x7f, 0x0, 0x0, 0x1a, 0x26, 0x0, 0xfd}, {0x80ac000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x1, 0x70, 0xfffffffffffffffe, 0x0, 0x5000, [0xfffffffffffffff9, 0x0, 0x1, 0xfffffffffffffffc]}) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="c4c3fd6dd7fbb9b40000400f32c4e2f1916456df0f81000000000f20c035200000000f22c064660f5dbbdbe800000fc75d0266b871008ed00f78b18184a9422e0fc75a05", 0x44}], 0x1, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000500)={0x0, 0x0}) capset(&(0x7f00000000c0)={0x19980330, r11}, &(0x7f00000003c0)={0x10000, 0x7, 0x2, 0xfffffff8, 0x0, 0x1}) map_shadow_stack(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x0) 631.717189ms ago: executing program 8 (id=3102): openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x18d000, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfd, 0x28}}}}}]}}]}}, 0x0) syz_usb_connect(0x2, 0x31b, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x3c, 0x32, 0xf9, 0x20, 0x1b3d, 0x17d, 0xd201, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x309, 0x2, 0x7, 0x7, 0x0, 0x6, [{{0x9, 0x4, 0xd9, 0xfd, 0x0, 0x77, 0x9b, 0x80, 0x0, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "605d8759709b"}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x92c, 0xff}, [@mbim={0xc, 0x24, 0x1b, 0x7c, 0xf, 0x1, 0x6, 0x7b14, 0x4}, @acm={0x4, 0x24, 0x2, 0x1}, @dmm={0x7, 0x24, 0x14, 0xe, 0xd}]}, @uac_as={[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x6, 0x1, 0x0, 0x8, "7e6f02606bbc"}, @as_header={0x7, 0x24, 0x1, 0xe, 0x4, 0x1001}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7, 0x1, 0x2, 0x2, "d5d1d8"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x2}, @as_header={0x7, 0x24, 0x1, 0x2, 0x9a, 0x1001}]}]}}, {{0x9, 0x4, 0xad, 0x2, 0xb, 0xc2, 0x2d, 0x1, 0x1, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x4, 0x8, 0x6, "2a2f1f"}]}], [{{0x9, 0x5, 0xc, 0x2, 0x20, 0xc, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0xf000}, @uac_iso={0x7, 0x25, 0x1, 0x102, 0x4, 0x5}]}}, {{0x9, 0x5, 0x1, 0x8, 0x0, 0xf, 0xc8, 0xa, [@generic={0x56, 0x7, "c0bee55a5c9af5de8e9dd984b8c44f6be15d1b35718d2aabd3c494acaaaa10330f3da315ba0b8aafdcc5a17439f7b965ec5c3ee3ef7b15d0bcfa8ea50fbc6c2488de95808e9f7bc8f59367a069d2f5ef80c977f4"}]}}, {{0x9, 0x5, 0x9, 0x15, 0x3ff, 0xd3, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf9}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x2, 0x1}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0xa, 0x9, 0x3}}, {{0x9, 0x5, 0x3, 0x4, 0x40, 0x10, 0x7, 0x3, [@generic={0x7b, 0x21, "49720f0861f66d4e0e859148c814a04578ebdee03cc6e1e3c6776b9eb72c2356c6cf9e872926a4d9598eef046d74604026c08b099795c430fd87bb1648922d4ff7fbbcdaa621f126e27b7e55ee9f9a93c1727ae201fabb12d5a78172c1a2caca16524d6e44e557f41e767fafb0e3a82639c054dc2e0b6417cd"}, @generic={0x86, 0x2, "4a8d67755541ebd4cf9f71d0e3b8d7474fa23820ad3d135e85338e1a1a069007ce11228549a158f83862681eb1a2255ad206f95e05131785c195425c2eab8330c582e537a36497a68ef7310a1bd64c2e4f34412de3840c1fdd7b722b1b0247e8f37f00905b67b35e5d1a55f16f78d599dc2703842f3ca392634b59eb3c04df5b8945e3d6"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x7, 0xe6, 0x2, [@generic={0x5b, 0xc, "4ffad340109344edf362e83740454c65416466ed52e6a7f5b7c2e827a42aff26d84d12fb6e92ee0e913c76418ca4c3b729e9493ea5dee4e10f1d772e9678b1845ce1e7130b549e42f2eafc041c88349b6c75a4a2b1f8637df1"}, @uac_iso={0x7, 0x25, 0x1, 0x41, 0xf9, 0x5}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0xbd, 0x1, 0x6, [@generic={0x31, 0x0, "8d71e857a1d776a195db6c6b96ad258bf3a58228947787bc1f8a04d7bf967c794343331a7751f1acab7169fdbc3515"}]}}, {{0x9, 0x5, 0x5, 0x14, 0x200, 0x1, 0x4, 0x5}}, {{0x9, 0x5, 0x5, 0x8, 0x8, 0x2, 0x40, 0x7}}, {{0x9, 0x5, 0xc, 0x2, 0x48, 0x8, 0xe, 0x9, [@generic={0x1f, 0x0, "ff3c1d16cdbf0aa145082f15c72a7a6bc0c7a7878816e5c29b084a2b80"}]}}]}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x8, 0xb, 0x6, 0x8, 0xa}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x5, [{0xe5, &(0x7f00000000c0)=@string={0xe5, 0x3, "bab1b7f5599ed4add354f443be3780c147cf07ff04fc677d50fa35dedfaf7f7af71af3ff514c2cb5c12efc51c2ac8281f52b647566e06bbed65e57abb214d3f501acd25e4e200758c0becef7b29e142d4d098ec3acc11c5cfc7930cce7769b3ae5e84b1057243a1178d82195fce9ee34d3e06125f2b859dc637d2bb890d29f1c6f896871dcc2dee6afd9205089fbe550359c15690f98f9045f71fe390533105690eef1f45177680f88e4492b301132749c253a18fda0c2ff2183c58e7e7bcd8bb8592018bc06b24e48246af636294b1647a274eb031d6c9101801fedda84b71947bef6"}}, {0xaa, &(0x7f0000000240)=ANY=[@ANYBLOB="aa0394e13c745664a0a2b958e40afcec07c90899f904c2a1300bffcf073a43f67d6fc1e41aaa0a8a105062de8a4d696c3514d740b1e0027297e72ebb3c9d4a7c6b7475a89e1975b478272058c0a97f56fc029dec50f53620766f50c7ca33f73904cd00b01ee48db077f60f5e8ff8c436ff8d26d5c9bc7dc856d1a2b12f9bdca653458c2caa0f7a2778638aba6a4016fbee820278274e180ba3f00000ab536e8ee644a2"]}, {0xde, &(0x7f0000000740)=ANY=[@ANYBLOB="de032db48b9221421d0cbe108c75da97346012c26c3ccd5361bdbb57645f43166aac3229be4be63dce82be561ba4b8fc1c25abb50be9ac3114217b0dda80fe19e0afbac20c6e0852fe282800ced5c042940f6ea0b58cb65616599eb15ab150d469b38e28baba07652e07d6161a905f3aad44d7364fd8ebf5701005747f4058aeee12fbe9326707bcaf2d33f12da27656d8603248f3a11ee71967b105d50ef962fbdfa9a6a05dcf21d6e5d211a0a905dc2bcf844e58679922c8949a2248bcb83b84cceb531cc779867ecf"]}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000000300)=@lang_id={0x45, 0x3, 0x843}}]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x5}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r6) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000100)={@host}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r7, 0x7cb, &(0x7f0000000140)={&(0x7f0000001080)={{@any, 0x1}, {@local, 0x5}, 0x400, "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"}, 0x418, 0x8}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) eventfd(0x100000ae) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 383.341773ms ago: executing program 3 (id=3103): r0 = syz_open_dev$loop(&(0x7f0000000340), 0x3, 0x8001) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f00000003c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0a0f0d04"], 0xd) (async, rerun: 64) r1 = socket$kcm(0x2, 0x2, 0x73) (rerun: 64) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) (async) r2 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x7c03, 0x7}}, './file0\x00'}) (async, rerun: 64) syz_emit_vhci(&(0x7f00000005c0)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x7f1}, {0x8, [{@any, 0x1, 0x10, "427f16", 0x5, 0x6, "6125d2df9cc05687426d9118d4f330f01ec13967b018177c8a72c7d4e0f35d16c7e117b0fa16fc79036b5505d8ada367a9e8c4abb693ba0ce9d17341bc30772871d38ed53f17e715cfc4cf27197d758cd149346ce6f50e4a27876bbaee19788c99d6e3abc7337c4ac09d854e92eef7cac0ef2d899d0ed965a2e6b6d545ac82cc76ac25398fcac54a874157ab646ceb7c3d5db6994c0b14c1d3e050ea89bc49bda1b333314299758a45aa0c92a072bd13a46c69618065be7ddb91f2bf7389a2f5635d414096a09ff673456994b4eb26aac3192d3fe488fbec568cd341ef04370934979f9924239d685d630930c0549709"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xc, 0x0, 'I?\'', 0x8, 0x7, "c03ba84fcc4cdea09d682fa8887038a8bb10e2579dcabeb3ed69dcf7846bb9a045a0c27c877fa7c9e2f06afa341f27889764d836ceab38d9d6881eec2a15542ecf966881cd5d5dccef55dcdc08f835675ae9062f70b8b403339a1c04ed9c2ce1db33f1fad39f5053a7253dc12676cd293df6423a61e99f439bc4d8e4bf5846d8e257074865f8b7e293544c8532f53a6bc1e60d7fab564a154c399c04a02268dd8c20eca19843d0b6f10ed663b7bb9669fcd42e06e3e1fe57a710be479155d156a328542111a01026ca75b2cfd303df3fb5f2e8723595e1af6ded22531f0b24e55da68cee6842a409df0a959896167809"}, {@any, 0x9, 0x5, "d01663", 0x2, 0x3, "352dc0ff179f16e0f5949880bd040192fe8cf2034ec9901afd6a9dc814eca266b17b9fe9716f6d89a1eb334dff489d33e91024c94f77aff5f11a3002d13afc5afd88ea6cdb713c288155c08d4debb18e448c210fb2f2cdb1db0f6315cacb15b2cdfe0399a5e54688f7d38042b8fc8feae877ba31d9120e6984f79160c8b46f53ad23d7405ca7a6262e62e36e44b3dc89b96c280485934852c86ec5cfd6af221c48ccd49fb39d29a53a34863b9b77e13b5f00c695fb0be38a044c8f63cbce5435f8d65b1b1cdee57f00857d8c8d64272b4b1bdf18a1139642d2fbf1de9f5021205495b881ae2b08b21f8fdb00b8ad4c74"}, {@none, 0x5, 0x9, "442782", 0x7, 0xff, "a5a231cc1ab6bcec6e2bea22e498cf89f19ca02b22af8f6bab2d9a4bbebe34d2ef2c64fc8a00c208f25cdaa4b871ff6afef3b834095964f12be4effe50e788363f6caddd72e9052d17198cf5cd34602bb51b5917b4c4cacac3d4244fa6cd170234a80c3738b8a3de46a8c30f767b4a25a9668a1e079e43c83eea4437302f6a3650d35c7dc378060ff21027f38cc0af5e9990b892b1a1905e6f9977c28022c90270cc2609e5f9b57ae68f2479d984d9e2c1b4a262d6ceefd2f14e1debedecd3ff8fa638f5501d34fd73e52de5f93d5f1fe2b0ac5e41564ad9872015ee2945062bd8ed25c177fe960dcf17a94b626092f1"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfe, 0x5, "0ab656", 0x5, 0x7f, "d0f9f672de569d1fb7c6473c7614efc0374695ed12381c038d63c814dd84c5fa12030aa9a0ef687bc5c252c9aa7241170420bda0ebf833d5397ac9113acca2db9e7100a443f70e208d4ef1652d4819e509b713945bded28eec6fe204a59a5988d6222a124bcf49ae43c47a93c2dc509a43d1edba7833dc5f673200a533abd1e5683054784b1b917cb4190d9b0f28d445b3c054822c2075872696ed94182299250d7e9e9ac16e86f8f91c3cd672ab9c191d07a802e15bd2147c4eb4886fe2545ccc9079dba39a1490c8678112fc6b69188645dcdd21d9e884b4f81cb64df436f29516b133377452ded19efc09d202e4b0"}, {@any, 0x10, 0x1b, "34f8b5", 0xa, 0x1, "0a08202899109665985e97688479b8f5c0f5c557acde8e1c7561527bdef5e7f9ef202aace9a789c297f02d272617742e94224e5936a79c4d6fb46b98bc915a5d6ed02e1af3b85dd8e201ce733b959823bec1f629904d2141d1310997e488982a1d6f2573011f422e79867b105af4a7c2199e67312d46f0694011e08843ce6d5d6b92d8115fb11545c3b7683f89097d8b1756506f1b553e99223c2459d2deb05ce542857efd734341e63dfccaa4b760d0e6ed26930244e785045ccb5f17d5d3a06cecca8ea05078c51ba3b5fe1aba16a44b77999c69a77dfb8c8274fe1beb4b9198c25ced2b62ab80bdbd7564bb7ee21a"}, {@any, 0x1, 0x1, "63a222", 0x6, 0x6, "d2e5e42fc1232b1e0f52de17c13e868459df830fc5c4d89f10ba0c707fe2fa107e2e8d5bb9c3039f9849682af5d39a604032dc6d8864bfc4c35b4a9fc896c7267068b687cd3cc56d4dd1b900994ff6f08eaa822b8535f6def9b7f415361f56f703aae79341ca0cd8a039c4710cd9ecc893157ab148ad11d23d6ba70f02a30cb3bc26b5cf12a163a0f89eaea27a720bd04e49411c12e7f528df5c8a37423ebd96ad2ff408c3a7b48c33c2c1eed704c28d970e75a41a4819c985fb35458cb8af2db0c748294bec887e4743ba5e13d44477fab2db0f98d16ced21c3ff951213ae1b9a0b998ae553064854e7479f82f2695a"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0xdc, "e764aa", 0x1, 0x9, "c34bfacd0f33bd76eff63542fd382a7de158097a52e5dfc1717538cc6d171b6b954bb27bb51a96a6af57afa18019ececb5eaebfc1c096ab454505191d65dee065e681f99f8e75f75076277ec7afb4e8ad845108b9771d2d5f991e08262f5b8c147c28709fd0614eeaa8aa9456afc6b08e407f47eb60fa5704d81133ee2d07d94b1fb86857c407f0ce4e164dbd3dd1fb92c7dcc097347547a36c81f2532cc278e5205f0675d7fd3e78bb537beb9af4bf6cbeb9e859e9938717e35a694ddc499def858ff21ca3d840104306627ef21db08760199b74f3808ee78bcf56f28d88546c82b8985bfee34fe45e2930cd1228b95"}]}}}, 0x7f4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x5b, 0x25, 0x21, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x7, 0x700, 0x91, 0x1}}) setsockopt$MRT_DEL_VIF(r6, 0x0, 0xcb, &(0x7f0000000240)={0xffffffffffffffff, 0x1, 0x8, 0xff, @vifc_lcl_ifindex=r7, @loopback}, 0x10) (async, rerun: 64) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000280)={r5, r5, 0x1, 0x0, 0x0, 0x2, 0x4, 0x8363, 0x8, 0xa, 0xfc1bd0792756c236, 0x10, 'syz0\x00'}) (async, rerun: 64) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) syz_fuse_handle_req(r8, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000d455b4da00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd1d8811cd8a942e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x2, {0x7, 0x29, 0x7, 0x2110029, 0x100, 0x0, 0x1, 0x57, 0x0, 0x0, 0x80, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) setsockopt$ax25_int(r6, 0x101, 0x1, &(0x7f0000000400)=0xc, 0x4) (async) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r6, @ANYRES16=r8, @ANYBLOB="010700000001000c00006dffffff0009000000480000000000000000000000000000474af74225b2ccb885cf89371c5ab6fdf5636683704b1954e4b394ce2a4e3de8a53b1c8cf9f1bd96de239d6b36101e495de859d668a40d1bd1cf43c91976c635ae6305a20e1c156dd1d1a64c01027808028ce80719bc147ade72baa826c22e03707df1bb6dc0a183571d9620a86391230cabda2bb4f7e412d286315287c5a9bf9b6d007808d127263e2f56dede9de84b9adc68"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0xada41, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0xe) (async) ioctl$TIOCGLCKTRMIOS(r9, 0x5456, &(0x7f0000000080)={0x0, 0x2, 0x6, 0x9, 0x5, "b6813379deb16f3caf44cfd847a0e64689177b"}) (async, rerun: 64) ioctl$TCFLSH(r9, 0x80047437, 0x2) (rerun: 64) 258.445698ms ago: executing program 1 (id=3104): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000240)={r1, r2, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, r2, 0x1, 0x0, 0x3}) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) (async) sendmmsg$inet6(r3, &(0x7f0000000a40)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000100)="02", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x5}, 0x8) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="090100026a17d11008170e00b1ad0102464809021200011c0700fe6401ad9e"], 0xfffffffffffffffe) 40.064116ms ago: executing program 3 (id=3105): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async, rerun: 32) r1 = accept4(r0, 0x0, 0x0, 0x0) (rerun: 32) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x81, 0x4) (async) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) splice(r2, 0x0, r2, 0x0, 0x1100000000f336, 0x0) 0s ago: executing program 0 (id=3106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x4, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0xd0, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x15}, [@hopopts={0x4fb560df2bad385d}, @dstopts={0x16, 0x11, '\x00', [@jumbo, @calipso={0x7, 0x50, {0x2, 0x12, 0x86, 0x2, [0xc000000000000000, 0x7, 0x3, 0x8, 0xfffffffffffffe01, 0x60000000000, 0x800, 0x5, 0x8]}}, @jumbo={0xc2, 0x4, 0x40}, @calipso={0x7, 0x10, {0x4, 0x2, 0x4, 0x6c8, [0x9]}}, @generic={0x2, 0x16, "471c193e445fffa682333b6ea5d9758e49d1f56a2cac"}]}]}}}}}}, 0x106) kernel console output (not intermixed with test programs): 92][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 637.808498][T23729] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input137 [ 638.012818][T23729] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 638.021661][T23729] (id 0x00) [ 638.074726][T23729] rc_core: IR keymap rc-imon-pad not found [ 638.080591][T23729] Registered IR keymap rc-empty [ 638.087244][T23729] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 638.097593][T23729] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 638.172717][ T5915] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 638.213716][T23729] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 638.225913][T23729] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input138 [ 638.244910][T23729] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:12> initialized [ 638.325565][ T5915] usb 3-1: Using ep0 maxpacket: 8 [ 638.346086][ T5915] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 638.362462][ T5915] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 638.373321][ T5915] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 638.383362][ T5915] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 638.396618][ T5915] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 638.406067][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.622133][ T5915] usb 3-1: GET_CAPABILITIES returned 0 [ 638.629319][ T5915] usbtmc 3-1:16.0: can't read capabilities [ 638.644980][ T5873] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 638.662296][ T5873] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 638.677626][ T5873] usb 4-1: USB disconnect, device number 12 [ 638.872063][ T2061] imon:send_packet: task interrupted [ 638.879315][ T2061] imon:send_packet: packet tx failed (-512) [ 638.881655][ T2116] overlay: Unknown parameter 'subj_user' [ 638.885828][ T2061] imon:vfd_write: send packet #2 failed [ 638.898578][ T2084] imon:display_open: display port is already open [ 638.912961][ T5899] usb 7-1: USB disconnect, device number 12 [ 638.920440][ T5915] usb 3-1: USB disconnect, device number 73 [ 639.111381][ T2147] overlayfs: failed to clone upperpath [ 639.228774][ T2155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2584'. [ 639.330860][ T2172] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 639.401159][ T30] kauditd_printk_skb: 2178 callbacks suppressed [ 639.401177][ T30] audit: type=1800 audit(2000000141.946:2383): pid=2179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2587" name="bus" dev="overlay" ino=1560 res=0 errno=0 [ 639.552673][ T5873] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 639.629209][ T2194] netlink: 'syz.6.2591': attribute type 1 has an invalid length. [ 639.723802][ T5873] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.737192][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 639.752077][ T5873] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 639.764490][ T5873] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 639.772509][ T5873] usb 4-1: Manufacturer: syz [ 639.797569][ T5873] usb 4-1: config 0 descriptor?? [ 639.817286][ T2210] netlink: 'syz.6.2594': attribute type 5 has an invalid length. [ 639.902762][ T1996] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 640.076813][ T1996] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 640.100344][ T1996] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.126501][ T1996] usb 3-1: config 0 descriptor?? [ 640.149076][ T1996] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 640.165958][T23729] usb 4-1: USB disconnect, device number 13 [ 640.349367][ T2200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.358233][ T2200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.367481][ T2200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.378998][ T2200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.382700][ T5899] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 640.401322][ T1996] gp8psk: usb in 128 operation failed. [ 640.409092][ T1996] gp8psk: usb in 137 operation failed. [ 640.414989][ T1996] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 640.424978][ T1996] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 640.434711][ T1996] usb 3-1: media controller created [ 640.447972][ T1996] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 640.468550][ T1996] gp8psk_fe: Frontend attached [ 640.475362][ T1996] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 640.484170][ T1996] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 640.525314][ T1996] gp8psk: usb in 138 operation failed. [ 640.530782][ T1996] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 640.540659][ T1996] gp8psk: found Genpix USB device pID = 203 (hex) [ 640.542722][ T5899] usb 7-1: Using ep0 maxpacket: 16 [ 640.550178][ T1996] usb 3-1: USB disconnect, device number 74 [ 640.566297][ T5899] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 640.578636][ T5899] usb 7-1: config 0 has no interface number 0 [ 640.588003][ T5899] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 640.598849][ T5899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.607565][ T5899] usb 7-1: Product: syz [ 640.617289][ T5899] usb 7-1: Manufacturer: syz [ 640.622310][ T5899] usb 7-1: SerialNumber: syz [ 640.634869][ T5899] usb 7-1: config 0 descriptor?? [ 640.648223][ T1996] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 640.648758][ T5899] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 640.845278][ T2236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.855683][ T2236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.973928][ T5899] gspca_spca1528: reg_w err -71 [ 640.993039][ T5899] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 641.005579][ T5899] usb 7-1: USB disconnect, device number 13 [ 641.515539][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 641.522234][ T898] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 641.582821][T23729] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 641.630951][ T2329] kvm: user requested TSC rate below hardware speed [ 641.643945][ T2329] kvm: user requested TSC rate below hardware speed [ 641.727862][ T2334] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2609'. [ 641.747651][T23729] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 641.756015][T23729] usb 3-1: config 0 has no interface number 0 [ 641.762196][T23729] usb 3-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 641.774100][T23729] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 52, changing to 9 [ 641.786042][T23729] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 8241, setting to 1024 [ 641.798697][T23729] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 641.799081][ T2334] xt_check_table_hooks: 24 callbacks suppressed [ 641.799095][ T2334] x_tables: unsorted entry at hook 2 [ 641.809009][T23729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.831281][T23729] usb 3-1: config 0 descriptor?? [ 641.846470][T23729] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input139 [ 641.993952][ C0] usbtouchscreen 3-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 643.717933][ T2354] fuse: Bad value for 'user_id' [ 643.723019][ T2354] fuse: Bad value for 'user_id' [ 643.802316][ T2359] MTD: Couldn't look up 'memory.events': -15 [ 643.818536][ T2359] MTD: Couldn't look up '': -2 [ 643.825517][ T2359] MTD: Couldn't look up '': -2 [ 643.830777][ T2359] MTD: Couldn't look up '': -2 [ 643.836351][ T2359] MTD: Couldn't look up '': -2 [ 643.841637][ T2359] MTD: Couldn't look up '': -2 [ 643.848825][ T2359] MTD: Couldn't look up '': -2 [ 643.854785][ T2359] MTD: Couldn't look up '': -2 [ 643.860838][ T2359] MTD: Couldn't look up '': -2 [ 643.868327][ T2359] MTD: Couldn't look up '': -2 [ 643.874918][ T2359] MTD: Couldn't look up '': -2 [ 643.880164][ T2359] MTD: Couldn't look up '': -2 [ 643.885812][ T2359] MTD: Couldn't look up '': -2 [ 643.891048][ T2359] MTD: Couldn't look up '': -2 [ 643.898485][ T2359] MTD: Couldn't look up '': -2 [ 643.903981][ T2359] MTD: Couldn't look up '': -2 [ 643.909255][ T2359] MTD: Couldn't look up '': -2 [ 643.915888][ T2359] MTD: Couldn't look up '': -2 [ 643.921165][ T2359] MTD: Couldn't look up '': -2 [ 643.930614][ T2359] MTD: Couldn't look up '': -2 [ 643.937068][ T2359] MTD: Couldn't look up '': -2 [ 643.942297][ T2359] MTD: Couldn't look up '': -2 [ 643.948720][ T2359] MTD: Couldn't look up '': -2 [ 643.955037][ T2359] MTD: Couldn't look up '': -2 [ 643.961249][ T2359] MTD: Couldn't look up '': -2 [ 643.966843][ T2359] MTD: Couldn't look up '': -2 [ 643.972123][ T2359] MTD: Couldn't look up '': -2 [ 643.980655][ T2359] MTD: Couldn't look up '': -2 [ 643.987809][ T2359] MTD: Couldn't look up '': -2 [ 643.993657][ T2359] MTD: Couldn't look up '': -2 [ 643.998927][ T2359] MTD: Couldn't look up '': -2 [ 644.009007][ T2359] MTD: Couldn't look up '': -2 [ 644.014547][ T2359] MTD: Couldn't look up '': -2 [ 644.226484][ T2371] block nbd2: Unsupported socket: should be TCP or UNIX. [ 644.286203][T11696] usb 3-1: USB disconnect, device number 75 [ 644.446934][ T2399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2620'. [ 644.454635][ T2394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2620'. [ 644.652735][T11696] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 644.702687][T23729] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 644.717947][ T44] usb 6-1: Failed to load image "edgeport/down.fw" err -110 [ 644.727008][ T44] usb 6-1: Direct firmware load for edgeport/boot.fw failed with error -2 [ 644.735750][ T44] usb 6-1: Falling back to sysfs fallback for: edgeport/boot.fw [ 644.804968][T11696] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 644.822874][T11696] usb 3-1: config 0 has no interface number 0 [ 644.831920][T11696] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 644.841515][T11696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.850538][T11696] usb 3-1: Product: syz [ 644.855896][T11696] usb 3-1: Manufacturer: syz [ 644.860502][T11696] usb 3-1: SerialNumber: syz [ 644.862968][T23729] usb 4-1: Using ep0 maxpacket: 8 [ 644.873417][T11696] usb 3-1: config 0 descriptor?? [ 644.884866][T23729] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 644.898649][T23729] usb 4-1: config 0 has no interface number 0 [ 644.907265][T23729] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 644.927461][T23729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.945906][T23729] usb 4-1: Product: syz [ 644.950080][T23729] usb 4-1: Manufacturer: syz [ 644.966969][T23729] usb 4-1: SerialNumber: syz [ 644.993300][T23729] usb 4-1: config 0 descriptor?? [ 645.210380][T23729] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 645.219732][T23729] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 645.228985][T23729] uvcvideo 4-1:0.31: Failed to create links for entity 5 [ 645.236073][T23729] uvcvideo 4-1:0.31: Failed to register entities (-22). [ 645.249397][T23729] usb 4-1: USB disconnect, device number 14 [ 645.489521][T11696] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 645.500249][T11696] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61 [ 645.513381][T11696] asix 3-1:0.251: probe with driver asix failed with error -61 [ 645.694994][ T2380] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 645.701539][ T2380] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 645.710459][ T2380] vhci_hcd vhci_hcd.0: Device attached [ 645.769556][ T2451] vhci_hcd: connection closed [ 645.769860][ T889] vhci_hcd vhci_hcd.2: stop threads [ 645.769948][ T5899] usb 3-1: USB disconnect, device number 76 [ 645.782690][ T889] vhci_hcd vhci_hcd.2: release socket [ 645.797667][ T889] vhci_hcd vhci_hcd.2: disconnect device [ 645.878679][ T2462] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2626'. [ 645.951912][ T2478] netlink: 'syz.3.2628': attribute type 21 has an invalid length. [ 645.960427][ T2478] netlink: 'syz.3.2628': attribute type 5 has an invalid length. [ 645.970770][ T2478] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2628'. [ 645.984063][ T2478] binder: 2473:2478 ioctl 4018620d 0 returned -22 [ 646.068775][ T2485] Can't find a SQUASHFS superblock on nullb0 [ 646.202773][ T24] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 646.353034][ T24] usb 7-1: Invalid ep0 maxpacket: 32 [ 646.482988][ T24] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 646.633130][ T889] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 646.644320][ T24] usb 7-1: Invalid ep0 maxpacket: 32 [ 646.649780][T23729] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 646.657485][ T24] usb usb7-port1: attempt power cycle [ 646.835317][T23729] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 646.845623][T23729] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 646.856661][T23729] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 646.866270][T23729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.875397][T23729] usb 3-1: Product: syz [ 646.879549][T23729] usb 3-1: Manufacturer: syz [ 646.884322][T23729] usb 3-1: SerialNumber: syz [ 647.013844][ T24] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 647.036131][ T24] usb 7-1: Invalid ep0 maxpacket: 32 [ 647.100192][T23729] usb 3-1: 0:2 : does not exist [ 647.110872][T23729] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 647.134336][T23729] usb 3-1: USB disconnect, device number 77 [ 647.164989][T25992] udevd[25992]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 647.181294][ T24] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 647.205672][ T24] usb 7-1: Invalid ep0 maxpacket: 32 [ 647.211544][ T24] usb usb7-port1: unable to enumerate USB device [ 647.273403][ T897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 647.642376][ T2547] NILFS (nullb0): couldn't find nilfs on the device [ 647.654134][ T2547] fuse: Unknown parameter 'smackfstransmute' [ 647.903634][T23729] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 648.075149][T23729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 648.086784][T23729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.096589][T23729] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 648.105656][T23729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.124216][T23729] usb 3-1: config 0 descriptor?? [ 648.540098][T23729] playstation 0003:054C:05C4.005C: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0 [ 648.733287][T23729] playstation 0003:054C:05C4.005C: Failed to retrieve feature with reportID 18: -71 [ 648.742864][T23729] playstation 0003:054C:05C4.005C: Failed to retrieve DualShock4 pairing info: -71 [ 648.752213][T23729] playstation 0003:054C:05C4.005C: Failed to get MAC address from DualShock4 [ 648.761136][T23729] playstation 0003:054C:05C4.005C: Failed to create dualshock4. [ 648.771995][T23729] playstation 0003:054C:05C4.005C: probe with driver playstation failed with error -71 [ 648.785513][T23729] usb 3-1: USB disconnect, device number 78 [ 649.403274][ T2671] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2647'. [ 649.426670][ T2675] netlink: 'syz.2.2648': attribute type 4 has an invalid length. [ 649.477576][ T2678] tipc: Enabling of bearer rejected, failed to enable media [ 649.772694][T11696] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 649.782748][T23729] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 649.902804][T11696] usb 3-1: device descriptor read/64, error -71 [ 649.952825][T23729] usb 4-1: Using ep0 maxpacket: 16 [ 649.960660][T23729] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 649.973702][T23729] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 649.984579][T23729] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 244, changing to 7 [ 649.997791][T23729] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 650.006976][T23729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.014991][T23729] usb 4-1: Product: syz [ 650.019153][T23729] usb 4-1: Manufacturer: Й [ 650.023746][T23729] usb 4-1: SerialNumber: syz [ 650.142683][T11696] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 650.234979][ T2686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.247634][ T2686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.250894][ T2710] sock: sock_timestamping_bind_phc: sock not bind to device [ 650.275334][T11696] usb 3-1: device descriptor read/64, error -71 [ 650.284410][T23729] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc [ 650.315138][T23729] usb 4-1: USB disconnect, device number 15 [ 650.344780][ T2729] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2657'. [ 650.396049][T11696] usb usb3-port1: attempt power cycle [ 650.742656][T11696] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 650.763147][T11696] usb 3-1: device descriptor read/8, error -71 [ 651.002887][T11696] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 651.024836][T11696] usb 3-1: device descriptor read/8, error -71 [ 651.062706][T23729] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 651.142748][T11696] usb usb3-port1: unable to enumerate USB device [ 651.172188][ T2766] netlink: 156 bytes leftover after parsing attributes in process `syz.8.2663'. [ 651.185802][ T2766] netlink: 156 bytes leftover after parsing attributes in process `syz.8.2663'. [ 651.226791][T23729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.238319][T23729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.248831][T23729] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 651.262058][T23729] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 651.271286][T23729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.281323][T23729] usb 4-1: config 0 descriptor?? [ 651.895613][ T2756] netlink: 'syz.3.2661': attribute type 10 has an invalid length. [ 651.948661][ T2778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.957431][ T2778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.975909][ T2756] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 651.996484][ T2756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 652.007745][T23729] usbhid 4-1:0.0: can't add hid device: -71 [ 652.014421][T23729] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 652.033026][T23729] usb 4-1: USB disconnect, device number 16 [ 652.395212][ T910] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 652.955089][T11696] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 653.037250][ T897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 653.052740][ T1996] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 653.132722][T11696] usb 3-1: Using ep0 maxpacket: 16 [ 653.140130][T11696] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 653.149261][T11696] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.160039][T11696] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 653.174861][T11696] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 653.195811][T11696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.204077][ T2831] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2672'. [ 653.207324][T11696] usb 3-1: Product: syz [ 653.218262][T11696] usb 3-1: Manufacturer: syz [ 653.226157][T11696] usb 3-1: SerialNumber: syz [ 653.338736][ T2831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.377188][ T2831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.415617][ T2831] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 653.456893][ T2831] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 653.507938][ T2831] bond0 (unregistering): Released all slaves [ 653.677977][ T2805] nvme_fabrics: missing parameter 'transport=%s' [ 653.686644][ T2805] nvme_fabrics: missing parameter 'nqn=%s' [ 653.695319][T11696] usb 3-1: 0:2 : does not exist [ 653.862687][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 653.902372][T11696] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 653.927788][T11696] usb 3-1: USB disconnect, device number 83 [ 654.012816][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 654.018562][ T9] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 654.027476][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 654.035575][ T9] usb 4-1: config 0 has no interface number 0 [ 654.042549][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 654.050763][ T9] usb 4-1: config 0 has no interface number 0 [ 654.057955][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 654.066057][ T9] usb 4-1: config 0 has no interface number 0 [ 654.073380][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 654.081374][ T9] usb 4-1: config 0 has no interface number 0 [ 654.088740][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 654.097625][ T9] usb 4-1: config 0 has no interface number 0 [ 654.104634][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 654.112736][ T9] usb 4-1: config 0 has no interface number 0 [ 654.120241][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 654.128796][ T9] usb 4-1: config 0 has no interface number 0 [ 654.136397][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 654.144425][ T9] usb 4-1: config 0 has no interface number 0 [ 654.152345][ T9] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 654.163395][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.171454][ T9] usb 4-1: Product: syz [ 654.175740][ T9] usb 4-1: Manufacturer: syz [ 654.180564][ T9] usb 4-1: SerialNumber: syz [ 654.187189][ T9] usb 4-1: config 0 descriptor?? [ 654.195901][ T9] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 654.317453][ T5873] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 654.396891][ T9] etas_es58x 4-1:0.2: could not parse product info: '424242424242' [ 654.482406][ T2917] netlink: 'syz.2.2674': attribute type 4 has an invalid length. [ 654.828496][ C1] etas_es58x 4-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0095. [ 654.839668][ C1] etas_es58x 4-1:0.2: Recovery successful! Dropped 409 bytes (urb_cmd_len: -61) [ 654.849353][ T5496] etas_es58x 4-1:0.2 can0: bit-timing not yet defined [ 655.049889][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 655.051860][T11696] usb 4-1: USB disconnect, device number 17 [ 655.059105][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 655.074374][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 655.083539][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 655.092706][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 655.101854][ C1] etas_es58x 4-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 655.110527][T11696] etas_es58x 4-1:0.2: Disconnecting syz syz [ 655.112716][ T5496] etas_es58x 4-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 655.612976][ T5915] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 655.663615][ T2978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2677'. [ 655.750601][ T5832] Bluetooth: hci1: unknown advertising packet type: 0x6b [ 655.750663][ T5832] Bluetooth: hci1: unknown advertising packet type: 0xa0 [ 655.761308][ T5832] Bluetooth: hci1: unknown advertising packet type: 0x7a [ 655.769481][ T5832] Bluetooth: hci1: Malformed LE Event: 0x02 [ 655.795637][ T2988] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 655.806875][ T5915] usb 3-1: config 16 has an invalid interface number: 19 but max is 0 [ 655.827302][ T5915] usb 3-1: config 16 has no interface number 0 [ 655.837603][ T5915] usb 3-1: config 16 interface 19 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 655.863131][ T5915] usb 3-1: config 16 interface 19 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 655.890609][ T5915] usb 3-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 655.904094][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.912156][ T5915] usb 3-1: Product: syz [ 655.920405][ T5915] usb 3-1: Manufacturer: syz [ 655.925386][ T5915] usb 3-1: SerialNumber: syz [ 656.197628][ T5915] usb 3-1: USB disconnect, device number 84 [ 656.227484][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 656.252905][T25992] udevd[25992]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 656.417625][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 656.425811][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.437291][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 656.447035][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.463356][ T9] usb 4-1: config 0 descriptor?? [ 656.813922][ T3049] afs: Unknown parameter 'rootcontext' [ 656.944492][ T3056] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 656.951716][ T3056] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 656.960120][ T3056] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 656.969184][ T3056] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 656.979007][ T3056] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 656.985863][ T3056] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 656.992562][ T3056] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 656.999513][ T3056] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 657.006356][ T3056] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 657.012886][ T3056] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 657.019346][ T3056] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 657.025857][ T3056] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 657.032308][ T3056] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 657.039144][ T3056] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 657.047199][ T3056] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 657.055170][ T3056] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 657.062050][ T3056] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 657.070144][ T3056] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 657.077994][ T3056] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 657.085739][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 657.091737][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 657.115952][ T9] usb 4-1: USB disconnect, device number 18 [ 657.433151][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 657.513525][ T9] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 657.672862][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 657.691770][ T9] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 657.709170][ T9] usb 3-1: can't read configurations, error -22 [ 657.858829][ T9] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 658.013450][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 658.020658][ T9] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 658.028644][ T9] usb 3-1: can't read configurations, error -22 [ 658.035171][ T9] usb usb3-port1: attempt power cycle [ 658.222705][ T5873] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 658.373882][ T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 658.374578][ T5873] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 658.391944][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 658.404177][ T5873] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 658.414748][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 658.416720][ T5873] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 658.422471][ T9] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 658.437004][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.437189][ T9] usb 3-1: can't read configurations, error -22 [ 658.451507][ T5873] usb 4-1: Product: syz [ 658.455716][ T5873] usb 4-1: Manufacturer: syz [ 658.460303][ T5873] usb 4-1: SerialNumber: syz [ 658.467633][ T5873] usb 4-1: config 0 descriptor?? [ 658.477569][ T3113] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 658.485113][ T3113] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 658.496716][ T5873] usb 4-1: ucan: probing device on interface #0 [ 658.572727][ T9] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 658.596958][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 658.606821][ T9] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 658.614876][ T9] usb 3-1: can't read configurations, error -22 [ 658.623398][ T9] usb usb3-port1: unable to enumerate USB device [ 658.793601][ T898] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 659.106496][ T5873] ucan 4-1:0.0 can0: registered device [ 659.304200][ T3113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.313664][ T3113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.394557][ T5873] ucan 4-1:0.0 can0: firmware string: unknown [ 659.407436][ T5873] usb 4-1: USB disconnect, device number 19 [ 659.876077][ T3159] fuse: Bad value for 'max_read' [ 659.950221][ T3162] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2707'. [ 659.971646][ T3162] program syz.3.2707 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 660.022393][ T3165] program syz.3.2707 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 660.043067][ T3165] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 660.464305][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 660.622679][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 660.630947][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=bc28, bcdDevice=c4.6d [ 660.640307][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.648934][ T9] usb 4-1: Product: syz [ 660.653355][ T9] usb 4-1: Manufacturer: syz [ 660.657947][ T9] usb 4-1: SerialNumber: syz [ 660.664791][ T9] usb 4-1: config 0 descriptor?? [ 660.954312][ T9] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 661.116756][ T5826] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 661.126870][ T5826] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 661.135639][ T5826] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 661.145273][ T9] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 661.145440][ T5826] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 661.153802][ T9] usb 3-1: config 5 has no interface number 0 [ 661.167986][ T9] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 661.168946][ T5826] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 661.180442][ T9] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 661.200291][ T9] usb 3-1: config 5 interface 123 has no altsetting 0 [ 661.214187][ T9] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 661.224405][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.236193][ T9] usb 3-1: Product: syz [ 661.241430][ T9] usb 3-1: Manufacturer: syz [ 661.247751][ T9] usb 3-1: SerialNumber: syz [ 661.411239][ T3219] chnl_net:caif_netlink_parms(): no params data found [ 661.477350][ T3208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.487126][ T3208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.537747][ T9] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device. [ 661.553227][ T3219] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.560593][ T3219] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.563405][ T9] usb 3-1: USB disconnect, device number 89 [ 661.569284][ T3219] bridge_slave_0: entered allmulticast mode [ 661.581756][ T3219] bridge_slave_0: entered promiscuous mode [ 661.592175][ T3219] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.599609][ T3219] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.606927][ T3219] bridge_slave_1: entered allmulticast mode [ 661.618771][ T3219] bridge_slave_1: entered promiscuous mode [ 661.670673][ T5873] usb 4-1: USB disconnect, device number 20 [ 661.758569][ T3219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.774359][ T3219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.824136][ T3219] team0: Port device team_slave_0 added [ 661.838741][ T3219] team0: Port device team_slave_1 added [ 661.902341][ T3219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.912150][ T3219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.943941][ T3219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.961101][ T3219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.968936][ T3219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.001614][ T3219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.025248][ T5873] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 662.149641][ T3219] hsr_slave_0: entered promiscuous mode [ 662.158126][ T3219] hsr_slave_1: entered promiscuous mode [ 662.167051][ T3219] debugfs: 'hsr0' already exists in 'hsr' [ 662.173106][ T3219] Cannot create hsr debugfs directory [ 662.214628][ T5873] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 662.229801][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.238367][ T5873] usb 4-1: Product: syz [ 662.242685][ T5873] usb 4-1: Manufacturer: syz [ 662.248629][ T5873] usb 4-1: SerialNumber: syz [ 662.263677][ T5873] usb 4-1: config 0 descriptor?? [ 662.346524][ T3573] netlink: 'syz.8.2726': attribute type 1 has an invalid length. [ 662.473803][ T909] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 662.684763][ T5873] airspy 4-1:0.0: Board ID: 00 [ 662.698454][ T5873] airspy 4-1:0.0: Firmware version: [ 662.748057][ T3624] delete_channel: no stack [ 663.125669][ T3219] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 663.141096][ T3219] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 663.157515][ T3219] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 663.170895][ T3219] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 663.194124][ T5826] Bluetooth: hci8: command tx timeout [ 663.299354][ T3219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.309052][ T5873] airspy 4-1:0.0: usb_control_msg() failed -71 request 12 [ 663.339362][ T5873] airspy 4-1:0.0: Registered as swradio24 [ 663.346109][ T5873] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 663.349358][ T3219] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.371336][ T5873] usb 4-1: USB disconnect, device number 21 [ 663.411185][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.418382][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.464635][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.471843][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.775202][ T3219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.862885][ T3219] veth0_vlan: entered promiscuous mode [ 663.888338][ T3219] veth1_vlan: entered promiscuous mode [ 664.064423][ T3219] veth0_macvtap: entered promiscuous mode [ 664.105424][ T3219] veth1_macvtap: entered promiscuous mode [ 664.171958][ T3219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.207118][ T3219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.270592][T10552] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.296501][T10552] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.308553][T10552] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.320747][T10552] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.507820][T10552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.541812][T10552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.554870][ T910] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 664.639903][T10552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.661914][T10552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.928806][ T30] audit: type=1400 audit(2000000167.476:2384): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 665.287811][ T5826] Bluetooth: hci8: command tx timeout [ 665.297682][ T3790] overlayfs: workdir and upperdir must be separate subtrees [ 665.307800][ T3793] netlink: 'syz.2.2744': attribute type 10 has an invalid length. [ 665.316620][ T3793] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2744'. [ 665.325635][ T3793] bond0: entered promiscuous mode [ 665.330761][ T3793] bond_slave_0: entered promiscuous mode [ 665.341061][ T3793] bond_slave_1: entered promiscuous mode [ 665.347519][ T3793] bridge0: port 3(bond0) entered blocking state [ 665.356181][ T3793] bridge0: port 3(bond0) entered disabled state [ 665.370386][ T3793] bond0: entered allmulticast mode [ 665.375758][ T3793] bond_slave_0: entered allmulticast mode [ 665.384592][ T3793] bond_slave_1: entered allmulticast mode [ 665.395937][ T3793] bridge0: port 3(bond0) entered blocking state [ 665.402399][ T3793] bridge0: port 3(bond0) entered forwarding state [ 665.444383][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 665.462151][ T5873] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 665.486051][ T5873] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 665.504862][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.522784][ T5873] usb 1-1: Product: syz [ 665.530219][ T5873] usb 1-1: Manufacturer: ဌ [ 665.537798][ T5873] usb 1-1: SerialNumber: syz [ 665.623400][T23729] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 665.722758][T11696] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 665.767087][ T5873] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 665.776112][ T5873] cdc_ncm 1-1:1.0: bind() failure [ 665.789120][T23729] usb 3-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 665.801805][T23729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.812115][ T5873] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 665.819478][T23729] usb 3-1: Product: syz [ 665.824055][ T5873] cdc_ncm 1-1:1.1: bind() failure [ 665.830647][T23729] usb 3-1: Manufacturer: syz [ 665.852026][T23729] usb 3-1: SerialNumber: syz [ 665.871728][T23729] usb 3-1: config 0 descriptor?? [ 665.887045][T11696] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 665.901684][T11696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.928267][T11696] usb 4-1: Product: syz [ 665.932455][T11696] usb 4-1: Manufacturer: syz [ 665.937322][T11696] usb 4-1: SerialNumber: syz [ 665.961567][T11696] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 665.982080][ T6134] usb 1-1: USB disconnect, device number 42 [ 665.990087][ T5915] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 666.096498][T11696] usb 3-1: USB disconnect, device number 90 [ 666.199858][ T30] audit: type=1326 audit(2000000168.746:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3798 comm="syz.3.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ad98efc9 code=0x7ff00000 [ 666.224412][ T30] audit: type=1326 audit(2000000168.746:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3798 comm="syz.3.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ad98efc9 code=0x7ff00000 [ 666.272870][ T30] audit: type=1326 audit(2000000168.746:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3798 comm="syz.3.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ad98efc9 code=0x7ff00000 [ 666.298014][ T30] audit: type=1326 audit(2000000168.746:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3798 comm="syz.3.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ad98efc9 code=0x7ff00000 [ 666.329868][ T30] audit: type=1326 audit(2000000168.746:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3798 comm="syz.3.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ad98efc9 code=0x7ff00000 [ 666.333037][ T3855] binder: 3798:3855 ioctl c0306201 200000000540 returned -22 [ 666.360757][ T30] audit: type=1326 audit(2000000168.746:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3798 comm="syz.3.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ad98efc9 code=0x7ff00000 [ 666.387055][ C0] usb 4-1: ath: unknown panic pattern! [ 666.393318][ T30] audit: type=1326 audit(2000000168.746:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3798 comm="syz.3.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ad98efc9 code=0x7ff00000 [ 666.423674][ T30] audit: type=1326 audit(2000000168.746:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3798 comm="syz.3.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ad98efc9 code=0x7ff00000 [ 666.446875][ T30] audit: type=1326 audit(2000000168.746:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3798 comm="syz.3.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ad98efc9 code=0x7ff00000 [ 666.924331][ T10] usb 4-1: USB disconnect, device number 22 [ 667.037320][ T5915] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 667.078428][ T5915] ath9k_htc: Failed to initialize the device [ 667.085752][ T3902] tipc: Failed to obtain node identity [ 667.102427][ T3902] tipc: Enabling of bearer rejected, failed to enable media [ 667.119854][ T10] usb 4-1: ath9k_htc: USB layer deinitialized [ 667.352841][ T5826] Bluetooth: hci8: command tx timeout [ 667.788164][ T3943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2757'. [ 667.812666][T23729] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 667.964339][T23729] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.996048][T23729] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 668.006224][ T3952] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 668.019505][T23729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.075741][T23729] usb 4-1: Product: syz [ 668.079914][T23729] usb 4-1: Manufacturer: syz [ 668.099634][T23729] usb 4-1: SerialNumber: syz [ 668.111067][T23729] usb 4-1: config 0 descriptor?? [ 668.136649][T23729] ims_pcu 4-1:0.0: Missing CDC union descriptor [ 668.150098][T23729] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 668.276322][ T3978] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2764'. [ 668.283156][ T3983] Dead loop on virtual device ip6_vti0, fix it urgently! [ 668.292993][ T3983] Dead loop on virtual device ip6_vti0, fix it urgently! [ 668.300389][ T3983] Dead loop on virtual device ip6_vti0, fix it urgently! [ 668.307731][ T3983] Dead loop on virtual device ip6_vti0, fix it urgently! [ 668.368767][ T3934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2756'. [ 668.382312][ T3934] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2756'. [ 668.402363][ T910] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 668.486532][ T3999] sg_write: process 20 (syz.0.2766) changed security contexts after opening file descriptor, this is not allowed. [ 668.550515][ T4005] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 668.563309][ T10] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 668.713523][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 668.720507][ T10] usb 3-1: config 155 has an invalid interface number: 182 but max is 0 [ 668.730005][ T10] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 668.738374][ T4015] IPVS: persistence engine module ip_vs_pe_ not found [ 668.761251][ T10] usb 3-1: config 155 has 2 interfaces, different from the descriptor's value: 1 [ 668.764669][T23729] usb 4-1: USB disconnect, device number 23 [ 668.789842][ T10] usb 3-1: config 155 has no interface number 1 [ 668.796959][ T10] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 668.843429][ T10] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 174, changing to 11 [ 668.862311][ T10] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9628, setting to 1024 [ 668.878200][ T10] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 668.892142][ T10] usb 3-1: config 155 interface 182 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 668.907260][ T10] usb 3-1: config 155 interface 182 has no altsetting 0 [ 668.918862][ T10] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 668.940238][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.948556][ T10] usb 3-1: Product: syz [ 668.954895][ T10] usb 3-1: Manufacturer: syz [ 668.959501][ T10] usb 3-1: SerialNumber: syz [ 668.973151][ T3983] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 668.984153][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 668.999496][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input140 [ 669.235106][ T10] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 669.250311][ T10] (id 0x00) [ 669.344142][ T10] rc_core: IR keymap rc-imon-pad not found [ 669.376423][ T10] Registered IR keymap rc-empty [ 669.387524][ T10] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 669.399608][ T10] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 669.443207][ T5826] Bluetooth: hci8: command tx timeout [ 669.446635][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 669.485601][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input141 [ 669.510127][ T10] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:91> initialized [ 669.625592][ T3983] Mount JFS Failure: -5 [ 669.637360][ T10] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 669.670330][ T10] imon 3-1:155.0: unable to initialize intf1, err -19 [ 669.685270][ T891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 669.702522][ T10] imon:imon_probe: failed to attach to context! [ 669.710387][ T10] imon 3-1:155.182: unable to register, err -19 [ 669.727885][ T10] usb 3-1: USB disconnect, device number 91 [ 669.936629][ T4098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2774'. [ 669.989623][ T4098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2774'. [ 670.302782][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 670.486839][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 670.503808][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 670.513579][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.521625][ T10] usb 1-1: Product: syz [ 670.531170][ T10] usb 1-1: Manufacturer: syz [ 670.537059][ T10] usb 1-1: SerialNumber: syz [ 670.556714][ T10] usb 1-1: config 0 descriptor?? [ 670.562767][ T5899] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 670.577707][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 670.734683][ T5899] usb 3-1: unable to get BOS descriptor or descriptor too short [ 670.753777][ T5899] usb 3-1: not running at top speed; connect to a high speed hub [ 670.771671][ T5899] usb 3-1: config 5 has an invalid interface number: 44 but max is 1 [ 670.806419][ T5899] usb 3-1: config 5 has no interface number 1 [ 670.821067][ T5899] usb 3-1: config 5 interface 44 has no altsetting 0 [ 670.831398][ T5899] usb 3-1: config 5 interface 0 has no altsetting 0 [ 670.855530][ T5899] usb 3-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 670.886142][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.912413][ T5899] usb 3-1: Product: syz [ 670.916938][ T5899] usb 3-1: Manufacturer: syz [ 670.926598][ T5899] usb 3-1: SerialNumber: syz [ 671.151984][ T4194] tipc: Enabling of bearer rejected, failed to enable media [ 671.179144][ T4194] syzkaller1: entered promiscuous mode [ 671.185432][ T4194] syzkaller1: entered allmulticast mode [ 671.238309][ T5899] usb 3-1: bad CDC descriptors [ 671.252480][ T5899] usb 3-1: USB disconnect, device number 92 [ 671.300681][ T5990] udevd[5990]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:5.44/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 671.821793][ T4246] block device autoloading is deprecated and will be removed. [ 671.987966][ T5899] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 672.142650][ T5899] usb 4-1: Invalid ep0 maxpacket: 64 [ 672.280351][ T5899] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 672.432814][ T5899] usb 4-1: Invalid ep0 maxpacket: 64 [ 672.448911][ T5899] usb usb4-port1: attempt power cycle [ 672.552848][ T1996] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 672.719321][ T1996] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.731072][ T1996] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.741128][ T1996] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 672.750925][ T1996] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.761576][ T1996] usb 3-1: config 0 descriptor?? [ 672.793279][ T5899] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 672.813670][ T5899] usb 4-1: Invalid ep0 maxpacket: 64 [ 672.942684][ T5899] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 672.963418][ T5899] usb 4-1: Invalid ep0 maxpacket: 64 [ 672.969081][ T5899] usb usb4-port1: unable to enumerate USB device [ 672.975068][ T1996] stadia 0003:18D1:9400.005D: collection stack underflow [ 672.982883][ T1996] stadia 0003:18D1:9400.005D: item 0 0 0 12 parsing failed [ 672.990667][ T1996] stadia 0003:18D1:9400.005D: parse failed [ 672.997406][ T1996] stadia 0003:18D1:9400.005D: probe with driver stadia failed with error -22 [ 673.093856][ T4283] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2798'. [ 673.173127][ T5915] usb 3-1: USB disconnect, device number 93 [ 673.735348][ T4294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2799'. [ 673.745205][ T4294] netlink: 'syz.2.2799': attribute type 58 has an invalid length. [ 674.154533][ T891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 674.234936][ T4109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.245556][ T4109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.255983][ T10] gspca_sonixj: reg_w1 err -71 [ 674.263791][ T10] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 674.283673][ T10] usb 1-1: USB disconnect, device number 43 [ 674.762861][ T5899] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 674.814181][ T4337] 8021q: VLANs not supported on wg1 [ 674.944416][ T5899] usb 3-1: config 0 has an invalid interface number: 252 but max is 0 [ 674.954324][ T5899] usb 3-1: config 0 has no interface number 0 [ 674.962813][ T5899] usb 3-1: New USB device found, idVendor=0830, idProduct=0020, bcdDevice=6f.d3 [ 674.971846][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.979933][ T5899] usb 3-1: Product: syz [ 674.984632][ T5899] usb 3-1: Manufacturer: syz [ 674.989369][ T5899] usb 3-1: SerialNumber: syz [ 674.996382][ T5899] usb 3-1: config 0 descriptor?? [ 675.005454][ T5899] usb 3-1: active config #0 != 1 ?? [ 675.132692][ T1996] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 675.152821][ T5899] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 675.209927][ T5873] usb 3-1: USB disconnect, device number 94 [ 675.282986][ T1996] usb 4-1: Invalid ep0 maxpacket: 64 [ 675.314076][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.325200][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.335002][ T5899] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 675.344424][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.356330][ T5899] usb 1-1: config 0 descriptor?? [ 675.413392][ T1996] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 675.436621][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 675.564128][ T1996] usb 4-1: Invalid ep0 maxpacket: 64 [ 675.569824][ T1996] usb usb4-port1: attempt power cycle [ 675.756147][ T4368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2812'. [ 675.768573][ T4352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.778843][ T4352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.789703][ T5899] usbhid 1-1:0.0: can't add hid device: -71 [ 675.796602][ T5899] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 675.813543][ T5899] usb 1-1: USB disconnect, device number 44 [ 675.855091][ T4379] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2813'. [ 675.913265][ T1996] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 675.935724][ T1996] usb 4-1: Invalid ep0 maxpacket: 64 [ 676.062781][ T1996] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 676.104225][ T1996] usb 4-1: Invalid ep0 maxpacket: 64 [ 676.121626][ T1996] usb usb4-port1: unable to enumerate USB device [ 676.343929][ T4402] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2822'. [ 676.356936][ T4408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.367441][ T4408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.558038][ T4415] @: renamed from veth0_vlan (while UP) [ 676.822661][ T1996] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 676.972700][ T1996] usb 1-1: Using ep0 maxpacket: 32 [ 676.979353][ T1996] usb 1-1: config 0 has an invalid interface number: 247 but max is 0 [ 676.987595][ T1996] usb 1-1: config 0 has no interface number 0 [ 676.995170][ T1996] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 677.004483][ T1996] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 677.012484][ T1996] usb 1-1: Product: syz [ 677.016728][ T1996] usb 1-1: Manufacturer: syz [ 677.023473][ T1996] usb 1-1: config 0 descriptor?? [ 677.196995][ T4424] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2825'. [ 677.207824][ T4424] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2825'. [ 677.235163][ T10] usb 1-1: USB disconnect, device number 45 [ 677.264068][ T4429] Device name not specified. [ 677.264068][ T4429] [ 677.289620][ T4434] netlink: 666 bytes leftover after parsing attributes in process `syz.8.2827'. [ 677.481308][ T4444] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2829'. [ 677.822121][ T4449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.831758][ T4449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.062720][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 678.190506][ T5826] Bluetooth: hci7: ISO packet for unknown connection handle 1737 [ 678.213555][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 678.220758][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.231083][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 678.246978][ T10] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 678.254363][ T4466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2834'. [ 678.256180][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.273772][ T10] usb 1-1: Product: syz [ 678.277920][ T10] usb 1-1: Manufacturer: syz [ 678.283106][ T10] usb 1-1: SerialNumber: syz [ 678.290361][ T10] usb 1-1: config 0 descriptor?? [ 678.497668][ T10] usb 1-1: USB disconnect, device number 46 [ 679.052689][ T5873] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 679.222683][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 679.230681][ T5873] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 679.239486][ T5873] usb 4-1: config 0 has no interface number 0 [ 679.249334][ T5873] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 679.259797][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.268150][ T5873] usb 4-1: Product: syz [ 679.272418][ T5873] usb 4-1: Manufacturer: syz [ 679.280721][ T5873] usb 4-1: SerialNumber: syz [ 679.329011][ T5873] usb 4-1: config 0 descriptor?? [ 679.340438][ T5873] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 679.350276][ T5873] usb 4-1: selecting invalid altsetting 1 [ 679.361309][ T5873] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 679.417077][ T5873] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 679.439270][ T5873] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 679.450349][ T5873] usb 4-1: media controller created [ 679.507571][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 679.596864][ T5873] usb 4-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 679.610319][ T5873] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 679.725251][ T5873] DVB: Unable to find symbol mxl5005s_attach() [ 679.810197][ T5873] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 679.919717][ T5873] usb 4-1: USB disconnect, device number 32 [ 679.927005][ T910] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 680.110576][ T4531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2842'. [ 680.395608][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 680.459962][ T4547] netlink: 'syz.8.2845': attribute type 83 has an invalid length. [ 680.520653][ T4548] netlink: 'syz.8.2845': attribute type 83 has an invalid length. [ 680.533012][ T10] usb 1-1: device descriptor read/64, error -71 [ 680.557885][ T2340] pvrusb2: request_firmware fatal error with code=-110 [ 680.564923][ T2340] pvrusb2: Failure uploading firmware1 [ 680.570379][ T2340] pvrusb2: Device initialization was not successful. [ 680.577114][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 680.588062][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 680.597598][ T5880] pvrusb2: Device being rendered inoperable [ 680.597860][ T2340] usb 8-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 680.614829][ T5915] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 680.622526][ T2340] usb 8-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 680.773333][ T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 680.782417][ T5915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 680.791473][ T5915] usb 4-1: config 1 has no interface number 0 [ 680.797885][ T5915] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 680.809191][ T5915] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 680.820274][ T5915] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 680.829602][ T5915] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 680.840936][ T5915] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 680.853523][ T5915] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 680.862701][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.870712][ T5915] usb 4-1: Product: syz [ 680.875008][ T5915] usb 4-1: Manufacturer: syz [ 680.879603][ T5915] usb 4-1: SerialNumber: syz [ 680.887252][ T4542] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 680.902698][ T10] usb 1-1: device descriptor read/64, error -71 [ 681.016856][ T10] usb usb1-port1: attempt power cycle [ 681.099557][ T4542] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 681.192831][ C1] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 681.203157][ T910] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 681.307876][ T4542] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 681.362762][ T10] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 681.393559][ T10] usb 1-1: device descriptor read/8, error -71 [ 681.633494][ T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 681.654260][ T10] usb 1-1: device descriptor read/8, error -71 [ 681.662714][ T5899] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 681.717422][ T4542] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 681.726838][ T5915] cdc_ncm 4-1:1.1: bind() failure [ 681.763388][ T10] usb usb1-port1: unable to enumerate USB device [ 681.814747][ T5899] usb 3-1: New USB device found, idVendor=2bed, idProduct=1100, bcdDevice=ec.c3 [ 681.823939][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.834829][ T5899] usb 3-1: config 0 descriptor?? [ 681.931228][ T5899] usb 4-1: USB disconnect, device number 33 [ 682.521956][ T4593] fuse: Unknown parameter '\' [ 682.578501][ T4597] binder: 4596:4597 ioctl 40046205 0 returned -22 [ 683.535417][ T4619] Invalid source name [ 683.539723][ T4619] Invalid source name [ 683.544585][ T4619] Invalid source name [ 683.548810][ T4619] Invalid source name [ 683.554116][ T4619] Invalid source name [ 683.558331][ T4619] Invalid source name [ 683.562515][ T4619] Invalid source name [ 683.567080][ T4619] Invalid source name [ 683.571445][ T4619] Invalid source name [ 683.576016][ T4619] Invalid source name [ 683.581131][ T4619] Invalid source name [ 684.062666][ T1996] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 684.248779][ T1996] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 38, changing to 9 [ 684.259925][ T1996] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.269685][ T1996] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 684.282699][ T1996] usb 4-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 684.291727][ T1996] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.303272][ T1996] usb 4-1: config 0 descriptor?? [ 684.465138][ T10] usb 3-1: USB disconnect, device number 95 [ 684.482856][T23729] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 684.644756][T23729] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 684.652998][T23729] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 684.663151][T23729] usb 1-1: config 0 interface 0 has no altsetting 0 [ 684.672090][T23729] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 684.681288][T23729] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 684.689668][T23729] usb 1-1: Product: syz [ 684.696932][T23729] usb 1-1: Manufacturer: syz [ 684.701527][T23729] usb 1-1: SerialNumber: syz [ 684.709045][T23729] usb 1-1: config 0 descriptor?? [ 684.718550][ T1996] hid_parser_main: 6 callbacks suppressed [ 684.718566][ T1996] logitech 0003:046D:C287.005E: unknown main item tag 0x0 [ 684.733061][T23729] hub 1-1:0.0: bad descriptor, ignoring hub [ 684.738970][T23729] hub 1-1:0.0: probe with driver hub failed with error -5 [ 684.746210][ T1996] logitech 0003:046D:C287.005E: unknown main item tag 0x0 [ 684.755142][T23729] usb 1-1: selecting invalid altsetting 0 [ 684.762511][ T1996] logitech 0003:046D:C287.005E: unknown main item tag 0x0 [ 684.771204][ T1996] logitech 0003:046D:C287.005E: unknown main item tag 0x0 [ 684.779696][ T1996] logitech 0003:046D:C287.005E: unknown main item tag 0x0 [ 684.788510][ T1996] logitech 0003:046D:C287.005E: unknown main item tag 0x0 [ 684.798814][ T1996] logitech 0003:046D:C287.005E: unknown main item tag 0x0 [ 684.816579][ T1996] logitech 0003:046D:C287.005E: hidraw0: USB HID v0.00 Device [HID 046d:c287] on usb-dummy_hcd.3-1/input0 [ 684.840526][ T1996] logitech 0003:046D:C287.005E: no inputs found [ 684.892999][ T10] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 684.926812][ T5899] usb 4-1: USB disconnect, device number 34 [ 685.052831][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 685.059964][ T10] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 685.069037][ T10] usb 3-1: config 0 has no interface number 0 [ 685.076537][ T10] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 685.087581][ T10] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 685.097900][ T10] usb 3-1: config 0 interface 41 has no altsetting 0 [ 685.106589][ T10] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 685.116527][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.126270][ T10] usb 3-1: Product: syz [ 685.130474][ T10] usb 3-1: Manufacturer: syz [ 685.135112][ T10] usb 3-1: SerialNumber: syz [ 685.142092][ T10] usb 3-1: config 0 descriptor?? [ 685.149664][ T4669] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 685.157161][ T4669] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 685.358761][ T1996] usb 1-1: USB disconnect, device number 51 [ 685.369951][ T4669] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 685.377839][ T4669] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 685.529283][ T1996] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 685.550994][ T4731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.561994][ T4731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.571007][ T4731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.579845][ T4731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.590202][ T4731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.602429][ T4731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.679385][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.686471][ T891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 685.688679][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.711085][ T1996] usb 1-1: config 0 has no interfaces? [ 685.728222][ T1996] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 685.740080][ T1996] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.761173][ T1996] usb 1-1: config 0 descriptor?? [ 685.815364][ T10] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 685.840687][ T10] usb 3-1: USB disconnect, device number 96 [ 685.976483][ T1996] usb 1-1: USB disconnect, device number 52 [ 686.006726][ T4771] tipc: Started in network mode [ 686.011578][ T4771] tipc: Node identity 4, cluster identity 4711 [ 686.020103][ T4771] tipc: Node number set to 4 [ 686.830723][ T4822] program syz.3.2887 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 686.953168][ T891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 687.043181][ T5915] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 687.173397][ T4842] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2891'. [ 687.210605][ T5915] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.231205][ T5915] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 687.244596][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 687.264679][ T5915] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 687.282751][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.297334][ T5915] usb 1-1: Product: syz [ 687.301579][ T5915] usb 1-1: Manufacturer: syz [ 687.304609][ T4850] overlayfs: failed to resolve './file0': -2 [ 687.306785][ T5915] usb 1-1: SerialNumber: syz [ 687.324236][ T5915] usb 1-1: config 0 descriptor?? [ 687.336857][ T5915] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -22 [ 687.492684][ T5915] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 687.552929][ T4816] syzkaller1: entered promiscuous mode [ 687.564721][ T4873] netlink: 'syz.8.2896': attribute type 10 has an invalid length. [ 687.566833][ T4816] syzkaller1: entered allmulticast mode [ 687.609912][ T4873] team0: Device ipvlan0 failed to register rx_handler [ 687.652889][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 687.665833][ T5915] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 687.688243][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.696978][ T5915] usb 4-1: Product: syz [ 687.701260][ T5915] usb 4-1: Manufacturer: syz [ 687.708582][ T5915] usb 4-1: SerialNumber: syz [ 687.721468][ T5915] usb 4-1: config 0 descriptor?? [ 687.738952][ T5915] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 687.779856][ T4816] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 687.786536][ T4816] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 687.792562][ T4816] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 687.798809][ T4816] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 687.805597][ T4816] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 687.811568][ T4816] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 687.820866][ T4816] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 687.828816][ T4816] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 687.835959][ T4816] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 687.843415][ T4816] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 687.850665][ T4816] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 687.856913][ T4816] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 687.864405][ T4816] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 687.871425][ T4816] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 687.877572][ T4816] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 687.885737][ T4816] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 687.893475][ T4816] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 687.899465][ T4816] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 687.906952][ T4816] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 687.918515][ T4880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.928350][ T4880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.938633][ T5915] usb 4-1: clie_3_5_startup: get config number failed: -71 [ 687.946165][ T5915] visor 4-1:0.0: probe with driver visor failed with error -71 [ 687.958947][ T5915] usb 4-1: USB disconnect, device number 35 [ 688.072818][ T10] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 688.440012][ T4921] : renamed from bridge_slave_0 (while UP) [ 689.012661][ T1996] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 689.052724][ T24] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 689.162658][ T1996] usb 3-1: Using ep0 maxpacket: 8 [ 689.169259][ T1996] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 689.177528][ T1996] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 689.188344][ T1996] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 689.200143][ T1996] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 689.210925][ T1996] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 689.224845][ T1996] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 689.234202][ T1996] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.247004][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 689.259264][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 4 [ 689.277820][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1023 [ 689.290988][ T24] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 689.300202][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.309187][ T24] usb 4-1: Product: syz [ 689.313820][ T24] usb 4-1: Manufacturer: syz [ 689.318917][ T24] usb 4-1: SerialNumber: syz [ 689.326472][ T24] usb 4-1: config 0 descriptor?? [ 689.335209][ T24] streamzap 4-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 689.460871][ T1996] usb 3-1: usb_control_msg returned -32 [ 689.466819][ T1996] usbtmc 3-1:16.0: can't read capabilities [ 689.538042][ T5899] usb 4-1: USB disconnect, device number 36 [ 689.764556][ T5826] Bluetooth: hci4: command 0x0405 tx timeout [ 689.832844][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 689.832877][T31485] Bluetooth: hci0: command 0x0c1a tx timeout [ 689.838987][ T5826] Bluetooth: hci5: command 0x0c1a tx timeout [ 689.839041][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 689.839076][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout [ 689.912838][ T5826] Bluetooth: hci8: command 0x0c1a tx timeout [ 689.918443][ T5832] Bluetooth: hci7: command 0x0c1a tx timeout [ 689.918938][T31485] Bluetooth: hci6: command 0x0c1a tx timeout [ 690.520905][ T5001] usbtmc 3-1:16.0: CHECK_CLEAR_STATUS returned 99 [ 690.736790][ T5013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 690.748243][ T5013] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 690.761504][ T5013] dlm: Unknown command passed to DLM device : 0 [ 690.761504][ T5013] [ 690.960553][ T5027] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2919'. [ 690.961455][T31485] Bluetooth: hci1: unexpected event for opcode 0x0c22 [ 691.015243][ T1996] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 691.195793][ T1996] usb 4-1: Using ep0 maxpacket: 8 [ 691.204665][ T1996] usb 4-1: too many configurations: 178, using maximum allowed: 8 [ 691.225007][ T1996] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 691.234197][ T1996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=8 [ 691.242205][ T1996] usb 4-1: Product: syz [ 691.246473][ T1996] usb 4-1: Manufacturer: syz [ 691.251070][ T1996] usb 4-1: SerialNumber: syz [ 691.264701][ T1996] usb 4-1: config 0 descriptor?? [ 691.277784][ T1996] gspca_main: 047d:5003 too many config [ 691.434735][ T910] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 691.480098][T11696] usb 4-1: USB disconnect, device number 37 [ 691.784733][ T5899] usb 3-1: USB disconnect, device number 97 [ 691.839306][T31485] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 691.912936][T31485] Bluetooth: hci5: command 0x0c1a tx timeout [ 691.943299][ T5063] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 691.992994][T31485] Bluetooth: hci8: command 0x0c1a tx timeout [ 691.993965][ T891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 691.999008][T31485] Bluetooth: hci7: command 0x0c1a tx timeout [ 692.016173][ T5826] Bluetooth: hci6: command 0x0c1a tx timeout [ 692.107629][ T5079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2923'. [ 692.432666][ T5915] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 692.462781][ T5899] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 692.586604][ T5915] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 692.596207][ T5899] usb 3-1: device descriptor read/64, error -71 [ 692.602732][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.610734][ T5915] usb 4-1: Product: syz [ 692.615399][ T5915] usb 4-1: Manufacturer: syz [ 692.620096][ T5915] usb 4-1: SerialNumber: syz [ 692.627325][ T5915] usb 4-1: config 0 descriptor?? [ 692.636928][ T5915] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 692.852960][ T5899] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 692.878232][ T5109] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2929'. [ 692.982899][ T5899] usb 3-1: device descriptor read/64, error -71 [ 693.092948][ T5899] usb usb3-port1: attempt power cycle [ 693.242840][ T10] usb 7-1: device descriptor read/64, error -110 [ 693.432819][ T5899] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 693.454679][ T5899] usb 3-1: device descriptor read/8, error -71 [ 693.482647][ T10] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 693.612644][ T10] usb 7-1: device descriptor read/64, error -32 [ 693.694571][ T5899] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 693.714479][ T5127] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2933'. [ 693.725761][ T5127] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2933'. [ 693.726254][ T10] usb usb7-port1: attempt power cycle [ 693.740204][ T5899] usb 3-1: device descriptor read/8, error -71 [ 693.853113][ T5899] usb usb3-port1: unable to enumerate USB device [ 693.863592][ T5088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.873179][ T5125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.874984][ T5088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.883092][ T5125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.898352][ T5088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.907272][ T5088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.916558][ T5915] gspca_sunplus: reg_w_riv err -71 [ 693.922084][ T5915] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 693.933765][ T5915] usb 4-1: USB disconnect, device number 38 [ 693.993498][T31485] Bluetooth: hci5: command 0x0c1a tx timeout [ 694.072940][ T5832] Bluetooth: hci6: command 0x0c1a tx timeout [ 694.078965][ T5832] Bluetooth: hci8: command 0x0c1a tx timeout [ 694.085063][T31485] Bluetooth: hci7: command 0x0c1a tx timeout [ 694.093182][ T10] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 694.113204][ T10] usb 7-1: device descriptor read/8, error -32 [ 694.222734][ T10] raw-gadget.1 gadget.6: failed to queue suspend event [ 694.229783][ T10] raw-gadget.1 gadget.6: failed to queue reset event [ 694.302789][ T10] raw-gadget.1 gadget.6: failed to queue resume event [ 694.372724][ T10] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 694.393155][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 694.400239][ T10] usb 7-1: device descriptor read/8, error -32 [ 694.512737][ T10] raw-gadget.1 gadget.6: failed to queue suspend event [ 694.519761][ T10] usb usb7-port1: unable to enumerate USB device [ 694.670328][ T1996] usb 1-1: USB disconnect, device number 53 [ 694.852175][ T5192] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2940'. [ 694.902973][ T5915] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 695.058759][ T5915] usb 4-1: unable to get BOS descriptor or descriptor too short [ 695.067134][ T5915] usb 4-1: not running at top speed; connect to a high speed hub [ 695.076974][ T5915] usb 4-1: config 2 has an invalid interface number: 4 but max is 1 [ 695.088815][ T5915] usb 4-1: config 2 has no interface number 1 [ 695.098281][ T5915] usb 4-1: config 2 interface 4 has no altsetting 0 [ 695.110202][ T5915] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=91.0c [ 695.123316][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.131568][ T5915] usb 4-1: Product: syz [ 695.136082][ T5915] usb 4-1: Manufacturer: syz [ 695.140680][ T5915] usb 4-1: SerialNumber: syz [ 695.369089][ T5915] option 4-1:2.4: GSM modem (1-port) converter detected [ 695.384752][ T5915] option 4-1:2.0: GSM modem (1-port) converter detected [ 695.403315][ T5915] usb 4-1: USB disconnect, device number 39 [ 695.411484][ T5915] option 4-1:2.4: device disconnected [ 695.421691][ T5915] option 4-1:2.0: device disconnected [ 695.642713][ T6134] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 695.726076][ T5247] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2949'. [ 695.792819][ T6134] usb 3-1: Using ep0 maxpacket: 8 [ 695.799253][ T6134] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 695.815545][ T6134] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 695.824756][ T6134] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.833192][ T6134] usb 3-1: Product: syz [ 695.837522][ T6134] usb 3-1: Manufacturer: syz [ 695.842094][ T6134] usb 3-1: SerialNumber: syz [ 695.850327][ T6134] usb 3-1: config 0 descriptor?? [ 695.858174][ T6134] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 696.112758][ T6134] gspca_zc3xx: reg_w_i err -71 [ 696.554206][ T5915] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 696.702663][ T6134] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 696.709153][ T6134] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 696.720868][ T6134] usb 3-1: USB disconnect, device number 102 [ 696.727178][ T5915] usb 1-1: Using ep0 maxpacket: 8 [ 696.738380][ T5915] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 696.746675][ T5915] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 696.756637][ T5915] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 696.769167][ T5915] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 696.779166][ T5915] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 696.795689][ T5915] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 696.808112][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.037858][ T909] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 697.055228][ T5915] usb 1-1: GET_CAPABILITIES returned 0 [ 697.060841][ T5915] usbtmc 1-1:16.0: can't read capabilities [ 697.175514][ T5317] netlink: 'syz.3.2956': attribute type 10 has an invalid length. [ 697.194995][ T910] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 697.262105][ T5873] usb 1-1: USB disconnect, device number 54 [ 697.522702][ T5915] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 697.682662][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 697.691490][ T5915] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 697.700680][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.708723][ T5915] usb 4-1: Product: syz [ 697.713739][ T5915] usb 4-1: Manufacturer: syz [ 697.718561][ T5915] usb 4-1: SerialNumber: syz [ 697.727750][ T5915] r8152-cfgselector 4-1: Unknown version 0x0000 [ 697.734143][ T5915] r8152-cfgselector 4-1: config 0 descriptor?? [ 697.741753][ T5915] hub 4-1:0.0: bad descriptor, ignoring hub [ 697.747763][ T5915] hub 4-1:0.0: probe with driver hub failed with error -5 [ 697.951121][ T5327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.964615][ T5327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.977935][ T5327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.990389][ T5327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.123621][ T5873] r8152-cfgselector 4-1: USB disconnect, device number 40 [ 698.698648][ T5392] 9pnet_fd: Insufficient options for proto=fd [ 698.760938][ T5398] netlink: 'syz.8.2970': attribute type 1 has an invalid length. [ 698.792793][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 698.943466][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 698.951023][ T10] usb 4-1: config 0 has an invalid interface number: 139 but max is 3 [ 698.959443][ T10] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 698.968562][ T10] usb 4-1: config 0 has an invalid interface number: 122 but max is 3 [ 698.978065][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.988910][ T10] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 698.997940][ T10] usb 4-1: config 0 has no interface number 0 [ 699.004200][ T10] usb 4-1: config 0 has no interface number 1 [ 699.010307][ T10] usb 4-1: config 0 interface 139 altsetting 129 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 699.022994][ T10] usb 4-1: config 0 interface 139 altsetting 129 has a duplicate endpoint with address 0xD, skipping [ 699.034514][ T10] usb 4-1: config 0 interface 139 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 699.047050][ T10] usb 4-1: config 0 interface 139 altsetting 129 endpoint 0x6 has invalid wMaxPacketSize 0 [ 699.062284][ T10] usb 4-1: config 0 interface 139 altsetting 129 has a duplicate endpoint with address 0x7, skipping [ 699.073352][ T10] usb 4-1: config 0 interface 139 altsetting 129 has a duplicate endpoint with address 0x6, skipping [ 699.085228][ T10] usb 4-1: config 0 interface 122 altsetting 1 endpoint 0x4 has invalid maxpacket 2907, setting to 1024 [ 699.096406][ T10] usb 4-1: config 0 interface 122 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 1024 [ 699.106756][ T10] usb 4-1: config 0 interface 122 altsetting 1 has an invalid endpoint descriptor of length 2, skipping [ 699.119695][ T10] usb 4-1: config 0 interface 122 altsetting 1 has an endpoint descriptor with address 0x4C, changing to 0xC [ 699.131587][ T10] usb 4-1: config 0 interface 122 altsetting 1 endpoint 0xC has an invalid bInterval 252, changing to 7 [ 699.142818][ T10] usb 4-1: config 0 interface 122 altsetting 1 endpoint 0xC has invalid maxpacket 33622, setting to 1024 [ 699.155023][ T10] usb 4-1: config 0 interface 122 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 699.168793][ T10] usb 4-1: config 0 interface 139 has no altsetting 0 [ 699.176621][ T10] usb 4-1: config 0 interface 122 has no altsetting 0 [ 699.185290][ T10] usb 4-1: New USB device found, idVendor=19d2, idProduct=0093, bcdDevice=df.6c [ 699.194581][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.202703][ T10] usb 4-1: Product: з [ 699.206876][ T10] usb 4-1: Manufacturer: ᐁ [ 699.211461][ T10] usb 4-1: SerialNumber: Я [ 699.218068][ T10] usb 4-1: config 0 descriptor?? [ 699.292650][ T5915] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 699.445304][ T5915] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 699.461248][ T5915] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 699.472271][ T5915] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 699.484151][ T5915] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 699.495528][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.512113][ T5411] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 699.648260][ T10] option 4-1:0.139: GSM modem (1-port) converter detected [ 699.668207][ T10] usb 4-1: USB disconnect, device number 41 [ 699.681310][ T10] option 4-1:0.139: device disconnected [ 700.334003][ T5915] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 700.343135][ T5915] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input142 [ 700.399823][ T5915] usb 1-1: USB disconnect, device number 55 [ 700.405918][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 700.458212][ T5459] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2977'. [ 700.468413][ T5459] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2977'. [ 700.954828][ T5502] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2984'. [ 701.053661][ T1996] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 701.214514][ T1996] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 701.223585][ T1996] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.234691][ T1996] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 701.243881][ T1996] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 701.251854][ T1996] usb 4-1: Manufacturer: syz [ 701.259035][ T1996] usb 4-1: config 0 descriptor?? [ 701.322747][ T1996] rc_core: IR keymap rc-hauppauge not found [ 701.328725][ T1996] Registered IR keymap rc-empty [ 701.336080][ T1996] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 701.342707][ T5915] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 701.348650][ T1996] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input143 [ 701.487716][ T910] Bluetooth: hci9: Frame reassembly failed (-84) [ 701.492037][ T5485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.508663][ T5485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.522712][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 701.532269][ T5915] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 701.554464][ T10] usb 4-1: USB disconnect, device number 42 [ 701.563876][ T5915] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 701.577731][ T5915] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 701.596880][ T5915] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 701.611442][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.619764][ T5915] usb 1-1: Product: syz [ 701.624363][ T5915] usb 1-1: Manufacturer: я [ 701.628943][ T5915] usb 1-1: SerialNumber: syz [ 702.054664][ T5506] QAT: Invalid ioctl -2080336865 [ 702.060955][ T5506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.069849][ T5506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.078829][ T5506] QAT: Invalid ioctl -1068490496 [ 702.085471][ T5506] QAT: Invalid ioctl -1072160511 [ 702.090856][ T5506] QAT: Invalid ioctl 1075323139 [ 702.097620][ T5506] QAT: Invalid ioctl 1074835010 [ 702.132094][ T5915] usb 1-1: 0:2 : does not exist [ 702.157494][ T5915] usb 1-1: USB disconnect, device number 56 [ 702.912708][ T5915] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 702.953331][ T910] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 702.955947][ T909] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 703.064446][ T5915] usb 1-1: unable to get BOS descriptor or descriptor too short [ 703.072749][ T5915] usb 1-1: not running at top speed; connect to a high speed hub [ 703.081874][ T5915] usb 1-1: config 11 has an invalid interface number: 229 but max is 0 [ 703.090192][ T5915] usb 1-1: config 11 has no interface number 0 [ 703.096475][ T5915] usb 1-1: config 11 interface 229 has no altsetting 0 [ 703.105775][ T5915] usb 1-1: New USB device found, idVendor=0582, idProduct=be1e, bcdDevice=cf.ce [ 703.114893][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.122956][ T5915] usb 1-1: Product: syz [ 703.127110][ T5915] usb 1-1: Manufacturer: syz [ 703.131677][ T5915] usb 1-1: SerialNumber: syz [ 703.369376][ T5915] usb 1-1: USB disconnect, device number 57 [ 703.384053][T25992] udevd[25992]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:11.229/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 703.522737][T31485] Bluetooth: hci9: command 0x1003 tx timeout [ 703.522789][ T5832] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 703.895728][ T5593] IPVS: ip_vs_add_dest(): server weight less than zero [ 703.903013][ T5873] IPVS: starting estimator thread 0... [ 703.993054][ T5596] IPVS: using max 26 ests per chain, 62400 per kthread [ 704.142866][ T5915] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 704.163571][ T5603] 9pnet_fd: Insufficient options for proto=fd [ 704.294238][ T5915] usb 1-1: config index 0 descriptor too short (expected 36753, got 34) [ 704.303576][ T5915] usb 1-1: config 189 has too many interfaces: 113, using maximum allowed: 32 [ 704.312435][ T5915] usb 1-1: config 189 has 1 interface, different from the descriptor's value: 113 [ 704.322071][ T5915] usb 1-1: config 189 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 704.333055][ T5915] usb 1-1: config 189 interface 0 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 704.344765][ T5915] usb 1-1: config 189 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 704.355997][ T5915] usb 1-1: config 189 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 36, setting to 8 [ 704.367328][ T5915] usb 1-1: config 189 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 704.380799][ T5915] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 704.389859][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.401175][ T5593] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 704.410213][ T5915] metro_usb 1-1:189.0: Metrologic USB to Serial converter detected [ 704.422981][ T5915] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 704.512263][ T5612] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2995'. [ 704.524924][ T5612] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2995'. [ 704.535527][ T5612] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2995'. [ 704.611266][ T1996] usb 1-1: USB disconnect, device number 58 [ 704.625418][ T1996] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 704.656461][ T1996] metro_usb 1-1:189.0: device disconnected [ 704.942705][ T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 705.104656][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 705.117449][ T24] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 705.125772][ T24] usb 4-1: config 0 has no interface number 0 [ 705.136158][ T24] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=da.32 [ 705.145285][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.153469][ T24] usb 4-1: Product: syz [ 705.157647][ T24] usb 4-1: Manufacturer: syz [ 705.162216][ T24] usb 4-1: SerialNumber: syz [ 705.170101][ T24] usb 4-1: config 0 descriptor?? [ 705.187188][ T24] usb_ehset_test 4-1:0.255: probe with driver usb_ehset_test failed with error -32 [ 705.524511][ T5672] 9pnet_fd: p9_fd_create_unix (5672): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 705.890386][ T1996] usb 4-1: USB disconnect, device number 43 [ 706.157820][ T44] usb 6-1: Failed to load image "edgeport/boot.fw" err -110 [ 706.167482][ T44] usb 6-1: Edgeport 2 port adapter converter now attached to ttyUSB0 [ 706.178916][ T44] usb 6-1: Edgeport 2 port adapter converter now attached to ttyUSB1 [ 706.192261][ T44] usb 6-1: USB disconnect, device number 83 [ 706.219157][ T44] edgeport_2 ttyUSB0: Edgeport 2 port adapter converter now disconnected from ttyUSB0 [ 706.235674][ T44] edgeport_2 ttyUSB1: Edgeport 2 port adapter converter now disconnected from ttyUSB1 [ 706.248228][ T44] io_edgeport 6-1:162.209: device disconnected [ 706.305325][ T1996] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 706.464389][ T1996] usb 4-1: too many configurations: 153, using maximum allowed: 8 [ 706.477467][ T1996] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 706.485247][ T1996] usb 4-1: can't read configurations, error -61 [ 706.623737][ T1996] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 706.773939][ T1996] usb 4-1: too many configurations: 153, using maximum allowed: 8 [ 706.783886][ T1996] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 706.791449][ T1996] usb 4-1: can't read configurations, error -61 [ 706.798438][ T1996] usb usb4-port1: attempt power cycle [ 706.812747][ T5915] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 706.962899][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 706.969867][ T5915] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 706.978068][ T5915] usb 1-1: config 0 has no interface number 0 [ 706.984218][ T5915] usb 1-1: config 0 interface 12 has no altsetting 0 [ 706.993925][ T5915] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 707.003504][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.011465][ T5915] usb 1-1: Product: syz [ 707.015634][ T5915] usb 1-1: Manufacturer: syz [ 707.020217][ T5915] usb 1-1: SerialNumber: syz [ 707.028828][ T5915] usb 1-1: config 0 descriptor?? [ 707.142738][ T1996] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 707.163736][ T1996] usb 4-1: too many configurations: 153, using maximum allowed: 8 [ 707.173781][ T1996] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 707.181357][ T1996] usb 4-1: can't read configurations, error -61 [ 707.312822][ T1996] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 707.333672][ T1996] usb 4-1: too many configurations: 153, using maximum allowed: 8 [ 707.346557][ T1996] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 707.354432][ T1996] usb 4-1: can't read configurations, error -61 [ 707.361794][ T1996] usb usb4-port1: unable to enumerate USB device [ 707.442725][ T5739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.451609][ T5739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.868248][ T5915] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 707.876761][ T5915] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 707.884195][ T5915] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 707.891779][ T5915] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 707.907274][ T5915] usb 1-1: USB disconnect, device number 59 [ 708.397547][ T5771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.714300][ T898] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 708.715355][ T909] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 709.052545][ T5785] fuse: Unknown parameter '0000000000000000000000300000000000000000003' [ 709.532717][ T1996] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 709.636725][ T5803] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3028'. [ 709.646758][ T5803] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3028'. [ 709.659185][ T5803] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3028'. [ 709.697856][ T1996] usb 1-1: unable to get BOS descriptor or descriptor too short [ 709.706118][ T1996] usb 1-1: not running at top speed; connect to a high speed hub [ 709.715502][ T1996] usb 1-1: config 109 has an invalid interface number: 133 but max is 0 [ 709.724581][ T1996] usb 1-1: config 109 has no interface number 0 [ 709.730915][ T1996] usb 1-1: config 109 interface 133 has no altsetting 0 [ 709.741613][ T1996] usb 1-1: string descriptor 0 read error: -22 [ 709.749093][ T1996] usb 1-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice=3c.39 [ 709.758628][ T1996] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.778671][ T1996] gspca_main: benq-2.14.0 probing 04a5:3035 [ 709.973043][ T5829] netlink: 'syz.3.3033': attribute type 21 has an invalid length. [ 709.978675][ T1996] usb 1-1: USB disconnect, device number 60 [ 709.981931][ T5829] openvswitch: netlink: IP tunnel dst address not specified [ 710.119516][ T5847] binder: 5845:5847 ioctl c018620c 200000000580 returned -22 [ 710.704326][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3046'. [ 710.832893][ T1996] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 710.972844][ T1996] usb 1-1: device descriptor read/64, error -71 [ 711.042726][ T44] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 711.204331][ T44] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 711.214135][ T1996] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 711.221717][ T44] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 711.234238][ T44] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 711.243451][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.251448][ T44] usb 4-1: Product: syz [ 711.256166][ T44] usb 4-1: Manufacturer: syz [ 711.260760][ T44] usb 4-1: SerialNumber: syz [ 711.267914][ T44] usb 4-1: config 0 descriptor?? [ 711.280932][ T5896] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 711.288532][ T5896] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 711.382709][ T1996] usb 1-1: device descriptor read/64, error -71 [ 711.484252][ T5911] netlink: 'syz.8.3049': attribute type 39 has an invalid length. [ 711.498133][ T5896] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 711.504432][ T1996] usb usb1-port1: attempt power cycle [ 711.505855][ T5896] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 711.852768][ T1996] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 711.873423][ T1996] usb 1-1: device descriptor read/8, error -71 [ 712.132677][ T1996] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 712.159784][ T1996] usb 1-1: device descriptor read/8, error -71 [ 712.284581][ T1996] usb usb1-port1: unable to enumerate USB device [ 713.162187][ T5944] fuse: Invalid rootmode [ 713.169997][ T5944] 9pnet_fd: Insufficient options for proto=fd [ 713.804545][ T44] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 713.812868][ T5963] fuse: Bad value for 'fd' [ 713.837598][T10552] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 713.885229][ T44] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 38:75:63:a0:62:f1 [ 713.914273][T31485] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 713.924461][ T44] usb 4-1: USB disconnect, device number 48 [ 713.935592][T31485] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 713.941959][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3065'. [ 713.962423][T31485] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 713.974980][T31485] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 713.977040][ T44] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 713.999237][T31485] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 714.108273][ T24] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 714.283218][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 714.292361][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 714.338353][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 714.357538][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 714.377794][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 714.397819][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 714.427436][ T24] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 714.443538][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.451631][ T24] usb 1-1: Product: syz [ 714.461763][ T24] usb 1-1: Manufacturer: syz [ 714.471925][ T24] usb 1-1: SerialNumber: syz [ 714.486692][ T898] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 714.493046][ T24] usb 1-1: config 0 descriptor?? [ 714.532676][ T44] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 714.541908][ T24] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input144 [ 714.694572][ T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 714.707278][ T5970] chnl_net:caif_netlink_parms(): no params data found [ 714.737361][ T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 714.762661][ T44] usb 4-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 714.772046][ T10] usb 1-1: USB disconnect, device number 65 [ 714.807684][ T44] usb 4-1: config 1 interface 0 has no altsetting 0 [ 714.850289][ T44] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 714.873412][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.896652][ T44] usb 4-1: Product: syz [ 714.901280][ T44] usb 4-1: Manufacturer: syz [ 714.907245][ T44] usb 4-1: SerialNumber: syz [ 715.033854][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.041817][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.054515][ T5970] bridge_slave_0: entered allmulticast mode [ 715.063561][ T5970] bridge_slave_0: entered promiscuous mode [ 715.073312][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.080575][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.089545][ T5970] bridge_slave_1: entered allmulticast mode [ 715.099077][ T5970] bridge_slave_1: entered promiscuous mode [ 715.207231][ T5970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.229576][ T5970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.290728][ T5970] team0: Port device team_slave_0 added [ 715.304961][ T5970] team0: Port device team_slave_1 added [ 715.402973][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.409937][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.456075][ T5970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.470313][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.477585][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.507973][ T5970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.640617][ T6305] 9pnet_fd: Insufficient options for proto=fd [ 715.742347][ T5970] hsr_slave_0: entered promiscuous mode [ 715.757042][ T5970] hsr_slave_1: entered promiscuous mode [ 715.776489][ T5970] debugfs: 'hsr0' already exists in 'hsr' [ 715.782231][ T5970] Cannot create hsr debugfs directory [ 715.923068][ T6134] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 716.072871][T31485] Bluetooth: hci9: command tx timeout [ 716.111961][ T6134] usb 1-1: Using ep0 maxpacket: 16 [ 716.142207][ T6134] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.172651][ T6134] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.193057][ T6134] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 716.222697][ T6134] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 716.232226][ T6403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.246081][ T6134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.267737][ T6403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.307274][ T6134] usb 1-1: config 0 descriptor?? [ 716.419814][ T6403] tipc: Started in network mode [ 716.439143][ T6403] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 716.477824][ T6403] tipc: Enabled bearer , priority 10 [ 716.720173][ T6134] microsoft 0003:045E:07DA.005F: ignoring exceeding usage max [ 716.759999][ T6134] microsoft 0003:045E:07DA.005F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 716.806573][ T6134] microsoft 0003:045E:07DA.005F: no inputs found [ 716.813916][ T6134] microsoft 0003:045E:07DA.005F: could not initialize ff, continuing anyway [ 716.929206][ T24] usb 1-1: USB disconnect, device number 66 [ 717.199115][ T5970] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 717.230045][ T5970] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 717.241195][ T6445] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3077'. [ 717.276181][ T5970] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 717.299498][ T5970] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 717.318254][ T6472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.339229][ T6472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.508553][ T5970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.566007][ T5970] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.599224][ T898] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.607477][ T898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.617908][ T44] tipc: Node number set to 11578026 [ 717.641950][ T898] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.649122][ T898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.719560][ T44] usb 4-1: USB disconnect, device number 49 [ 717.795764][ T6497] netlink: 'syz.0.3081': attribute type 10 has an invalid length. [ 717.803458][ T5970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 717.877505][ T6497] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.902492][ T6497] bond0: (slave team0): Enslaving as an active interface with an up link [ 718.156104][T31485] Bluetooth: hci9: command tx timeout [ 718.252754][T11696] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 718.433042][T11696] usb 4-1: Using ep0 maxpacket: 32 [ 718.444420][T11696] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 718.455472][ T5970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.474003][T11696] usb 4-1: config 0 has no interface number 0 [ 718.498329][T11696] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 718.518714][T11696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.557999][T11696] usb 4-1: Product: syz [ 718.562170][T11696] usb 4-1: Manufacturer: syz [ 718.602935][T11696] usb 4-1: SerialNumber: syz [ 718.629192][T11696] usb 4-1: config 0 descriptor?? [ 718.649318][ T5970] veth0_vlan: entered promiscuous mode [ 718.659945][T11696] smsc95xx v2.0.0 [ 718.699636][ T5970] veth1_vlan: entered promiscuous mode [ 718.818680][ T5970] veth0_macvtap: entered promiscuous mode [ 718.847658][ T5970] veth1_macvtap: entered promiscuous mode [ 718.935782][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 718.991696][ T6557] tmpfs: Bad value for 'mpol' [ 719.001932][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 719.076232][T11696] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 719.093453][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.116399][T11696] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 719.127686][ T897] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.175932][ T897] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.203082][ T897] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.363976][T11696] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 719.403061][T11696] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 719.449656][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.492676][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.605775][ T897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 719.687938][ T897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.712103][ T897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.824858][ T30] kauditd_printk_skb: 1787 callbacks suppressed [ 719.824875][ T30] audit: type=1326 audit(2000000222.366:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6563 comm="syz.0.3090" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fbb18efc9 code=0x0 [ 719.926668][ T6572] trusted_key: encrypted_key: insufficient parameters specified [ 720.132703][T11696] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 720.233340][ T909] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 720.233734][T31485] Bluetooth: hci9: command tx timeout [ 720.308146][T11696] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 720.344467][T11696] usb 2-1: can't read configurations, error -71 [ 721.152146][ T6691] ALSA: mixer_oss: invalid OSS volume '^' [ 721.426284][T11696] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 721.473004][ T6134] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 721.607030][T11696] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 721.626924][T11696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.636389][T11696] usb 2-1: Product: syz [ 721.641022][T11696] usb 2-1: Manufacturer: syz [ 721.641235][ T6134] usb 1-1: config 0 has an invalid interface number: 108 but max is 0 [ 721.661357][T11696] usb 2-1: SerialNumber: syz [ 721.680393][ T6134] usb 1-1: config 0 has no interface number 0 [ 721.688186][ T6134] usb 1-1: too many endpoints for config 0 interface 108 altsetting 111: 119, using maximum allowed: 30 [ 721.700864][ T6134] usb 1-1: config 0 interface 108 altsetting 111 has 0 endpoint descriptors, different from the interface descriptor's value: 119 [ 721.716433][ T6134] usb 1-1: config 0 interface 108 has no altsetting 0 [ 721.724712][ T6134] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 721.736249][ T6134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.760702][ T6134] usb 1-1: config 0 descriptor?? [ 721.897894][T11696] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 721.952694][T11696] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 721.990207][T11696] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 722.002344][ T6694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.023034][ T10] usb 4-1: USB disconnect, device number 50 [ 722.026852][ T6694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.051125][T11696] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 722.090726][T11696] usb 2-1: USB disconnect, device number 76 [ 722.108069][ T6694] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3098'. [ 722.144687][ T6134] usb 1-1: string descriptor 0 read error: -71 [ 722.184382][ T6134] usb 1-1: Cannot read MAC address [ 722.192529][ T6134] MOSCHIP usb-ethernet driver 1-1:0.108: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 722.234965][ T6134] usb 1-1: USB disconnect, device number 67 [ 722.313289][T31485] Bluetooth: hci9: command tx timeout [ 722.483459][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.490990][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.498642][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.505850][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.513809][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.521630][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.528728][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.537402][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.544417][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.551349][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.562825][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.569690][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.576685][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.586807][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.593751][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.601288][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.608239][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.615295][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.623090][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.630053][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.637344][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.644432][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.651291][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.658256][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.665861][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.672953][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.679813][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.686918][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.693822][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.701254][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.708329][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.715725][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.723406][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.730352][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.737266][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.744283][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.751703][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.758934][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.766141][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.773145][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.780002][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.786983][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.795434][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.802963][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.803735][ T31] INFO: task syz.7.2292:30803 blocked for more than 143 seconds. [ 722.809934][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.810033][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.832676][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.839537][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.842389][ T6134] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 722.846502][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.861231][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.868193][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.876258][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 722.883855][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.890718][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.897628][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.909412][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.916941][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.923894][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.931623][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.936333][ T31] Not tainted syzkaller #0 [ 722.938525][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.950247][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.958490][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.965509][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.972358][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.979348][T31485] Bluetooth: hci6: unexpected event for opcode 0x040d [ 722.981717][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 723.039572][ T31] task:syz.7.2292 state:D stack:26824 pid:30803 tgid:30799 ppid:23712 task_flags:0x400140 flags:0x00080002 [ 723.051632][ T31] Call Trace: [ 723.055114][ T31] [ 723.058054][ T31] __schedule+0x17c4/0x4d60 [ 723.062634][ T31] ? __lock_acquire+0xab9/0xd20 [ 723.067508][ T31] ? __lock_acquire+0xab9/0xd20 [ 723.072368][ T31] ? __pfx___schedule+0x10/0x10 [ 723.077334][ T31] ? schedule+0x91/0x360 [ 723.081596][ T31] schedule+0x165/0x360 [ 723.085843][ T31] schedule_preempt_disabled+0x13/0x30 [ 723.091311][ T31] __mutex_lock+0x7e6/0x1350 [ 723.095948][ T31] ? __mutex_lock+0x5bb/0x1350 [ 723.100726][ T31] ? usbdev_open+0x16e/0x760 [ 723.105402][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 723.113451][ T31] ? bus_find_device+0x273/0x2b0 [ 723.115574][ T6134] usb 2-1: Using ep0 maxpacket: 16 [ 723.118411][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 723.118443][ T31] ? usbdev_open+0xa7/0x760 [ 723.118470][ T31] usbdev_open+0x16e/0x760 [ 723.194592][ T6134] usb 2-1: too many configurations: 72, using maximum allowed: 8 [ 723.222649][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 723.227635][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 723.282647][ T6134] usb 2-1: config 28 has an invalid descriptor of length 100, skipping remainder of the config [ 723.312711][ T31] chrdev_open+0x4cc/0x5e0 [ 723.317683][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 723.333467][ T6134] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 723.342638][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 723.342677][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 723.342699][ T31] do_dentry_open+0x953/0x13f0 [ 723.342739][ T31] vfs_open+0x3b/0x340 [ 723.342761][ T31] ? path_openat+0x2ecd/0x3830 [ 723.342783][ T31] path_openat+0x2ee5/0x3830 [ 723.342836][ T31] ? __pfx_path_openat+0x10/0x10 [ 723.342875][ T31] do_filp_open+0x1fa/0x410 [ 723.342892][ T31] ? __lock_acquire+0xab9/0xd20 [ 723.342921][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 723.342961][ T31] ? _raw_spin_unlock+0x28/0x50 [ 723.447616][ T31] ? alloc_fd+0x64c/0x6c0 [ 723.452008][ T31] do_sys_openat2+0x121/0x1c0 [ 723.456759][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 723.461983][ T31] ? rcu_is_watching+0x15/0xb0 [ 723.466853][ T31] __x64_sys_openat+0x138/0x170 [ 723.471727][ T31] do_syscall_64+0xfa/0xfa0 [ 723.476311][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 723.481528][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.487704][ T31] ? clear_bhb_loop+0x60/0xb0 [ 723.492393][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.498377][ T31] RIP: 0033:0x7ff9efb8d810 [ 723.503712][ T31] RSP: 002b:00007ff9f0ad5b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 723.512148][ T31] RAX: ffffffffffffffda RBX: 0000000000080801 RCX: 00007ff9efb8d810 [ 723.527878][ T31] RDX: 0000000000080801 RSI: 00007ff9f0ad5c10 RDI: 00000000ffffff9c [ 723.536041][ T31] RBP: 00007ff9f0ad5c10 R08: 0000000000000000 R09: 0000000000000000 [ 723.545419][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 723.553457][ T31] R13: 00007ff9efde6128 R14: 00007ff9efde6090 R15: 00007ffeefe958b8 [ 723.561454][ T31] [ 723.564619][ T31] INFO: task syz.4.2301:30873 blocked for more than 144 seconds. [ 723.572338][ T31] Not tainted syzkaller #0 [ 723.577390][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 723.592823][ T31] task:syz.4.2301 state:D stack:24200 pid:30873 tgid:30872 ppid:6131 task_flags:0x400140 flags:0x00080002 [ 723.622624][ T31] Call Trace: [ 723.626024][ T31] [ 723.628960][ T31] __schedule+0x17c4/0x4d60 [ 723.642680][ T31] ? __lock_acquire+0xab9/0xd20 [ 723.648321][ T31] ? __lock_acquire+0xab9/0xd20 [ 723.660012][ T31] ? __pfx___schedule+0x10/0x10 [ 723.665014][ T31] ? schedule+0x91/0x360 [ 723.669283][ T31] schedule+0x165/0x360 [ 723.673865][ T31] schedule_preempt_disabled+0x13/0x30 [ 723.679337][ T31] __mutex_lock+0x7e6/0x1350 [ 723.684083][ T31] ? __mutex_lock+0x5bb/0x1350 [ 723.688977][ T31] ? usbdev_open+0x16e/0x760 [ 723.694812][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 723.699858][ T31] ? bus_find_device+0x273/0x2b0 [ 723.722926][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 723.728349][ T31] ? usbdev_open+0xa7/0x760 [ 723.742618][ T31] usbdev_open+0x16e/0x760 [ 723.747844][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 723.762392][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 723.767740][ T31] chrdev_open+0x4cc/0x5e0 [ 723.772172][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 723.777187][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 723.783576][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 723.788521][ T31] do_dentry_open+0x953/0x13f0 [ 723.793394][ T31] vfs_open+0x3b/0x340 [ 723.797482][ T31] ? path_openat+0x2ecd/0x3830 [ 723.802253][ T31] path_openat+0x2ee5/0x3830 [ 723.811251][ T31] ? __pfx_path_openat+0x10/0x10 [ 723.816271][ T31] do_filp_open+0x1fa/0x410 [ 723.820779][ T31] ? __lock_acquire+0xab9/0xd20 [ 723.840072][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 723.852709][ T31] ? _raw_spin_unlock+0x28/0x50 [ 723.857581][ T31] ? alloc_fd+0x64c/0x6c0 [ 723.861932][ T31] do_sys_openat2+0x121/0x1c0 [ 723.882657][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 723.887886][ T31] ? rcu_is_watching+0x15/0xb0 [ 723.894893][ T31] __x64_sys_openat+0x138/0x170 [ 723.899860][ T31] do_syscall_64+0xfa/0xfa0 [ 723.904496][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.910647][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 723.918292][ T31] ? clear_bhb_loop+0x60/0xb0 [ 723.923507][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.930292][ T31] RIP: 0033:0x7fb30678d810 [ 723.935136][ T31] RSP: 002b:00007fb3049edb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 723.953705][ T31] RAX: ffffffffffffffda RBX: 0000000000101301 RCX: 00007fb30678d810 [ 723.961809][ T31] RDX: 0000000000101301 RSI: 00007fb3049edc10 RDI: 00000000ffffff9c [ 723.971569][ T31] RBP: 00007fb3049edc10 R08: 0000000000000000 R09: 0000000000000000 [ 723.979736][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 723.988093][ T31] R13: 00007fb3069e6038 R14: 00007fb3069e5fa0 R15: 00007ffe24258178 [ 723.997666][ T31] [ 724.117719][ T31] [ 724.117719][ T31] Showing all locks held in the system: [ 724.142713][ T31] 2 locks held by kworker/1:0/24: [ 724.147870][ T31] #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 724.160221][ T31] #1: ffffc900001e7ba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 724.172265][ T31] 1 lock held by khungtaskd/31: [ 724.177252][ T31] #0: ffffffff8e13d5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 724.187328][ T31] 2 locks held by pvrusb2-context/2340: [ 724.193159][ T31] #0: ffff8880419fc188 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_initialize+0xc6/0x3ac0 [ 724.203952][ T31] #1: ffffffff8dfe2a70 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0 [ 724.222671][ T31] 6 locks held by kworker/1:5/5880: [ 724.227953][ T31] #0: ffff888020acb948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 724.253915][ T31] #1: ffffc9000434fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 724.299805][ T31] #2: ffff888028bc2198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4b50 [ 724.308967][ T31] #3: ffff888079b20198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 724.352912][ T31] #4: ffff88805b131160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 724.372600][ T31] #5: ffff8880419fc188 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_disconnect+0x6d/0x500 [ 724.404180][ T31] 3 locks held by kworker/0:5/6134: [ 724.409456][ T31] #0: ffff888020acb948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 724.455094][ T31] #1: ffffc90005067ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 724.483989][ T31] #2: ffff888142fc0198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4b50 [ 724.502610][ T31] 4 locks held by udevd/8666: [ 724.507380][ T31] #0: ffff88804fb3d8b8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 724.532611][ T31] #1: ffff8880531af488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 724.552621][ T31] #2: ffff88805cfbae18 (kn->active#22){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 724.568584][ T31] #3: ffff888079b20198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 724.579176][ T31] 2 locks held by getty/15680: [ 724.584249][ T31] #0: ffff8880349930a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 724.594660][ T31] #1: ffffc9000d37d2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 724.605182][ T31] 1 lock held by syz.7.2292/30803: [ 724.610365][ T31] #0: ffff888028bc2198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 724.619726][ T31] 1 lock held by syz.4.2301/30873: [ 724.625194][ T31] #0: ffff888028bc2198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 724.642621][ T31] 1 lock held by syz.5.2337/31679: [ 724.653136][ T31] #0: ffff888028bc2198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 724.662264][ T31] 1 lock held by syz.9.2387/32497: [ 724.682492][ T31] #0: ffff888028bc2198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 724.692041][ T31] 1 lock held by syz-executor/32566: [ 724.697683][ T31] 1 lock held by syz.8.2411/598: [ 724.703292][ T31] #0: ffffffff8f4edb48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 724.712391][ T31] 3 locks held by kworker/u8:27/909: [ 724.718713][ T31] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 724.732440][ T31] #1: ffffc9000c1efba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 724.743839][ T31] #2: ffffffff8f4edb48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 724.753931][ T31] 1 lock held by syz.6.2627/2469: [ 724.759032][ T31] #0: ffff888028bc2198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 724.775654][ T31] 1 lock held by syz.2.2966/5383: [ 724.780765][ T31] #0: ffff888028bc2198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 724.791318][ T31] 1 lock held by syz.8.3084/6527: [ 724.805936][ T31] #0: ffff88805d221908 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 724.816900][ T31] 4 locks held by syz.1.3104/6777: [ 724.822077][ T31] #0: ffff8880276c8dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 724.832429][ T31] #1: ffff8880276c80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 724.842486][ T31] #2: ffffffff8f6573a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 724.853679][ T31] #3: ffff888058f72b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 724.863766][ T31] 2 locks held by syz.0.3106/6786: [ 724.868958][ T31] #0: ffffffff8f4edb48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 724.881398][ T31] #1: ffffffff8e143038 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 724.898620][ T31] [ 724.900996][ T31] ============================================= [ 724.900996][ T31] [ 724.972615][ T31] NMI backtrace for cpu 0 [ 724.972636][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 724.972656][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 724.972667][ T31] Call Trace: [ 724.972675][ T31] [ 724.972682][ T31] dump_stack_lvl+0x189/0x250 [ 724.972711][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 724.972732][ T31] ? __pfx__printk+0x10/0x10 [ 724.972762][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 724.972785][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 724.972806][ T31] ? __pfx__printk+0x10/0x10 [ 724.972828][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 724.972852][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 724.972875][ T31] watchdog+0xfa9/0xff0 [ 724.972900][ T31] ? watchdog+0x1f4/0xff0 [ 724.972928][ T31] kthread+0x711/0x8a0 [ 724.972951][ T31] ? __pfx_watchdog+0x10/0x10 [ 724.972972][ T31] ? __pfx_kthread+0x10/0x10 [ 724.972994][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 724.973016][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 724.973038][ T31] ? __pfx_kthread+0x10/0x10 [ 724.973057][ T31] ret_from_fork+0x4bc/0x870 [ 724.973081][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 724.973110][ T31] ? __switch_to_asm+0x39/0x70 [ 724.973131][ T31] ? __switch_to_asm+0x33/0x70 [ 724.973151][ T31] ? __pfx_kthread+0x10/0x10 [ 724.973174][ T31] ret_from_fork_asm+0x1a/0x30 [ 724.973211][ T31] [ 724.973256][ T31] Sending NMI from CPU 0 to CPUs 1: [ 725.126216][ C1] NMI backtrace for cpu 1 [ 725.126241][ C1] CPU: 1 UID: 0 PID: 32566 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 725.126260][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 725.126270][ C1] RIP: 0010:check_preemption_disabled+0x4a/0x120 [ 725.126293][ C1] Code: 0d db 04 42 07 f7 c1 ff ff ff 7f 74 23 65 48 8b 0d bb 04 42 07 48 3b 4c 24 08 0f 85 cc 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d cc cc cc cc cc 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 [ 725.126307][ C1] RSP: 0018:ffffc9000f277108 EFLAGS: 00000086 [ 725.126321][ C1] RAX: 0000000000000001 RBX: 0000000000000206 RCX: 07d24c2fecd97000 [ 725.126333][ C1] RDX: ffffc9000f277201 RSI: ffffffff8d884d36 RDI: ffffffff8bc0e660 [ 725.126346][ C1] RBP: dffffc0000000000 R08: ffffc9000f277d70 R09: 0000000000000000 [ 725.126358][ C1] R10: ffffc9000f277298 R11: fffff52001e4ee55 R12: ffffc9000f277d80 [ 725.126370][ C1] R13: ffffffff8173df15 R14: ffffffff8e13d5a0 R15: ffff888029a69e40 [ 725.126383][ C1] FS: 0000000000000000(0000) GS:ffff888125ddc000(0000) knlGS:0000000000000000 [ 725.126397][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 725.126408][ C1] CR2: 00007fd0ce2f9ae8 CR3: 000000000df38000 CR4: 00000000003526f0 [ 725.126423][ C1] Call Trace: [ 725.126430][ C1] [ 725.126437][ C1] lock_release+0xbc/0x3e0 [ 725.126459][ C1] ? deref_stack_reg+0x19f/0x230 [ 725.126480][ C1] ? unwind_next_frame+0xa5/0x2390 [ 725.126496][ C1] unwind_next_frame+0x19a9/0x2390 [ 725.126515][ C1] ? unwind_next_frame+0xa5/0x2390 [ 725.126532][ C1] ? get_signal+0x1285/0x1340 [ 725.126556][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 725.126576][ C1] arch_stack_walk+0x11c/0x150 [ 725.126595][ C1] ? arch_do_signal_or_restart+0xa0/0x790 [ 725.126620][ C1] stack_trace_save+0x9c/0xe0 [ 725.126638][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 725.126655][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.126677][ C1] kasan_save_stack+0x3e/0x60 [ 725.126697][ C1] ? kasan_save_stack+0x3e/0x60 [ 725.126716][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 725.126733][ C1] ? call_rcu+0x157/0x9c0 [ 725.126748][ C1] ? __dentry_kill+0x4d2/0x660 [ 725.126768][ C1] ? shrink_kill+0xa9/0x2c0 [ 725.126785][ C1] ? shrink_dentry_list+0x2e0/0x5e0 [ 725.126804][ C1] ? shrink_dcache_parent+0xa1/0x2c0 [ 725.126823][ C1] ? do_one_tree+0x23/0xe0 [ 725.126841][ C1] ? shrink_dcache_for_umount+0xa0/0x170 [ 725.126860][ C1] ? generic_shutdown_super+0x67/0x2c0 [ 725.126881][ C1] ? kill_litter_super+0x76/0xb0 [ 725.126897][ C1] ? deactivate_locked_super+0xbc/0x130 [ 725.126918][ C1] ? cleanup_mnt+0x425/0x4c0 [ 725.126937][ C1] ? task_work_run+0x1d4/0x260 [ 725.126955][ C1] ? do_exit+0x6b5/0x2300 [ 725.126972][ C1] ? do_group_exit+0x21c/0x2d0 [ 725.126989][ C1] ? get_signal+0x1285/0x1340 [ 725.127028][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 725.127047][ C1] ? __pfx___d_free+0x10/0x10 [ 725.127061][ C1] call_rcu+0x157/0x9c0 [ 725.127088][ C1] ? __pfx_call_rcu+0x10/0x10 [ 725.127107][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 725.127128][ C1] __dentry_kill+0x4d2/0x660 [ 725.127147][ C1] ? shrink_kill+0x8d/0x2c0 [ 725.127166][ C1] shrink_kill+0xa9/0x2c0 [ 725.127185][ C1] shrink_dentry_list+0x2e0/0x5e0 [ 725.127208][ C1] shrink_dcache_parent+0xa1/0x2c0 [ 725.127230][ C1] ? __pfx_shrink_dcache_parent+0x10/0x10 [ 725.127257][ C1] do_one_tree+0x23/0xe0 [ 725.127278][ C1] shrink_dcache_for_umount+0xa0/0x170 [ 725.127300][ C1] generic_shutdown_super+0x67/0x2c0 [ 725.127325][ C1] kill_litter_super+0x76/0xb0 [ 725.127341][ C1] deactivate_locked_super+0xbc/0x130 [ 725.127363][ C1] cleanup_mnt+0x425/0x4c0 [ 725.127383][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.127407][ C1] task_work_run+0x1d4/0x260 [ 725.127427][ C1] ? __pfx_task_work_run+0x10/0x10 [ 725.127448][ C1] ? do_exit+0x6b0/0x2300 [ 725.127464][ C1] ? kmem_cache_free+0x19b/0x690 [ 725.127488][ C1] do_exit+0x6b5/0x2300 [ 725.127509][ C1] ? do_raw_spin_lock+0x121/0x290 [ 725.127528][ C1] ? __pfx_do_exit+0x10/0x10 [ 725.127554][ C1] do_group_exit+0x21c/0x2d0 [ 725.127573][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.127596][ C1] get_signal+0x1285/0x1340 [ 725.127628][ C1] arch_do_signal_or_restart+0xa0/0x790 [ 725.127648][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 725.127669][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 725.127697][ C1] ? exit_to_user_mode_loop+0x40/0x130 [ 725.127721][ C1] exit_to_user_mode_loop+0x72/0x130 [ 725.127742][ C1] do_syscall_64+0x2bd/0xfa0 [ 725.127756][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.127778][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.127793][ C1] ? clear_bhb_loop+0x60/0xb0 [ 725.127811][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.127826][ C1] RIP: 0033:0x7fa1ad9c1885 [ 725.127839][ C1] Code: Unable to access opcode bytes at 0x7fa1ad9c185b. [ 725.127848][ C1] RSP: 002b:00007ffcb9003b30 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 725.127865][ C1] RAX: fffffffffffffdfc RBX: 00000000000001c7 RCX: 00007fa1ad9c1885 [ 725.127876][ C1] RDX: 00007ffcb9003b70 RSI: 0000000000000000 RDI: 0000000000000000 [ 725.127887][ C1] RBP: 00007ffcb9003bdc R08: 0000000000000000 R09: 0000000000000000 [ 725.127898][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 725.127908][ C1] R13: 00000000000927c0 R14: 00000000000b085e R15: 00007ffcb9003c30 [ 725.127928][ C1] [ 726.268634][ T898] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.481088][ T6134] usb 2-1: unable to read config index 1 descriptor/start: -71 [ 726.495697][ T898] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.512772][ T6134] usb 2-1: can't read configurations, error -71 [ 726.608184][ T898] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.700252][ T898] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.909136][ T898] bridge_slave_1: left allmulticast mode [ 726.916440][ T898] bridge_slave_1: left promiscuous mode [ 726.923111][ T898] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.935039][ T898] : left allmulticast mode [ 726.939562][ T898] : left promiscuous mode [ 726.945492][ T898] bridge0: port 1() entered disabled state [ 727.424305][ T898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 727.468678][ T898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.495916][ T898] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 727.536792][ T898] bond0 (unregistering): Released all slaves [ 727.619464][ T898] tipc: Left network mode [ 728.058471][ T898] hsr_slave_0: left promiscuous mode [ 728.068491][ T898] hsr_slave_1: left promiscuous mode [ 728.081551][ T898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 728.089293][ T898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 728.098203][ T898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 728.106314][ T898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 728.126504][ T898] veth0_vlan: left promiscuous mode [ 728.271049][ T898] pimreg3 (unregistering): left allmulticast mode [ 728.621140][ T898] team0 (unregistering): Port device team_slave_1 removed [ 728.657892][ T898] team0 (unregistering): Port device team_slave_0 removed [ 729.339311][ T898] IPVS: stop unused estimator thread 0... [ 729.997331][ T898] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.095992][ T898] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.157930][ T898] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.248723][ T898] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.488648][ T898] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.581315][ T898] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.669802][ T898] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.760131][ T898] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.984848][ T898] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.059123][ T898] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.150974][ T898] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.238201][ T898] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.441053][ T898] bridge_slave_1: left allmulticast mode [ 731.447447][ T898] bridge_slave_1: left promiscuous mode [ 731.453372][ T898] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.464027][ T898] bridge_slave_0: left allmulticast mode [ 731.469674][ T898] bridge_slave_0: left promiscuous mode [ 731.475564][ T898] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.486534][ T898] bridge_slave_1: left allmulticast mode [ 731.492158][ T898] bridge_slave_1: left promiscuous mode [ 731.498955][ T898] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.508125][ T898] bridge_slave_0: left allmulticast mode [ 731.514149][ T898] bridge_slave_0: left promiscuous mode [ 731.519780][ T898] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.532009][ T898] bridge_slave_1: left allmulticast mode [ 731.537774][ T898] bridge_slave_1: left promiscuous mode [ 731.543755][ T898] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.552418][ T898] bridge_slave_0: left allmulticast mode [ 731.558419][ T898] bridge_slave_0: left promiscuous mode [ 731.564868][ T898] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.101396][ T898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.135119][ T898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.185239][ T898] bond0 (unregistering): (slave team0): Releasing backup interface [ 732.224945][ T898] bond0 (unregistering): Released all slaves [ 732.679890][ T898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.724414][ T898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.764638][ T898] bond0 (unregistering): Released all slaves