last executing test programs: 10m58.943135887s ago: executing program 32 (id=17): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x400040, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000300)={0x9f0000, 0xfffffffa, 0xd154, r1, 0x0, &(0x7f00000002c0)={0x9b090f, 0x1, '\x00', @ptr=0xa07a}}) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0xe, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="0000f6f376c9cac2e9f69317555756f95d0f01e3219606e1b1b2aa7b9c191f540248565856ad38b8135d1794b4d0d5c1442285ba2b2728ba773ee5ee10"]) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000002180)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x0, 0x200, 0x1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000044000000060a0b0400000000000000000200000018000480140001800c0001006e6f747261636b00040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000008000a00c4063013cb970f0814268811c6d1ddb3f3f8da50501e07d08f3ff4d8e582f6b460f8dd684dc419be79fbb25dbc98fbffffff9e0c6a012d4008dbda88602c8048a7b949d728731965987fb15d00c89cf176ae74fa0448580e09dcf0510bd334975408e12a1e0edda96316b68438e76ecc369bb6d47edf9fa8df9af591f1b608ff5fa1f158a0ec5ccb4f"], 0x6c}}, 0x800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_RESVSP(r5, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x4e1ee79f, 0x0, 0xf0}) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="400f4a0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) socket$netlink(0x10, 0x3, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmmsg$inet(r8, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) epoll_create1(0x0) 9m18.617999691s ago: executing program 33 (id=610): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000001c00)={0xa, 0x4e20, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r3) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {0x3}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_LINK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x805}, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x100c000, &(0x7f0000000380)) ioctl$BTRFS_IOC_BALANCE(r0, 0x8004b706, 0x1000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) connect$inet6(r1, &(0x7f0000001c00)={0xa, 0x4e20, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r3) (async) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {0x3}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_LINK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x805}, 0x0) (async) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r2, 0x0) (async) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x100c000, &(0x7f0000000380)) (async) ioctl$BTRFS_IOC_BALANCE(r0, 0x8004b706, 0x1000000) (async) 8m27.342348152s ago: executing program 34 (id=1072): chdir(&(0x7f0000000480)='./cgroup\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc0010003, 0x0, 0x4}]}) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000fe0001009a"], 0x0) 7m27.106808117s ago: executing program 5 (id=1528): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0xc000, &(0x7f0000000000)={0xa, 0x4e23, 0xffff, @mcast2}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x8001, 0x4, 0x1, 0x5, 0x67, 0xcc7, 0x8, 0x7, 0xa, 0x4, 0xfffffffe, 0x1, 0x820, 0x1, 0x6, 0xfffffeff, 0x979d, 0x1a44d, 0xf7ffffe3, 0x40000003, 0x89, 0x2, 0xf27, 0x20001e58, 0xfffffbff, 0x8, 0x3c, 0x8, 0x9, 0x10000, 0xfffffff8]}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039bb0102030109021b0001000000000904ac00018fe7e2000905", @ANYRES16], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000008, 0x11, r1, 0x52342000) 7m26.531053262s ago: executing program 5 (id=1534): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000000000000000000000000000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73797a3000000000"], 0x6c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYRES8=r2, @ANYBLOB="21f02a7f15ed072a0900000000fcbadf254400aa2086a1030012d1b180d305976fb830cb53fd594a739de0a8059427596d3bdcb2a46d34f5884c9cee15391cd724bfefc826", @ANYRES8=r4, @ANYBLOB="0c00c532190d27b023800600100007000000"], 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x40000) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f00006f4000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x6, 0x6, 0x2) (async) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x100) (async) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0xb, r5, &(0x7f00000010c0)=""/4096, 0x1000) r6 = add_key(0x0, 0x0, &(0x7f00000000c0)="dee7a8c4db7d53d25997b9762235373f000000000000000000000000000000b8e078f79fd339574ae44e1f010dd2ece70121ce8dd43497ee22df4524f5c00cb8eb6f47f2e210510a4b05be064fa05e2a18afa5a8e7521d257c3d9f6b2b3e404698a3c561dffcf4e646368dba73e2ca96a17385541337e4051e8f00"/134, 0x86, r5) syz_usb_connect(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYRES16=r5, @ANYRES16=0x0, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRES8=r6, @ANYRES32=r5, @ANYRES32=r5], 0x0) 7m26.462150543s ago: executing program 5 (id=1535): r0 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000003c00), 0x400, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) shutdown(r0, 0x1) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000f28b94a01f40ef17096000000000000109022400010000000000040002010300030009210000000122030009"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000300)={0x2c, &(0x7f0000000140)={0x20, 0x11, 0xb4, {0xb4, 0x22, "24b10778e9dd2aeb21546decf515a139cd9c495b53773ed529f330282e038e7bde9f9a85d1c21ecc10e2cc939075648d730fa921448f2232ebae7d26798a5564287c310d023fd33029b3de6d900a7127e9cf6fba3aa0ad842f1951302ca010e51baa9714ecd019a3ff0c9a3e59380b0524c9f6b55eaa088fe3eaf7fb200eb6c289a3daf43f31559d897e639fb852be8e6862d2b807075616b11340ff903db7466f2533ceef6b44a760f650ad626d17c701e1"}}, &(0x7f00000000c0)={0x0, 0x3, 0x13, @string={0x13, 0x3, "79268bfd1dd83272d43306379a20901539"}}, &(0x7f0000000200)={0x0, 0xf, 0x5d, {0x5, 0xf, 0x5d, 0x2, [@generic={0x4d, 0x10, 0xb, "65af178da9c91858d43b8bf001671760ddc209af7bd76a357b438e2688897c53439dacef167f88d91fdc4fe8b9822983d66907789b5efb039ed2a8522d1d841f367f3026a52c52baf144"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x5, 0x1, 0xf, 0x7}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x8, 0x7, 0x7, "a702f1d3", "f7cd2aa1"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf7, 0x4, 0xc, 0x2d, 0x8, 0x2ee, 0xce7}}}, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x0, 0x11, 0xda, "4783f31590d54862fd81008aee3a2b77cbc0ae0cee52ccbbf73cb6418f36a637769bed0f4b4d61ef69666afd6899a1f0cc459360e4dfd74ed76832d66b69c4e1d6022db1e90120c2975b3337830cb6e9bb2972ed301bcda2f061478213aed49f3b7fb6e329fe5d4a6240466396254ce1f9df8c84b464355a5c351b3eb8b041951f7a0080cfa224dd91d830306b2ab5eeb5a061ea1dccecfa978e6d36cc7dc651172bad6c4867c8eebbfacc21ec2b6612a0991523be81c7023e218e0f317e9d9a428d5108a2e06c82e958ff147aad0563ff1684364fded5f816c3"}, &(0x7f0000000440)={0x0, 0xa, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xe}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x2, 0x6}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x160, 0x4, [0xff0]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0xfff6}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7f}, &(0x7f00000005c0)={0x40, 0xb, 0x2, 'hs'}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @local}, &(0x7f0000000680)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "8c78"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0xc9}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xf7}}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a80), 0x400, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x3, 0x40, 0x3, 0x3, 0x8, 0x81, 0x3, 0x4, 0x0, 0x7, 0x101, 0x200000000000000, 0x1, 0x4000000006]}, &(0x7f00000009c0)=0x100) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, r6, 0x6, 0x13, r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000a00)={r5, 0x6}, &(0x7f0000000a40)=0x8) syz_usb_control_io$hid(r3, &(0x7f0000000100)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="400109"], 0x0, 0x0, 0x0}, 0x0) 7m25.897481437s ago: executing program 5 (id=1538): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff00000000256d1f47f7c7fc615c668d9f932a7b00000000ffffffffffffffff00000000000000001f00000000006b9bfeffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/255], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r3, 0x6f000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x28, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f9b7b5acfe1e"}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8000000) bind$packet(r3, &(0x7f0000000080)={0x11, 0x14, r7, 0x1, 0x8, 0x6, @remote}, 0x14) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002052377aae00000000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0xffffffffffffffff) (async) socket$key(0xf, 0x3, 0x2) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff00000000256d1f47f7c7fc615c668d9f932a7b00000000ffffffffffffffff00000000000000001f00000000006b9bfeffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/255], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) (async) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r3, 0x6f000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000001100), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001140)) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x28, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f9b7b5acfe1e"}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8000000) (async) bind$packet(r3, &(0x7f0000000080)={0x11, 0x14, r7, 0x1, 0x8, 0x6, @remote}, 0x14) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002052377aae00000000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) 7m25.722326605s ago: executing program 5 (id=1540): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000000100)={'sit0\x00', 0x0}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000000100)={'sit0\x00', 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x18, 0x140f, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000010}, 0x20040800) setresuid(0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000140)={0x6, 'veth1_virt_wifi\x00', {0x4}, 0x3}) syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x9e, 0xdc, 0x17, 0x40, 0x1286, 0x2046, 0x7e5f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xca, 0x0, 0x40, 0x8, [{{0x9, 0x4, 0x71, 0x9, 0x0, 0xff, 0x4, 0x1, 0x4}}]}}]}}, 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x9e, 0xdc, 0x17, 0x40, 0x1286, 0x2046, 0x7e5f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xca, 0x0, 0x40, 0x8, [{{0x9, 0x4, 0x71, 0x9, 0x0, 0xff, 0x4, 0x1, 0x4}}]}}]}}, 0x0) syz_usb_connect$uac1(0x6, 0x87, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x6, 0xa0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xff}, [@processing_unit={0x8, 0x24, 0x7, 0x4, 0x6, 0x5, "05"}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0x3, 'JB'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x3, 0x3, {0x7, 0x25, 0x1, 0x2, 0x6, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x7, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x43, 0x2, {0x7, 0x25, 0x1, 0x0, 0x1, 0xfffd}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x0, 0x6, 0x92, 0xff, 0x80}, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x4, 0x3, 0x9}]}, 0x4, [{0x61, &(0x7f0000000140)=@string={0x61, 0x3, "5ab6851481a7eafcf84527475ff27a14796b0a6942821474fda062b63e63ff00de2055f4ca94af063474b2d6457125232553bbc22ca5c607d9e371b33516e535758b9c8aba30545f3264d1c066178027142ff5525a2d1cb082e195f77b4961"}}, {0x102, &(0x7f0000000300)=@string={0x102, 0x3, "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"}}, {0xfc, &(0x7f00000001c0)=@string={0xfc, 0x3, "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"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1004}}]}) (async) syz_usb_connect$uac1(0x6, 0x87, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x6, 0xa0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xff}, [@processing_unit={0x8, 0x24, 0x7, 0x4, 0x6, 0x5, "05"}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0x3, 'JB'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x3, 0x3, {0x7, 0x25, 0x1, 0x2, 0x6, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x7, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x43, 0x2, {0x7, 0x25, 0x1, 0x0, 0x1, 0xfffd}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x0, 0x6, 0x92, 0xff, 0x80}, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x4, 0x3, 0x9}]}, 0x4, [{0x61, &(0x7f0000000140)=@string={0x61, 0x3, "5ab6851481a7eafcf84527475ff27a14796b0a6942821474fda062b63e63ff00de2055f4ca94af063474b2d6457125232553bbc22ca5c607d9e371b33516e535758b9c8aba30545f3264d1c066178027142ff5525a2d1cb082e195f77b4961"}}, {0x102, &(0x7f0000000300)=@string={0x102, 0x3, "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"}}, {0xfc, &(0x7f00000001c0)=@string={0xfc, 0x3, "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"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1004}}]}) 6m44.203588864s ago: executing program 5 (id=1543): syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x51) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000000), 0x10000, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@uuid_on}], [], 0x2c}) 6m44.202962854s ago: executing program 35 (id=1543): syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x51) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000000), 0x10000, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@uuid_on}], [], 0x2c}) 6m9.537972459s ago: executing program 2 (id=1807): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000002340)=ANY=[@ANYBLOB="12010003020000082505a1a440000102030109023b"], &(0x7f0000000940)={0x0, 0x0, 0xf, &(0x7f0000002580)=ANY=[@ANYBLOB="050f0f10"]}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1afb640cf24e459220900000001090212ad8c000000000904210000080650"], 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) futex(0x0, 0x84, 0x2, 0x0, &(0x7f00000001c0), 0x22) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x2, 0x3, 0x0, 0x2, 0x12, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, 'f'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x6, 0x300, 0x8000002f}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x90}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x3d}}) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r3 = socket(0x11, 0x800000002, 0x0) move_pages(0x0, 0x2, &(0x7f0000000180)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000240)=[0x1, 0x1], &(0x7f0000000000), 0x0) r4 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905", @ANYBLOB="e2"], 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b47, &(0x7f00000000c0)=""/110) r5 = socket$inet_smc(0x2b, 0x1, 0x0) lseek(r3, 0x8, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x8010, r7, 0x3864d000) syslog(0x2, &(0x7f0000000380)=""/157, 0x9d) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f00000001c0), 0x4) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000200)=0xe8) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000240)="f257", 0x22, 0x20008814, &(0x7f0000000200)={0x11, 0x88f7, r11, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@remote, 0x0, 0x2400, 0x4e21, 0x5, 0x2, 0x0, 0x20, 0x62, 0x0, r8}, {0x0, 0x0, 0x100000000000, 0x0, 0x1, 0x0, 0x1}, {0x7e3}, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r4], 0x188}}, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000140)) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'team_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13, 0x1, 0x9, 0xa7}}) 6m8.619659339s ago: executing program 2 (id=1811): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r0 = getpid() r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x801, 0x10) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x3, 0x5001) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x42}) syz_usb_connect(0x0, 0x48, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x4c, 0xb, 0xae, 0x10, 0x8e9, 0xbdb3, 0x7cff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x8, 0x1, 0xa0, 0x1, [{{0x9, 0x4, 0xb, 0x1, 0x0, 0x2, 0x9, 0x82, 0xc0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xe63, 0x9, 0x3}, {0x6, 0x24, 0x1a, 0x9, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x400, 0x4}]}]}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 6m7.588629454s ago: executing program 2 (id=1814): socket(0x6, 0x2, 0x0) (async) r0 = socket(0x6, 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x11, r1, 0xc5978000) 6m7.510362008s ago: executing program 2 (id=1815): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 64) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x24000, 0x0) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = syz_open_dev$video4linux(&(0x7f0000000540), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc0585604, &(0x7f0000000580)={0x1c87b207473247f6, 0x0, 0x0, 0x4, {0x9, 0x40, 0x7}}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r3 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r3, 0xc02864c3, &(0x7f0000000540)={0x0}) recvmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x200002}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f0000000c00)=""/235, 0xeb}], 0x4}, 0x83a}, {{0x0, 0x0, 0x0}, 0x3d}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/121, 0x79}, {&(0x7f0000000600)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}], 0x4}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) (async) sendmsg$sock(r2, &(0x7f0000000280)={&(0x7f00000000c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="eaf7b7a0afa463fa5685d22588ccae0e0f22c42cdbeb354ff8b1667ae6ab143192716ff6a090dd38fb8db9d58cf9bf2d082390509ae3f1584e3d1e7dce0ae4b247f8a1b8faac699f352f414d2138cef77a9c7a52fc58c6d325802b2ad534746c9e577e8507c9abddefb51cf196e7ea60fd02ddb371729f6a9c58d2fce3ee76a7ddbb5acfab6d9a1424baf8098921e2472405aab683eec30a1b75345503ebe5c6eb7ead", 0xa3}, {&(0x7f0000000200)="06378083ed02a585f03df15c21dc84f83445c20dbafad7b330674ac91ba98e737f96f8", 0x23}], 0x2}, 0x20044001) (async) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r4, 0x29, 0x10, &(0x7f0000000000)=0x1, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r7, @ANYBLOB="60003080050003"], 0x7c}}, 0x0) sendmmsg(r4, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev_mcast\x00') (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) tee(r9, r9, 0x100000001, 0x6) (async) timerfd_settime(r8, 0x2, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000080)) fchdir(r8) 6m7.292135577s ago: executing program 2 (id=1816): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r3, @ANYBLOB="05"], 0x0) connect$rose(r2, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffffd, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast]}, 0x40) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 6m6.810315725s ago: executing program 2 (id=1818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000c00000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x7c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x67}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xe}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xb}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r2, 0x1, 0xfffffffe, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x50010}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a01040000005daf117cc85fce920008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c0002800800018000000000000000020a0102000000000000000000000000140000001000010000000000000000000084000a00"], 0xf4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x9, 0x5a, 0x6c, 0x20, 0x1199, 0x68aa, 0xa470, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7d, 0x3, 0x80, 0x3, [{{0x9, 0x4, 0x1b, 0x18, 0x0, 0xff, 0xff, 0xff, 0x4}}]}}]}}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r9, 0x1, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) shutdown(r0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000c00000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x7c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x67}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xe}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xb}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) (async) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r2, 0x1, 0xfffffffe, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x50010}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a01040000005daf117cc85fce920008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c0002800800018000000000000000020a0102000000000000000000000000140000001000010000000000000000000084000a00"], 0xf4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x9, 0x5a, 0x6c, 0x20, 0x1199, 0x68aa, 0xa470, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7d, 0x3, 0x80, 0x3, [{{0x9, 0x4, 0x1b, 0x18, 0x0, 0xff, 0xff, 0xff, 0x4}}]}}]}}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r9, 0x1, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) shutdown(r0, 0x1) (async) 6m6.503412438s ago: executing program 36 (id=1818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000c00000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x7c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x67}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xe}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xb}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r2, 0x1, 0xfffffffe, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x50010}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a01040000005daf117cc85fce920008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c0002800800018000000000000000020a0102000000000000000000000000140000001000010000000000000000000084000a00"], 0xf4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x9, 0x5a, 0x6c, 0x20, 0x1199, 0x68aa, 0xa470, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7d, 0x3, 0x80, 0x3, [{{0x9, 0x4, 0x1b, 0x18, 0x0, 0xff, 0xff, 0xff, 0x4}}]}}]}}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r9, 0x1, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) shutdown(r0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000c00000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x7c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x67}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xe}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xb}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) (async) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r2, 0x1, 0xfffffffe, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x50010}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a01040000005daf117cc85fce920008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c0002800800018000000000000000020a0102000000000000000000000000140000001000010000000000000000000084000a00"], 0xf4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x9, 0x5a, 0x6c, 0x20, 0x1199, 0x68aa, 0xa470, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7d, 0x3, 0x80, 0x3, [{{0x9, 0x4, 0x1b, 0x18, 0x0, 0xff, 0xff, 0xff, 0x4}}]}}]}}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r9, 0x1, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) shutdown(r0, 0x1) (async) 5m26.667348655s ago: executing program 8 (id=2007): r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000040)={0x2c, 0x8}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010d0000000708b5192100c7980000000109021b00022000ac00090400000107000009090585cf"], 0x0) 5m25.264081339s ago: executing program 8 (id=2013): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) close(r0) syz_usb_connect(0x0, 0x56, &(0x7f0000002d80)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e7010203010902440002000000000904970001fec4b0f8069e0dd5ce0008240201000000000905000000000000000705a3f6d2"], 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000600)={{0x10001, 0x200}}, 0x10) sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast2, 0x3}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="684a5a49852eb12a59f61c8bd4427962b141163322fcc92c344e678ddd1fb2e3aa774e721d2041ae214089cd285cf7f5dfacc1ffd647f9bbc58ae1c180b1a38de3c4292146f535e5416e720220ed2501195168c7e8bb8d6b8d23e8cb571dcf03a4f5994a8a638dc08fcc09e4b6057a0b71c7b643562ff13e820d860554f2ead81ef86acee45aba041360bccbf2d16de6ca2a344eba9f0ba1e12776d60f89420c810de018c6208d3e48c200"/182, 0xb6}, {&(0x7f0000000140)="031e4d83fd926df618aa6489278b619d27ad4b9a754803a51fa7eab641cc8c492ae0e5dbf664828eac1ec7", 0x2b}, {&(0x7f0000000180)="bd002d75419065c3b35179882538e2988289332b5c8825810d66b81495b7ea120075859d9439ce9306577676a7eaf3cb6e4c4d23145aa32455618cba2f8ec5ee3e0ab8484c62ed3d685e40cba7411527458aa91e6b58d1a7c98acbc17454f330ec1a40371bd178b2a480a47f56f3ce2c4928319054b21b3064bcf9cdc1b80501a1f79b99687acc694a2702f744de9de190436b0f96996809744fae40afe1f1d4ce436c24753175ed5bb81252bccd48eb9eca5666e18d5145777b0741fe9a75c231fbaa1f4bf3f6d41a", 0xc9}], 0x3, &(0x7f00000002c0)=[{0x58, 0x118, 0x7, "4482aa1e52acd55496a84af6915677bc80e69f394b320b4a8d19f7b1988307f86717ef075495575202f8ef2603d3feb030bc0f3df8db63ee3d6a7a6cac738606b06e14"}, {0xf0, 0x10f, 0xc0e, "5d6e5a2cc3b56fd75e91d78837cc5d336e742a79ccf581857f219dcebd2787cef6b066c7b3d6d16c07c08efc299a65a44e5d847db7b177d2ad7a664691983cd7941e22266cd12ef935e13757b7ce79d9682e1aeedbee0485a5f8864044bd64962c7ee1a6d22df0be813135ef5f2877882caf13c2767515651f4c03d01089b4f77a7156aa1ed49ac26abefc2b3b620422f39bc3a2b2ce1847af0a6c506de349a5b7728b6db1ed836d0c78e31e20ac399c5cbebdd6a34446def0eef9db3e4e6415dc8f0c0eab133ba25e7a5f50709cc83f73c33ccf2a89b419d1926de99b71a1"}, {0xa8, 0x104, 0x6c7d, "e99d28e57e76ae499abc8a65137a03afb8f494e6c8343548c57ca276c7227eb3c29ce771ca6572d7273e9662c02eff368367d27b71194921b6acc2510b6ac8afa2027e32793e13e67a7e7335c4c0bc726b2bca6702aefd06dde9596a2f049972ee216259a185db3a0189180b3656bdf54c08486d6e85906483d9f7511444d363591707bb81e06d6002bcb6adc03cee38ac8b64c5"}, {0xe8, 0x118, 0x9, "acef7be1859e43fc216b92298ef356d93c6256337dd4971c682109c2e674f8339de0c19664d51b2e853b73a6886fae707fb889260506a6e5c0cde722e4c0803264ebd5e8cd1f51debb4f5af52c772cbdcc74e6ce3e2dce7c4f21e757fd046f5dc34f7cfef245dab2038bc0f31f7b40c895e0dfdd93fdff934f6805a2df2c2482c5c4d0fc391691e786e11e1a124bc1beb3d52b7f1dcd1104b0a5e272cbb05971c7823d7bceea6b796ede7909aebb41316d9bad52323a41b737ee4968bbdeb0316c2ff871db387cbe3631e6cad750e5c478b25bcd7ed1"}], 0x2d8}, 0x4000) 5m23.951943692s ago: executing program 8 (id=2015): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x5e, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4c, 0x1, 0x1, 0x4, 0xe0, 0x8, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x2, 0x8, 0x6c}, [@acm={0x4, 0x24, 0x2, 0x2}, @acm={0x4, 0x24, 0x2, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x3, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x70, 0x7, 0x2e, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x80, 0x4, 0x1}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xf7, 0x2, 0x0, 0xef, 0x2}, 0x16, &(0x7f0000000140)={0x5, 0xf, 0x16, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0xd, 0x7, 0x8000}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xf, 0x9, 0x1}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1004}}]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 5m20.916849801s ago: executing program 8 (id=2031): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000000)=@filename='./file0\x00', r0, &(0x7f0000000100)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, &(0x7f0000000380)) getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x24000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$TIOCGISO7816(r3, 0x80285442, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000300", @ANYRES8=r1], 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0x10000800) 5m20.788112203s ago: executing program 8 (id=2032): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904"], 0x0) syz_usb_connect$cdc_ncm(0x2, 0x73, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x6, 0xe0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x14, 0xd0a, 0x7950}, {0x6, 0x24, 0x1a, 0x97, 0x21}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x7, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x1, 0x6}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x6, 0x1, 0x1, 0xff, 0x80}, 0x27, &(0x7f0000000100)={0x5, 0xf, 0x27, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x4, 0x8, 0x2, 0x10}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x0, 0xf00, 0x7, [0x0]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x4, 0x4, 0xa59}]}, 0x2, [{0xe4, &(0x7f0000000140)=@string={0xe4, 0x3, "a321356a603b871b507eff685f8fd6f084c4de4a4615df92dcf7036239811fe0dc190267caa2d62b964ceb571472d3e859bfeb657e2743af2d2c05bf88f237e477ceaaf94a739915aee1942d1750caa40ec89c265342b15835d0181c94896be42f7e1ac50a07b0a50dd7b9815550bf6c482c583b340c23b5d3c1fe6fdd538debb93c803615d59b76d30b930a55c4231d9d0cec848ce564537eba03d84798d32253bee0be2326487979ed5bfcf87b0cea171361d5179bc0136f67fcf29598b6dbcc5cdbd68a5ffa241ffff4a7dad103adfa9988d915688f1ab3e5bbe4298501456047"}}, {0xe4, &(0x7f0000000240)=@string={0xe4, 0x3, "b40fe26d62f729c2ad25f3f6dccef635473e8ec1717a0fea428a74092d385543a249372bce6cf7bea4d7fe1f6c0a36dd8cdc14de2d8f7c8004f9aa3328230f45fce7e835f138a6784f3a53f2c7ce0ab3ff2e704a13820105075a40261adf6244b99ac9066cc3e943edaf29ec796f768d4691f40b2565861e211169682976fc70600a1126fcf5c4fa242cbaf534574af4d4989620fc53677826723a1642c02625867664ce6d76af308ec19f101c5b232fe36594818db12c4625ed35e683691d4f2875f2a233a5348de19f73998eec1b96317b1319cf9cd3718ed54d683a85661d0612"}}]}) 5m20.560059961s ago: executing program 8 (id=2033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000924020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a3000"], 0xc4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) clock_nanosleep(0xd, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="200000001e002100000000000000000007000008"], 0x20}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x83}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 5m20.33272436s ago: executing program 37 (id=2033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000924020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a3000"], 0xc4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) clock_nanosleep(0xd, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="200000001e002100000000000000000007000008"], 0x20}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x83}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 4m40.90518513s ago: executing program 7 (id=2230): socket$kcm(0x10, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6", 0x19}], 0x1}, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f00000013c0)=[{0x0, 0x2d}, {&(0x7f0000001240)=""/1, 0x1}], 0x2, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x18, 0x0) fanotify_mark(r3, 0x105, 0x4800003a, r2, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000440)='.\x00', 0x12000021) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8801, 0x194) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) r6 = socket$netlink(0x10, 0x3, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r5, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0xff, 0x0, @random="48bd00"}, 0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/97, 0x1000000, 0x1000, 0x5, 0x1}, 0x20) madvise(&(0x7f0000227000/0x4000)=nil, 0x4000, 0x19) sendmsg$netlink(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[], 0x1c}], 0x1}, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e25, @broadcast}}}, 0x108) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e00000000646f5f189339918c77f000001000000000195a28a10a3bfc3"], 0x14) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r11 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r11, 0x0) kcmp(r9, r10, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) sendto(r1, &(0x7f0000000400)="b4", 0x1, 0x44075, &(0x7f00000002c0)=@in={0x2, 0x4e23, @multicast2}, 0x80) sendmsg$inet_sctp(r8, &(0x7f0000000700)={&(0x7f0000000280)=@in6={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0x13}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000200)="cf853b129124e6d1e3d48b90", 0xc}], 0x1, 0x0, 0x0, 0x2804c845}, 0x0) 4m40.810614583s ago: executing program 7 (id=2231): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x541100, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)={0x7, 0x3}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000040)={0x1, 0x100000000, 0x2f, &(0x7f0000000000)=""/47}) 4m40.699431086s ago: executing program 7 (id=2232): setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x2) capset(&(0x7f00000000c0)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000100)={0xffff, 0x6, 0x8, 0xd8, 0x8, 0x101}) r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x100) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000180)=0x4) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'osx.', 'y\x00'}, &(0x7f0000000240)='y\x00', 0x2, 0x1) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000280), 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x2ad}}, './file0\x00'}) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000300)={0x7fffffff, "0cd09bdfa96be49c024556f22ef14bad55ce5ea2fcf0627c8dfe0b17bd2699fe", 0x1, 0x1}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) chroot(&(0x7f0000000340)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) write$UHID_CREATE(r4, &(0x7f0000000440)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000003c0)=""/66, 0x42, 0x6dca, 0x1, 0x6, 0x5, 0x7}}, 0x120) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002700)={0x0, 0x0}, &(0x7f0000002740)=0xc) fstat(r1, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002a00)='./file0\x00', &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getgid() r12 = geteuid() stat(&(0x7f0000002bc0)='./file0\x00', &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000002c80)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000002d80)=0xe8) read$FUSE(r0, &(0x7f0000002dc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getresgid(&(0x7f0000004f80)=0x0, &(0x7f0000004fc0)=0x0, &(0x7f0000005000)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000005140)={0x0, 0x0, 0x0}, &(0x7f0000005180)=0xc) r21 = getgid() syz_fuse_handle_req(r3, &(0x7f0000000580)="edc892a5a27a2c96b470a0f2d2785142f8d542cb175446e43deef9fc0ee14b6e34b1caeb830ba2831db0f290f169158bdf2c286e40988399c357c8993f1b58aca1198ff0d4fe58573ff0cb06bc84a23f231118f8f83f4735f9c3de7c62d621cbc77bc5c3f430766488130f50bbc18e62d93cb66ee69f70fe8d848085c9efec042415df348674c667b1c31a12a0113c94b254e12501878e7cd9d211988c6baf42da41a3e441d8fb6b7b14e940910c630883d9c20b7631b82faba72e36726fe56343b91b641d5bc591fb465dea7fafb338daccf599b8e95956cb6187d408131e19ff87e302fc6ba48062f300ecd75678f2a53d53b0de36a06f602dba9a015f0076cc30e11bcb6f7e886b4b68aa450639143500efebfaaa7a3135e8810bc0c2f8cb429454a5c22ac51cd1706315f8cb5eda5c6a7ae406617b786a1dfcb67558f155d1b3f7da4ca87773c49b51156280a7951e95bb39572e3915a87ea79f85ccfc09fb472b73e1b901b6e42b2d698207183c23a6deba3081e95ffc7fabe906f706d34dc3a550b8eb79e2e75abdda6d90638965bf74486968432ee27b71822263622994b29879522e21ebab0f9841d4173a26eb37e30bc9e1b085db444019bc81a539c8c5dc31c5d9256e1d3ad42d026bbbadd7c15d39ba6b4a3bade5a1b41afd72b6c444d9c6359892c43a6763cd2bfb411065adddb2619f6795e2df81fff7ee149e8ba46de2498bd2fe29a7f0465b507ee627935c7a156c340dd6351d5a7e055a6bdf475ff9a546df0fc5e851d4ac555f8b33c7ad70cfdd1fa8c63e67a5fec9dad8293913b4bf065a304c0ddf91d51925b71e46fc6ffb27168b12753a368f77c0955db03b5db483c4ed8548717a17d60ef4df3d1343c7289d3fa5de273b4bcd764cedee9161c6d3050610ee0f9d521c82e6ff7631e5e83c843d3aaff4fdf6c63c05a3f4b04846c2bf821fad822e07c5a3853bacaa90b899631aae8a8cfa18f5e301a2b1fad83b40453999eb94fcda4be47e767e34c3d135d8b2f39ebf9e1cee70e0c3b7f5e3ad81d3fbfec8f741c65691240aa569da4dc3146b974b00ef38da3e1c5108911f8a5c0ae2a9cc1f120c5bf797774eafe31302ba7ea657dd63b541b3c2a043f779d6dafe2f5334209c09313d3537d5e118e2ff9cab714dbd5ae7cb6e5f1317c9aadb745d819cc72a3ffc76bc80167de9f1ea5f75ba5e06a8e1f0d58ff2e8ff62c8de79b081d77a1f803dc98bf6964d9b35072eb5f9d60753313d0fa2508833e2d66d8d446eb008f32007aaa8d2b768d397c3424c6f230da585f544715399f7507e8e5faf48d98cc5567d9e5b5a9a5f2e07767fd76801c74c07fa03ce9ecd67208c4aba504846dbf40f02303107a7816b2b5a24a041b844d49bf4e01e31411bcfedae4a18bf0cb1792d2e8078d69f37ff5f4cf0b0b576704b19a5288026d7a31ebc096eaec07b308dd4077301295335135b003be2e626eae5db94b195bf5d548075bd3971d8b87a84dfcf70ef8b83fd7cb2e52116ac15f4e93a9a7ce80179119b16b174c4d713d41ae85529dbd40cf0c92b4a420a3f601ec7222d10144825835f337dbc5e9f624e4d03316fbcb785447a7835128687b6f5d49e8698356b3df546407be73e7be228db00869d9ad51736a3b2b38d360bad17aef1eae283d10cca1c929e1d72997c039e7a9f1bfb8f9a95664ba6a4ebc1be14c354ce3e33b90ad6bce28b3b6d5cb0724263de09f7aedbe0aae8b4e7faf6266e173fdd787d1ff539e332fe5f2bb030c8e126b776c61ea87301b7293288536f01ae6ff36b851ccb508046210c73cf63f99f52df48adbbd38233d7566c895d4a072ba5caeb74a3da4e0d4f9b46747bd1bbe7c02778300b3d911752aa96eb65767819a1ce3f50b24379e12933b81c15740c36af912ba0f3a7e3ebe9dac5e05c2313c453c393452ddd9d1053885525b30c7f31d37d24a78c97d5677336373a04f73fb20245e5315dfb7cbe50533342d9bbd692ded0c3cd6c411f0d28401892afc8a082c3cbf5fcadece1e17f27100fd3d3d756aa68a762994ff6bc06f214d8d19f24e48f502f0ee38efd5e45c55626c23cdd95001e5a34c907a50bc4104035446404a37f73805a80e1beb61876f856aaff1a8e1eea854a3487c8d0a6744acf4ebed54ed76b28ca6016f8f28f17d97b61df34572c0d4fc5207bf957f7c6f9747496af009a55ade67b22f30e7d91a6b5cf383e162dd5fbf21c25467968743b872dc0a657dba146aa72270d7ec59cc255f816efa547224715f0ea43d92d1ae46d9386bf26dbd711527896c6a0f45789865b8cb0e8ccc6c4bc9862f1f8108e6a3b4c9ef15bc58513e304e0184a24aca810f37f7b1f81733471b55a772fa37169df57cea5112c5ab8c5477edd35be9d04efa684e288d8eca7ca089eb50d2bc131506ff19afa84bb7cef881cae2939c350b33a20ed2815fe0de69328097593574bddddb7117b1b9853c572be4de687ab4fbb176c3f052a1c0d5672b6857069a6ac0404c1ad0c78006d5757ffa35a6fc3e7e44b525c50eef366b865f57d449834029a3975a289256a4109d0f737dbe332335624e6d813dea44c5bc15bcddbc3658b9ddc3d4f7ef3a6531ae755087878c79fecb8f5a1cc0e52686452e628c4a8f82516c5f9c55f99b2a863e1406b89fa398db3d18c2511052385cd25faca9df661e1e6d163b756b2b73a6897e67040945602e60d0885b2833db51f2196f86af5ba980d866b981deec0c4e7b42f3ca1625c8e7e54640454a258fbab6c2b69c60f847d6012b949354b6b31d4a7a6ae099580e7e55def226d78a96208875d83226071fe54aa7ad2f06dfb2f6ae110e65ac8c7992599b449ef4bdf65c00791cc76279f3efe83b8ee03d12019bb43549704987ab580d7dc1858741f6206a64dbba94c839bb8837036eca11d0149476254c209ef5ac5d6160ba3a77f9f0a107502fcec246877ba298a58875ffecc3d8012e651bcbc369cf6cc6e6979f187a2b026aeecc396eeaa8d447937371dc87b4ad8b8dc817386f5f951f16de978c9deda986250f4ae024a818cc067b30901ef1809482f9c17b01f107ae52baeaa578ddd60d8b4cfde30a6b35f6153c9e728462f15bd07b81091247611e03f35d6b5d2f7086abc46ca2105138adf2cb4aa744232cb5e1e980bd9edc3a215fb1028ca37989fbf9700bc33844e4be8f28b8d67e99fa8a8cf0881f1d4269a5363a16ce5c5593f8acc31a7f0f33ec5764a04a4ad3ee4c68b142b8fe5836540c6ef78ea2159f961c3c6cacb257171d69c13f10feb235577f56d9d36d6d871994beaaf03947250d8e81955cd377de892263bfb4511c95e5c89a83bdf80e4fa2eb57595b57183c3f07c8cfec0c0f84a02446ed6d04886450a9572d4a7e24007de326c9ef082bef88f71ecdf1cacfc9882765baef348c016b57c94844ad2e823956b64b30fcb5cbdf4ccadba39f3ee6f8f6e8c7fc991ac9555d9a054bb962648806eb3bb2d390f6ff4bdb52cced68be9d5ab93e898b7f63d8102a44afa9bae2a259003b281cf6f0ccfc1c0ff7edd3ca51954cd3678bfb1a8d933169ae6c93b0901ce25a8aaaffee10a9d636816085d6c4388132788201402fba2e65ab0fb54f89368ce46af10d8a8abd610918ba19ecc9a8c32214d91c80802f643adaf281494de4e4676fa9649a777d7676bf2e050ab6106471919e5a558aaa0afb37a66ebc7d7de06a1bc4da395d48329e6396338d2fdffd58e50f9c51bc889f6427e979d10a27764d1dd769542ef57180d8d2b5376f3804f6de837e512ba996046a4f2c3073b2af6fbb803bec312a1a0fdfc04fb737c1ccb62804d4b6ea446886af1d6e9baddf8e77d066b42d344429c374265246ac2b8a6d183a984e827d03f29b3c4cfdcda42950bb176918e9fd2f6524c441c3bea8c440cb371e87854fe5ed7b09eedb78a4502778d069c11818e02f4ca8d7d9b6b54970cd0f0de149f115574f93a7e6f4c83bdeadd5b181c6cb7e9b07cb50fdfd8bf1d78baf243a307ca6f1b6b796540e1969d5beb842a67c79af6ffe13377607cd1d9d3dee336f14f46e0e95dc607ebfec4a8b3fedf3fe4e276d257a36ea5b03d22e2aa4efb326a21e8afb8cbbcc97999ed78bfb0aaf226de8e53c267f00873adb66874bc01cb0c385cf44fe4669cecc2dd2f53025a88bdfad4ee2e7e21da552e76263c0c81611a4cbadc807de0fe2a28f1b180d304103cea3045492be920ecff4bcfb7c58db14c68b616441a826c039d2e57965341a1145914af5bd5af5c525336f18853728c470a345641253567b1a64e4054d80f2fdd4502b997ca9f0d7c2517c4cb083a9cf2ea21e2bd8bf0d6fe0a1f0fc546df60d2d1553e234a8523541adf6c56a2d3989a1f1101e34b2ae03570db729e4829fe1365c8caeef9a81e7e95aecc151a9d2d039add34ddc91d3d782ea2798482ddc5408fb3aef6f1ba324a7312ec31d413e13a87c8d18352f86738190b6892bb27a3dd40317a3b5a6a886405cb0ec55179b2f41d213b02eb7b85e7c2f42d620b05a843e49fc8e6303511fef309f74939a7b2325eaa87699469e9b2343418e289af17369e76a116e4b5b3fb29fe800179991fd9c5e172c3e0c8fac363641cad2e5bd0a0a481c4a46f6df96083ed9c3fce39545cadba5b544e98b7987d4a31a98b11359fe9ab31524520a8e3cd71b1c1a1237ed323ce6caa6eb459ea750c94cb364a0de03487582423b05b98b6b0f0936ecbc887a2117ef1e71a62fd97afeb1dcd3462376d16634d276765cbc1b4e8251031a25311c39f7a8ce65fa8c39725591cb7aeae919dd2ff6a46b8a8cdc6af4a7461f16552e428a831702a7fce31fcca8ced2f4ef170784d3962d83ff836842385fecbaba7b04de6b4bfab6afaa227fa4a7be0798e14211d3663dc01b89cc70c4641f7f889c48925ad37200fc29bbdf628788c95a931012bd83a1a26d517df66ddbb19381f4d2f6dd3ad2e4ce9a1be31ab6cbffd6719a4d9b4e93ca879ccd8d8aef96708fd99d0a80a0c5abb3db2409e9956f74e319ce8d97629eee60fa3873d2bed2c8259c52bae32444ad1d57ef285c5b2606903681798948ea1583545c45a58e79775974bcb72a790b3f8c70d4744d410df219c526c53a1446cb63488373f8f5a7b6c6bc35788828f180c1a0208c0353f0ee755cb5b6a1a996384bf88632e93b8aa99cf745b5eef4144c2c7dc8bf52ad433c3ba9008722d54c4445f3a889f9d24884e60f353c4771997481a6ad5cc4d83123073719e468ed23e4119c6b84197777f7b57c3f2ea3a74dc0aa332204ae90b8286ab38bb7ae0df829321afcc91090ab3145d7ab454243f7233313eaa9a8e81995a6a9a8889d75b123418f7670faa5e60dd1fa31c8f5539d0fe9ca72ee3de563c4ca8c68001dd1c0a4dc534fc7a464c8955f8b9067d425fdc221a278510ed4324cbf8fadc0f64e54074cf56806c1ee58b264b762cf7608e5105bd52f2f2b628883cf75bef3ae0a0f037e5634d157d296d8cdcf7a6bbec59dce9006532c350c5f964189d169ca92b73e67ecbc3aae4b41231b5c276c91e7384d89154539a79a099de2128987e0e4adafb73b870fac0f25cd6d43982f08c90525bf44a5855d3ff5bf564c3417b2bdde559fd0290e5fdefd724f313ec2a2ded7b01d83f20d5f94625111829c25d31f21ca9d0527d94abda70d56bd3e1ecea0a5f50c51e79587f3859a484d6c7edb6fc7e6b6ab6612f99592c410ab8803d4983c60dd73ff2b18b8bd7eff240c052f3313b899a64b37425d54ec61031eb2d38fd2bcde8822a25f3d3e23286f9e4dfb75c85b139fa8e62cc077b43182768afbd923229168d872cd8dee2f33ff050e0e09d37cbd1952ba0ec1e3086d5c804fa473b5c2eea2602e76c75779e29c5d01de4da3feb8c87a35db17d47532a434c48e1f4fc48647050895d451d169acd5a0b58bfccba1d55afab821116302aec9b400fc243a109bafc450a9f14f928418c2334f94686e42c89e8af4f6cc7b8bb4cc30b44e9ff5b06c3c5250bd72def4e7d06c490713b8a3c6db38da3e0f5857387b29e76b5e4865c48a769df9d2b6673460f41af4fbe8a4dbd177c0787b998d89a3f074e4599d63f82afb2ab89a0b2a8fe0e0f87c4dfd3908189280b062eb3e42afac6cf3cdfbcbaae9c80a85cfaffccabcb0dba914d7db414342fa6e740ac3b4d091e2a90b7f0e4951ce46561e6dea1b1400bcfc74b207d9d328a39bb02965b7fa619b19bd372007909f7296ad94c56c9e21651882163e6a04934f5ca70572f42137cc0fd5a13129891a0d5483f4e0653b02e2169cc9fe5dd6e6fe96b698dc6c5bb99a9c4890c104865d40b4e0d8c1a277ce100f9280556d07a6e782cf0f1cffc797c10e346ec16f0daada9b38464ce58f6ef7e2a67ca1fb0a879383d8def66189c7a4969028fddd6e7542682011d1ef296fd7871289cf656099ac6b57164e863d39f930a4309e3a29016d8fceb7dd954c61ceca7439c6625809e8acf7db39fd32bfb8a899d1ef4657bd04d1c1f5876415cede3780d31394f5a76f07dc7cee0b996d66c0a566cf60c936d894b6c16742804069d96fa6d52132e7610a66c9e5edefac3d1dc9e8a122e29be6228ae4257ae73d8553b363726759fdf46f07a0a388301e0421e71a48e0b931d1627516a3c0ffa7001723754a17465981c196167b6b51043614a7f5a2611b54c52dcab59dea7a559d175951f37b13483059123d690146eb73d2ee44e083d3cefe61656b6c2ece053bcfc6fce8f74a158f4fcdec7b11739ebebc78fd81aa90ded974fd85a4a71705b470387583e8958f96a57adedb85e0158401a7be3993b61a8aec0deb3f10c97cde51aee7093cb52df829fb5a7ca9d5f0a06eb0349602c4a8c76b7bfcb31a698bc6dc513d98ca7f31fb042a192df28e0d2a2c8fe697ae1b939141be33a15f0fa45252b95a4290d899af442e344b1b330524b376c3af001c6daffb159159d6dee8188b1b02f0c9c5634c491dc926d5175421434f7f1e6c2f5473c41ef47b60490bc71909b25b8c23b390556d48db8452e2400b9621be9bd58cbfa03f70318f6c1e00bac6afcf7599cef08547206d984c157f4a4e8969841a85eeddede7a9f732bc03f5f91caef527131ba566e85f9d569a151160f8167201576a0344be51b61465a54b86774b68918f65901dc9f1f060b1920d01097a0a45e634778e3c715343f0252691fd1b313aad9d59fb1aeaf6a89a8b02c0605606d79fc93060484ffc08cde356eb622f908a683ca03a725e4cd20e2257055f1b073fc19a2b160bf8476265943cb65f5bf837b80ee8680cc9ee98f8e5068347947ba246197dfc0bc9877d01cfa8ed4d35f71a050aa7d65f9e8c969780a25cfa594876ca450e3e952d4c93e59ba226530404039e6c50310d0004cdafcc7c8fc92324b2fc484716d48b6bc4bcbbbfb26b42e1833697166a156e213ba92bda9377d2a2017fe18b696cab44c5d16922bdc0e0b3721ef4e68e817fda1536edfb0031fd6836f88580bc0ab95f3456b14886bb0f6ccb93190029c019b2ca5a8a4d3128d866cd66ad3045aba46c55fdc8fb6ef4848d42763f56b4e74dc84ec7c3036b8280fef0290f02b56739b90be45a520fb967901c56ef872ceb59c39ab78a6c447d0cc07f63ed2a25ef197542968e5acc8947a096d67704f9f191e86ce6673beaefe30202c2a40cc3971d836b675a93fd8c745999aa6014d878a5af882d708fed83400aafe16076949979f8185d73e1eff5c4d87a71ce7f276c97ab59be122b98be011fa794e02a83e25c1fa92ff275d6c26a0bce6230768b61efce60f9703283517b6f4f2331bcb7b3ec4d09542436ed8431a8155dc8ff449031b2a8e724a891cc2d1007f5d313eaf9e1b8d5dc4fe7ad6bbe211bc74de2c9978f0c318462477a3546e4f97b3358706b5f75c0cb0540fcf0ae7225bdebe460a333f071d5480784c888af1331441d4e5ede708442bdcc201a77a8121bce65eb14f4804320f5bb4a262b68e7866a24357ea17e394ff300d39fd5ae4fe4f3fae417df8a26e4938f6446838d86db4df5416b54e5d8820d093906212dbf901caf17be8db61df66a2af443935be952ead05d2864ae6d7b745be21d13da72dc819ae8f2d64c063ab47930fafd049a149ce47b2fa3fa00edfad87ae4a638c7a68d48274dd0e5089e2685cd6b3e0c41d7e03c7254f96cd030926d7fb958856449cb081c564072d49a06713136dcb8625a5c079461ecd5a834994b0ba5d020be64461410fb0ebf68a248dfb0d090711d641e64b754f353c8fd3414b2bd26ca2b90919d6dee8c8b1eeca5a8c8df92aff2073955510bf809c1eaf805c8757c0ace1817d2aebe28f3a7624dcdfe2d72ae9097ac8a70946428e6f4697c765982f6fc008693e45f216bd8b39d2429bbf69304ed25399698843587efd00283f8c3d5f3c621f2ec8f3393adab85788bba052146bea2d2064167999a784869d45bd3afb2c8ea07bbb6ec0f65e7d7c8d8fedd933e5006a78a026818e2849580f288ab93db012986d60d0810e07819e5c86df6b8fb7ba350df34d13c4c6322141241b4d7b6b1ecb8a517f4818a40b07fe0cfc3f866c4c06f91864e58d0587be676f60f472a30c983742c1d3693ca5021f90cb577c59e8eca066d0ab7df6b281fa21aec5ed35ddaa9d6a713544d392fb7762e2c65fd6d4d49515a2b95df4323833cfa77a80dcb067de592ce90e0e68399c1f58583f0a12c02cc90670ecff759fb39bc4e9e75ee8a76120fa095ad493bd3b1bd4e8c623f5906ff43d4e226de048a24c83e2c50f0d185ecda89060adff754cb1c97e70747e37041caffb7e66b67b5830362173d15248de6fac1aaba803392800fc4cb362cfd2f765d35254f68f8ab58ae9d1d88224aeacf599c9efd761409c77606226f19066ae22ae2e092fd7142fbe98ba659181abb0f6cfaef22b68e2667a59d9e3a918249d119c651fd0eac928d049a36d4f86fb96277c2549384c1bcd1740aa96bb72544a328262e149e92db16af458d2e42d6b617d752134605e0f58ae0272e36b38a5cfec003e384efa6af70ceb380bfc87559af91dd002fd5b464ca09b2ea0259c29aefc26866d58a219f3fa21643f836b53cfdcb4fdfb118d71acbda2d5bf2945331cb05536982e16dee90d8877a1cf3ccb6f58bcef3decc76cd69c77820338a462281e4d45ae102d5cfca471755ff2f1a822e7abea72a242965d305a1f2bee99f95225b23b89f240ca9fc12f6c0cbccb0d18ea7b91dd8dc9d12675f41a20aad6be183439f147edd78a7f28b5c09f8911be2ea15ce808c28660d0cf11ad254fbfa210c66f685577b1062724b55406724994e00cd293c49c4c775916aa7d886dbaff9bbca80a4e93905b4357d07d5aa853dfb51bb3906962e745b390d5840f8d193b5eae913ae76782a03374fb7ddd0237c3f74e3419e34456f876f34c71a55702816effdfaad58abcc3b6ad950dd2adbed36b6fd08fc3125bc2a9bf529dbd28700cbaa08832f3ad9387925a82900a9dd3e29e8ee69a0a2b2a8d40cbd3e74d76a4d1e112121ae37025fb3c7e17f75eb3a082bb54075c53174aca7b55fcb07f71b21e71295798e9e741f6312119427e1395fb194d2f0c101cb07be573aaf58f014c3b0255399efebed66b1ea958ba292dc3348bc1c49a9f4763243b48a725341dc015dade9ddb4fbe3dde9006f1847e77989e11bce01b1158b0da06247068b6d54541fab45e26895327020243e78200ad1c66f5358597e2b0d32cd3a4baf76eeb0e02026449bcbf417717044c4b3a159138c9312d5d83655049e81b8d4edf26f626d5d594b453eacd0e7fc8c096bac12c5398a8ea2428e322a589daf6572bc944010905eed1b1d8ac400c2c9d172482eb93d1892fc1bc9252bceb3595cd66fc4342a2ce9fcd1fe80496219a2b04dfe3d5cc3ecbfee314173fb7729bd7adb71dfbdc4e7fe1db75b4f6303dc49db93b34ebc582fb262652a97659eeb3d4f7d86bc346b2ac6f84c83b26fb9a886dea4bc5cbcdbc94be44778bc62aad07962b5bf2cd90eb52d90673aacca460c8adbe061826c5e2fd85c80f7d91559a0feb261c731871ebc3c3f8690e51234f9c35907c2482e35d2b76453cb452254e78f75d072dd66b359b2e27cd85ba3a525588645a807fa93da45f4d527e45a248e615fa718ad533498fa196b3fb1757710dd1e15451708a07e1a72778f037446795723d1f287b2bef5550f573bb747de9e1ab73b2d31d24b625b87e3b14c0f2f49d022127b19b26f2801a69a92314f2f0603112ab68330739f103b9b0633efd0c15e79daa36e6563b3daaa9b99fd4026d1f30e57f64dcce48be4f719e880fb9d9fc163b7763a4f77f23835819003cfdeb49366402763fa5e54092098ff465b43c665c5538c26a9daecea6d927e8b1c1662b1e8d8a0f92504b405a355a8af4961fb5c55e3d78cb44370b541eb2f7bf8886bc282da52f08138b38f3d00886bfcd08c3462b207e71bee5b2651444fa8bbe43f7d0b18635f10bf7f660c8c615e8de769afdae99774195831c423a9c11bc24324fd79a79e9227345066fbda80cacf15d957d39982996b184bc40ceb1cc183a47aa7cf53dcc45e22024dbe8d8248fa1518d9ca2e29de220271a6e753e7d8cd7f740e83d37b9ea655720de9ecefa6cfd0e7dae1039a18f08dccda556a37e72bdc6cdaca15ed7897fff2562d38cdb455ddd64775baec466e5d43790014a4bc81ce577143abd62f67680aee53fea6bbd283381169c6045b8e174840eb2f2938a874f686a3b380d8fa969adb1bbf0679f235d3ed8d6ab85ebe1d02d1cd0ea51bb325abd6f0092293d4e3f5e32a7c72850ae3c5ab301996976bac0fabcbb0c2e82595576ad92f1eb4c2d52a4f7dca00b2439c6d9232ca354c5dc5ed0fcd47392b948a7245803c6bf3d239209e551b82e6656341d75f40d915a0d3609fed9ccfa2ffb8d9326fa5e1b0cf4ddfa017c8304f166b23e08842314387a7d4f4ba96d925ee1f6d9f1f723624620c58768c1f4841fd4be0c3b59c70cec33f4f9b69199e551dd0adf5f0262aa2b96ea83f51e47dbc3d952390acbc9da0279d54f1bd68f00592e3f88d7292fcce91d0a8db5cb150b3ebcbae7993bec5988e9f69b188e63ff5ead886493c105944df2d2773dbe153091979c360615721f64cae713566a5ac5690c428d23583a8754349f1f9fba58fa0a952f71f8e6643720bc71c2b64ba804263cf773bfb577d80e5bfb53044baf72e3bebfb1cbe6545b89fafcf97d1ec451cc8b64e567ad3b36a5111db906565e6829d9fd6c82967c9103752fe727974878b6ec125c4b1b2316a5e5462ada06608bc738bfd3bf4679d0d9f2a6420f45770ec2355d83ef8fba14202f70de1812be5670d57cf4878a6e64f8ca3c07c104d2b0a9522396a7b443ea80323964b65e9e45d7af738819f82bf95cb0522a51a6eb5f150a84cf2f48980ebc239db038f3fa1ea1aabbdc2abac711ec10387903f449a1e235fda225d1f4d6bee009d539e689d0fd6d2b3775cd63949d29c078cee13d88ee576448d765ecfc9f63f049", 0x2000, &(0x7f0000005300)={&(0x7f0000002580)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x80000000, 0xffffffff82020200, 0x0, 0xfff9, 0x10, 0x3, 0x0, 0x0, 0x4, 0x9}}, &(0x7f0000002600)={0x18, 0x0, 0x80000000, {0x5}}, &(0x7f0000002640)={0x18, 0xfffffffffffffff5, 0x2008, {0x1}}, &(0x7f0000002680)={0x18, 0xfffffffffffffffe, 0x4, {0x2}}, &(0x7f00000026c0)={0x18, 0x0, 0x9, {0x6}}, &(0x7f0000002780)={0x28, 0xfffffffffffffffe, 0x0, {{0x3, 0x16, 0x2, r5}}}, &(0x7f00000027c0)={0x60, 0x696bb7ce12665a54, 0x6, {{0x5, 0x1000, 0x4, 0xa, 0x6, 0x9f7, 0x5, 0x6}}}, &(0x7f0000002840)={0x18, 0x0, 0x4, {0xf4}}, &(0x7f0000002880)={0x14, 0x0, 0x5, {':%\\\x00'}}, &(0x7f00000028c0)={0x20, 0xfffffffffffffff5, 0x8f, {0x0, 0x13}}, &(0x7f0000002980)={0x78, 0x0, 0x87ee, {0x406fb4e9, 0x8, 0x0, {0x0, 0x4, 0x1e, 0x2, 0x2, 0xc2a3, 0x1ff, 0x180000, 0x0, 0x4000, 0x3, r7, 0xee01, 0xffff7fff, 0x10001}}}, &(0x7f0000002ac0)={0x90, 0x0, 0x8, {0x5, 0x2, 0x4, 0x1, 0xc15, 0x8000, {0x1, 0x48c, 0x9, 0x1, 0x9, 0x0, 0x6, 0x427a77ae, 0x800, 0x1000, 0x81, r9, r11, 0x7, 0x4}}}, &(0x7f0000002b80)={0x30, 0xfffffffffffffffe, 0x4, [{0x6, 0x10, 0x5, 0x0, ',[}{@'}]}, &(0x7f0000004e00)={0x148, 0x0, 0xd, [{{0x5, 0x1, 0xf97, 0xfffffffffffffff3, 0x80000000, 0xfffffffd, {0x2, 0x1, 0x6, 0x8, 0x10, 0x1da, 0x5, 0x5, 0x7, 0xc000, 0xb, r12, r13, 0x1ff, 0x9}}, {0x0, 0x7, 0x3, 0x9, '{\xae#'}}, {{0x2, 0x2, 0x3, 0x3fffc000000, 0x7, 0xc1, {0x1, 0x2, 0x7fffffff, 0x8, 0x9, 0x8001, 0x6, 0x9, 0x6, 0xa000, 0x7fffffff, r14, r15, 0x2, 0x1}}, {0x4, 0xfa, 0x0, 0x9}}]}, &(0x7f0000005040)={0xa0, 0x0, 0xffffffffffffdbe0, {{0x2, 0x3, 0x2f0, 0x7ff, 0x8, 0xfa, {0x6, 0x2, 0x8000000000000001, 0x0, 0x2, 0x1, 0x8, 0x7ff, 0x7fffffff, 0x1000, 0x7, 0x0, r16, 0x5}}, {0x0, 0x8}}}, &(0x7f0000005100)={0x20, 0x0, 0x5, {0x6, 0x4, 0x2, 0x3}}, &(0x7f00000051c0)={0x130, 0x0, 0x3, {0x9, 0x34, 0x0, '\x00', {0x20, 0x1ff, 0x100, 0x2, r19, r21, 0x6000, '\x00', 0x3d7, 0x0, 0x6, 0x4, {0x7, 0x1}, {0x5, 0x3}, {0x8, 0x2}, {0x8d4c, 0x8}, 0x6, 0xfffffc01, 0xaa, 0x5}}}}) lchown(&(0x7f00000053c0)='./file0\x00', r6, r21) sendmsg$nl_netfilter(r2, &(0x7f00000057c0)={&(0x7f0000005400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005780)={&(0x7f0000005440)={0x328, 0x4, 0xb, 0x5, 0x70bd2d, 0x25dfdbff, {0x3, 0x0, 0x5}, [@nested={0x146, 0x33, 0x0, 0x1, [@generic="01d28d7c98182a98292a8acc622e34f34333d53f5d06dc117f07ae971d7444358d90cbb939f132a3b8bce3a0bf4713e12a9d79e923e4f1fd7d90286560ca2c711aca02b3dfdbec31e59065143f0b454cb642277ee19ed18dd6140d76cfb75f325523a4b0c9f67e08448810cdb8eb4198ed080850a5a5bbaca9826ec27bb7d55950479dca9c8a0a091b15c26ec2f15b00", @generic="fe206435327788b739f8f5230e6b5d764ced441075a688d8a1825c4378919cd5f407daa32860cd908be26ee350a847cf334da90108657d0d51b344b14a1b69121a9eee9adfb3e1f6083f9e4617f3cc09fa81d34f7625f919dd4c043ee4ecf96d7d0ee21bbbb99da9e0bd8937427b4fafdb5c76a6786013bbd22dd4caed19203ac182c1f437070b611d731f276ec35225e8e9a8b8a4d0ead0e77f05e6ae55ee9ec320f3e7543a9217246f5a553a64", @generic="8c8f5ba8"]}, @nested={0x179, 0x8b, 0x0, 0x1, [@generic="ac88a20feeb0603e82480e1c861cd72a3c41fdbf1bd06820e8bee23ecff5dce1e3188d460303771f03ed5a936e9bc3103aba6fd4dcd75566267d2bf92448fb0651611dbb6ceeef41eabd5a201e1f8cfac63144feafd3f5cd318e1a8d81bf40b5e0a4779dd6848978a7c2a8decff97d2041c9a3567f6aa559b6033702", @typed={0x7, 0xfe, 0x0, 0x0, @str='+[\x00'}, @generic="fa9934f08153c19b2aff2677c7997b96e8d6b2b6cf0eab4733a24864908a0ca86b913014f83898f4b1a86c58b2e77e635208c465a110ebb77f57fcd3c8d5a2a2ac064e67255532fd7f6da3866cc279b70726a2b3c7b3ee82852060680f21df04f20724a7017b782b9ae78d8adf83f0f249813d7890139469f06f9da63755053d22a3a37157876b22632d5632ead91a346005f6b0b3781b300198949ec7b84d8e16e4a1bd7cd67e785f9941a06220cf9f08486f3128310ad51179e097b6765dc6b23ba683113c3bbef0ac630ed4a713b60f054bf0d53fe48300c7853ef1723089171d7681af134e838ba626a3af8c1e0d54"]}, @typed={0x8, 0x108, 0x0, 0x0, @u32=0xfffffff8}, @typed={0x4, 0xd3}, @generic="06aca0a6af4f681cd8da60684e8cc31585eb5c0315f41c6c7a8bbc3a77e32c8642f5ba0dea66049bc3159c232d78bbaed9525f0adecad01541e8c4fa1a7120d605"]}, 0x328}, 0x1, 0x0, 0x0, 0x41}, 0x40000) getgroups(0x1, &(0x7f0000007d00)=[r11]) syz_fuse_handle_req(r2, &(0x7f0000005800)="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", 0x2000, &(0x7f0000008480)={&(0x7f0000007800)={0x50, 0xfffffffffffffffe, 0x7, {0x7, 0x2b, 0x0, 0x48800, 0xfff7, 0x9, 0x3, 0x2, 0x0, 0x0, 0x42, 0x6}}, &(0x7f0000007880)={0x18, 0xffffffffffffffda, 0x81, {0xa738}}, &(0x7f00000078c0)={0x18, 0x0, 0x3, {0x2}}, &(0x7f0000007900)={0x18, 0x0, 0x4, {0xbb}}, &(0x7f0000007940)={0x18, 0xfffffffffffffffe, 0x0, {0x3}}, &(0x7f0000007980)={0x28, 0x0, 0x80, {{0x3, 0x5, 0x0, r18}}}, &(0x7f00000079c0)={0x60, 0x0, 0x3ff, {{0x101, 0x5, 0x8, 0x1, 0xfffffffffffffff7, 0x0, 0x6, 0xfffffffa}}}, &(0x7f0000007a40)={0x18, 0x0, 0x100, {0x8}}, &(0x7f0000007a80)={0x12, 0x0, 0x9, {'y\x00'}}, &(0x7f0000007ac0)={0x20, 0x0, 0x7f, {0x0, 0x1}}, &(0x7f0000007b00)={0x78, 0x0, 0xe, {0x5, 0xe, 0x0, {0x5, 0x3ff, 0xb0, 0x2, 0x2, 0x10001, 0x8, 0x9, 0x2, 0xc000, 0x9, r12, r13, 0x7ff, 0x5b6c}}}, &(0x7f0000007b80)={0x90, 0xffffffffffffffda, 0x9, {0x1, 0x1, 0x6, 0x474e, 0xc2c, 0x101, {0x1, 0x0, 0x1e78, 0x4, 0x1, 0x69d8, 0xff, 0x1, 0x3, 0x8000, 0x8, r6, r8, 0x8, 0x5}}}, &(0x7f0000007c40)={0xc0, 0x0, 0x6c91, [{0x1, 0x9, 0x0, 0x4}, {0x5, 0x21, 0x5, 0x6, ',[}{@'}, {0x5, 0x8000000000000000, 0xa, 0x960f, ',%\'@*]-$\\.'}, {0x1, 0x8, 0x6, 0x9, '#]]\xd9.\x00'}, {0x2, 0x80000000, 0x17, 0x5f, 'trusted.overlay.opaque\x00'}]}, &(0x7f0000007d40)={0x500, 0x0, 0x100, [{{0x3, 0x1, 0xf4a2, 0x9, 0x7, 0x65, {0x6, 0x4, 0x7, 0xfffffffffffffff8, 0x4, 0x3, 0x2, 0x3, 0x12, 0x8000, 0x1, r7, r17, 0x9, 0x8}}, {0x4, 0x1c, 0x0, 0x1}}, {{0x0, 0x3, 0xf, 0x9, 0x2, 0x4, {0x5, 0x10000, 0x8, 0x9, 0x40000000, 0x8, 0x5, 0x7, 0xfffffff9, 0x0, 0xc48f, r12, r15, 0x9130}}, {0x6, 0x2, 0x3, 0x4b, '+[\x00'}}, {{0x5, 0x1, 0x400, 0x3, 0x656, 0x6, {0x3, 0xb22c, 0x12, 0x6, 0x4, 0xf10, 0x35, 0x7, 0x400, 0x0, 0x5, r14, r22, 0x6, 0x7}}, {0x2, 0x5, 0x3, 0x2, '{.\xcd'}}, {{0x1, 0x2, 0x800, 0x0, 0xffffffff, 0x5, {0x4, 0xfffffffffffffffc, 0x8ed7, 0x2, 0xf, 0x3, 0x5, 0xfff, 0x5, 0x1000, 0x6, r9, r10, 0x8, 0x10}}, {0x0, 0x1, 0x1, 0xd1d, ']'}}, {{0x4, 0x2, 0xbe5f, 0x8001, 0xffa3, 0x5e4, {0x5, 0x18eb, 0x6, 0xffff, 0x4, 0x5, 0x0, 0xc, 0xf9, 0xa000, 0x0, r19, r20, 0x4, 0x80000001}}, {0x2, 0x7ff, 0x0, 0x1}}, {{0x0, 0x3, 0x1, 0x1, 0xfffff98e, 0xfffffc88, {0x1, 0x3, 0x3, 0x9, 0x1, 0x6, 0x100, 0x5, 0x6, 0x6000, 0x7, r9, r10, 0x2, 0x80000000}}, {0x5, 0x8, 0x5, 0x7fd, '#%/#$'}}, {{0x6, 0x2, 0x800, 0x0, 0x8000, 0x3, {0x0, 0x79e9, 0x821, 0x3, 0x1, 0xfffffffffffff8d8, 0xe29f, 0x3ff, 0x0, 0x8000, 0x1, r12, r16}}, {0x3, 0x3, 0x1, 0xfffffffd, '\x00'}}, {{0x4, 0x3, 0x10001, 0x400, 0xffffffff, 0x7, {0x1, 0x3ff, 0x9, 0xa7e9, 0xffffffff80000000, 0xfffffffffffffffb, 0x868, 0x3, 0x5, 0x8000, 0x4, r9, r21, 0xc, 0x800}}, {0x1, 0xffffffffffffffff, 0x5, 0x6, ',[}{@'}}]}, &(0x7f0000008240)={0xa0, 0x0, 0xb9f, {{0x3, 0x0, 0x5, 0xe, 0x422c, 0x662f, {0x1, 0x9, 0x8, 0x2, 0x3, 0x401, 0x2, 0x6, 0x56, 0x1000, 0x80, r14, r20, 0x6, 0x10}}, {0x0, 0x10}}}, &(0x7f0000008300)={0x20, 0x0, 0x0, {0x7, 0x0, 0x64f, 0x7}}, &(0x7f0000008340)={0x130, 0x0, 0xe5b, {0x8, 0xffffffff, 0x0, '\x00', {0x2000, 0x2, 0x2, 0xe3, r6, r15, 0x8000, '\x00', 0x0, 0x2, 0x6a, 0xfffffffffffffffe, {0x1, 0x8}, {0x4, 0x5}, {0x3, 0x81}, {0xad61, 0xb}, 0x9, 0x2, 0x7ff, 0x7}}}}) open(&(0x7f0000008540)='./file0\x00', 0x2, 0x5a) syz_emit_vhci(&(0x7f0000008580)=@HCI_VENDOR_PKT, 0x2) 4m40.665926417s ago: executing program 7 (id=2233): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, r1) request_key(&(0x7f0000000040)='big_key\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)=']\x00', r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x4008630a, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 4m40.575838559s ago: executing program 7 (id=2234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r1, @ANYBLOB="00042bbd70000edcdf2509000000080001007063690011000200303030303a30303a31302e30000000000800030001000000080009000600000008000100df20690011000200303030303a30303a31302e3000000000e80038000000000000000900020000000e0064657673696d0000000f0002006e657464657673696d300000080003000300000008000900030000000000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x44}, 0x8884) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 4m40.454360074s ago: executing program 7 (id=2235): socket$netlink(0x10, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040ac059c02000000000001090224000100007000090400000203008000092100000001220900090581030000000000"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x23c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="b882008ee8f3cf66b80500000066b9f10000000f01c10fc7ba8c9eba610066ed0f01f766b80500000066b90b0000000f01c1ba6100eddfdfbaa10066b80098000066ef", 0x43}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0xfc, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000b3f659"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8004) r5 = syz_usb_connect$cdc_ecm(0x1, 0x74, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0x3, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x9, 0x24, 0x6, 0x0, 0x0, "a2e77991"}, {0x5, 0x24, 0x0, 0xff7f}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xf, 0x9, 0x3}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x80, 0xf, 0x4d}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xbc, 0x1, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x7, 0x9, 0x7}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0xb, 0x9, 0x6, 0x8, 0xcb}, 0x21, &(0x7f0000000280)={0x5, 0xf, 0x21, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x9, 0x4, 0xe}, @wireless={0xb, 0x10, 0x1, 0x8, 0x90, 0x8, 0x7f, 0xffff, 0xf0}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x6, 0x1}]}, 0x4, [{0xd1, &(0x7f0000000340)=@string={0xd1, 0x3, "38a23c9451267b6db49ac9139a53d2bf573607d85058894163cdc73900c820ba9bfc78cd1580bfd05a39cba74823e99afdc1cf18f020c9a5fe46c40c6b2be001d3b954d771e7df5d2e82ac177e96de54ece330af0adae2892a979c3a696ba04d0bc0719e39a457067244981d8741242850d94b6f9c47395cd9175d72bd4c41ab0bb5727dcf95103a4a8a9061106dc36a49511e79180d9eb000dc3cd146ce0173f7bd9dd4d039703a09eb21e3d9d648090b8763f9e129051706eb555d6adda295b02b7ce8912ecbc1685cbc412886d6"}}, {0xe6, &(0x7f00000004c0)=@string={0xe6, 0x3, "95f5d364b2b94aeefa509ff500bf635055640f1bb6a3849fc54448479187dbfcfed490530733e70c77f507bcdc7d00f941568300ace394b9d11be6257eb25eb654c8137f5c636c2ea296f62945bf688caadefdb5f389e92dc47873a553ca0611df3eea3a71a1681e863b058f140fafd22c08ee07d252400d9e29a97c040d2db0a279aa75b0948b44259bbd9436bec35ad397846c38cc81b77c1b77e503001830c37485b33a4debc03c6a4a7913783d6f8bb07cfd25c02ca5d1e002c5c07cfd0afcf83adedb3faeda32786763595cbad95428faed88ef57ac6b6a5c487c937f20e3b2efa7"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x184b}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x861}}]}) syz_usb_control_io$cdc_ecm(r5, &(0x7f00000006c0)={0x14, &(0x7f0000000780)={0x20, 0x1, 0xd6, {0xd6, 0x23, "b41f5f276f278756b2fb3edbbf41e9d299a031095a7b667eb285346ddc5a047607ad5c3c2f0fd773b8fe6597b02d99d23854bf1f28a037a3028571029bedeef41ed93a00840a1dda190e108686de5ef6ac3f56323e2f9d1a277d9b5d3f49e45ef446f63e564eed88b8c0e4db0c34c1c545813db8f8bb56d01eb37c5c4593a60f603192b4a649c201c9f517294b5d9edf786e7deb6cc59baa2b20c5cf0594bab8443b3181ff78e5464333550d731993096054e476d5475660ac7a21fb6c853910fcc103987ad0d47ce4d8980d5eebc558c956bc4f"}}, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x1c, &(0x7f0000000700)={0x0, 0xb, 0x1f, "a9533c051e59880af51ae61f0da11895ddfb3265db5a291fa6af2304cb16c2"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000008c0)={0x0, 0x8, 0x1}}) 4m25.4511095s ago: executing program 38 (id=2235): socket$netlink(0x10, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040ac059c02000000000001090224000100007000090400000203008000092100000001220900090581030000000000"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x23c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="b882008ee8f3cf66b80500000066b9f10000000f01c10fc7ba8c9eba610066ed0f01f766b80500000066b90b0000000f01c1ba6100eddfdfbaa10066b80098000066ef", 0x43}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0xfc, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000b3f659"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8004) r5 = syz_usb_connect$cdc_ecm(0x1, 0x74, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0x3, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x9, 0x24, 0x6, 0x0, 0x0, "a2e77991"}, {0x5, 0x24, 0x0, 0xff7f}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xf, 0x9, 0x3}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x80, 0xf, 0x4d}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xbc, 0x1, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x7, 0x9, 0x7}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0xb, 0x9, 0x6, 0x8, 0xcb}, 0x21, &(0x7f0000000280)={0x5, 0xf, 0x21, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x9, 0x4, 0xe}, @wireless={0xb, 0x10, 0x1, 0x8, 0x90, 0x8, 0x7f, 0xffff, 0xf0}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x6, 0x1}]}, 0x4, [{0xd1, &(0x7f0000000340)=@string={0xd1, 0x3, "38a23c9451267b6db49ac9139a53d2bf573607d85058894163cdc73900c820ba9bfc78cd1580bfd05a39cba74823e99afdc1cf18f020c9a5fe46c40c6b2be001d3b954d771e7df5d2e82ac177e96de54ece330af0adae2892a979c3a696ba04d0bc0719e39a457067244981d8741242850d94b6f9c47395cd9175d72bd4c41ab0bb5727dcf95103a4a8a9061106dc36a49511e79180d9eb000dc3cd146ce0173f7bd9dd4d039703a09eb21e3d9d648090b8763f9e129051706eb555d6adda295b02b7ce8912ecbc1685cbc412886d6"}}, {0xe6, &(0x7f00000004c0)=@string={0xe6, 0x3, "95f5d364b2b94aeefa509ff500bf635055640f1bb6a3849fc54448479187dbfcfed490530733e70c77f507bcdc7d00f941568300ace394b9d11be6257eb25eb654c8137f5c636c2ea296f62945bf688caadefdb5f389e92dc47873a553ca0611df3eea3a71a1681e863b058f140fafd22c08ee07d252400d9e29a97c040d2db0a279aa75b0948b44259bbd9436bec35ad397846c38cc81b77c1b77e503001830c37485b33a4debc03c6a4a7913783d6f8bb07cfd25c02ca5d1e002c5c07cfd0afcf83adedb3faeda32786763595cbad95428faed88ef57ac6b6a5c487c937f20e3b2efa7"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x184b}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x861}}]}) syz_usb_control_io$cdc_ecm(r5, &(0x7f00000006c0)={0x14, &(0x7f0000000780)={0x20, 0x1, 0xd6, {0xd6, 0x23, "b41f5f276f278756b2fb3edbbf41e9d299a031095a7b667eb285346ddc5a047607ad5c3c2f0fd773b8fe6597b02d99d23854bf1f28a037a3028571029bedeef41ed93a00840a1dda190e108686de5ef6ac3f56323e2f9d1a277d9b5d3f49e45ef446f63e564eed88b8c0e4db0c34c1c545813db8f8bb56d01eb37c5c4593a60f603192b4a649c201c9f517294b5d9edf786e7deb6cc59baa2b20c5cf0594bab8443b3181ff78e5464333550d731993096054e476d5475660ac7a21fb6c853910fcc103987ad0d47ce4d8980d5eebc558c956bc4f"}}, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x1c, &(0x7f0000000700)={0x0, 0xb, 0x1f, "a9533c051e59880af51ae61f0da11895ddfb3265db5a291fa6af2304cb16c2"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000008c0)={0x0, 0x8, 0x1}}) 3m36.805083847s ago: executing program 4 (id=2513): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f0000000040)={"9e4dc1d704674a9892227339d8efb06875719360fe0215770754eaed91c4", 0x2, 0x0, 0x1, 0x3, 0x2, 0x0, 0x9e1, 0x5, [0x8, 0x7fff, 0x6, 0x1, 0x6, 0x8, 0x2, 0xf3eb, 0xa1c7, 0x1, 0xe0d9, 0x2, 0x1, 0x9, 0x100, 0x0, 0x7, 0x7a]}) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x40) r2 = signalfd4(r0, &(0x7f0000000140)={[0x299]}, 0x8, 0x80000) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "d3a39ecea4972d67", "13be266340d9cb157f3b271369a240ddbf94195b5b18686835769f6cb9adc00d", "c8a0afd9", "252ae599f5b0a66d"}, 0x38) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f00000001c0)) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000008) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000200)) setsockopt$inet6_tcp_int(r2, 0x6, 0x1, &(0x7f0000000240)=0x90f1, 0x4) prctl$PR_GET_CHILD_SUBREAPER(0x25) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000300)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0x3, 0x9, 0xd48e, 0xd000, 0xffffffffffffffff], 0x2, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) fsetxattr$security_capability(r2, &(0x7f00000003c0), &(0x7f0000000400)=@v2={0x2000000, [{0x4, 0x8}, {0x6, 0x81}]}, 0x14, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000440)=0xaaa, 0x4) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000005, 0x8008016, r2, 0x180000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x1d, r3}, 0x10, &(0x7f0000000540)={&(0x7f0000000500)=@can={{0x3, 0x0, 0x0, 0x1}, 0x6, 0x3, 0x0, 0x0, "36134160b7dfe158"}, 0x10}, 0x1, 0x0, 0x0, 0x2008084}, 0x4000011) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x5) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r5 = fsmount(r2, 0x0, 0x0) r6 = add_key$fscrypt_v1(&(0x7f00000005c0), &(0x7f0000000600)={'fscrypt:', @desc4}, &(0x7f0000000640)={0x0, "bcea59dea2468cfb0c61616eb5ef8d550a4eee577d5828f003c6602bc6e63033631164c17ff3cfe94f001156e3fba2dd96d197002bb3bc7bdab83fc2d54241ab", 0x3f}, 0x48, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_QUERY(0x18, r6, 0x0, &(0x7f00000006c0)='[\x00', &(0x7f0000000700)) madvise(&(0x7f0000fa2000/0x1000)=nil, 0x1000, 0xf) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000740)={'pimreg0\x00', 0xfffeffff}) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000780)=0x1200, 0x4) shutdown(r2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000007c0)={0x0, 0xb7}, 0x8) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000880)=@multiplanar_mmap={0x2, 0x0, 0x4, 0x12418, 0xb, {}, {0x2, 0x1, 0x5, 0x9, 0x4, 0x64, "2121188b"}, 0x6, 0x1, {&(0x7f0000000800)=[{0x6, 0xf, {0x400}, 0xfffffffa}, {0xfba5, 0x11b9, {0xfa}, 0x8000}]}, 0x5, 0x0, r5}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000900)={'vxcan0\x00'}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000940)=0x10000) 3m36.747287709s ago: executing program 4 (id=2514): r0 = syz_open_dev$vim2m(&(0x7f0000000b00), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x28, 0x1, 0x0, "732283ef1acb5aa7abe50000000009be908100"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010014000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000b000000080026000816"], 0x40}}, 0x0) 3m36.656296177s ago: executing program 4 (id=2515): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x77f8, 0x200) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0xffefffab, &(0x7f0000000040)=[{}, {}]}) (async) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120110010a016f40392a943f2494010203010902120001000000000904003400ff121a000686ddac76b70cadf180e7d486227411da4dce03496f3935e318a3725ac155"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x3f, &(0x7f0000000240)=@generic={0x6, 0x2, 0x37, "928ce341", "0261c4300524d82a01778b120f017d41bc33a6acc675e88709e329da80437da90e611e39a0b79b026d748139afee748a83e3f4d9134612"}) (async, rerun: 32) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="27296ac93e7fa1cbc0acf0b41005833b0d6dd7c087f296add3a485ec4b4acdffe59e2cb7d74a5aa1dc8c86c0dde85d52581257197818d00000056f929b13af6fe558f00c9ccc204cbf4f08c7b554a1a03602cc8d567c77f5aeb016523e7104000000b8b8d22dfa52b0adefdfd39e7d690428d5e118fed60a26952ca50fc9b907e46dbe81c5a469a63ffb8b23a1854722fe0b33e8f2a4af1ccfc9940eb7dc04b866b4eca72153268e7611eead938265aa08b51da856fb6827429382e0a806cb0a56fe0a06caa4bccd4106d396a36fb8ccd4550065f984f975d732c2433d7f7866aa283486f8f0ccb3aa62edaff0e53b53de7d0a37ceaf1fb0cdc9b67c67a537ed") (rerun: 32) 3m35.360050292s ago: executing program 4 (id=2525): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f00000000c0)=0x8, 0x4) close(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d30000000000000050018000100000008000300fd0f0000080004000000000008000d000600000008000e"], 0x54}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x324) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'virt_wifi0\x00', @remote}) 3m34.99920957s ago: executing program 4 (id=2528): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, r1, 0x60b, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x7000000) socket$inet_udplite(0x2, 0x2, 0x88) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r6, 0x407, 0x100000) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x80000001}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfe9}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x48}}, 0x4) 3m34.484202279s ago: executing program 4 (id=2531): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0x5, 0x3, 0x6, 0x8, 0x2b}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) tee(r2, r4, 0x80, 0x8) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f00000000c0)={&(0x7f0000000580)={{@any, 0xffffffc2}, {@host, 0x2}, 0x400, "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"}, 0x418, 0x800}) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0xe, 0x4) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, 0x0) r5 = syz_usb_connect(0x3, 0x44, &(0x7f0000001e40)={{0x12, 0x1, 0x200, 0x5b, 0x29, 0xf2, 0x10, 0x413c, 0x81a2, 0xf077, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x2, 0xdb, 0xff, 0x20, 0x8, [{{0x9, 0x4, 0x79, 0x4, 0x0, 0x51, 0xf2, 0x13, 0x1}}, {{0x9, 0x4, 0x0, 0x5, 0x0, 0xff, 0xff, 0xff, 0x5, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x306}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xff80, 0xb8e5, 0x80}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, 0x0) sendto$inet(r1, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000006a}, 0x10) 3m34.050815116s ago: executing program 39 (id=2531): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0x5, 0x3, 0x6, 0x8, 0x2b}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="140000001000010000000000000000030000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000020900010073797a30000000000900030073797a3200000000240b0000060a010400000000000000000100000008000b4000000000fc0a048028000180080001006c6f67001c0002800e00024073797a6b616c6c65720000000800054000000008d00a01800e000100696d6d656469617465000000bc0a0280640002804c0002800900020073797a32000000000900020073797a310000000008000180fffffffc0900020073797a31000000000800034000009c920900020073797a300000000008000180ffffffff14000280080003400000000808000108fffffffb0800014000000002080001400000000b500002804b000100fa62d7ba9ceeacf9aa4f832b78f35731f355d63e192a72aef5e68a05d1b816151b6bd1e2d74abafd383790ad363fdc1b7766748630b48f9beefdb33c86d5835a470b5ffd20d7e9006c0102805c00028008000180fffffffe0900020073797a30000000000900020073797a320000000008000180ffffffff0900020073797a320000000008000180fffffffd0900020073797a310000000008000180fffffffc0800034000000e5628000280080003400000000608000340000000070900020073797a320000000008000180fffffffe540002800900020073797a320000000008000180fffffffe0800034000000000080003400000000008000340000000090900020073797a310000000008000180fffffffe080003400000800108000180fffffffd8e000100818ce881ff18470752e86442e8b77ddcfc7a4c87f05cd36147be26c85cc854cc117db1906007a5a8c298f4724c8c743d46ec7f3ba478d9dfb10bbe9e4fdfc2188d62db9bb1364fed383fe0b0c3fbbab83959470cb0ffb14765c32f10b54d99531d04caaf264214997543a1c63637d9a3a20b7ce9312e545626eb375c88462c198f35cf8a11616de4fa0c000098020280eb00010099c8e680eb4d0e7f78e1fb62226ae541d997c8cb51c5ebd0bb7e2730b61310dcd7525807288a7ad8c00f6aa230a1d1b876ddb0e188384e7c79cd8af94a02451a04d8f116bde38077da45650d82bdd1767b03e3f35bc4a5769e659d8cdb6d9d9d717c78b50f6b3ac899b07a9eaf2c989654de7d6609299bad01ca1f3fa8b6229a6c69627a07f627880e902231b20368f3ae64fd12fc37afeb95f14a4dc3d0bc5f6e2afd0fc8ef6982054cffa703ee1376654019ad6d2add9052c5d2f2e0ba3318f931b2c5f2dcce5cbca6093c64d23b64e2f2061da3dd5983644280de22d592b63b5d7f6b571beb005400010041bbc64da6bacaad1bebec23352accccbca40d6ba87943f82df945bf4ccc5250a0c2b2cb13793380f424b280bfb960885af6df4afa26efa8fcd7a1243389ef3fcf1d709f775a9cd1dfb2b84fd03e5d70f800010001950b7c0ec30534e476b721ba6e82d03078fe63b683918ecbbb9c339c8cdd63689339ac43acd5973f4aac8720a98d18e13b98e11e291f3f3621ed29c717639f84bdd28810da6ae30538775f15e00133741e9de3f96f69ab363752fa962b3c71041ba1e463a91d782a968d9febb648b66e71a6827c53b3be014b785f61c4fd46fef00658f64cdd465edb61ba4c5f00849b2935c485da99a38489ecc29837433ac5446c3922d73153fd8fb2368a5ce4201760ca6778f570b7fcb38be633a02d57c5884b6bcbaf3bc28ca7686edb5d59e1b823a8f0f5ff788625995d51c16413783c6290a9714bd4dcbd2a388139f3e46f69916f335c0002800900020073797a3000000000080003400000000908000180000000000900020073797a3000000000080003400000000808000180fffffffd080003400000000408000340fffffff908000180fffffffb0800034000000003a80002801c000280080003400000020008000340fffffff508000340000000001400028008000340000000050800034000000007720001001c2cce526d2ee30fb33f426450278cb35ac06b1cef15fefc26b5c17a8c9251bed316fccb5588f2e071fc355537fcf458cf14217f16ce4c12a4b559f3e807c94c6cc4f418baebc6024b74b9dbc5ef66dbbe91812ea247db80670c101ed494f105ad9c09b4eaf8d5c133b46a311c1a00001c0302802000028008000180fffffffc0900020073797a320000000008000340000000035c00028008000180fffffffc08000180fffffffc08000180fffffffb0900020073797a300000000008000340000000060900020073797a30000000000900020073797a31000000000900020073797a310000000008000180fffffffbf6000100330e5af714359ac9da33381a13071148dbe4293800e6be0290efbb549850cda132ca27a55553fd77c3067504c4596086f4001f53d49e8111395ebccb983c6b04735a58ab2617dfc62123b09c8dc5a47154667414dc28e8369829764b2e3cc23303a882890bad6d3a70d9e15701ec8c4c15a46d38c9ed6bc8658f8a45a02083f563324a27c649bab7cbcb485c289bd8df0a040128df6891ab48095977e0463f8e3ed7ba6df976ee30768954dfeb3f08c942b2c9384aa0b78baf92ecf5e4d73788afb1bc5a8f7c4b454897cd8bcac7f19cdd949fac66756da3b9311e13362eee317df853f6bc7e4638eb145a1484d3780e09b50000c8000100d5c1e4159bf770e02e6e1ebe911d7513709588175328d2e11f2ebf3f6967c49bedcb2a5459a45272bb8084e3bb55ea7a80166d97ec16457ed7d2a834d9aafdb2a54110ddc7975eaeda4f897ec7d533c27df0ce5ff92cfedadc67fff850ee5d07822d72b27af229d17ad2f8d802ae40d98f373e348a04b4f0270c71f82319de3a0331f165204896e0e448cf7ea0f8eb32a312fda6716f72f0234742fe6708ad0adf587ea21d94b8c8f5080028dda1e21d3d9ac82d8edd12941631b72b692ecc262d6ae12393000100c56deda494a09379df59bad8f0f17376b307ce49571034af728b1c4bf694e3b91406b976944238ab36ccaf40e3d92952ba87aa27af6353a82868c9508577a1b6a349fce75b3e4952b04b9527f496b5555e6db110dec07430b01446635eff12f136dbcb54fd4dc90b02e1bc6488ed74efd9eeb1b6de6e2a234f6c323df5c28a0352d03b34ee4f64ab614078125aa3cc0048000280080003400000000c08000340000000010900020073797a310000000008000180fffffffd0800034000008000080003400000dc5b08000180fffffffc08000180fffffffb2c0202804b000100cece2d8ff50c68c1060c2e691ddc50c6d87b46b4e5f6695010163d98bac2d9d7693cff0ec1e2107f58d3c305c78e5a596df92f1dbe80793dce5424be9e7951890023db7d0b9b2700e5000100f46e4b21dd4b92221713eece21b0e3bfb3fe995725eca78713a8d11ac82a6aefeeeab4720bd136479523ccafa34771afedeafc55275842bb7adb37ff3c93b19d9d5139f8b67ee81e380faa9506e6c8e5956cf7efc9828438d340aa4bfe771769c6ddb2f8c31049c1fc37e8f28812ea0aadd0caa7e32f6bb4b2b7a4473e5fa876c87bf285a503660ea12a0cfff6863a87c64ea83c31e737e278edcad77cb964828c7049d335e25156fd4d1c2faada6a8363794fe487155fbfd7c2e1b8504d4a744357734f51fca0426ffe929280df27411f8a90a067b285e970fa1e403722ae91dd000000f400010073e22ba6603d1c92836887468b100c2dc430efeb2ef19c66bd0582fe94df7b5a20292fdfbd2009980dbf9651685f7713bfb0f42583e452670f29e2cabf848fcdcb7a2067f0b257efd7dc927e540584b08f026e14be231afa797e36410d8ad6cbced8c5d2cce2f5a8b75713e57b3161b5b4ce78f283bf59a04f90bc1c5a4371abed0124c621ecb51b6166ad39f14216c09456232b7ea8dd7058bbbeae8b1c13df7ffa1515a359309683421d783f4fb00547cb06b3f974e65f28397c2c16675436a414b6e28d61800c35bdc05f9837e14491ce0fa7c0fbf6f61dd8f7eceac62373ed913de212a188ad5fa12d0eab8a0b440900010073797a30"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) tee(r2, r4, 0x80, 0x8) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f00000000c0)={&(0x7f0000000580)={{@any, 0xffffffc2}, {@host, 0x2}, 0x400, "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"}, 0x418, 0x800}) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0xe, 0x4) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, 0x0) r5 = syz_usb_connect(0x3, 0x44, &(0x7f0000001e40)={{0x12, 0x1, 0x200, 0x5b, 0x29, 0xf2, 0x10, 0x413c, 0x81a2, 0xf077, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x2, 0xdb, 0xff, 0x20, 0x8, [{{0x9, 0x4, 0x79, 0x4, 0x0, 0x51, 0xf2, 0x13, 0x1}}, {{0x9, 0x4, 0x0, 0x5, 0x0, 0xff, 0xff, 0xff, 0x5, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x306}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xff80, 0xb8e5, 0x80}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, 0x0) sendto$inet(r1, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000006a}, 0x10) 2m7.688129756s ago: executing program 9 (id=3088): socket$nl_generic(0x10, 0x3, 0x10) r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/164, 0xa4}], 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r1, 0x400448e7, 0x0) 2m7.676579898s ago: executing program 9 (id=3090): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000180)={0x2, 'vlan1\x00', {0x7fffffff}, 0x9}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000180)={0x2, 'vlan1\x00', {}, 0x9}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRES16=r0, @ANYRESOCT=r0], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000240)=ANY=[], 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x4, 0x0, 0x717e387b, 0x40, "1ae34e06a6ffffff7f0000000040794233a5bd", 0x4, 0x2}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, &(0x7f0000001300)="92", 0x2) ioctl$HIDIOCGRDESC(r4, 0x4008c002, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xde61, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000200)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="2011075e2b223957ddd73886016ad8e2d0cefd030000b02fa2d159ec2fa3ff"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 2m5.859868238s ago: executing program 9 (id=3099): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) r2 = socket$inet6(0xa, 0x2, 0x3a) r3 = dup(r2) bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001cc0)={'virt_wifi0\x00', &(0x7f0000001bc0)=@ethtool_drvinfo={0x3, "77e576b8f10a4febc1e704bb8b2802dbec9fe1ea739aabbc6a2578bdd3bd8a09", "9a34d0febfd11bdedf5dba83e72e3713570564b0eff9308e8f7c885a82b692ae", "b74c2098c5fe8aedfb67ef50d03d71be48ec2a3c700d4f5bb585340be86c997b", "0e243fcdc6e20d676772506f7f6e96d53e4359e9d4439bd71f84ad8d1c160f49", "c9ffd0ccf5b9084f8eccb0360316a1ffeae9b26b5ac6fbe8b03e9aeea313bd4e", "11a16d4c3b10c6b3b93e34e6", 0x0, 0x6, 0x64, 0x80000000, 0xc0000000}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000001500)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x1, 0x2) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000040)="b4a2e40000000000", 0x8) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000590200000000000001b6"]) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x40a02, 0x0) write$tcp_mem(r7, &(0x7f0000000300), 0x48) r8 = gettid() r9 = syz_open_procfs(r8, &(0x7f0000000040)='ns\x00') readlinkat(r9, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x34}}, 0x404c090) r12 = socket$unix(0x1, 0x1, 0x0) connect$unix(r12, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_timeval(r12, 0x1, 0x15, &(0x7f0000000e80)={0x0, 0x2710}, 0x10) connect$unix(r12, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@dev, @in6=@loopback}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) stat(&(0x7f0000007140)='./mnt\x00', &(0x7f0000007180)) 2m5.73759856s ago: executing program 9 (id=3101): r0 = dup(0xffffffffffffffff) fadvise64(0xffffffffffffffff, 0x3, 0x4, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000280)={0x0, 0xa, [{r0, 0x0, 0x1000000, 0x1000000}, {r0, 0x0, 0xfffffffff0000000, 0x1000000}, {r0, 0x0, 0x0, 0x10000}, {r0, 0x0, 0x2000, 0xfffffffff0000000}, {r0, 0x0, 0xfffff000, 0x1000}, {r0, 0x0, 0x4000, 0xfffffffffffff000}, {r0, 0x0, 0x8000, 0xfffff000}, {r0, 0x0, 0xfffffffffffff000, 0xfffffffff0000000}, {r0, 0x0, 0x1000000000000}, {r0, 0x0, 0x10000, 0x1000000000000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r1, 0x6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m5.471498813s ago: executing program 9 (id=3103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000180)) (async) r1 = syz_open_dev$video(&(0x7f0000000040), 0x100, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000280)={0x1, @sliced={0x1201, [0x40, 0x2, 0x8, 0x4, 0x3, 0x95, 0x4b9, 0xf80, 0x40, 0x5, 0xce6, 0x2, 0x9, 0x7, 0x8, 0x2, 0x7f, 0x9, 0x4, 0x9, 0x1c, 0x9, 0x7, 0x2, 0x8, 0x8000, 0x8, 0x401, 0x8de, 0x1, 0x5, 0x80, 0x81, 0xda13, 0x6, 0x6, 0x7, 0x7fff, 0x0, 0xc90, 0x2, 0x9, 0xf, 0x4, 0x9, 0x5, 0x5, 0x1]}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f4000128014000180090001006c6173740000000004000280140001800c000100636f756e7465720004000280340001800c000100636f756e746572000400028008000340000001"], 0xcc}}, 0x20050800) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) (async) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@ng={0x4, 0x7, "2e122911e0e9424c"}, 0xa, 0x2) 2m5.31258888s ago: executing program 9 (id=3104): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x1) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x2700, &(0x7f0000000200)=ANY=[@ANYBLOB="47ab0bc37d09e181af9bf310eda1992de5cde4ed7288d8aed22fabf4f8641c1a433acfb893f806b25bffdf130f7d8a2137ee90ede72e7f768d340e874243b9116c4d52f63975334b9b598e50d9ac349449b393713e714eb2ea6a7c62dd26f5fae30ebf39918b63e0d628c278675beeac009962d632e5d2304597c60b68b48df452d54eee1f41972c7eb07ff0c737164c06b227c3f8d2d42e4b00f9c09b2aa086b4d5a35b271c864e1eecb2ed61d62fd1f65a3ab594d6feaac804285eee19d8137b16ec1f439b8c699dacab6534bfcb1f27cf1d1c734e7f0e2dd61f357e205e0a63b1d07a8499c2d01f3f4e6bfdac6f5d4f17c95dae86ca05", @ANYRES64=r0, @ANYRES64=r0]) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000440)='./bus\x00', &(0x7f0000000080), 0x2000084, &(0x7f0000000480)) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0xfff, 0x7, 0x8, 0x7, 0x5, "bf310c6e257212541a9ac7130c6c58c97a053a", 0xfffffff9, 0xb037}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xa, 0xc3072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000100), 0x2) (async) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f00000000c0)={0x2, 0xfa}, 0x2) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0), r7, 0x0, 0x1, 0x4}}, 0x20) (async) ioctl$UFFDIO_POISON(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, &(0x7f0000000380)=""/98, &(0x7f0000000400)=0x62) (async) ioctl$KVM_GET_SREGS2(r5, 0x8140aecc, &(0x7f0000000700)) chdir(&(0x7f00000001c0)='./bus\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x0, 0x300, 0x0}) 2m5.182068045s ago: executing program 40 (id=3104): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x1) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x2700, &(0x7f0000000200)=ANY=[@ANYBLOB="47ab0bc37d09e181af9bf310eda1992de5cde4ed7288d8aed22fabf4f8641c1a433acfb893f806b25bffdf130f7d8a2137ee90ede72e7f768d340e874243b9116c4d52f63975334b9b598e50d9ac349449b393713e714eb2ea6a7c62dd26f5fae30ebf39918b63e0d628c278675beeac009962d632e5d2304597c60b68b48df452d54eee1f41972c7eb07ff0c737164c06b227c3f8d2d42e4b00f9c09b2aa086b4d5a35b271c864e1eecb2ed61d62fd1f65a3ab594d6feaac804285eee19d8137b16ec1f439b8c699dacab6534bfcb1f27cf1d1c734e7f0e2dd61f357e205e0a63b1d07a8499c2d01f3f4e6bfdac6f5d4f17c95dae86ca05", @ANYRES64=r0, @ANYRES64=r0]) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000440)='./bus\x00', &(0x7f0000000080), 0x2000084, &(0x7f0000000480)) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0xfff, 0x7, 0x8, 0x7, 0x5, "bf310c6e257212541a9ac7130c6c58c97a053a", 0xfffffff9, 0xb037}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xa, 0xc3072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000100), 0x2) (async) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f00000000c0)={0x2, 0xfa}, 0x2) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0), r7, 0x0, 0x1, 0x4}}, 0x20) (async) ioctl$UFFDIO_POISON(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, &(0x7f0000000380)=""/98, &(0x7f0000000400)=0x62) (async) ioctl$KVM_GET_SREGS2(r5, 0x8140aecc, &(0x7f0000000700)) chdir(&(0x7f00000001c0)='./bus\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x0, 0x300, 0x0}) 11.929532549s ago: executing program 0 (id=3435): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1ff, 0x0, 0x2}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x331, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0x40, 0x81, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x1, 0x20, {0x9, 0x21, 0x9, 0x9, 0x1, {0x22, 0x8d0}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0x4, 0x6}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x8, 0x10, 0x5, 0x20, 0xc}, 0x12, &(0x7f00000001c0)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x6, 0x40, 0x4}]}, 0x7, [{0x9, &(0x7f0000000200)=@string={0x9, 0x3, "6b8e5531dd4b81"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x801}}, {0x3f, &(0x7f0000000280)=@string={0x3f, 0x3, "a21c7d7b4f2e3f18b52584e939989f5bed3d4c81ae614530af0ff1e8991b22143206b13e72e3e16ae3f6b36620491cd730158d2c7ba2d76dca875f77ce"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xfcff}}, {0x7d, &(0x7f0000000380)=@string={0x7d, 0x3, "da8ab6822e4d988d427a574225a245aed38755819f617888b8912ac8a7e3df2187a8ec446014c08d868620ccec7a921b6e9f2be8b6c1c04c7f5c55d33423d650b15cc2c89d3356e2d501df79834a5209a6839e33c3fd08f1ea80aaf9490bc09a203a74ba7942a30bc09210bf8e3179a3dade968474c73287eecb49"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x380a}}]}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000000c0)={r2, 0xa3d8}) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176653d72656c61746976653a38302d3915"]) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0xfe, 0x10, 0x0, 0x0, 0x0, 0x7e4, 0x0, 0x0, 0x45, [0x7fff, 0x10000000]}}) 10.284000209s ago: executing program 0 (id=3443): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) move_pages(r1, 0x2, &(0x7f0000000100)=[&(0x7f0000fbb000/0x1000)=nil, &(0x7f0000b1b000/0x4000)=nil], &(0x7f0000000380)=[0x400, 0x2, 0x9, 0x7f], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x4) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x1, 0x7f, 0xab, 0x7, 0x7fe, 0x8, 0x40009, 0x6, 0x4, 0x2c, 0x1f}) r4 = syz_clone(0xc0400, 0x0, 0xfffffffffffffca8, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000400)=0x81) process_vm_readv(r4, &(0x7f0000000b40)=[{&(0x7f0000000680)=""/134, 0x86}], 0x1, &(0x7f0000001dc0)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1, 0x0) migrate_pages(r4, 0x9f7, &(0x7f0000000300)=0x3, &(0x7f00000000c0)=0x13e) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001, 0x0, 0x3}, 0x18, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0xffffffffffffffff, 0x3, 0xfffffffc}}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000340)={0x2000}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000000)='`', 0x1, 0x41, &(0x7f0000000240)={0x6, 0x0, r6, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 9.401785897s ago: executing program 0 (id=3445): socket$unix(0x1, 0x1, 0x0) (async) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) syz_usb_connect(0x3, 0x1cb, &(0x7f0000000900)=ANY=[@ANYRES16=r0], 0x0) (async) r1 = syz_usb_connect(0x3, 0x1cb, &(0x7f0000000900)=ANY=[@ANYRES16=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_connect$hid(0x1be6304005d33d10, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x28bd, 0x1903, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x90, 0x32, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x3, 0x8, {0x9, 0x21, 0x3, 0x1, 0x1, {0x22, 0x81a}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x7, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x4, 0x0, 0x6}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x3d, 0xfb, 0xd, 0x10, 0x4}, 0x3e, &(0x7f00000000c0)={0x5, 0xf, 0x3e, 0x3, [@generic={0x23, 0x10, 0x2, "88288b65c4661812921fe18bffb4a3a91b1912aed604943f9359d0f00167838c"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x70, 0x3, 0xf, 0x5, 0xd7}, @wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x3, 0x81, 0x5ec, 0x5}]}, 0x4, [{0x100, &(0x7f00000001c0)=@string={0x100, 0x3, "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"}}, {0x9c, &(0x7f00000002c0)=@string={0x9c, 0x3, "63462a6c686b621e534927379fc71c60f77376cba8c82d4b65a94baed9b17847446ec3c9c3a549d326136cce68536cf43a49aa7047bc703bad87a8523b8633aeb26f696b70803118a3bcb3a649107dc8c0fb1b944d94db323fe50e0dfb61549f1259e279b1362a80506b55781c68d91f685edddc49165bfcacdb9e8608cbcf36a361e17354161bf74c2e4d35d76d95ac3783dfefae1e85551fdf"}}, {0xf0, &(0x7f00000004c0)=@string={0xf0, 0x3, "b71b685dfc47a37e82c83772318091feb3875e5549eb12b9bddc9d48729c06e7dc895dfecba648ff8e4c55e76e58ee9fd77478284b8988858ffb4703db541ade274d1438e770fff1f6abe8e6826d925bac7cdd342d23a0af98fac198cef50ad3a33d9e3a5675c35e342b81f5f4a3555841001c4f696ad3f7cc7dbb4175e370d5c1d17e7c1af42ec3549e08702a903b9faee3a5c47ca58504ca4d55b507afd1851abda57d62a0e4841289a733e160279ad7a0ec048e1fa253bb70de4184e047e298f5a70335216e486e0b3fb53ded0fee5f5f0a07f3743cc12bfab65c961fd58a276a69ce79596e83ce45013c23af"}}, {0x30, &(0x7f0000000100)=@string={0x30, 0x3, "04f5610506132f090c55d49003766170a0d6c75db47c94a53c2eeeaf9dc70f7374133718c491eb5363577c03a42f"}}]}) (async) r2 = syz_usb_connect$hid(0x1be6304005d33d10, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x28bd, 0x1903, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x90, 0x32, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x3, 0x8, {0x9, 0x21, 0x3, 0x1, 0x1, {0x22, 0x81a}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x7, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x4, 0x0, 0x6}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x3d, 0xfb, 0xd, 0x10, 0x4}, 0x3e, &(0x7f00000000c0)={0x5, 0xf, 0x3e, 0x3, [@generic={0x23, 0x10, 0x2, "88288b65c4661812921fe18bffb4a3a91b1912aed604943f9359d0f00167838c"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x70, 0x3, 0xf, 0x5, 0xd7}, @wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x3, 0x81, 0x5ec, 0x5}]}, 0x4, [{0x100, &(0x7f00000001c0)=@string={0x100, 0x3, "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"}}, {0x9c, &(0x7f00000002c0)=@string={0x9c, 0x3, "63462a6c686b621e534927379fc71c60f77376cba8c82d4b65a94baed9b17847446ec3c9c3a549d326136cce68536cf43a49aa7047bc703bad87a8523b8633aeb26f696b70803118a3bcb3a649107dc8c0fb1b944d94db323fe50e0dfb61549f1259e279b1362a80506b55781c68d91f685edddc49165bfcacdb9e8608cbcf36a361e17354161bf74c2e4d35d76d95ac3783dfefae1e85551fdf"}}, {0xf0, &(0x7f00000004c0)=@string={0xf0, 0x3, "b71b685dfc47a37e82c83772318091feb3875e5549eb12b9bddc9d48729c06e7dc895dfecba648ff8e4c55e76e58ee9fd77478284b8988858ffb4703db541ade274d1438e770fff1f6abe8e6826d925bac7cdd342d23a0af98fac198cef50ad3a33d9e3a5675c35e342b81f5f4a3555841001c4f696ad3f7cc7dbb4175e370d5c1d17e7c1af42ec3549e08702a903b9faee3a5c47ca58504ca4d55b507afd1851abda57d62a0e4841289a733e160279ad7a0ec048e1fa253bb70de4184e047e298f5a70335216e486e0b3fb53ded0fee5f5f0a07f3743cc12bfab65c961fd58a276a69ce79596e83ce45013c23af"}}, {0x30, &(0x7f0000000100)=@string={0x30, 0x3, "04f5610506132f090c55d49003766170a0d6c75db47c94a53c2eeeaf9dc70f7374133718c491eb5363577c03a42f"}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000680)={0x24, &(0x7f0000000400)={0x0, 0x23, 0x1c, {0x1c, 0x31, "3c683490b015a5e4f96c7df94132f47d0ec28c975ff70709f33b"}}, &(0x7f00000005c0)={0x0, 0x3, 0x20, @string={0x20, 0x3, "6727210d2e056031daca38b3a96ea4324b11beeda28ef0171a635a91d09c"}}, &(0x7f0000000880)={0x0, 0x22, 0x29, {[@local=@item_012={0x0, 0x2, 0x5}, @local=@item_4={0x3, 0x2, 0x4, 'O\v\'+'}, @local=@item_4={0x3, 0x2, 0x9, "64a9a366"}, @local=@item_012={0x2, 0x2, 0x1, "a4b1"}, @local=@item_012={0x1, 0x2, 0x5, "c0"}, @main=@item_4={0x3, 0x0, 0xc, "87242589"}, @main=@item_4={0x3, 0x0, 0xa, "cad93be6"}, @main=@item_4={0x3, 0x0, 0xa, "7823a864"}, @main=@item_4={0x3, 0x0, 0x8, "f9d13133"}, @local=@item_4={0x3, 0x2, 0x5, "cdced0b7"}]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2d, 0x0, 0x1, {0x22, 0x4}}}}, &(0x7f00000008c0)={0x2c, &(0x7f00000006c0)={0x0, 0x14, 0x58, "d3c5bffb1ea0803e226cbc6a15f18fafd38a4a3bea10f26621cd568ce84fee113bbfb8d0996c7d4e7813ab0fef97dcf129251c128abee707b8eb1edb89a6cc0cf21346a15567d7df2c01eeb13bb6e44c26e99db0f117eeae"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000007c0)={0x20, 0x1, 0x3c, "91a05aaaff5c4ccdb463d6f797b878863127b3abc9dd8bc4b969581fc8a0919a09aec9d894adbb15013fcdeedea9dc2378e18bd652717cc12d099051"}, &(0x7f0000000840)={0x20, 0x3, 0x1, 0x9}}) (async) syz_usb_control_io$hid(r2, &(0x7f0000000680)={0x24, &(0x7f0000000400)={0x0, 0x23, 0x1c, {0x1c, 0x31, "3c683490b015a5e4f96c7df94132f47d0ec28c975ff70709f33b"}}, &(0x7f00000005c0)={0x0, 0x3, 0x20, @string={0x20, 0x3, "6727210d2e056031daca38b3a96ea4324b11beeda28ef0171a635a91d09c"}}, &(0x7f0000000880)={0x0, 0x22, 0x29, {[@local=@item_012={0x0, 0x2, 0x5}, @local=@item_4={0x3, 0x2, 0x4, 'O\v\'+'}, @local=@item_4={0x3, 0x2, 0x9, "64a9a366"}, @local=@item_012={0x2, 0x2, 0x1, "a4b1"}, @local=@item_012={0x1, 0x2, 0x5, "c0"}, @main=@item_4={0x3, 0x0, 0xc, "87242589"}, @main=@item_4={0x3, 0x0, 0xa, "cad93be6"}, @main=@item_4={0x3, 0x0, 0xa, "7823a864"}, @main=@item_4={0x3, 0x0, 0x8, "f9d13133"}, @local=@item_4={0x3, 0x2, 0x5, "cdced0b7"}]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2d, 0x0, 0x1, {0x22, 0x4}}}}, &(0x7f00000008c0)={0x2c, &(0x7f00000006c0)={0x0, 0x14, 0x58, "d3c5bffb1ea0803e226cbc6a15f18fafd38a4a3bea10f26621cd568ce84fee113bbfb8d0996c7d4e7813ab0fef97dcf129251c128abee707b8eb1edb89a6cc0cf21346a15567d7df2c01eeb13bb6e44c26e99db0f117eeae"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000007c0)={0x20, 0x1, 0x3c, "91a05aaaff5c4ccdb463d6f797b878863127b3abc9dd8bc4b969581fc8a0919a09aec9d894adbb15013fcdeedea9dc2378e18bd652717cc12d099051"}, &(0x7f0000000840)={0x20, 0x3, 0x1, 0x9}}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000100)='\x85})(})\\/!+,*\'\x00') openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.329812341s ago: executing program 0 (id=3453): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') (async) mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) (async) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) r2 = dup(r1) sendmmsg$alg(r2, &(0x7f000000a480)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="47494410e987bee2c4dd1c2eda190e0148b14fab6916f74cf78962218dd9772d5d2565f1", 0x24}], 0x1, 0x0, 0x0, 0x40091}], 0x1, 0x8881) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYRES8=r4, @ANYRES32=r3, @ANYRES16=r0, @ANYRESOCT, @ANYRESOCT=r5, @ANYRES64=r4], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r6, 0x84, 0x7d, 0x0, &(0x7f0000000100)) connect$inet(r3, &(0x7f0000000040)={0x2, 0xa000, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) (async) setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f00000009c0)=0x1234, 0x4) 6.296862634s ago: executing program 0 (id=3454): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001", @ANYRES32=r4, @ANYRES8=r3], 0x6f4}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x3, @loopback, 0x7d1}, 0x1c) 6.139753391s ago: executing program 3 (id=3455): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001b80)={&(0x7f0000000800)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="ee31f19d80fcf6ece70c8228214c802c0114b7319598df161585cef711c9b08de6cba16307e3ab718012f48f59b098e2d10881b6c1a7477e93803f4c0240678171a810b243aafe03bc737ce4dc6b10fb2a0020504653f1f445f8fdefbb707260ea2521ffd5a4d8005d86ff04e8797cc3e8fef84dd4d49d635c045fa70dd2cf44a783899d3070737af7e95e4f311f36d0704a87c49cab6c9a291c473f", 0x9c}], 0x2, &(0x7f0000001980)=[{0x40, 0x10e, 0x4, "1bfd3cc398c52713193c68d384f6c9fba91534dcf0ba39c2902223311524d82148cc0774916e9f2671c924e663"}, {0xc0, 0x10d, 0xff, "3c7087810ed9fdc844405e4a8e8472467e6c3b326c99165c244d24a9598c6c8401e060c535d7eb2fe04f4d8a32fbf0e4eac5b3834ac958d34790a1b736156bd839a11f627b778b80e0f973b7094b1ae12a98e3be5c7dae3cb1f2f869f519c0d2ad87521ab4fd82a63ca2e56f0b7157867e9f850a63f63585d6d92d1c10827953a88a4d04987000bbfe1ddbfb374aa085e2aa938c933956d5c9b30c23a86db4b3e9f87bc13e29d83e23213cd2d1efd7b2"}, {0x80, 0x111, 0x0, "029434b4ca890acd8e07d2992dfd14037ab8443272aedb5996c00667b53f5931ae34cdd4ee55001c6853d933d312ec7935200628963f226c47fcf09280cbe957c4f6a6f9e6586c965c4a8e8c817784d1d5a27c224788dcaa30c2789231c0d4fd68f951ac812bc779fa6140a57d145f6d"}, {0x58, 0x109, 0x8, "4c3fec689e4fc4d3e872c16273e81b2d0e1d415e78dc6a6f1f09de0fcf66d3c2cfb107fe7532f44ad64cbe018685d65a1a1705c19a0496de06b7b124cb6f07770ad7d41d4353"}], 0x1d8}, 0x4040000) r1 = syz_open_dev$video4linux(&(0x7f0000000380), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000040)={0x8000000, 0x204, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x8000000, 0x0, '\x00', @ptr}}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6", 0x6b}, {&(0x7f00000004c0)="846d2ad6d4ef6560542286af609ff6ca49c12d9b19e1843ce4c332e6f0932bc521d0bdcd40638430b5dbdb1a26009aaba510eb36442d9c3fb54c6b14c0e5c2867c43e8a75801149e1613c3fc8a5fd8470359795f85d3741efcbe77df1b9bfad527863f7684842cce7eeb775eda", 0x6d}], 0x2}, 0x200000d4) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904", @ANYRESOCT=0x0, @ANYRES32=r0], 0x0) syz_usb_control_io$sierra_net(r2, &(0x7f0000000100)={0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}}, &(0x7f00000006c0)={0x1c, &(0x7f0000000140)={0x0, 0x9, 0xc3, "46b57d2813edd85cd21f285ff25fc85c80da074abc013c9984f3409bc0f6ef93bcc95ee9b259cb16d1d4c1c5e4004cc736c2aea41d0ea9d9e7ffe02e097919433d50e6f6a1fde8e1e4af4433a0cd08a2bd2a56e6fd51e5f6d408d03ced61c94c4e5616489c0fa86f72f459d7f7e1c54c16fe3595043cf7cb7fe11e50eb7b9532432703ac9698b84d89ded043a96af24edd6a06560656516e60ad05b29d8beaba621ffef163ed9d54ef91646fa1b7f0c8e8b4959810c95d70cb81d4be46bf11062421a2"}, &(0x7f0000000240)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000680)=ANY=[@ANYBLOB="210000eaff00"]}) userfaultfd(0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) fallocate(r3, 0x21, 0x0, 0x8000) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000001b80)={&(0x7f0000000800)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="ee31f19d80fcf6ece70c8228214c802c0114b7319598df161585cef711c9b08de6cba16307e3ab718012f48f59b098e2d10881b6c1a7477e93803f4c0240678171a810b243aafe03bc737ce4dc6b10fb2a0020504653f1f445f8fdefbb707260ea2521ffd5a4d8005d86ff04e8797cc3e8fef84dd4d49d635c045fa70dd2cf44a783899d3070737af7e95e4f311f36d0704a87c49cab6c9a291c473f", 0x9c}], 0x2, &(0x7f0000001980)=[{0x40, 0x10e, 0x4, "1bfd3cc398c52713193c68d384f6c9fba91534dcf0ba39c2902223311524d82148cc0774916e9f2671c924e663"}, {0xc0, 0x10d, 0xff, "3c7087810ed9fdc844405e4a8e8472467e6c3b326c99165c244d24a9598c6c8401e060c535d7eb2fe04f4d8a32fbf0e4eac5b3834ac958d34790a1b736156bd839a11f627b778b80e0f973b7094b1ae12a98e3be5c7dae3cb1f2f869f519c0d2ad87521ab4fd82a63ca2e56f0b7157867e9f850a63f63585d6d92d1c10827953a88a4d04987000bbfe1ddbfb374aa085e2aa938c933956d5c9b30c23a86db4b3e9f87bc13e29d83e23213cd2d1efd7b2"}, {0x80, 0x111, 0x0, "029434b4ca890acd8e07d2992dfd14037ab8443272aedb5996c00667b53f5931ae34cdd4ee55001c6853d933d312ec7935200628963f226c47fcf09280cbe957c4f6a6f9e6586c965c4a8e8c817784d1d5a27c224788dcaa30c2789231c0d4fd68f951ac812bc779fa6140a57d145f6d"}, {0x58, 0x109, 0x8, "4c3fec689e4fc4d3e872c16273e81b2d0e1d415e78dc6a6f1f09de0fcf66d3c2cfb107fe7532f44ad64cbe018685d65a1a1705c19a0496de06b7b124cb6f07770ad7d41d4353"}], 0x1d8}, 0x4040000) (async) syz_open_dev$video4linux(&(0x7f0000000380), 0x0, 0x0) (async) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000040)={0x8000000, 0x204, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x8000000, 0x0, '\x00', @ptr}}) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6", 0x6b}, {&(0x7f00000004c0)="846d2ad6d4ef6560542286af609ff6ca49c12d9b19e1843ce4c332e6f0932bc521d0bdcd40638430b5dbdb1a26009aaba510eb36442d9c3fb54c6b14c0e5c2867c43e8a75801149e1613c3fc8a5fd8470359795f85d3741efcbe77df1b9bfad527863f7684842cce7eeb775eda", 0x6d}], 0x2}, 0x200000d4) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904", @ANYRESOCT=0x0, @ANYRES32=r0], 0x0) (async) syz_usb_control_io$sierra_net(r2, &(0x7f0000000100)={0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}}, &(0x7f00000006c0)={0x1c, &(0x7f0000000140)={0x0, 0x9, 0xc3, "46b57d2813edd85cd21f285ff25fc85c80da074abc013c9984f3409bc0f6ef93bcc95ee9b259cb16d1d4c1c5e4004cc736c2aea41d0ea9d9e7ffe02e097919433d50e6f6a1fde8e1e4af4433a0cd08a2bd2a56e6fd51e5f6d408d03ced61c94c4e5616489c0fa86f72f459d7f7e1c54c16fe3595043cf7cb7fe11e50eb7b9532432703ac9698b84d89ded043a96af24edd6a06560656516e60ad05b29d8beaba621ffef163ed9d54ef91646fa1b7f0c8e8b4959810c95d70cb81d4be46bf11062421a2"}, &(0x7f0000000240)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000680)=ANY=[@ANYBLOB="210000eaff00"]}) (async) userfaultfd(0x1) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (async) fallocate(r3, 0x21, 0x0, 0x8000) (async) 6.015584324s ago: executing program 1 (id=3457): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402ecffffffff08058102df"], 0x0) syz_usb_connect$uac1(0x69a90eab3db9c902, 0xaa, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x3, 0x1, 0x5, 0xa0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff7, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x3, 0x3, 0xb}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x8001, 0x7fff, 0x6, "508a7e09"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x4, 0x7, 0x6, "f7e04239"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xff, 0xc8, 0x3, {0x7, 0x25, 0x1, 0x0, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x1, 0x8, 0x1, "3a3882"}, @as_header={0x7, 0x24, 0x1, 0x1, 0xc0, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x50, 0x5, 0x8, 0x41, {0x7, 0x25, 0x1, 0x82, 0xfe, 0x7}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 5.818190561s ago: executing program 3 (id=3458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$video(&(0x7f0000000100), 0x2, 0x80400) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000140)={0x0, {0x0, 0x3ff}}) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0x4, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFQA_CFG_MASK={0x4b, 0x4, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x80c) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)={0x44, r4, 0x1, 0x70bd2c, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x29, 0x9, 0x5}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200040d4}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x48, 0x0, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x8, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x56}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x806}, @CTA_TIMEOUT_L3PROTO={0x0, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x48}}, 0x800) 5.68410868s ago: executing program 3 (id=3459): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000240)={0x40, 0x31, 0x4, "9d586016"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x11, 0xe0, {0xe0, 0x31, "7140c61bce0ee5cb7ba902a398db037cce87bc8cc1ce072e72e1f14c544c779ae66e3927dbcdc9ce73b9bc1fd97759ebbe71a73b6ac5c46e4a0abb3b6e476795284b8d5c145e0dce153074f690d08c3ac378f392ab3043a262799685bc71bc4f719e2c0f6fdb04dfb0f5aa183c501486cd7f95595b05068e8dcd0e18737d924fce450ca021c392cc5cab30bff0fabfb1e48a64eb1bc7d04e40724dbfe10b515f4c7ca766f0bf610b48b8c2d6373cc9db5d3f252a296f7dfc19795e3dc61db2c7699b04f0ca2f8ed4f49e33368dfb4bf9823107c064fe01badebcce855795"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)={0x20, 0x17, 0x6b, "083efd0def6e2ea191697637eac0af5a5d3196e0b5dad0929d6231705cff4505bd83e9506538f8ca78ec8da8783cae34738e7afb88fa9b87631b0a7cb91e751c040ae386c61af7f4ae2c5339f275231eb35420d71aec1dda44edb10c3154488c5b2ad9ce08c1a700ba5087"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000400)=@netrom={'nr', 0x0}, 0x10) 5.142468085s ago: executing program 3 (id=3460): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) read$usbfs(r0, &(0x7f00000004c0)=""/146, 0x92) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000001780)=@buf={0x29, &(0x7f0000001700)="28c359fa74fef8aaa47e0d2ec1b7b0e331d94e8c010c569599e412fc2e63d2e1f454b5a4e98edd5a2a"}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x83, "00000000000000000000ffff00"}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000100)) unshare(0x22020600) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000003c0)={'vcan0\x00', {0x2, 0x4e20, @multicast2}}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000400)={0xaa, "85bceb"}, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a78000000060a030400000000000000000a0000010900010073797a31000000004c000480480001800b000100746172676574000038000280240003000739f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000000800024000000000080001004c4f47000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r7, &(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0) pwrite64(r4, 0x0, 0x0, 0x8) dup3(r2, r4, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={&(0x7f00000001c0)="096b0e009dc653a5803f9fd5f92ef8db46f7781d68e5b54f8dddedc151d1ab3cf62412705c0098ede4b92a67851656a4bb022a1b21b879cfecfe451ca555b2dafc1f388e8bf7a79fdba0f90962ff1c4ba54b38b921cc2bbf5c9c", &(0x7f00000002c0)="e80ccfd73e65035866ea53089d4d493bca3522ef89425635d72f63cc68f265126294d0ee9c42e21b70c7f19cd6cf2f1d5a3db952ff3c0b9fceccfcf3710bc976d3e4df95b62a879b87d566325835e61410f5792913bffb625b40848bea6a9b998500ba0fae96874ee61b0342e167ecb0cb8d7ff0843857b11ebb45035a62c2236c0edce8c2a70893d83a8302"}}, &(0x7f0000000140)) syz_open_pts(r2, 0x0) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) gettid() pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x800010100000}, 0x0, &(0x7f00000000c0)={0x1c, 0x40002, 0x0, 0x0, 0x0, 0x200000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000380)) syz_open_dev$I2C(&(0x7f0000000440), 0xfffffffffffffffc, 0x212142) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r1], 0x0) 4.611542379s ago: executing program 1 (id=3461): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='veth1_to_batadv\x00'}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000280)={0x7ff, 0x8000000, 0x0, r3}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000000)={0x8000000, 0x103000, 0x8}) ioctl$sock_netrom_SIOCDELRT(r0, 0x541b, &(0x7f0000000080)={0x1, @bcast, @bpq0, 0x2, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff) syz_clone(0x80, &(0x7f0000000100)="7fde1580fb2fdd2735afa5d5f598be91c524b797a9ad7f1607dc6b425f88f928d621b7fe42e653c7e40ef037f942ef6d869920e77b21acc02831c9331586c248f6e0568805a1f90fc1cac1711b1228ca5b969ca233c8dffb8e12a1a8063cfd05c9097d10500f9285900da6c918e4f40099b1ce1f6bbb8772a0bb924186d0015e69368fb07c435fb872846d5680f5b8de02630857bab19d0954db7921b56856e8fd31712042bc8a7b1a619fede0743bfa63cf17af9abe7fe3dbb733ba1005e8123972c4bc1beebbc2cd4329163af659", 0xcf, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="1c1e07fc9c3c0adfd2f214e2908c839d929d8a349b6c18859f5972ec8f78f7de20c4080303bb0996698511a1bbd9b21e050c66fb4395b8adee22d62c25d723d1cbd63e028d39cbe17c5abbf65f312975da6d6441047e77b137014fccc46ce39f0bf41db8b3bbf9b00cc9c598fed0fb9f7f61a2752fcdf9bd83e66ffa86c9ba57239dfaa4ff385c55bf56dd0e88bfa36cf618fa4ade01468170561ee3fbdc93cbfa5641786dec9fc41bce2ed1432a91887f780ea30b4775999b24bb7a264f6bd691c87a03cefdd588275a98a5d45ac8b690471c5a527004b7727f59c7cc2118653028115ae04177b5bb05b6612b60b17856fec6261cc08cefbf4aab5cf281d3") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000380), 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa2003000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 4.29711471s ago: executing program 0 (id=3462): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000010ac05470200000000000109022400010000500009040002010300010009210000000122f80409058103"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_eeprom={0x4f, 0x0, 0x1}}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x4000001ffffffe) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000001c0)={r6, 0x1, 0x19ea}, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={r6, 0x0, 0x0, 0x1ee1da1c, 0x3}, &(0x7f0000000240)=0x18) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000080)={0x1, 0x0, [{0x7, 0x4, 0x0, 0x0, @msi={0x3, 0x1, 0x400, 0x66}}]}) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r10 = dup2(r9, r9) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r10) socket$inet6(0xa, 0x1, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r10) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000010900020473797ae9f1aa410605000100060000000500050000000000050003ffffe90000140007800800114000000000050015006d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x44068040}, 0x20040080) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00014006000dc3036010fab94dcf5c046109d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c417898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccc89e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5", 0xd8}], 0x1}, 0x20000880) open_tree(r3, &(0x7f0000000100)='./file0\x00', 0x0) 3.946394618s ago: executing program 41 (id=3462): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000010ac05470200000000000109022400010000500009040002010300010009210000000122f80409058103"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_eeprom={0x4f, 0x0, 0x1}}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x4000001ffffffe) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000001c0)={r6, 0x1, 0x19ea}, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={r6, 0x0, 0x0, 0x1ee1da1c, 0x3}, &(0x7f0000000240)=0x18) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000080)={0x1, 0x0, [{0x7, 0x4, 0x0, 0x0, @msi={0x3, 0x1, 0x400, 0x66}}]}) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r10 = dup2(r9, r9) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r10) socket$inet6(0xa, 0x1, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r10) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000010900020473797ae9f1aa410605000100060000000500050000000000050003ffffe90000140007800800114000000000050015006d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x44068040}, 0x20040080) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00014006000dc3036010fab94dcf5c046109d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c417898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccc89e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5", 0xd8}], 0x1}, 0x20000880) open_tree(r3, &(0x7f0000000100)='./file0\x00', 0x0) 3.561785304s ago: executing program 6 (id=3465): r0 = socket(0xa, 0x1, 0x0) (async) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_TMR_STOP(r1, 0x5402) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x5, 0x0, 0x0, @generic}) (async, rerun: 64) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) (rerun: 64) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000001380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f0000000500)=[@decrefs], 0x0, 0x0, 0x0}) (async, rerun: 32) socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) r3 = syz_open_dev$vcsn(&(0x7f0000001f80), 0x1, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x80, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x7292) (async) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000140)={0x1, 0x0, {0xffffffff, 0xfff, 0xfffff401, 0x4}}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'\x00', 0x2}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x324) syz_clone(0x800100, &(0x7f0000000000)="0dc1327c956c6d4a5bc158d43c4f9acdc412cd8371b661bcf563cf71d7e94cf13d279c4b8ecc671fb2693c2f0bb2b140d1275f1e359d4d", 0x37, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="ac") (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x8, 0x0, [{0x3ba, 0x0, 0x6}, {0x350, 0x0, 0x9}, {0xac8, 0x0, 0x4d2}, {0x92c, 0x0, 0x3}, {0xc0001c2a, 0x0, 0x71}, {0xa1c, 0x0, 0x10}, {0x288, 0x0, 0xffffffffffffffff}, {0xba5, 0x0, 0xf}]}) (rerun: 32) r8 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000740)={0x2, @sdr={0xb5315241, 0x1}}) (async, rerun: 32) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) (async) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000100)={@local, 0x0, r10}) (async) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) 3.460237992s ago: executing program 1 (id=3466): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1b}, 0x200488c1) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1b}, 0x200488c1) 3.395331634s ago: executing program 6 (id=3467): r0 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x804, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x0, {0xa, 0x4e20, 0x401, @mcast1}}}, 0x3a) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x8000, 0x6, 0x1, 0x8, 0x1000}, &(0x7f00000001c0)=0x14) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000200)={r4, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6}, 0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000080)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x8, 0x3, 0x0, {0x17, 0x4, 0x3, 0x7, 0x8, 0x68, 0x1, 0x0, 0x2f, 0x1, @local, @local, {[@timestamp_prespec={0x44, 0x14, 0x56, 0x3, 0x9, [{@broadcast, 0x6558}, {@rand_addr=0x64010100, 0x4041}]}, @ssrr={0x89, 0xb, 0xcc, [@loopback, @broadcast]}, @generic={0x83, 0x12, "073b4c1e45bb5cc1c8081dcf1435dd97"}, @timestamp_addr={0x44, 0x14, 0x33, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x42}, 0x9}, {@rand_addr=0x64010100, 0x7}]}]}}}}}, 0x86) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1b00000000000300000005000000180001801400020073797a5f74756e00000080000000000008000500ff0300000c0003800400010004000380"], 0x40}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200), 0xf000) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r9, 0x8010af78, &(0x7f0000000300)) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002bbd7000fddbdf250500000008020b00010000001400"/42], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8040) 3.295339538s ago: executing program 1 (id=3468): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d1050120001001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000240)={0x40, 0x31, 0x4, "9d586016"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x11, 0xe0, {0xe0, 0x31, "7140c61bce0ee5cb7ba902a398db037cce87bc8cc1ce072e72e1f14c544c779ae66e3927dbcdc9ce73b9bc1fd97759ebbe71a73b6ac5c46e4a0abb3b6e476795284b8d5c145e0dce153074f690d08c3ac378f392ab3043a262799685bc71bc4f719e2c0f6fdb04dfb0f5aa183c501486cd7f95595b05068e8dcd0e18737d924fce450ca021c392cc5cab30bff0fabfb1e48a64eb1bc7d04e40724dbfe10b515f4c7ca766f0bf610b48b8c2d6373cc9db5d3f252a296f7dfc19795e3dc61db2c7699b04f0ca2f8ed4f49e33368dfb4bf9823107c064fe01badebcce855795"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)={0x20, 0x17, 0x6b, "083efd0def6e2ea191697637eac0af5a5d3196e0b5dad0929d6231705cff4505bd83e9506538f8ca78ec8da8783cae34738e7afb88fa9b87631b0a7cb91e751c040ae386c61af7f4ae2c5339f275231eb35420d71aec1dda44edb10c3154488c5b2ad9ce08c1a700ba5087"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000400)=@netrom={'nr', 0x0}, 0x10) 2.943610446s ago: executing program 6 (id=3469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async) 2.590406263s ago: executing program 6 (id=3470): r0 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x3, 0x12) setresuid(0xee01, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x8, 0x0) prlimit64(r1, 0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x6, 0x0, 0xeeeeeeee}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = shmget$private(0x0, 0x1000, 0x400, &(0x7f0000003000/0x1000)=nil) shmat(r5, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r5, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000a5080103009dfe000000000002000001"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002cc2cdf406307302079790102030109021209015f6560700904010800ff"], &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r6, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="000d00000000f64fa25a7fd4454f5c298fffd2dd16250bf2ee3c79bf322b1a2a692af94fff61fb545d7991a0803e22e7cc1ec9058c8590c6e615a5e24030ee02755bb16c94b646a2b97a81fc16250408b921db05a929b779ca4f01f4caf4bdf84d902d2e45bacbd38cd8f3462687bc599632633715cfa1cb2973807d5c1209d44fda58b1acb0b9b63946bba2cabd"], 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000002c0)="3a5ccfaf17add95a41a87d3f83ee9589c3d21a017f60ad85c99a6aa9c90147ab4da3161d76d3506239c16abcdfaa4fcaba8525ed2e02a3efc1d81eb84dadf4dfc2eb8c322f5714026e844cb11484efe6ff7dd4aa873962ab8050dc4bd23c61e0b5a79498f7b14a53f3f1d291954c57901d3a669ffb5d5a99826ddc435be0c2fad07110ef6c75b903d575883f121fa56f8c6d61d73d6a42d5658436c068e29855361438546ea5f1e83507612653ebfb6b265d318c7efc2165947261170acf462994263f29948f124d2067a23bb558c37b153a0cf4e32585e485832eac2001a0bda886d40e08640d8f0592e5db86a71b7e", 0xf0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f00000003c0)={0x1, r2, r7, 0xfbfbfbfb}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r9, 0x400, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) close(r8) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d", 0x21) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r10) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000dc0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYRESOCT=r4], 0x24}, 0x1, 0x0, 0x0, 0x8051}, 0x40010) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x2b, 0x80801, 0x1) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100), 0x1218002, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES8, @ANYRES8=r3, @ANYRESHEX=r7]) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="6000333d4f1000", @ANYRES16=r11, @ANYBLOB="01002cbd700000dcdf251a0000004400228004000080040000800400008004000080040000802c00008008000400ff7f00000800060005000000080004001669ac5a080007000800000008000300760000000600210061000000"], 0x60}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) 2.0369715s ago: executing program 3 (id=3471): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x3) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000140)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='rootfs\x00', 0x0, &(0x7f0000000400)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001000000000000000000000000ff0f0000000000000400000000000000000201800b000100736f636b65740000140002800800573b0b02400001000b08000140000000030900010073797a3000dc00000000020073797a09000000000000000011000100"/115], 0x7c}}, 0x0) chdir(&(0x7f0000000440)='./file0/file0\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000005a16a000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000c005030000dc229ca5bedd08e7"], 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0xc000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {0x0, 0x800b}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="78000000070a010400000001000000000a0000070900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000f080003400000000008006139af8c6a8c4f67a663de139d5f397203400000000a0800024000000009080001400000000b08000340"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x24044844}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r8, &(0x7f0000000f80)=""/4096, 0x1000) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f0000000640)='./file0\x00', 0x4) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r9, &(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x8, 0x1) 1.739841582s ago: executing program 3 (id=3472): r0 = syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904", @ANYRES8], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000180)={r2, 0x0, 0x7f}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x1, 0x2, 0x240, 0x9b99}, 0x9, [0x5, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x2, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x24d, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a0, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa4, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x20000001, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x73c, 0x3ff, 0x1ff, 0xffffffff, 0x7faf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x0, 0x3ff, 0x2, 0x400, 0x40, 0x3, 0x10007, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x6, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x10001], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x100040, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0x133b, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x81, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x1, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000640)="480000001500190a20", 0x9}, {&(0x7f0000000600)="c1130389", 0x4}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4004801}, 0x240400d0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r6, 0x4068aea3, &(0x7f0000000280)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x4, 0x0, 0x180, 0x4, 0x13, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000440)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "f89e"}, 0x0, 0x0, 0x0, 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="280000002d000100fcffffff0000000008000000", @ANYRES32=0x0, @ANYBLOB='\n\x00'], 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0) 804.989632ms ago: executing program 6 (id=3473): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0xb173, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x24d, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a0, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0x81, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x3, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x20000001, 0xfffffff7, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7faf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x8095, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0xffffff9b, 0x5, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x3, 0x400, 0x40, 0x6, 0x10007, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x100040, 0xff, 0x5, 0x7fffbfff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x80010000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000100)="8af7761792a0d1402602601ad950dda12d86bbe8596147d24b84a71f1480bad3629361830e52d627e4a433285410e185a588b4a20945f12944055fcd498cb5f85942c05dbfc278c8be97750b461b21d2131f2599", 0x54}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000100)="8af7761792a0d1402602601ad950dda12d86bbe8596147d24b84a71f1480bad3629361830e52d627e4a433285410e185a588b4a20945f12944055fcd498cb5f85942c05dbfc278c8be97750b461b21d2131f2599", 0x54}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') (async) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f0000000240)='./bus\x00', 0x40, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0x2284, &(0x7f00000000c0)={0x2, 0x2083, 0x0, 0x0}) (async) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0x2284, &(0x7f00000000c0)={0x2, 0x2083, 0x0, 0x0}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) 498.239881ms ago: executing program 6 (id=3474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0xea, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3, [0x0]}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2, "d56fe9ee2ba9966fd68706d458e4bff5911ff80322d4c5566ae63039a1113afc54a4217fcd6e21ce562d1b1d22e7bc66c6912df753a767ee7662646e824ce2bc1f6f530700db54f971c47272597918e69dd69d3651c037bf670b0c1e65d97509a3cdf8644c1d67fe480e0fa5e969805e9480c825f30694cd776e05d4e8ee45ff82a78971823210239c34b572f2acd26f8d9d98b62065b21ff8b8bb3171b960fd61a2fb97"}}}}}}, 0x120) 21.551302ms ago: executing program 1 (id=3475): r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x7484, 0x100) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x30, r2, 0x2, 0xfffffffd, 0xfffffffc, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x1]}]}, 0x30}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x101, 0x0) pwritev(r5, &(0x7f0000001300)=[{&(0x7f0000001040)='4', 0x1}], 0x1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x12e9000, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) 0s ago: executing program 1 (id=3476): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x140b, 0x10, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}}, 0x4844) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x45, 0x1, 0x2}, {0x60}, {}, {0x6}]}) r6 = syz_pidfd_open(r5, 0x0) pidfd_getfd(r6, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): erent from the interface descriptor's value: 2 [ 627.893900][T13825] usb 7-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 627.903518][T13825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.916144][T13825] usb 7-1: config 0 descriptor?? [ 628.223759][T13825] usbhid 7-1:0.0: can't add hid device: -71 [ 628.231241][T13825] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 628.246321][T13825] usb 7-1: USB disconnect, device number 81 [ 628.631622][ T7421] hsr_slave_0: left promiscuous mode [ 628.638530][ T7421] hsr_slave_1: left promiscuous mode [ 628.644340][ T7421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.652223][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.660701][ T7421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.668382][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.689427][ T7421] veth1_macvtap: left promiscuous mode [ 628.694979][ T7421] veth0_macvtap: left promiscuous mode [ 628.701962][ T7421] veth1_vlan: left promiscuous mode [ 628.707415][ T7421] veth0_vlan: left promiscuous mode [ 629.117028][ T7421] team0 (unregistering): Port device team_slave_1 removed [ 629.134769][T12808] Bluetooth: hci2: command tx timeout [ 629.162905][ T7421] team0 (unregistering): Port device team_slave_0 removed [ 629.808399][T19358] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 629.831110][T19358] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 629.868469][T19358] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 629.892212][T19358] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 630.032048][T19358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.058734][T19358] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.072898][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.080097][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.107048][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.114208][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.358474][T19358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.436201][T19358] veth0_vlan: entered promiscuous mode [ 630.452515][T19358] veth1_vlan: entered promiscuous mode [ 630.502482][T19358] veth0_macvtap: entered promiscuous mode [ 630.517209][T19358] veth1_macvtap: entered promiscuous mode [ 630.545683][T19358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.562607][T19358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.590863][ T7421] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.607520][ T7421] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.628948][ T7421] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.643714][ T7421] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.719728][ T773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.733502][ T773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.776448][ T7421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.784301][ T7421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.104667][ T5967] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 631.214747][T12808] Bluetooth: hci2: command tx timeout [ 631.268461][ T5967] usb 1-1: config 0 has an invalid interface number: 73 but max is 0 [ 631.277809][ T5967] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.288301][ T5967] usb 1-1: config 0 has no interface number 0 [ 631.303100][ T5967] usb 1-1: New USB device found, idVendor=06f8, idProduct=300c, bcdDevice=39.64 [ 631.316235][ T5967] usb 1-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 631.324235][ T5967] usb 1-1: Product: syz [ 631.329235][ T5967] usb 1-1: Manufacturer: syz [ 631.336165][ T5967] usb 1-1: SerialNumber: syz [ 631.352909][ T5967] usb 1-1: config 0 descriptor?? [ 631.372908][ T5967] uvcvideo 1-1:0.73: probe with driver uvcvideo failed with error -22 [ 631.571212][ T5967] usb 1-1: USB disconnect, device number 95 [ 633.296913][T12808] Bluetooth: hci2: command tx timeout [ 679.999356][T20186] netlink: 'syz.3.3121': attribute type 7 has an invalid length. [ 680.009591][T20186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3121'. [ 680.134349][T20204] 9pnet_fd: Insufficient options for proto=fd [ 680.308817][T12808] Bluetooth: hci5: link tx timeout [ 680.313990][T12808] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 680.325532][ T24] usb 7-1: new full-speed USB device number 82 using dummy_hcd [ 680.507449][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 680.518542][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.529934][ T24] usb 7-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 680.539389][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.557274][ T24] usb 7-1: config 0 descriptor?? [ 680.972061][T20207] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 680.982200][T20207] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 680.990509][ T24] uclogic 0003:2179:0053.003B: interface is invalid, ignoring [ 680.993787][T20207] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 681.049495][T20207] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 681.056120][T20207] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 681.066394][T20207] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 681.157177][T20207] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 681.182288][T20221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.205152][T20198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.205526][T20221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.213885][T20198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.268577][ T5941] usb 7-1: USB disconnect, device number 82 [ 681.299656][T20221] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3130'. [ 681.349214][T20221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3130'. [ 681.594707][T13406] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 681.614765][ T9] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 681.788200][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 681.798862][T13406] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.837455][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 681.845428][T13406] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 681.866550][ T9] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 681.875672][T13406] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.884558][ T9] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 681.893702][ T9] usb 1-1: config 129 has no interface number 1 [ 681.904080][T13406] usb 2-1: config 0 descriptor?? [ 681.909478][ T9] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 681.944621][ T9] usb 1-1: config 129 interface 135 has no altsetting 0 [ 681.954682][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 681.963813][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.985247][T20293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.994916][ T9] usb 1-1: Product: syz [ 681.997249][T20293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.999122][ T9] usb 1-1: Manufacturer: syz [ 682.029847][ T9] usb 1-1: SerialNumber: syz [ 682.072928][T20301] netlink: 'syz.6.3135': attribute type 21 has an invalid length. [ 682.083456][T20301] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3135'. [ 682.254682][T12808] Bluetooth: hci1: command 0x0c1a tx timeout [ 682.331196][T20320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.356032][T20320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.374982][T13406] keytouch 0003:0926:3333.003C: fixing up Keytouch IEC report descriptor [ 682.396616][T13406] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.003C/input/input63 [ 682.444609][ T24] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 682.605661][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 682.623680][ T24] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 682.644382][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.661330][T20336] random: crng reseeded on system resumption [ 682.670444][T13406] keytouch 0003:0926:3333.003C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 682.699898][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 682.704611][T20264] infiniband syz1: set down [ 682.712301][T20264] infiniband syz1: added ipvlan1 [ 682.723099][ T24] pvrusb2: ********** [ 682.728711][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 682.740110][T20336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.769094][T13406] usb 2-1: USB disconnect, device number 96 [ 682.769706][ T24] pvrusb2: Important functionality might not be entirely working. [ 682.806085][T20336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.821771][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 682.877837][ T24] pvrusb2: ********** [ 682.889086][T20264] RDS/IB: syz1: added [ 682.902785][T20264] smc: adding ib device syz1 with port count 1 [ 682.918178][T20264] smc: ib device syz1 port 1 has no pnetid [ 682.957351][ T2346] pvrusb2: Invalid write control endpoint [ 682.969220][T20348] fido_id[20348]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 682.971401][T20365] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3137'. [ 683.056362][T12808] Bluetooth: hci4: command 0x0405 tx timeout [ 683.056954][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 683.064739][T12808] Bluetooth: hci2: command 0x0c1a tx timeout [ 683.068595][ T5858] Bluetooth: hci5: command 0x0406 tx timeout [ 683.119775][T20361] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3137'. [ 683.212799][ T2346] pvrusb2: Invalid write control endpoint [ 683.230058][ T24] usb 7-1: USB disconnect, device number 83 [ 683.232269][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 683.258271][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 683.268261][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 683.279816][ T2346] pvrusb2: Device being rendered inoperable [ 683.289217][ T2346] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 683.308712][ T2346] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 683.339834][ T2346] pvrusb2: Attached sub-driver cx25840 [ 683.361116][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 683.404581][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 683.844616][ T24] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 684.004547][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 684.013253][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.028495][ T24] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 684.041483][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 684.051864][ T24] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 684.069278][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 684.079150][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 684.096691][ T24] usb 7-1: SerialNumber: syz [ 684.113861][T20406] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 684.133330][ T24] usb 7-1: bad CDC descriptors [ 684.147467][ T24] usb-storage 7-1:1.0: USB Mass Storage device detected [ 684.323917][T13345] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 684.399148][ T24] usb-storage 7-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 684.424636][ T24] scsi host1: usb-storage 7-1:1.0 [ 684.514586][T13345] usb 2-1: Using ep0 maxpacket: 32 [ 684.531179][T13345] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 684.544799][T13345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.552847][T13345] usb 2-1: Product: syz [ 684.575319][T13345] usb 2-1: Manufacturer: syz [ 684.580310][T13345] usb 2-1: SerialNumber: syz [ 684.605358][T13345] usb 2-1: config 0 descriptor?? [ 684.632645][T13345] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 685.134935][ T5858] Bluetooth: hci2: command 0x0c1a tx timeout [ 685.611668][T20437] usb 7-1: reset high-speed USB device number 84 using dummy_hcd [ 685.704137][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.711751][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.028085][ T9] au0828: au0828: Device initialization failed. [ 686.043543][ T9] au0828: au0828: Device must be connected to a high-speed USB 2.0 port. [ 686.062946][ T9] usb 1-1: USB disconnect, device number 96 [ 686.073808][T13345] gspca_topro: reg_r err -71 [ 686.084199][T13345] gspca_topro: Sensor soi763a [ 686.122149][T13345] usb 2-1: USB disconnect, device number 97 [ 686.138925][T20487] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 686.164724][T20487] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 686.171261][T20487] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 686.196285][T20487] comedi comedi3: 8255: I/O port conflict (0xd,4) [ 686.218951][T20487] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 686.231674][T20487] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 686.259817][T20487] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 686.270669][T20487] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 686.277593][T20487] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 686.310002][T20487] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 686.463754][ T24] usb 7-1: USB disconnect, device number 84 [ 686.545034][ T9] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 686.704976][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 686.713072][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 686.727771][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 686.740013][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.755564][ T9] usb 1-1: config 0 descriptor?? [ 686.828121][T20552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.844819][T20552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.883388][T20560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.892533][T20560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.974727][ T24] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 687.064678][ T5860] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 687.100839][T20578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.113588][T20578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.128995][T20578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.143867][T20578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.155788][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 687.164854][ T24] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 687.174169][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.192420][ T24] usb 7-1: Product: syz [ 687.199842][ T24] usb 7-1: Manufacturer: syz [ 687.210353][ T24] usb 7-1: SerialNumber: syz [ 687.212947][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 687.224719][ T5858] Bluetooth: hci2: command 0x0c1a tx timeout [ 687.225227][ T24] usb 7-1: config 0 descriptor?? [ 687.236249][ T5860] usb 2-1: Using ep0 maxpacket: 32 [ 687.237325][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 687.256118][ T9] usb 1-1: USB disconnect, device number 97 [ 687.268206][ T5860] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 687.280515][ T5860] usb 2-1: config 0 has no interface number 0 [ 687.292447][ T5860] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 687.314263][ T5860] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 687.324643][ T5860] usb 2-1: config 0 interface 126 has no altsetting 0 [ 687.334827][ T5860] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 687.344019][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.353406][ T5860] usb 2-1: Product: syz [ 687.357736][ T5860] usb 2-1: Manufacturer: syz [ 687.362405][ T5860] usb 2-1: SerialNumber: syz [ 687.372255][ T5860] usb 2-1: config 0 descriptor?? [ 687.380960][T20553] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 687.388560][T20553] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 687.453431][ T24] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 687.603600][ T5860] ir_usb 2-1:0.126: IR Dongle converter detected [ 687.712617][T20611] 9pnet_virtio: no channels available for device /dev/nbd3 [ 687.802541][ T5860] usb 2-1: IRDA class descriptor not found, device not bound [ 687.868491][T20523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.882245][T20523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.901240][T20625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.917341][T20625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.156236][T20553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.182333][T20553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.265951][T20641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3154'. [ 688.744680][ T24] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 689.375212][T20734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.398793][T20734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.497092][T20646] syz.3.3155: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 689.518785][T20646] CPU: 0 UID: 0 PID: 20646 Comm: syz.3.3155 Not tainted syzkaller #0 PREEMPT(full) [ 689.518807][T20646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 689.518818][T20646] Call Trace: [ 689.518825][T20646] [ 689.518833][T20646] dump_stack_lvl+0x189/0x250 [ 689.518858][T20646] ? __pfx_dump_stack_lvl+0x10/0x10 [ 689.518880][T20646] ? __pfx__printk+0x10/0x10 [ 689.518903][T20646] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 689.518924][T20646] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 689.518950][T20646] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 689.518975][T20646] warn_alloc+0x214/0x310 [ 689.519004][T20646] ? __pfx_warn_alloc+0x10/0x10 [ 689.519033][T20646] ? __get_vm_area_node+0x28f/0x300 [ 689.519056][T20646] ? vb2_vmalloc_alloc+0xef/0x340 [ 689.519079][T20646] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 689.519129][T20646] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 689.519154][T20646] ? __kasan_kmalloc+0x93/0xb0 [ 689.519181][T20646] vmalloc_user_noprof+0xad/0xf0 [ 689.519202][T20646] ? vb2_vmalloc_alloc+0xef/0x340 [ 689.519221][T20646] vb2_vmalloc_alloc+0xef/0x340 [ 689.519240][T20646] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 689.519258][T20646] __vb2_queue_alloc+0x9c2/0x15a0 [ 689.519301][T20646] vb2_core_reqbufs+0xc31/0x1420 [ 689.519335][T20646] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 689.519351][T20646] ? vb2_verify_memory_type+0x1fc/0x570 [ 689.519371][T20646] ? vb2_reqbufs+0x3a9/0x630 [ 689.519403][T20646] v4l2_m2m_ioctl_reqbufs+0x10d/0x200 [ 689.519435][T20646] __video_do_ioctl+0xa59/0xc10 [ 689.519464][T20646] ? __pfx___video_do_ioctl+0x10/0x10 [ 689.519494][T20646] video_usercopy+0x82d/0x1450 [ 689.519523][T20646] ? __pfx___video_do_ioctl+0x10/0x10 [ 689.519546][T20646] ? __pfx_video_usercopy+0x10/0x10 [ 689.519580][T20646] ? __fget_files+0x3a0/0x420 [ 689.519601][T20646] v4l2_ioctl+0x18d/0x1e0 [ 689.519620][T20646] ? __pfx_v4l2_ioctl+0x10/0x10 [ 689.519638][T20646] __se_sys_ioctl+0xfc/0x170 [ 689.519662][T20646] do_syscall_64+0xfa/0xfa0 [ 689.519678][T20646] ? lockdep_hardirqs_on+0x9c/0x150 [ 689.519702][T20646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.519720][T20646] ? clear_bhb_loop+0x60/0xb0 [ 689.519740][T20646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.519757][T20646] RIP: 0033:0x7f97c3d8ec29 [ 689.519773][T20646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.519788][T20646] RSP: 002b:00007f97c4c98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 689.519808][T20646] RAX: ffffffffffffffda RBX: 00007f97c3fd6090 RCX: 00007f97c3d8ec29 [ 689.519820][T20646] RDX: 0000200000000240 RSI: 00000000c0145608 RDI: 000000000000000b [ 689.519831][T20646] RBP: 00007f97c3e11e41 R08: 0000000000000000 R09: 0000000000000000 [ 689.519842][T20646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.519852][T20646] R13: 00007f97c3fd6128 R14: 00007f97c3fd6090 R15: 00007ffc3d9a5578 [ 689.519885][T20646] [ 689.520005][T20646] Mem-Info: [ 689.828327][T20646] active_anon:40668 inactive_anon:0 isolated_anon:0 [ 689.828327][T20646] active_file:17270 inactive_file:40581 isolated_file:0 [ 689.828327][T20646] unevictable:17146 dirty:44 writeback:0 [ 689.828327][T20646] slab_reclaimable:12171 slab_unreclaimable:111480 [ 689.828327][T20646] mapped:45793 shmem:32789 pagetables:2117 [ 689.828327][T20646] sec_pagetables:0 bounce:0 [ 689.828327][T20646] kernel_misc_reclaimable:0 [ 689.828327][T20646] free:1213638 free_pcp:18217 free_cma:0 [ 689.874141][T20646] Node 0 active_anon:162672kB inactive_anon:0kB active_file:69076kB inactive_file:162120kB unevictable:67048kB isolated(anon):0kB isolated(file):0kB mapped:183168kB dirty:176kB writeback:0kB shmem:129620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14296kB pagetables:8332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 689.913759][ T9] usb 2-1: USB disconnect, device number 98 [ 689.919763][ T5941] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 689.992249][T20646] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 690.033244][T20646] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 690.063953][ C1] vkms_vblank_simulate: vblank timer overrun [ 690.080638][T20646] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 690.087773][T20646] Node 0 DMA32 free:948564kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB free_highatomic:0KB active_anon:168172kB inactive_anon:0kB active_file:69076kB inactive_file:162120kB unevictable:67048kB writepending:176kB zspages:12kB present:3129332kB managed:2549100kB mlocked:0kB bounce:0kB free_pcp:57996kB local_pcp:28192kB free_cma:0kB [ 690.121310][ C1] vkms_vblank_simulate: vblank timer overrun [ 690.124868][ T5941] usb 1-1: Using ep0 maxpacket: 32 [ 690.132715][T20646] lowmem_reserve[]: 0 0 0 0 0 [ 690.138614][T20646] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 690.139753][ T5941] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 690.167896][ C1] vkms_vblank_simulate: vblank timer overrun [ 690.175624][T20646] lowmem_reserve[]: 0 0 0 0 0 [ 690.189732][T20646] Node 1 Normal free:3887428kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:25436kB local_pcp:16060kB free_cma:0kB [ 690.222051][ C1] vkms_vblank_simulate: vblank timer overrun [ 690.255158][ T5941] usb 1-1: config 0 has no interface number 0 [ 690.255312][T20646] lowmem_reserve[]: 0 0 0 0 0 [ 690.262700][ T5941] usb 1-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 690.266524][T20646] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 690.308444][T20646] Node 0 DMA32: 17*4kB (E) 44*8kB (UE) 42*16kB (E) 486*32kB (UE) 208*64kB (UME) 30*128kB (UME) 27*256kB (UME) 69*512kB (UM) 34*1024kB (UME) 7*2048kB (M) 201*4096kB (UM) = 948484kB [ 690.329403][T20646] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 690.341755][T20646] Node 1 Normal: 198*4kB (UME) 46*8kB (UME) 43*16kB (UME) 244*32kB (UME) 83*64kB (UME) 22*128kB (UME) 2*256kB (ME) 3*512kB (UE) 3*1024kB (UME) 1*2048kB (U) 943*4096kB (M) = 3887480kB [ 690.362847][ T5941] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 690.363343][T20646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 690.383160][T20646] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 690.395172][T20646] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 690.399343][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.405578][T20646] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 690.430881][T20646] 109897 total pagecache pages [ 690.430909][T20646] 8 pages in swap cache [ 690.430918][T20646] Free swap = 122748kB [ 690.430928][T20646] Total swap = 124996kB [ 690.430939][T20646] 2097051 pages RAM [ 690.430947][T20646] 0 pages HighMem/MovableOnly [ 690.430956][T20646] 428070 pages reserved [ 690.430965][T20646] 0 pages cma reserved [ 690.438724][T20806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.439183][T20806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.454538][ T5941] usb 1-1: Product: syz [ 690.454558][ T5941] usb 1-1: Manufacturer: syz [ 690.454571][ T5941] usb 1-1: SerialNumber: syz [ 690.466349][ T5941] usb 1-1: config 0 descriptor?? [ 690.541169][ T5941] smsc95xx v2.0.0 [ 690.561610][ T5941] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 690.582682][ T5941] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 690.679089][T13406] usb 7-1: USB disconnect, device number 85 [ 690.730421][ T24] usb 1-1: USB disconnect, device number 98 [ 690.940019][T20832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.953730][T20832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.081561][ T9] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 691.115482][T20837] netlink: 'syz.6.3164': attribute type 1 has an invalid length. [ 691.254725][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 691.261661][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 691.271129][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 691.283743][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 691.303730][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 691.313030][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.323934][ T9] usb 2-1: Product: 㯟从ᔥᵷ弝哧阋뙊鿅串꾪ꊉﵒ뒨⇟虃棖责⚔萍줁첺煥⡚㳰騳ꌁﱝ⁳꡶批蔆☰궺ᄲ祣䋧袐⮑峐먂Ჵซ婦耼歓狚⪓呻쯑ۄ킇ꬬ粛䕫㈵逞䲀镩곀ȭ段遰⵫렂ᘟݲ䲎᜛뤞䧲혊⃠爽쾦᧝虼ꍃ뇰耸彇瓦饼춪⦱譅퐔镲뿳㧉牯䠪삖⁣컫谯䫛൷ꀘ챜밾 [ 691.358598][ T9] usb 2-1: Manufacturer:  [ 691.363185][ T9] usb 2-1: SerialNumber: syz [ 691.500639][T20864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.510250][T20864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.521579][T20864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.531453][T20864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.555037][ T5860] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 691.564623][ T24] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 691.575386][T20823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.585052][T20823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.594267][T20823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.603368][T20823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.624037][ T9] usb 2-1: 0:2 : does not exist [ 691.641450][ T9] usb 2-1: USB disconnect, device number 99 [ 691.694598][ T24] usb 7-1: device descriptor read/64, error -71 [ 691.708083][ T5860] usb 1-1: Using ep0 maxpacket: 16 [ 691.715139][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.729977][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.739983][ T5860] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 691.753078][ T5860] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 691.762236][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.773342][ T5860] usb 1-1: config 0 descriptor?? [ 691.787775][ T5860] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input64 [ 691.801501][ T5218] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 691.853089][T20352] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 691.875102][ T5218] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 691.934956][ T24] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 691.956154][ T5218] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 691.981621][T20858] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 692.015128][ T5218] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 692.033561][T20901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.042395][T20901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.054681][T20900] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 692.064668][ T24] usb 7-1: device descriptor read/64, error -71 [ 692.096170][ T5218] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 692.137407][ T5906] usb 1-1: USB disconnect, device number 99 [ 692.185872][ T24] usb usb7-port1: attempt power cycle [ 692.534593][ T24] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 692.556472][ T24] usb 7-1: device descriptor read/8, error -71 [ 692.714623][ T5906] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 692.794671][ T24] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 692.815636][ T24] usb 7-1: device descriptor read/8, error -71 [ 692.867631][ T5906] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 692.878788][ T5906] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 692.890279][ T5906] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 692.901280][ T5906] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 692.914358][ T5906] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 692.914753][ T9] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 692.931180][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.939643][ T24] usb usb7-port1: unable to enumerate USB device [ 693.064669][ T9] usb 1-1: device descriptor read/64, error -71 [ 693.155127][ T5906] ath6kl: Failed to submit usb control message: -71 [ 693.163797][ T5906] ath6kl: unable to send the bmi data to the device: -71 [ 693.171132][ T5906] ath6kl: Unable to send get target info: -71 [ 693.188031][ T5906] ath6kl: Failed to init ath6kl core: -71 [ 693.195041][ T5906] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 693.210927][ T5906] usb 2-1: USB disconnect, device number 100 [ 693.304591][ T9] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 693.434652][ T9] usb 1-1: device descriptor read/64, error -71 [ 693.545889][ T9] usb usb1-port1: attempt power cycle [ 693.885730][ T9] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 693.905219][ T9] usb 1-1: device descriptor read/8, error -71 [ 694.144596][ T9] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 694.165352][ T9] usb 1-1: device descriptor read/8, error -71 [ 694.186627][ T5906] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 694.277425][ T9] usb usb1-port1: unable to enumerate USB device [ 694.354618][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 694.361277][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.372604][ T5906] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 694.381717][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.392042][ T5906] usb 2-1: config 0 descriptor?? [ 694.402424][ T5906] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 694.545700][T20972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.557554][T20972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.569569][T20972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.578802][T20972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.585106][ T5860] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 694.754644][ T5860] usb 7-1: Using ep0 maxpacket: 32 [ 694.761275][ T5860] usb 7-1: config 1 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 694.774325][ T5860] usb 7-1: config 1 interface 0 has no altsetting 0 [ 694.785577][ T5860] usb 7-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 694.794699][ T5860] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.802732][ T5860] usb 7-1: Product: syz [ 694.807264][ T5860] usb 7-1: Manufacturer: syz [ 694.811900][ T5860] usb 7-1: SerialNumber: syz [ 695.033452][ T5860] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input65 [ 695.044268][ T5218] bcm5974 7-1:1.0: could not read from device [ 695.082308][ T5860] usb 7-1: USB disconnect, device number 90 [ 695.674155][T20998] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 695.674155][T20998] The task syz.6.3180 (20998) triggered the difference, watch for misbehavior. [ 695.706748][T20998] cgroup: Need name or subsystem set [ 695.881558][ T5906] gspca_vc032x: reg_w err -71 [ 695.890177][ T5906] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 695.904289][ T5906] usb 2-1: USB disconnect, device number 101 [ 696.372087][T21028] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 696.381129][T21028] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 696.715939][T21049] netlink: 'syz.0.3189': attribute type 10 has an invalid length. [ 696.728855][T21049] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3189'. [ 696.747335][T21030] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3186'. [ 696.757995][T21030] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 696.767701][ T9] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 696.773674][T21030] netlink: 'syz.1.3186': attribute type 1 has an invalid length. [ 696.794103][T21049] team0: Port device geneve0 added [ 696.799703][T21030] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3186'. [ 696.926777][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 696.937189][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 696.944080][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 696.965043][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.983104][ T9] usb 7-1: config 0 descriptor?? [ 697.174608][ T5906] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 697.324564][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 697.337074][ T5906] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 697.345825][ T5906] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 697.354004][ T5906] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 697.362283][ T5906] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 697.370673][ T5906] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 697.379765][ T5906] usb 1-1: config 0 has no interface number 0 [ 697.386983][ T5906] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 697.398228][ T5906] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 697.402859][T21032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.410543][ T5906] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 697.426994][ T5906] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 697.440167][ T5906] usb 1-1: config 0 interface 125 has no altsetting 2 [ 697.450400][T21032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.461291][ T5906] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 697.470763][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.484410][ T5906] usb 1-1: Product: syz [ 697.489234][ T5906] usb 1-1: Manufacturer: syz [ 697.493442][ T9] hid_parser_main: 73 callbacks suppressed [ 697.493461][ T9] logitech-djreceiver 0003:046D:C513.003D: unknown main item tag 0x0 [ 697.499215][ T5906] usb 1-1: SerialNumber: syz [ 697.499914][ T9] logitech-djreceiver 0003:046D:C513.003D: unknown main item tag 0x0 [ 697.514648][ T5860] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 697.520800][ T9] logitech-djreceiver 0003:046D:C513.003D: unknown main item tag 0x0 [ 697.535791][ T5906] usb 1-1: config 0 descriptor?? [ 697.543456][ T9] logitech-djreceiver 0003:046D:C513.003D: unknown main item tag 0x0 [ 697.556857][ T5906] usb 1-1: selecting invalid altsetting 2 [ 697.582938][ T9] logitech-djreceiver 0003:046D:C513.003D: unknown main item tag 0x0 [ 697.692597][ T24] usb 7-1: USB disconnect, device number 91 [ 697.702698][ T5860] usb 2-1: Using ep0 maxpacket: 16 [ 697.725034][ T5860] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 697.740389][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.763605][ T5860] usb 2-1: Product: syz [ 697.771011][ T5860] usb 2-1: Manufacturer: syz [ 697.776265][ T5860] usb 2-1: SerialNumber: syz [ 697.792898][ T5860] usb 2-1: config 0 descriptor?? [ 697.808220][ T5860] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 697.962605][T21106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.973788][T21106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.009072][ T5860] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 698.019761][ T5860] visor 2-1:0.0: probe with driver visor failed with error -5 [ 698.213906][ T5941] usb 2-1: USB disconnect, device number 102 [ 698.334638][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 698.545963][ T9] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 698.560881][T21131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.570717][T21131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.581587][T21134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.592865][T21134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.704593][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 698.712734][ T9] usb 7-1: config index 0 descriptor too short (expected 1332, got 266) [ 698.721142][ T9] usb 7-1: config 4 has an invalid interface number: 148 but max is 1 [ 698.729402][ T9] usb 7-1: config 4 has an invalid descriptor of length 178, skipping remainder of the config [ 698.739844][ T9] usb 7-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 698.748769][ T9] usb 7-1: config 4 has no interface number 0 [ 698.755855][ T9] usb 7-1: config 4 interface 148 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 698.769722][ T9] usb 7-1: config 4 interface 148 altsetting 9 endpoint 0x4 has an invalid bInterval 138, changing to 11 [ 698.781120][ T9] usb 7-1: config 4 interface 148 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 698.794602][ T9] usb 7-1: config 4 interface 148 has no altsetting 0 [ 698.809897][ T9] usb 7-1: New USB device found, idVendor=0499, idProduct=1028, bcdDevice=e2.f2 [ 698.821336][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.829451][ T9] usb 7-1: Product: syz [ 698.833616][ T9] usb 7-1: Manufacturer: syz [ 698.840773][ T9] usb 7-1: SerialNumber: syz [ 699.071672][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 699.093399][ T9] snd-usb-audio 7-1:4.148: probe with driver snd-usb-audio failed with error -2 [ 699.110392][ T9] usb 7-1: USB disconnect, device number 92 [ 699.143732][T20352] udevd[20352]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:4.148/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 699.464630][ T24] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 699.594661][ T24] usb 2-1: device descriptor read/64, error -71 [ 699.675109][ T5860] usb 1-1: USB disconnect, device number 104 [ 699.844617][ T24] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 699.855062][T12807] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 699.859760][T21200] netlink: 'syz.0.3209': attribute type 9 has an invalid length. [ 700.004596][ T24] usb 2-1: device descriptor read/64, error -71 [ 700.004609][T12807] usb 7-1: Using ep0 maxpacket: 16 [ 700.013343][T21179] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3206'. [ 700.101604][T12807] usb 7-1: unable to get BOS descriptor or descriptor too short [ 700.113955][T12807] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 700.122449][T12807] usb 7-1: can't read configurations, error -71 [ 700.135370][ T24] usb usb2-port1: attempt power cycle [ 700.164622][ T5860] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 700.327555][ T5860] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 700.338148][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.346969][ T5860] usb 1-1: Product: syz [ 700.351973][ T5860] usb 1-1: Manufacturer: syz [ 700.357105][ T5860] usb 1-1: SerialNumber: syz [ 700.484762][ T24] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 700.515237][ T24] usb 2-1: device descriptor read/8, error -71 [ 700.680702][T21235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.690759][T21235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.775844][ T24] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 700.795238][ T24] usb 2-1: device descriptor read/8, error -71 [ 700.904852][ T24] usb usb2-port1: unable to enumerate USB device [ 700.954739][T12807] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 701.106769][T12807] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.117850][T12807] usb 7-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 701.127737][T12807] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.138556][T12807] usb 7-1: config 0 descriptor?? [ 701.557880][T21246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.568940][T21246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.791668][ T5860] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 701.797125][T12807] usbhid 7-1:0.0: can't add hid device: -71 [ 701.814159][T12807] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 701.826312][T12807] usb 7-1: USB disconnect, device number 94 [ 702.112031][T21259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.121967][T21259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.126200][T21258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.143471][T21258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.177445][T21258] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 702.323574][T21275] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3221'. [ 702.388926][T21282] program syz.1.3223 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 702.419332][ T5860] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 702.442302][ T5860] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 702.455030][ T5860] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 702.466754][ T5860] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 702.516556][ T5860] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 702.529716][ T5860] usb 1-1: USB disconnect, device number 105 [ 702.625949][ T5906] usb 7-1: new low-speed USB device number 95 using dummy_hcd [ 702.790649][ T5906] usb 7-1: config 1 interface 0 altsetting 64 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 702.800265][T21299] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 702.803476][ T5906] usb 7-1: config 1 interface 0 has no altsetting 0 [ 702.856715][ T24] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 703.006326][T21303] netlink: 6080 bytes leftover after parsing attributes in process `syz.0.3227'. [ 703.019243][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.031433][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.042538][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 703.066824][ T24] usb 2-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 703.089026][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.132295][ T24] usb 2-1: config 0 descriptor?? [ 703.514655][T12807] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 703.580519][ T24] uclogic 0003:28BD:0074.003E: interface is invalid, ignoring [ 703.654863][T12807] usb 1-1: device descriptor read/64, error -71 [ 703.876294][T21321] input: syz0 as /devices/virtual/input/input66 [ 703.888351][T21321] tmpfs: Unknown parameter 'nr_blocjs' [ 703.896208][T12807] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 704.038397][T12807] usb 1-1: device descriptor read/64, error -71 [ 704.157807][T12807] usb usb1-port1: attempt power cycle [ 704.184198][T21335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.195419][T21335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.220065][T21335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.229859][T21335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.240501][T21335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.251111][T21335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.494765][T12807] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 704.515294][T12807] usb 1-1: device descriptor read/8, error -71 [ 704.754606][T12807] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 704.775290][T12807] usb 1-1: device descriptor read/8, error -71 [ 704.877101][T21345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.890158][T12807] usb usb1-port1: unable to enumerate USB device [ 704.892437][T21345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.392190][ T5906] usb 7-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.40 [ 705.401533][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.417553][ T5906] usb 7-1: can't set config #1, error -71 [ 705.432744][ T5906] usb 7-1: USB disconnect, device number 95 [ 705.593849][T21368] rtc_cmos 00:00: Alarms can be up to one day in the future [ 705.607169][T21367] rtc_cmos 00:00: Alarms can be up to one day in the future [ 705.627989][ T5941] usb 2-1: USB disconnect, device number 107 [ 705.780865][T21386] mkiss: ax0: crc mode is auto. [ 705.862701][ T5906] rtc_cmos 00:00: Alarms can be up to one day in the future [ 705.871293][T21392] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 705.883381][ T5906] rtc_cmos 00:00: Alarms can be up to one day in the future [ 705.901085][ T5906] rtc_cmos 00:00: Alarms can be up to one day in the future [ 705.909757][ T5906] rtc_cmos 00:00: Alarms can be up to one day in the future [ 705.913218][T21400] fuse: Unknown parameter 'gܕN2ۘ_if' [ 705.917403][ T5906] rtc rtc0: __rtc_set_alarm: err=-22 [ 706.124613][ T5941] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 706.284636][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 706.295173][ T5941] usb 2-1: config 8 has an invalid interface number: 77 but max is 1 [ 706.303528][ T5941] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 706.310745][T21411] binder: Bad value for 'max' [ 706.314255][ T5941] usb 2-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 706.330366][ T5941] usb 2-1: config 8 has no interface number 0 [ 706.337649][ T5941] usb 2-1: config 8 interface 77 altsetting 7 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 706.350222][ T5941] usb 2-1: config 8 interface 77 altsetting 7 endpoint 0x6 has an invalid bInterval 253, changing to 7 [ 706.362685][ T5941] usb 2-1: config 8 interface 77 altsetting 7 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 706.373730][ T5941] usb 2-1: config 8 interface 77 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 706.387567][ T5941] usb 2-1: config 8 interface 77 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 706.399633][ T5941] usb 2-1: config 8 interface 77 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 9 [ 706.412729][ T5941] usb 2-1: config 8 interface 77 has no altsetting 0 [ 706.421358][ T5941] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=50.bb [ 706.430468][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.439023][ T5941] usb 2-1: Product: ы [ 706.443112][ T5941] usb 2-1: Manufacturer: 鈲﫺햱㇥ꑺ⶷諥垰ᦵ࿎㔜蚨룽龾꧉㮌ं쿸Ղ⻹﯑⻤鵪鿧㨢讷藕삡샀荕譍ꇰ尕ȹ코䎱帡遅웒ㅗ귮䙃潉ꂎ⍅䙹綰臜ɘ諙꺶Ⰽ엸䲧౗렬ᦐ唉ﰷ䂬闷粄鹑㏠鱑䮚㛤᜴랓홌㜩廫鷙膈魛Ꚋ꒼ᱤ䅪ꂷ䌑ﶅ孯儬璯쳨㛁Ɑɀ劉摘鬆⭡눵뙲輒ʒᆅ蠻꟞㈅ꤔ㍔⦂ [ 706.476660][ T5941] usb 2-1: SerialNumber: syz [ 706.695110][ T5906] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 706.866151][ T5906] usb 1-1: config 4 has an invalid interface number: 18 but max is 1 [ 706.874278][ T5906] usb 1-1: config 4 has no interface number 1 [ 706.888094][ T5906] usb 1-1: config 4 interface 0 has no altsetting 0 [ 706.888755][T21392] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3240'. [ 706.904832][ T5906] usb 1-1: config 4 interface 18 has no altsetting 0 [ 706.918738][ T5941] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 706.919063][ T5906] usb 1-1: New USB device found, idVendor=1199, idProduct=9009, bcdDevice=af.f4 [ 706.946229][ T5941] dvb-usb: bulk message failed: -8 (3/0) [ 706.959120][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.968210][ T5906] usb 1-1: Product: syz [ 706.972377][ T5906] usb 1-1: Manufacturer: syz [ 706.977798][ T5906] usb 1-1: SerialNumber: syz [ 706.996846][ T5941] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 707.009421][ T5941] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 707.021566][ T5941] usb 2-1: media controller created [ 707.047982][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 707.078499][ T5941] dvb-usb: bulk message failed: -8 (6/0) [ 707.084265][ T5941] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 707.105247][ T5941] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input67 [ 707.117677][T12807] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 707.138570][ T5941] dvb-usb: schedule remote query interval to 150 msecs. [ 707.147343][ T5941] dvb-usb: bulk message failed: -8 (3/0) [ 707.176604][ T5941] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 707.209929][ T5941] usb 2-1: USB disconnect, device number 108 [ 707.218878][ T5906] usb 1-1: unknown number of interfaces: 2 [ 707.253026][ T5906] usb 1-1: USB disconnect, device number 110 [ 707.285177][T12807] usb 7-1: Using ep0 maxpacket: 32 [ 707.293492][T12807] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 707.312150][T12807] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.341759][T12807] usb 7-1: config 0 descriptor?? [ 707.362661][T12807] gspca_main: sunplus-2.14.0 probing 041e:400b [ 707.377464][ T5941] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 707.617345][T21470] syzkaller1: entered promiscuous mode [ 707.627438][T21470] syzkaller1: entered allmulticast mode [ 707.884804][ T5906] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 708.002304][T12807] gspca_sunplus: reg_r err -71 [ 708.010060][T12807] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 708.028313][T12807] usb 7-1: USB disconnect, device number 96 [ 708.044581][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 708.058355][ T5906] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.072852][ T5906] usb 2-1: config 0 interface 0 has no altsetting 0 [ 708.079993][ T5906] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 708.089480][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.108564][ T5906] usb 2-1: config 0 descriptor?? [ 708.550353][ T5906] nzxt-smart2 0003:1E71:2009.003F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 708.661532][T21486] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 708.674918][T21486] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 708.681114][T21486] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 708.705050][T21486] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 708.715259][T21486] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 708.733923][T21489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.781545][T21489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.823716][T21489] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3251'. [ 708.857259][T21489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.860111][T21489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.976550][ T5860] usb 2-1: USB disconnect, device number 109 [ 709.015454][ T5906] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 709.178193][ T5906] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 709.204536][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.212581][ T5906] usb 7-1: Product: syz [ 709.217049][ T5906] usb 7-1: Manufacturer: syz [ 709.221653][ T5906] usb 7-1: SerialNumber: syz [ 709.227312][T21540] adf_ctl_ioctl: 16 callbacks suppressed [ 709.227325][T21540] QAT: Invalid ioctl 1076925497 [ 709.489128][T21553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.500147][T21553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.826163][ T5860] usb 2-1: new low-speed USB device number 110 using dummy_hcd [ 709.934791][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 709.992007][T21574] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3266'. [ 710.003353][ T5860] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 710.011690][ T5860] usb 2-1: config 0 has no interface number 0 [ 710.027197][ T5860] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 710.039623][ T5860] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 710.055644][ T5860] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 710.072648][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.092094][ T5860] usb 2-1: config 0 descriptor?? [ 710.108897][ T5860] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 710.301013][T21562] iowarrior 2-1:0.1: Error -90 while submitting URB [ 710.308555][T21599] iowarrior 2-1:0.1: Error -90 while submitting URB [ 710.395318][T12807] usb 2-1: USB disconnect, device number 110 [ 710.484741][ T5860] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 710.531705][ T7421] Bluetooth: hci6: Frame reassembly failed (-84) [ 710.582583][T21613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.595864][T21613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.634930][ T5860] usb 1-1: device descriptor read/64, error -71 [ 710.661461][T21621] IPVS: Unknown mcast interface: syzkaller1 [ 710.674107][T21621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.687009][T21621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.735033][ T5858] Bluetooth: hci2: command 0x0c1a tx timeout [ 710.741129][ T5858] Bluetooth: hci5: command 0x0406 tx timeout [ 710.745303][T12808] Bluetooth: hci4: command 0x0405 tx timeout [ 710.751062][ T5858] Bluetooth: hci3: command 0x0c1a tx timeout [ 710.884766][ T5860] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 711.034687][ T5860] usb 1-1: device descriptor read/64, error -71 [ 711.145276][ T5860] usb usb1-port1: attempt power cycle [ 711.174670][T12807] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 711.332952][T12807] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 711.337567][T21640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.345743][T12807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 711.359923][T21640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.367490][T12807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 711.383553][T12807] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 711.399866][T12807] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 711.413242][T12807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.432796][T12807] usb 2-1: config 0 descriptor?? [ 711.440902][T21627] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 711.484695][ T5860] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 711.507950][ T5860] usb 1-1: device descriptor read/8, error -71 [ 711.744611][ T5860] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 711.765283][ T5860] usb 1-1: device descriptor read/8, error -71 [ 711.875353][T12807] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 711.878812][ T5860] usb usb1-port1: unable to enumerate USB device [ 712.062015][T21657] binder: Unknown parameter '' [ 712.429751][T21660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.448752][T21660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.574835][T21625] Bluetooth: hci6: command 0x1003 tx timeout [ 712.575274][ T52] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 712.626637][ T5906] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 712.674776][ T5906] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 712.689646][ T5906] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 712.738926][ T5906] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 712.774713][ T5906] usb 7-1: USB disconnect, device number 97 [ 713.344683][ T5906] usb 7-1: new full-speed USB device number 98 using dummy_hcd [ 713.496034][ T5906] usb 7-1: config 0 has an invalid interface number: 20 but max is 0 [ 713.504162][ T5906] usb 7-1: config 0 has no interface number 0 [ 713.510440][ T5906] usb 7-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 713.523430][ T5906] usb 7-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 713.532614][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.540692][ T5906] usb 7-1: Product: syz [ 713.544988][ T5906] usb 7-1: Manufacturer: syz [ 713.549589][ T5906] usb 7-1: SerialNumber: syz [ 713.556584][ T5906] usb 7-1: config 0 descriptor?? [ 713.562762][T21687] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 713.572004][ T5906] usb-storage 7-1:0.20: USB Mass Storage device detected [ 713.581327][ T5906] usb-storage 7-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 713.634676][T12807] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 713.784650][T12807] usb 1-1: Using ep0 maxpacket: 32 [ 713.797006][T12807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.809740][T12807] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 713.810571][T21705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.822689][T12807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.831684][T21705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.840705][T12807] usb 1-1: config 0 descriptor?? [ 713.859711][T12807] hub 1-1:0.0: USB hub found [ 713.960970][ T24] usb 2-1: USB disconnect, device number 111 [ 714.067429][T12807] hub 1-1:0.0: 1 port detected [ 714.093689][T21727] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3285'. [ 714.107501][T21727] 0{: renamed from macvtap0 (while UP) [ 714.117306][T21727] 0{: entered allmulticast mode [ 714.122382][T21727] veth0_macvtap: entered allmulticast mode [ 714.129387][T21727] A link change request failed with some changes committed already. Interface 30{ may have been left with an inconsistent configuration, please check. [ 714.271329][T21695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.288145][T21695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.293275][T21732] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3287'. [ 714.328532][T12807] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 714.343785][T12807] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 714.366676][T12807] usbhid 1-1:0.0: can't add hid device: -71 [ 714.381003][T12807] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 714.426157][T12807] usb 1-1: USB disconnect, device number 115 [ 714.477273][T21732] rtc_cmos 00:00: Alarms can be up to one day in the future [ 714.700480][T21765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.724986][T21765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.802435][T21773] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3294'. [ 714.862136][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 714.885729][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 714.892219][T21778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.893322][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 714.910640][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 714.923996][ T24] rtc rtc0: __rtc_set_alarm: err=-22 [ 714.934990][T21778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.326762][T12807] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 715.332288][T21819] syzkaller1: entered promiscuous mode [ 715.340428][T21819] syzkaller1: entered allmulticast mode [ 715.497123][T12807] usb 2-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 715.518060][T12807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.542416][T12807] usb 2-1: config 0 descriptor?? [ 715.576422][T21841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.592172][T21841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.610627][T21841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3299'. [ 715.648571][T21841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.665305][T21841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.689138][T21841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.715826][T21841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.965216][T12807] nti 0003:0757:0A00.0041: unknown main item tag 0x0 [ 715.972048][T12807] nti 0003:0757:0A00.0041: unknown main item tag 0x0 [ 715.979158][T12807] nti 0003:0757:0A00.0041: unknown main item tag 0x0 [ 715.986108][T12807] nti 0003:0757:0A00.0041: unknown main item tag 0x0 [ 715.992862][T12807] nti 0003:0757:0A00.0041: unknown main item tag 0x0 [ 716.004271][ T5906] scsi host1: usb-storage 7-1:0.20 [ 716.039094][T12807] nti 0003:0757:0A00.0041: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.1-1/input0 [ 716.058054][ T5906] usb 7-1: USB disconnect, device number 98 [ 716.175100][ T24] usb 2-1: USB disconnect, device number 112 [ 716.764884][T12807] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 716.926769][T12807] usb 1-1: config 8 has an invalid interface number: 64 but max is 1 [ 716.935004][T12807] usb 1-1: config 8 has an invalid interface number: 162 but max is 1 [ 716.944333][T12807] usb 1-1: config 8 has no interface number 0 [ 716.950491][T12807] usb 1-1: config 8 has no interface number 1 [ 716.954612][ T24] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 716.956770][T12807] usb 1-1: config 8 interface 64 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 716.976373][T12807] usb 1-1: config 8 interface 64 altsetting 129 endpoint 0xB has invalid maxpacket 6014, setting to 64 [ 716.987476][T12807] usb 1-1: config 8 interface 64 altsetting 129 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 716.999162][T12807] usb 1-1: config 8 interface 64 altsetting 129 bulk endpoint 0x2 has invalid maxpacket 1024 [ 717.019041][T12807] usb 1-1: config 8 interface 64 has no altsetting 0 [ 717.025813][T12807] usb 1-1: config 8 interface 162 has no altsetting 0 [ 717.035370][T12807] usb 1-1: New USB device found, idVendor=12d1, idProduct=04ff, bcdDevice=22.d0 [ 717.046300][T12807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.054330][T12807] usb 1-1: Product: syz [ 717.060204][T12807] usb 1-1: Manufacturer: ᐁ [ 717.064913][T12807] usb 1-1: SerialNumber: syz [ 717.065800][T21946] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3304'. [ 717.074741][T21936] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 717.084553][T21946] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3304'. [ 717.124637][ T24] usb 2-1: device descriptor read/64, error -71 [ 717.293781][T21936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.302942][T21936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.316344][T12807] option 1-1:8.64: GSM modem (1-port) converter detected [ 717.334365][T12807] usb 1-1: USB disconnect, device number 116 [ 717.347432][T12807] option 1-1:8.64: device disconnected [ 717.375601][ T24] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 717.404627][ T5906] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 717.504626][ T24] usb 2-1: device descriptor read/64, error -71 [ 717.534725][ T5906] usb 7-1: device descriptor read/64, error -71 [ 717.614983][ T24] usb usb2-port1: attempt power cycle [ 717.774733][ T5906] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 717.904635][ T5906] usb 7-1: device descriptor read/64, error -71 [ 717.954680][ T24] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 717.985685][ T24] usb 2-1: device descriptor read/8, error -71 [ 718.004207][T21981] comedi comedi0: Minor 47 could not be opened [ 718.015510][ T5906] usb usb7-port1: attempt power cycle [ 718.224607][ T24] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 718.245043][ T24] usb 2-1: device descriptor read/8, error -71 [ 718.354852][ T24] usb usb2-port1: unable to enumerate USB device [ 718.364601][ T5906] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 718.386139][ T5906] usb 7-1: device descriptor read/8, error -71 [ 718.634751][ T5906] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 718.665184][ T5906] usb 7-1: device descriptor read/8, error -71 [ 718.775234][ T5906] usb usb7-port1: unable to enumerate USB device [ 719.032517][T22000] netlink: 352 bytes leftover after parsing attributes in process `syz.3.3310'. [ 719.042624][T22000] netlink: 352 bytes leftover after parsing attributes in process `syz.3.3310'. [ 719.336296][ T5906] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 719.497943][ T5906] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 719.506974][ T5906] usb 1-1: config 0 has no interface number 0 [ 719.519956][ T5906] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 719.529319][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.537619][ T5906] usb 1-1: Product: syz [ 719.541795][ T5906] usb 1-1: Manufacturer: syz [ 719.548787][ T5906] usb 1-1: SerialNumber: syz [ 719.565555][ T5906] usb 1-1: config 0 descriptor?? [ 719.589670][T22040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.600530][T22040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.632148][T22040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.642765][T22040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.977310][ T5906] usb 1-1: Firmware: major: 0, minor: 84, hardware type: UNKNOWN (128) [ 720.178582][ T5906] usb 1-1: failed to fetch extended address, random address set [ 720.197071][ T5906] usb 1-1: atusb_probe: initialization failed, error = -524 [ 720.205898][ T5906] atusb 1-1:0.128: probe with driver atusb failed with error -524 [ 720.223535][ T5906] usb 1-1: USB disconnect, device number 117 [ 720.367477][T22083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.378328][T22083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.474657][T13345] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 720.564622][ T24] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 720.629973][T13345] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 720.639762][T13345] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.647832][T13345] usb 7-1: Product: syz [ 720.651998][T13345] usb 7-1: Manufacturer: syz [ 720.656742][T13345] usb 7-1: SerialNumber: syz [ 720.664449][T13345] usb 7-1: config 0 descriptor?? [ 720.716080][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 720.723469][ T24] usb 2-1: config 0 has an invalid interface number: 142 but max is 0 [ 720.733132][ T24] usb 2-1: config 0 has no interface number 0 [ 720.742522][ T24] usb 2-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=a0.f1 [ 720.756450][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.764883][ T24] usb 2-1: Product: syz [ 720.769138][ T24] usb 2-1: Manufacturer: syz [ 720.777734][ T24] usb 2-1: SerialNumber: syz [ 720.785491][ T24] usb 2-1: config 0 descriptor?? [ 720.874442][T13345] usb 7-1: ignoring: probably an ADSL modem [ 721.016222][T12807] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 721.020060][ T24] uvcvideo 2-1:0.142: Found UVC 0.00 device syz (1bcf:0b40) [ 721.034208][ T24] uvcvideo 2-1:0.142: Forcing UVC version to 1.0a [ 721.040795][ T24] uvcvideo 2-1:0.142: No valid video chain found. [ 721.050744][ T24] usb 2-1: USB disconnect, device number 117 [ 721.179188][T12807] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 721.188880][T12807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.197227][T12807] usb 1-1: Product: syz [ 721.201412][T12807] usb 1-1: Manufacturer: syz [ 721.207233][T12807] usb 1-1: SerialNumber: syz [ 721.278501][T13345] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 721.302870][T13345] usb 7-1: USB disconnect, device number 103 [ 721.434637][ T24] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 721.586187][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 7: 34, using maximum allowed: 30 [ 721.597065][ T24] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 721.608277][ T24] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 721.621248][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 721.627972][ T24] usb 2-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 721.637159][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.648526][ T24] usb 2-1: config 0 descriptor?? [ 721.822340][T22130] netlink: 300 bytes leftover after parsing attributes in process `syz.6.3328'. [ 721.834001][T22130] unsupported nlmsg_type 40 [ 721.845421][T22130] netlink: 'syz.6.3328': attribute type 1 has an invalid length. [ 721.853283][T22130] netlink: 216 bytes leftover after parsing attributes in process `syz.6.3328'. [ 721.871961][T22130] netlink: 'syz.6.3328': attribute type 21 has an invalid length. [ 721.941840][ T30] kauditd_printk_skb: 865 callbacks suppressed [ 721.941869][ T30] audit: type=1326 audit(2000000035.549:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22131 comm="syz.6.3329" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f522998ec29 code=0x0 [ 722.070947][ T24] wacom 0003:056A:0094.0042: Using device in hidraw-only mode [ 722.080431][ T24] wacom 0003:056A:0094.0042: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.1-1/input0 [ 722.207788][T22145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.217882][T22145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.267217][T22109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.276138][T22109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.284595][T13345] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 722.304364][ T24] usb 2-1: USB disconnect, device number 118 [ 722.354369][T22164] netlink: 257 bytes leftover after parsing attributes in process `syz.1.3331'. [ 722.447677][T13345] usb 7-1: config 7 descriptor has 1 excess byte, ignoring [ 722.455230][T13345] usb 7-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 722.466928][T13345] usb 7-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 722.476026][T13345] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.484066][T13345] usb 7-1: Product: syz [ 722.488620][T13345] usb 7-1: Manufacturer: syz [ 722.493225][T13345] usb 7-1: SerialNumber: syz [ 722.506172][T13345] rndis_host 7-1:7.0: skipping garbage [ 722.511681][T13345] usb 7-1: bad CDC descriptors [ 722.517763][T13345] option 7-1:7.0: GSM modem (1-port) converter detected [ 722.636499][T12807] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 722.694670][ T24] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 722.844649][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 722.852551][T22089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.855305][ T24] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 722.862509][T22089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.871216][ T24] usb 2-1: can't read configurations, error -22 [ 722.940195][T22180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3333'. [ 723.014705][ T24] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 723.105839][T22189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.116789][T22189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.127105][T22189] program syz.3.3335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 723.132833][T22191] program syz.3.3335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 723.184576][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 723.191959][ T24] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 723.200183][ T24] usb 2-1: can't read configurations, error -22 [ 723.206918][ T24] usb usb2-port1: attempt power cycle [ 723.393428][T12807] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 723.416935][T12807] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 723.429128][T12807] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 723.439959][T12807] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 723.476198][T12807] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 723.499211][T12807] usb 1-1: USB disconnect, device number 118 [ 723.544724][ T24] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 723.575357][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 723.582391][ T24] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 723.591088][ T24] usb 2-1: can't read configurations, error -22 [ 723.724678][ T24] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 723.746141][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 723.753101][ T24] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 723.761140][ T24] usb 2-1: can't read configurations, error -22 [ 723.767713][ T24] usb usb2-port1: unable to enumerate USB device [ 723.844660][T12807] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 723.880305][T22216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.891104][T22216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.994687][T12807] usb 1-1: Using ep0 maxpacket: 32 [ 724.001980][T12807] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 724.011398][T12807] usb 1-1: config 0 has no interface number 0 [ 724.017663][T12807] usb 1-1: config 0 interface 2 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 724.028751][T12807] usb 1-1: config 0 interface 2 has no altsetting 0 [ 724.037428][T12807] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 724.046636][T12807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.054703][T12807] usb 1-1: Product: syz [ 724.058862][T12807] usb 1-1: Manufacturer: syz [ 724.063540][T12807] usb 1-1: SerialNumber: syz [ 724.070451][T12807] usb 1-1: config 0 descriptor?? [ 724.279259][T12807] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 724.289599][T12807] usb 1-1: invalid MIDI in EP 0 [ 724.329291][T12807] snd-usb-audio 1-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 724.343287][T12807] usb 1-1: USB disconnect, device number 119 [ 724.363027][T20386] udevd[20386]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 724.977544][T12807] usb 7-1: USB disconnect, device number 104 [ 724.989564][T12807] option 7-1:7.0: device disconnected [ 725.414619][T12807] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 725.437633][ T43] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 725.564800][T12807] usb 7-1: Using ep0 maxpacket: 32 [ 725.572384][T12807] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.585425][T12807] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 725.594573][T12807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.602566][T12807] usb 7-1: Product: syz [ 725.607072][T12807] usb 7-1: Manufacturer: syz [ 725.611673][T12807] usb 7-1: SerialNumber: syz [ 725.614582][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 725.619747][T12807] usb 7-1: config 0 descriptor?? [ 725.630476][ T43] usb 1-1: config 3 has an invalid interface number: 66 but max is 3 [ 725.631498][T12807] usb 7-1: bad CDC descriptors [ 725.639962][ T43] usb 1-1: config 3 has an invalid interface number: 25 but max is 3 [ 725.646593][T12807] usb 7-1: unsupported MDLM descriptors [ 725.652689][ T43] usb 1-1: config 3 has an invalid interface number: 70 but max is 3 [ 725.668286][ T43] usb 1-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 725.689533][ T43] usb 1-1: config 3 has an invalid interface number: 47 but max is 3 [ 725.699396][ T43] usb 1-1: config 3 has no interface number 0 [ 725.705810][ T43] usb 1-1: config 3 has no interface number 1 [ 725.712027][ T43] usb 1-1: config 3 has no interface number 2 [ 725.718664][ T43] usb 1-1: config 3 has no interface number 3 [ 725.724954][ T43] usb 1-1: config 3 interface 66 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 725.736021][ T43] usb 1-1: config 3 interface 66 altsetting 4 endpoint 0xD has invalid maxpacket 104, setting to 64 [ 725.747084][ T43] usb 1-1: config 3 interface 66 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 725.757924][ T43] usb 1-1: config 3 interface 66 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 725.768856][ T43] usb 1-1: config 3 interface 66 altsetting 4 endpoint 0x4 has an invalid bInterval 63, changing to 7 [ 725.780055][ T43] usb 1-1: config 3 interface 66 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 725.790821][ T43] usb 1-1: config 3 interface 66 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 725.801513][ T43] usb 1-1: config 3 interface 66 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 725.812192][ T43] usb 1-1: config 3 interface 66 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 725.822969][ T43] usb 1-1: config 3 interface 66 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 725.833696][ T43] usb 1-1: config 3 interface 25 altsetting 127 has a duplicate endpoint with address 0x3, skipping [ 725.834608][T12807] usb 7-1: USB disconnect, device number 105 [ 725.844533][ T43] usb 1-1: config 3 interface 70 altsetting 11 has a duplicate endpoint with address 0xB, skipping [ 725.844561][ T43] usb 1-1: config 3 interface 70 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 725.844580][ T43] usb 1-1: config 3 interface 70 altsetting 11 has a duplicate endpoint with address 0xD, skipping [ 725.844599][ T43] usb 1-1: config 3 interface 70 altsetting 11 has a duplicate endpoint with address 0x6, skipping [ 725.844618][ T43] usb 1-1: config 3 interface 70 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 725.844640][ T43] usb 1-1: config 3 interface 70 altsetting 11 has a duplicate endpoint with address 0x4, skipping [ 725.844661][ T43] usb 1-1: config 3 interface 70 altsetting 11 endpoint 0x5 has an invalid bInterval 79, changing to 7 [ 725.844683][ T43] usb 1-1: config 3 interface 70 altsetting 11 endpoint 0x5 has invalid wMaxPacketSize 0 [ 725.904644][ T5941] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 725.915013][ T43] usb 1-1: config 3 interface 47 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 725.915042][ T43] usb 1-1: config 3 interface 47 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 725.969565][ T43] usb 1-1: config 3 interface 47 altsetting 4 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 725.980696][ T43] usb 1-1: config 3 interface 47 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 725.991701][ T43] usb 1-1: config 3 interface 47 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 726.002693][ T43] usb 1-1: config 3 interface 47 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 726.017566][ T43] usb 1-1: config 3 interface 47 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 726.017766][T22305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.037943][T22304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.039625][T22305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.050918][T22304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.063190][ T43] usb 1-1: config 3 interface 66 has no altsetting 0 [ 726.070203][ T43] usb 1-1: config 3 interface 25 has no altsetting 0 [ 726.078519][ T43] usb 1-1: config 3 interface 70 has no altsetting 0 [ 726.086603][ T43] usb 1-1: config 3 interface 47 has no altsetting 0 [ 726.098105][ T43] usb 1-1: New USB device found, idVendor=1576, idProduct=03b1, bcdDevice=c8.ef [ 726.099682][T22304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.114600][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.123928][ T5941] usb 2-1: Using ep0 maxpacket: 8 [ 726.126762][ T43] usb 1-1: Product: syz [ 726.130956][ T5941] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.133140][T22305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.143726][ T5941] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 726.152319][ T43] usb 1-1: Manufacturer: Ї [ 726.165465][T22304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.166694][ T43] usb 1-1: SerialNumber: syz [ 726.173924][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.179180][T22305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.204975][ T5941] usb 2-1: config 0 descriptor?? [ 726.216604][ T5941] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 726.236253][T22304] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 726.456532][ T43] usb 1-1: USB disconnect, device number 120 [ 726.621908][ T5941] gspca_vc032x: reg_w err -71 [ 726.629332][ T5941] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 726.640668][ T5941] usb 2-1: USB disconnect, device number 123 [ 726.714616][T12807] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 726.854651][T12807] usb 7-1: device descriptor read/64, error -71 [ 726.991992][T22358] No control pipe specified [ 727.018242][T22358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.027287][T22358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.058366][T22363] blk_print_req_error: 138 callbacks suppressed [ 727.058378][T22363] I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 727.076334][T22363] I/O error, dev loop0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 727.088923][T22363] Mount JFS Failure: -5 [ 727.093810][T22363] jfs_mount failed w/return code = -5 [ 727.094619][T12807] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 727.109298][T22360] I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 727.120913][T22360] I/O error, dev loop0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 727.130746][T22360] Mount JFS Failure: -5 [ 727.135260][T22360] jfs_mount failed w/return code = -5 [ 727.215918][T22367] netlink: 'syz.0.3354': attribute type 1 has an invalid length. [ 727.218569][T22371] netlink: 'syz.1.3356': attribute type 2 has an invalid length. [ 727.223806][T22367] netlink: 'syz.0.3354': attribute type 1 has an invalid length. [ 727.239462][T22367] netlink: 'syz.0.3354': attribute type 1 has an invalid length. [ 727.247331][T12807] usb 7-1: device descriptor read/64, error -71 [ 727.365223][T12807] usb usb7-port1: attempt power cycle [ 727.444790][T22387] bond0: mtu less than device minimum [ 727.725373][T12807] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 727.745821][T12807] usb 7-1: device descriptor read/8, error -71 [ 727.762907][T22406] NILFS (nbd3): device size too small [ 727.774798][ T43] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 727.863658][T22410] devtmpfs: Unknown parameter 'nos' [ 727.905437][T22415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.914353][T22415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.926704][T13345] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 727.934626][ T43] usb 1-1: device descriptor read/64, error -71 [ 727.985267][T12807] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 728.007405][T12807] usb 7-1: device descriptor read/8, error -71 [ 728.088016][T13345] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 728.097482][T13345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.105772][T13345] usb 2-1: Product: syz [ 728.109940][T13345] usb 2-1: Manufacturer: syz [ 728.114757][T13345] usb 2-1: SerialNumber: syz [ 728.121335][T13345] usb 2-1: config 0 descriptor?? [ 728.126524][T12807] usb usb7-port1: unable to enumerate USB device [ 728.133933][T13345] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 728.184607][ T43] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 728.324661][ T43] usb 1-1: device descriptor read/64, error -71 [ 728.339550][T22399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.349142][T22399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.359271][T22399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.369128][T22399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.445140][ T43] usb usb1-port1: attempt power cycle [ 728.816503][ T43] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 728.845282][ T43] usb 1-1: device descriptor read/8, error -71 [ 729.084650][ T43] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 729.105255][ T43] usb 1-1: device descriptor read/8, error -71 [ 729.183618][T13345] gspca_sunplus: reg_w_riv err -71 [ 729.195619][T13345] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 729.211046][T13345] usb 2-1: USB disconnect, device number 124 [ 729.218671][ T43] usb usb1-port1: unable to enumerate USB device [ 729.351554][T22441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.361701][T22441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.517695][ T30] audit: type=1804 audit(2000000043.129:991): pid=22450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3371" name="/newroot/432/cgroup.controllers" dev="tmpfs" ino=2288 res=1 errno=0 [ 729.542686][ T30] audit: type=1800 audit(2000000043.129:992): pid=22450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3371" name="cgroup.controllers" dev="tmpfs" ino=2288 res=0 errno=0 [ 729.564495][ C1] vkms_vblank_simulate: vblank timer overrun [ 729.926873][T22476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.934092][T22474] netdevsim netdevsim6: Direct firmware load for .. failed with error -2 [ 729.947779][T22476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.948706][T22474] netdevsim netdevsim6: Falling back to sysfs fallback for: .. [ 730.009502][ T43] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 730.144631][ T43] usb 2-1: device descriptor read/64, error -71 [ 730.384630][ T43] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 730.483538][T22488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.493142][T22488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.525242][ T43] usb 2-1: device descriptor read/64, error -71 [ 730.635458][ T43] usb usb2-port1: attempt power cycle [ 730.876985][T22500] xt_l2tp: wrong L2TP version: 0 [ 730.944685][T13345] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 730.974881][ T43] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 730.995998][ T43] usb 2-1: device descriptor read/8, error -71 [ 731.094594][T13345] usb 1-1: Using ep0 maxpacket: 32 [ 731.112518][T13345] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.124015][T13345] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 731.144912][T13345] usb 1-1: config 0 interface 0 has no altsetting 0 [ 731.152095][T13345] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 731.161859][T13345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.195814][T13345] usb 1-1: config 0 descriptor?? [ 731.234934][ T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 731.275354][ T43] usb 2-1: device descriptor read/8, error -71 [ 731.385697][ T43] usb usb2-port1: unable to enumerate USB device [ 731.524905][ T5941] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 731.617315][T13345] hid-thrustmaster 0003:044F:B65D.0043: unbalanced collection at end of report description [ 731.628409][T13345] hid-thrustmaster 0003:044F:B65D.0043: parse failed with error -22 [ 731.637231][T13345] hid-thrustmaster 0003:044F:B65D.0043: probe with driver hid-thrustmaster failed with error -22 [ 731.674635][ T5941] usb 7-1: Using ep0 maxpacket: 32 [ 731.681374][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.694316][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.704220][ T5941] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 731.713478][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.723968][ T5941] usb 7-1: config 0 descriptor?? [ 731.732246][ T5941] hub 7-1:0.0: USB hub found [ 731.819045][T12807] usb 1-1: USB disconnect, device number 125 [ 731.924369][T22540] block nbd3: Attempted send on invalid socket [ 731.931326][ T5941] hub 7-1:0.0: config failed, can't read hub descriptor (err -90) [ 731.940245][T22540] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 731.954435][T22540] MINIX-fs: unable to read superblock [ 731.998437][T22543] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3391'. [ 732.008060][T22543] openvswitch: netlink: Message has 7 unknown bytes. [ 732.123556][T22548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.175079][ T5941] hid-generic 0003:046D:C31C.0044: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0 [ 732.191782][T22548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.217959][T22563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.229310][T22563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.241382][T22563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.284698][T22563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.296468][T22563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.316724][T22563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.328688][T22563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.362548][T22563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.379390][ T9] usb 7-1: USB disconnect, device number 110 [ 732.397275][T22563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.426363][T22563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.510550][T22596] kvm: apic: phys broadcast and lowest prio [ 732.551317][T22604] sg_write: data in/out 814613004/4050 bytes for SCSI command 0x30-- guessing data in; [ 732.551317][T22604] program syz.0.3398 not setting count and/or reply_len properly [ 732.551671][T22605] sg_write: data in/out 814613004/4050 bytes for SCSI command 0x30-- guessing data in; [ 732.551671][T22605] program syz.0.3398 not setting count and/or reply_len properly [ 732.616573][T22607] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3399'. [ 732.739791][T22612] netlink: 'syz.0.3400': attribute type 3 has an invalid length. [ 732.748247][T22612] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3400'. [ 732.757422][ T9] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 732.861416][T22623] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3403'. [ 732.897237][ T9] usb 7-1: device descriptor read/64, error -71 [ 732.942491][T22628] netlink: 'syz.0.3405': attribute type 11 has an invalid length. [ 733.004969][T22636] No control pipe specified [ 733.135275][ T9] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 733.194664][ T43] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 733.263140][T22648] netlink: 'syz.3.3409': attribute type 46 has an invalid length. [ 733.281317][ T9] usb 7-1: device descriptor read/64, error -71 [ 733.326353][T13345] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 733.338153][T22648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3409'. [ 733.358837][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 733.369364][ T43] usb 1-1: not running at top speed; connect to a high speed hub [ 733.379320][ T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 733.390699][ T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 733.395065][ T9] usb usb7-port1: attempt power cycle [ 733.404233][ T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 733.417272][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 733.425606][ T43] usb 1-1: Product: syz [ 733.429804][ T43] usb 1-1: Manufacturer: syz [ 733.434373][ T43] usb 1-1: SerialNumber: syz [ 733.442471][T22628] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 733.506223][T13345] usb 2-1: config 1 has too many interfaces: 235, using maximum allowed: 32 [ 733.515366][T13345] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 733.525693][T13345] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 235 [ 733.535182][T13345] usb 2-1: config 1 has no interface number 0 [ 733.541366][T13345] usb 2-1: config 1 has no interface number 1 [ 733.547669][T13345] usb 2-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 733.560801][T13345] usb 2-1: too many endpoints for config 1 interface 2 altsetting 255: 52, using maximum allowed: 30 [ 733.571753][T13345] usb 2-1: config 1 interface 2 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 733.584985][T13345] usb 2-1: config 1 interface 105 has no altsetting 0 [ 733.591775][T13345] usb 2-1: config 1 interface 2 has no altsetting 0 [ 733.601537][T13345] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 733.610682][T13345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.618813][T13345] usb 2-1: Product: syz [ 733.622993][T13345] usb 2-1: Manufacturer: syz [ 733.627678][T13345] usb 2-1: SerialNumber: syz [ 733.656477][ T43] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 733.670285][ T43] usb 1-1: USB disconnect, device number 126 [ 733.744887][ T9] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 733.766233][ T9] usb 7-1: device descriptor read/8, error -71 [ 733.839827][T22641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.849197][T22641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.865315][T13345] aqc111 2-1:1.105: probe with driver aqc111 failed with error -22 [ 733.991600][T22674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.000534][T22674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.014834][ T9] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 734.040556][ T9] usb 7-1: device descriptor read/8, error -71 [ 734.078530][T13345] usb 2-1: USB disconnect, device number 3 [ 734.155561][ T9] usb usb7-port1: unable to enumerate USB device [ 734.434567][ T5860] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 734.597645][ T5860] usb 1-1: config 0 has no interfaces? [ 734.611208][ T5860] usb 1-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 734.620632][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 734.632878][ T5860] usb 1-1: SerialNumber: syz [ 734.639429][T22694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.652707][ T5860] usb 1-1: config 0 descriptor?? [ 734.652746][T22694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.869019][ T9] usb 1-1: USB disconnect, device number 127 [ 734.934679][T12807] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 735.084952][T12807] usb 2-1: Using ep0 maxpacket: 8 [ 735.094141][T12807] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 735.103315][T12807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.111357][T12807] usb 2-1: Product: syz [ 735.115609][T12807] usb 2-1: Manufacturer: syz [ 735.120199][T12807] usb 2-1: SerialNumber: syz [ 735.127599][T12807] usb 2-1: config 0 descriptor?? [ 735.333903][T12807] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 735.434184][T22722] fuse: Bad value for 'group_id' [ 735.441801][T22722] fuse: Bad value for 'group_id' [ 735.448408][T22722] fuse: Unknown parameter 'i_ThW4PA(QkgF\8@ܦf9Ҿ%2]r+[AE'S]r{6 RFUZsBm۶K aR TYZ B[o' [ 735.753431][T22702] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3414'. [ 735.779425][ T1118] wlan1: Trigger new scan to find an IBSS to join [ 735.799452][T12807] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 735.832003][T22743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.838222][ T5941] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 735.855138][T12807] usb 2-1: USB disconnect, device number 4 [ 735.869478][T22743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.014589][ T5941] usb 1-1: Using ep0 maxpacket: 8 [ 736.025707][ T5941] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 736.035457][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.043532][ T5941] usb 1-1: Product: syz [ 736.048444][ T5941] usb 1-1: Manufacturer: syz [ 736.053111][ T5941] usb 1-1: SerialNumber: syz [ 736.063680][ T5941] usb 1-1: config 0 descriptor?? [ 736.076962][ T5941] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 736.234649][T12807] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 736.279386][T22730] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3418'. [ 736.327238][T22769] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3424'. [ 736.337413][T22769] comedi comedi3: comedi_config --init_data is deprecated [ 736.345467][T22771] comedi comedi3: comedi_test: 20263 microvolt, 3 microsecond waveform attached [ 736.386120][T12807] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.398762][T12807] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 736.410958][T12807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.430325][T12807] usb 2-1: config 0 descriptor?? [ 736.450193][T12807] pwc: Askey VC010 type 2 USB webcam detected. [ 736.572982][T22786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.588185][T22786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.862628][T12807] pwc: recv_control_msg error -32 req 02 val 2b00 [ 737.073652][T12807] pwc: recv_control_msg error -71 req 02 val 2c00 [ 737.088962][T12807] pwc: recv_control_msg error -71 req 04 val 1000 [ 737.097441][T12807] pwc: recv_control_msg error -71 req 04 val 1300 [ 737.104895][T12807] pwc: recv_control_msg error -71 req 04 val 1400 [ 737.114302][T12807] pwc: recv_control_msg error -71 req 02 val 2000 [ 737.123767][T12807] pwc: recv_control_msg error -71 req 02 val 2100 [ 737.131158][T12807] pwc: recv_control_msg error -71 req 04 val 1500 [ 737.142150][T12807] pwc: recv_control_msg error -71 req 02 val 2500 [ 737.161056][ T5941] usb 1-1: USB disconnect, device number 2 [ 737.180455][T12807] pwc: recv_control_msg error -71 req 02 val 2400 [ 737.196592][T12807] pwc: recv_control_msg error -71 req 02 val 2600 [ 737.209881][T12807] pwc: recv_control_msg error -71 req 02 val 2900 [ 737.221216][T12807] pwc: recv_control_msg error -71 req 02 val 2800 [ 737.229928][T12807] pwc: recv_control_msg error -71 req 04 val 1100 [ 737.237165][T12807] pwc: recv_control_msg error -71 req 04 val 1200 [ 737.260855][T12807] pwc: Registered as video103. [ 737.282204][T12807] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input69 [ 737.337187][T12807] usb 2-1: USB disconnect, device number 5 [ 737.375733][T22829] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3428'. [ 737.397458][T22829] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3428'. [ 737.423912][T22832] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3429'. [ 737.468904][T22832] netlink: 'syz.6.3429': attribute type 10 has an invalid length. [ 737.509107][T22832] veth0_vlan: left promiscuous mode [ 737.521619][T22832] veth0_vlan: entered promiscuous mode [ 737.530299][T22832] team0: Device veth0_vlan failed to register rx_handler [ 737.945985][ T5860] usb 7-1: new low-speed USB device number 115 using dummy_hcd [ 738.239872][ T5860] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 738.249305][T22898] input: syz1 as /devices/virtual/input/input70 [ 738.284259][T22900] netlink: 'syz.1.3438': attribute type 2 has an invalid length. [ 738.292341][T22900] netlink: 'syz.1.3438': attribute type 8 has an invalid length. [ 738.293754][ T5860] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.300196][T22900] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3438'. [ 738.324184][ T5860] usb 7-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 738.324212][ T5860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.356259][ T5860] usb 7-1: config 0 descriptor?? [ 738.374597][T13345] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 738.571121][T13345] usb 1-1: not running at top speed; connect to a high speed hub [ 738.584927][T13345] usb 1-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 738.584996][T13345] usb 1-1: config 1 interface 0 has no altsetting 0 [ 738.624647][T13345] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 738.661458][T13345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.694529][T13345] usb 1-1: Product: Ტ筽⹏ᠿ▵頹実㷭腌憮ぅྯᮙᐢز㺱櫡暳䤠휜ᔰⲍꉻ淗蟊睟 [ 738.713977][T13345] usb 1-1: Manufacturer: ࠁ [ 738.734775][T13345] usb 1-1: SerialNumber: ࡃ [ 738.739654][ T7421] wlan1: Trigger new scan to find an IBSS to join [ 738.846694][ T5860] betop 0003:8380:1850.0045: item fetching failed at offset 0/2 [ 738.855433][ T5860] betop 0003:8380:1850.0045: parse failed [ 738.864374][ T5860] betop 0003:8380:1850.0045: probe with driver betop failed with error -22 [ 738.879263][T22944] netlink: 'syz.3.3440': attribute type 83 has an invalid length. [ 738.973512][T22889] tmpfs: Bad value for 'mpol' [ 739.026986][T12807] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 739.074778][T13345] usbhid 1-1:1.0: can't add hid device: -71 [ 739.080827][T13345] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 739.091815][ T5941] usb 7-1: USB disconnect, device number 115 [ 739.122434][T13345] usb 1-1: USB disconnect, device number 3 [ 739.194633][T12807] usb 2-1: Using ep0 maxpacket: 8 [ 739.202356][T12807] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.214171][T12807] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.225861][T12807] usb 2-1: config 0 interface 0 has no altsetting 0 [ 739.232491][T12807] usb 2-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 739.242339][T12807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.265274][T12807] usb 2-1: config 0 descriptor?? [ 739.679749][T12807] ntrig 0003:1B96:0004.0046: unknown main item tag 0x0 [ 739.696149][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.704309][T12807] ntrig 0003:1B96:0004.0046: unknown main item tag 0x0 [ 739.720889][T12807] ntrig 0003:1B96:0004.0046: unknown main item tag 0x0 [ 739.728618][T12807] ntrig 0003:1B96:0004.0046: unknown main item tag 0x0 [ 739.736713][T12807] ntrig 0003:1B96:0004.0046: unknown main item tag 0x0 [ 739.751443][T12807] ntrig 0003:1B96:0004.0046: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.1-1/input0 [ 739.994779][T13345] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 740.091981][ T5860] usb 2-1: USB disconnect, device number 6 [ 740.135274][T13345] usb 7-1: device descriptor read/64, error -71 [ 740.384641][T13345] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 740.514674][T13345] usb 7-1: device descriptor read/64, error -71 [ 740.567210][T23013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.577052][T23013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.626006][T13345] usb usb7-port1: attempt power cycle [ 740.794851][T12807] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 740.934658][T12807] usb 1-1: device descriptor read/64, error -71 [ 740.974609][T13345] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 741.005261][T13345] usb 7-1: device descriptor read/8, error -71 [ 741.174710][T12807] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 741.254572][T13345] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 741.275171][T13345] usb 7-1: device descriptor read/8, error -71 [ 741.314736][T12807] usb 1-1: device descriptor read/64, error -71 [ 741.438733][T12807] usb usb1-port1: attempt power cycle [ 741.465061][T13345] usb usb7-port1: unable to enumerate USB device [ 741.784722][T12807] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 741.805279][T12807] usb 1-1: device descriptor read/8, error -71 [ 742.044752][T12807] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 742.065223][T12807] usb 1-1: device descriptor read/8, error -71 [ 742.179405][T12807] usb usb1-port1: unable to enumerate USB device [ 742.495666][T23032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.505550][T23032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.789247][T23040] tmpfs: Bad value for 'mpol' [ 742.824052][T23044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.836751][T23044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.196768][T13345] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 743.344684][T13345] usb 7-1: device descriptor read/64, error -71 [ 743.584938][T13345] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 743.714704][T13345] usb 7-1: device descriptor read/64, error -71 [ 743.807650][T23082] netlink: 'syz.3.3455': attribute type 21 has an invalid length. [ 743.825475][T13345] usb usb7-port1: attempt power cycle [ 743.832970][T23082] netlink: 'syz.3.3455': attribute type 1 has an invalid length. [ 743.841255][T23082] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3455'. [ 743.872223][T23087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.881576][T23087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.891361][T23087] netlink: 'syz.3.3455': attribute type 21 has an invalid length. [ 743.896646][T23092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.908191][T23092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.075816][T23087] netlink: 'syz.3.3455': attribute type 1 has an invalid length. [ 744.083599][T23087] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3455'. [ 744.137922][ T1118] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.140692][T23102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3458'. [ 744.165374][T23102] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3458'. [ 744.165653][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 744.185137][T13345] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 744.205244][T13345] usb 7-1: device descriptor read/8, error -71 [ 744.214125][T23104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.228404][T23104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.253947][ T1118] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.322957][ T1118] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.346727][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 744.353536][ T24] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 744.361773][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 744.373948][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 744.384006][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 744.396497][ T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 744.405863][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.413940][ T24] usb 2-1: Product: syz [ 744.418276][ T24] usb 2-1: Manufacturer: syz [ 744.422884][ T24] usb 2-1: SerialNumber: syz [ 744.429380][ T1118] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.431639][ T24] usb 2-1: config 0 descriptor?? [ 744.447179][T23097] raw-gadget.7 gadget.1: fail, usb_ep_enable returned -22 [ 744.454659][T13345] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 744.462479][T23097] raw-gadget.7 gadget.1: fail, usb_ep_enable returned -22 [ 744.481771][ T24] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 744.488905][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 744.488972][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 744.502015][T13345] usb 7-1: device descriptor read/8, error -71 [ 744.614829][T13345] usb usb7-port1: unable to enumerate USB device [ 744.705286][T23097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.735525][T23097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.765899][ T1118] bridge_slave_1: left allmulticast mode [ 744.768232][T13345] usb 2-1: USB disconnect, device number 7 [ 744.771568][ T1118] bridge_slave_1: left promiscuous mode [ 744.771808][ T1118] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.789427][T13345] mcba_usb 2-1:0.0 can0: device disconnected [ 744.837162][ T1118] bridge_slave_0: left allmulticast mode [ 744.842892][ T1118] bridge_slave_0: left promiscuous mode [ 744.848955][ T1118] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.430289][ T1118] team0: Port device geneve0 removed [ 745.922226][ T1118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 746.047484][ T1118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 746.106878][T23165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.129889][ T1118] bond0 (unregistering): Released all slaves [ 746.146947][T23165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.179951][T23165] netlink: 'syz.6.3464': attribute type 10 has an invalid length. [ 746.209958][T23165] team0: Device ipvlan1 failed to register rx_handler [ 746.404717][ T24] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 746.714393][T21625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 746.727564][T21625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 746.736908][T21625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 746.746818][T21625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 746.755517][T21625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 746.983812][T23225] netlink: 'syz.6.3469': attribute type 10 has an invalid length. [ 746.991850][T23225] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3469'. [ 747.018315][T23225] team0: Port device geneve0 added [ 747.028192][ T7421] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.037681][ T7421] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.059849][T23227] netlink: 'syz.6.3469': attribute type 10 has an invalid length. [ 747.074742][ T7421] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.093925][ T7421] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.096923][T23227] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3469'. [ 747.111983][ T5860] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 747.146127][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.154375][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.227383][ T773] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.243598][ T773] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.278113][ T773] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.294752][ T5860] usb 2-1: Using ep0 maxpacket: 16 [ 747.305305][ T5860] usb 2-1: no configurations [ 747.309980][ T773] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.310309][ T5860] usb 2-1: can't read configurations, error -22 [ 747.474887][ T5860] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 747.649288][ T5860] usb 2-1: Using ep0 maxpacket: 16 [ 747.666712][ T5860] usb 2-1: no configurations [ 747.674861][ T5860] usb 2-1: can't read configurations, error -22 [ 747.691793][ T5860] usb usb2-port1: attempt power cycle [ 747.744585][T13345] usb 7-1: new full-speed USB device number 125 using dummy_hcd [ 747.925601][T13345] usb 7-1: not running at top speed; connect to a high speed hub [ 747.957034][T13345] usb 7-1: config index 0 descriptor too short (expected 2322, got 18) [ 747.962970][T23201] chnl_net:caif_netlink_parms(): no params data found [ 747.992701][T13345] usb 7-1: config 95 has an invalid interface number: 1 but max is 0 [ 748.025255][T13345] usb 7-1: config 95 has no interface number 0 [ 748.031520][T13345] usb 7-1: config 95 interface 1 has no altsetting 0 [ 748.048379][ T5860] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 748.053662][T23354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3471'. [ 748.080695][T13345] usb 7-1: string descriptor 0 read error: -22 [ 748.093568][T13345] usb 7-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 748.126779][ T5860] usb 2-1: Using ep0 maxpacket: 16 [ 748.137042][ T5860] usb 2-1: no configurations [ 748.141666][ T5860] usb 2-1: can't read configurations, error -22 [ 748.148346][T13345] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.314638][ T5860] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 748.408422][ T5860] usb 2-1: Using ep0 maxpacket: 16 [ 748.423671][ T5860] usb 2-1: no configurations [ 748.428413][ T5860] usb 2-1: can't read configurations, error -22 [ 748.442557][ T5860] usb usb2-port1: unable to enumerate USB device [ 748.456298][T23396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3472'. [ 748.471516][T20352] udevd[20352]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:95.1/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 748.573522][T23201] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.593184][T13345] usb 7-1: USB disconnect, device number 125 [ 748.602330][T23201] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.622699][T23201] bridge_slave_0: entered allmulticast mode [ 748.636426][T23201] bridge_slave_0: entered promiscuous mode [ 748.650198][ C1] vkms_vblank_simulate: vblank timer overrun [ 748.660980][T23201] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.680690][T23201] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.688436][T23201] bridge_slave_1: entered allmulticast mode [ 748.715632][T23201] bridge_slave_1: entered promiscuous mode [ 748.824697][T21625] Bluetooth: hci2: command tx timeout [ 748.854717][T23201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 748.901693][T23201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 748.983547][T23201] team0: Port device team_slave_0 added [ 748.999696][ T1118] hsr_slave_0: left promiscuous mode [ 749.007964][ T1118] hsr_slave_1: left promiscuous mode [ 749.014129][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 749.022156][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 749.031912][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 749.039737][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.063326][ T1118] veth1_macvtap: left promiscuous mode [ 749.069679][ T1118] veth0_macvtap: left promiscuous mode [ 749.075694][ T1118] veth1_vlan: left promiscuous mode [ 749.081088][ T1118] veth0_vlan: left promiscuous mode [ 749.163616][T23492] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 749.307729][ T7421] smc: removing ib device syz1 [ 749.667696][ T1118] team0 (unregistering): Port device team_slave_1 removed [ 749.711964][ T1118] team0 (unregistering): Port device team_slave_0 removed [ 750.270069][T23201] team0: Port device team_slave_1 added [ 750.382906][ T5967] ================================================================== [ 750.390992][ T5967] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 750.399760][ T5967] Read of size 8 at addr ffff8880249142e8 by task kworker/0:7/5967 [ 750.407644][ T5967] [ 750.409970][ T5967] CPU: 0 UID: 0 PID: 5967 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 750.409990][ T5967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 750.410003][ T5967] Workqueue: events smc_ib_port_event_work [ 750.410029][ T5967] Call Trace: [ 750.410037][ T5967] [ 750.410044][ T5967] dump_stack_lvl+0x189/0x250 [ 750.410062][ T5967] ? rcu_is_watching+0x15/0xb0 [ 750.410082][ T5967] ? __kasan_check_byte+0x12/0x40 [ 750.410104][ T5967] ? __pfx_dump_stack_lvl+0x10/0x10 [ 750.410119][ T5967] ? rcu_is_watching+0x15/0xb0 [ 750.410139][ T5967] ? lock_release+0x4b/0x3e0 [ 750.410158][ T5967] ? __virt_addr_valid+0x1c8/0x5c0 [ 750.410182][ T5967] ? __virt_addr_valid+0x4a5/0x5c0 [ 750.410205][ T5967] print_report+0xca/0x240 [ 750.410221][ T5967] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 750.410239][ T5967] kasan_report+0x118/0x150 [ 750.410261][ T5967] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 750.410280][ T5967] __ethtool_get_link_ksettings+0x6e/0x190 [ 750.410305][ T5967] ib_get_eth_speed+0x15e/0x7c0 [ 750.410327][ T5967] ? ret_from_fork_asm+0x1a/0x30 [ 750.410345][ T5967] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 750.410377][ T5967] ? do_raw_spin_unlock+0x122/0x240 [ 750.410408][ T5967] rxe_query_port+0x93/0x3b0 [ 750.410429][ T5967] ib_query_port+0x170/0x840 [ 750.410454][ T5967] smc_ib_port_event_work+0x15a/0x940 [ 750.410479][ T5967] ? _raw_spin_unlock_irq+0x23/0x50 [ 750.410500][ T5967] ? process_scheduled_works+0x9ef/0x17b0 [ 750.410520][ T5967] ? process_scheduled_works+0x9ef/0x17b0 [ 750.410540][ T5967] process_scheduled_works+0xae1/0x17b0 [ 750.410571][ T5967] ? __pfx_process_scheduled_works+0x10/0x10 [ 750.410596][ T5967] worker_thread+0x8a0/0xda0 [ 750.410617][ T5967] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 750.410642][ T5967] ? __kthread_parkme+0x7b/0x200 [ 750.410666][ T5967] kthread+0x711/0x8a0 [ 750.410690][ T5967] ? __pfx_worker_thread+0x10/0x10 [ 750.410709][ T5967] ? __pfx_kthread+0x10/0x10 [ 750.410731][ T5967] ? _raw_spin_unlock_irq+0x23/0x50 [ 750.410751][ T5967] ? lockdep_hardirqs_on+0x9c/0x150 [ 750.410773][ T5967] ? __pfx_kthread+0x10/0x10 [ 750.410795][ T5967] ret_from_fork+0x4bc/0x870 [ 750.410815][ T5967] ? __pfx_ret_from_fork+0x10/0x10 [ 750.410835][ T5967] ? __switch_to_asm+0x39/0x70 [ 750.410853][ T5967] ? __switch_to_asm+0x33/0x70 [ 750.410869][ T5967] ? __pfx_kthread+0x10/0x10 [ 750.410891][ T5967] ret_from_fork_asm+0x1a/0x30 [ 750.410915][ T5967] [ 750.410921][ T5967] [ 750.648387][ T5967] Allocated by task 19358: [ 750.652785][ T5967] kasan_save_track+0x3e/0x80 [ 750.657450][ T5967] __kasan_kmalloc+0x93/0xb0 [ 750.662023][ T5967] __kvmalloc_node_noprof+0x5cd/0x910 [ 750.667378][ T5967] alloc_netdev_mqs+0xa8/0x1200 [ 750.672217][ T5967] rtnl_create_link+0x31f/0xd10 [ 750.677049][ T5967] rtnl_newlink_create+0x25c/0xb00 [ 750.682143][ T5967] rtnl_newlink+0x16d6/0x1c70 [ 750.686801][ T5967] rtnetlink_rcv_msg+0x7cf/0xb70 [ 750.691721][ T5967] netlink_rcv_skb+0x208/0x470 [ 750.696467][ T5967] netlink_unicast+0x82f/0x9e0 [ 750.701239][ T5967] netlink_sendmsg+0x805/0xb30 [ 750.705993][ T5967] __sock_sendmsg+0x21c/0x270 [ 750.710661][ T5967] __sys_sendto+0x3bd/0x520 [ 750.715152][ T5967] __x64_sys_sendto+0xde/0x100 [ 750.719902][ T5967] do_syscall_64+0xfa/0xfa0 [ 750.724389][ T5967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.730268][ T5967] [ 750.732578][ T5967] Freed by task 1118: [ 750.736545][ T5967] kasan_save_track+0x3e/0x80 [ 750.741210][ T5967] __kasan_save_free_info+0x46/0x50 [ 750.746393][ T5967] __kasan_slab_free+0x5c/0x80 [ 750.751142][ T5967] kfree+0x19a/0x6d0 [ 750.755015][ T5967] device_release+0x9c/0x1c0 [ 750.759585][ T5967] kobject_put+0x22b/0x480 [ 750.763979][ T5967] netdev_run_todo+0xeb3/0x1020 [ 750.768821][ T5967] default_device_exit_batch+0x81e/0x890 [ 750.774449][ T5967] ops_undo_list+0x525/0x990 [ 750.779026][ T5967] cleanup_net+0x4d8/0x810 [ 750.783431][ T5967] process_scheduled_works+0xae1/0x17b0 [ 750.788966][ T5967] worker_thread+0x8a0/0xda0 [ 750.793544][ T5967] kthread+0x711/0x8a0 [ 750.797606][ T5967] ret_from_fork+0x4bc/0x870 [ 750.802179][ T5967] ret_from_fork_asm+0x1a/0x30 [ 750.806923][ T5967] [ 750.809226][ T5967] The buggy address belongs to the object at ffff888024914000 [ 750.809226][ T5967] which belongs to the cache kmalloc-cg-4k of size 4096 [ 750.823518][ T5967] The buggy address is located 744 bytes inside of [ 750.823518][ T5967] freed 4096-byte region [ffff888024914000, ffff888024915000) [ 750.837383][ T5967] [ 750.839690][ T5967] The buggy address belongs to the physical page: [ 750.846076][ T5967] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24910 [ 750.854812][ T5967] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 750.863294][ T5967] memcg:ffff888064899ec1 [ 750.867513][ T5967] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 750.875036][ T5967] page_type: f5(slab) [ 750.878996][ T5967] raw: 00fff00000000040 ffff88801b04b500 dead000000000122 0000000000000000 [ 750.887557][ T5967] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888064899ec1 [ 750.896125][ T5967] head: 00fff00000000040 ffff88801b04b500 dead000000000122 0000000000000000 [ 750.904774][ T5967] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888064899ec1 [ 750.913425][ T5967] head: 00fff00000000003 ffffea0000924401 00000000ffffffff 00000000ffffffff [ 750.922070][ T5967] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 750.930711][ T5967] page dumped because: kasan: bad access detected [ 750.937110][ T5967] page_owner tracks the page as allocated [ 750.942798][ T5967] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7421, tgid 7421 (kworker/u8:12), ts 626722718961, free_ts 626059972995 [ 750.965788][ T5967] post_alloc_hook+0x240/0x2a0 [ 750.970537][ T5967] get_page_from_freelist+0x21e4/0x22c0 [ 750.976069][ T5967] __alloc_frozen_pages_noprof+0x181/0x370 [ 750.981855][ T5967] alloc_pages_mpol+0x232/0x4a0 [ 750.986685][ T5967] allocate_slab+0x96/0x3a0 [ 750.991165][ T5967] ___slab_alloc+0xe94/0x1920 [ 750.995822][ T5967] __slab_alloc+0x65/0x100 [ 751.000221][ T5967] __kmalloc_node_track_caller_noprof+0x5c7/0x800 [ 751.006616][ T5967] kmemdup_noprof+0x2b/0x70 [ 751.011096][ T5967] __addrconf_sysctl_register+0x9e/0x4c0 [ 751.016710][ T5967] addrconf_sysctl_register+0x168/0x1c0 [ 751.022235][ T5967] ipv6_add_dev+0xd64/0x1380 [ 751.026806][ T5967] addrconf_notify+0x794/0x1010 [ 751.031637][ T5967] notifier_call_chain+0x1b6/0x3e0 [ 751.036730][ T5967] register_netdevice+0x1608/0x1ae0 [ 751.041908][ T5967] nsim_create+0xae8/0xf10 [ 751.046309][ T5967] page last free pid 19358 tgid 19358 stack trace: [ 751.052791][ T5967] __free_frozen_pages+0xbc4/0xd30 [ 751.057884][ T5967] __put_partials+0x146/0x170 [ 751.062544][ T5967] put_cpu_partial+0x1f2/0x2e0 [ 751.067288][ T5967] __slab_free+0x2b9/0x390 [ 751.071770][ T5967] qlist_free_all+0x97/0x140 [ 751.076362][ T5967] kasan_quarantine_reduce+0x148/0x160 [ 751.081801][ T5967] __kasan_slab_alloc+0x22/0x80 [ 751.086631][ T5967] kmem_cache_alloc_node_noprof+0x433/0x710 [ 751.092590][ T5967] __alloc_skb+0x112/0x2d0 [ 751.097006][ T5967] netlink_ack+0x146/0xa50 [ 751.101407][ T5967] netlink_rcv_skb+0x28c/0x470 [ 751.106150][ T5967] netlink_unicast+0x82f/0x9e0 [ 751.110896][ T5967] netlink_sendmsg+0x805/0xb30 [ 751.115642][ T5967] __sock_sendmsg+0x21c/0x270 [ 751.120303][ T5967] __sys_sendto+0x3bd/0x520 [ 751.124791][ T5967] __x64_sys_sendto+0xde/0x100 [ 751.129539][ T5967] [ 751.131844][ T5967] Memory state around the buggy address: [ 751.137450][ T5967] ffff888024914180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 751.145492][ T5967] ffff888024914200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 751.153533][ T5967] >ffff888024914280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 751.161573][ T5967] ^ [ 751.169004][ T5967] ffff888024914300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 751.177040][ T5967] ffff888024914380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 751.185074][ T5967] ================================================================== [ 751.221865][T21625] Bluetooth: hci2: command tx timeout [ 751.227808][ T5967] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 751.235005][ T5967] CPU: 0 UID: 0 PID: 5967 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 751.244370][ T5967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 751.254423][ T5967] Workqueue: events smc_ib_port_event_work [ 751.260238][ T5967] Call Trace: [ 751.263513][ T5967] [ 751.266440][ T5967] dump_stack_lvl+0x99/0x250 [ 751.271028][ T5967] ? __asan_memcpy+0x40/0x70 [ 751.275613][ T5967] ? __pfx_dump_stack_lvl+0x10/0x10 [ 751.280805][ T5967] ? __pfx__printk+0x10/0x10 [ 751.285397][ T5967] vpanic+0x237/0x6d0 [ 751.289377][ T5967] ? __pfx_vpanic+0x10/0x10 [ 751.293873][ T5967] ? preempt_schedule+0xae/0xc0 [ 751.298724][ T5967] ? __pfx_preempt_schedule+0x10/0x10 [ 751.304105][ T5967] panic+0xb9/0xc0 [ 751.307822][ T5967] ? __pfx_panic+0x10/0x10 [ 751.312249][ T5967] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 751.318151][ T5967] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 751.324131][ T5967] check_panic_on_warn+0x89/0xb0 [ 751.329065][ T5967] ? __ethtool_get_link_ksettings+0x6e/0x190 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 751.335301][ T5967] end_report+0x78/0x160 [ 751.339541][ T5967] kasan_report+0x129/0x150 [ 751.344051][ T5967] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 751.350026][ T5967] __ethtool_get_link_ksettings+0x6e/0x190 [ 751.355833][ T5967] ib_get_eth_speed+0x15e/0x7c0 [ 751.360691][ T5967] ? ret_from_fork_asm+0x1a/0x30 [ 751.365632][ T5967] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 751.371014][ T5967] ? do_raw_spin_unlock+0x122/0x240 [ 751.376223][ T5967] rxe_query_port+0x93/0x3b0 [ 751.380816][ T5967] ib_query_port+0x170/0x840 [ 751.385415][ T5967] smc_ib_port_event_work+0x15a/0x940 [ 751.390792][ T5967] ? _raw_spin_unlock_irq+0x23/0x50 [ 751.395993][ T5967] ? process_scheduled_works+0x9ef/0x17b0 [ 751.401714][ T5967] ? process_scheduled_works+0x9ef/0x17b0 [ 751.407432][ T5967] process_scheduled_works+0xae1/0x17b0 [ 751.412978][ T5967] ? __pfx_process_scheduled_works+0x10/0x10 [ 751.418944][ T5967] worker_thread+0x8a0/0xda0 [ 751.423530][ T5967] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 751.429849][ T5967] ? __kthread_parkme+0x7b/0x200 [ 751.434773][ T5967] kthread+0x711/0x8a0 [ 751.438829][ T5967] ? __pfx_worker_thread+0x10/0x10 [ 751.443921][ T5967] ? __pfx_kthread+0x10/0x10 [ 751.448498][ T5967] ? _raw_spin_unlock_irq+0x23/0x50 [ 751.453685][ T5967] ? lockdep_hardirqs_on+0x9c/0x150 [ 751.458867][ T5967] ? __pfx_kthread+0x10/0x10 [ 751.463444][ T5967] ret_from_fork+0x4bc/0x870 [ 751.468016][ T5967] ? __pfx_ret_from_fork+0x10/0x10 [ 751.473116][ T5967] ? __switch_to_asm+0x39/0x70 [ 751.477861][ T5967] ? __switch_to_asm+0x33/0x70 [ 751.482606][ T5967] ? __pfx_kthread+0x10/0x10 [ 751.487181][ T5967] ret_from_fork_asm+0x1a/0x30 [ 751.491931][ T5967] [ 751.495183][ T5967] Kernel Offset: disabled [ 751.499488][ T5967] Rebooting in 86400 seconds..