last executing test programs: 4m28.653402504s ago: executing program 32 (id=354): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x20, 0x7, 0xa, 0x303, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000480)={0x0, 0x0, "77aedb527e937d19e4e4d6bdb02d4dab6ec6837094a61935818ec9b4d8bb0c70adadf51fcc8e858989ed847c078a627beeb7f32994ef3f8bfd8dfb3b194c98d0d3cf3be6e943c10d4e3b58a242db8cf357431a51ca22b90faea9d6a7547ec7e35230334b364e49a5144a80b7171b6cc8069f36b2052bff36f1e021779b568cb15650369362a225c572e1a01a6c2fdd30ba944a5fea751503b234954ace097b1614b1a6d8dfbe803aa5a0712e3d345eebaa31f1637bc4a6219a9e733accaed3331b4aaed9d52c2bc963b4c4dae80aaf1e6eb7aa0e326cbbd767a71eaf8215f4fc7796f7b4ef1be40745aca86d45c07a897b725d4f40b613b07a3d7a68bf16458d", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000180)={{r1, 0x2, 0x1, 0xac8, 0x9, 0x10001, 0x8, 0x6, 0x1ff, 0x5, 0x7, 0x7fffffffffffffff, 0x4, 0x3, 0x80}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x11ff, 0x3331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0xfa, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xf4f6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x41, 0x6, 0xcd, 0x40, 0x6cd, 0x10f, 0xd51b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0xb, 0xfd, 0x1, 0x33, 0x77, 0x61, 0x0, [], [{{0x9, 0x5, 0x87, 0x3, 0x8, 0xf, 0xff, 0x7}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="082205000000c31a29b98c"], 0x0}, 0x0) 4m4.014159081s ago: executing program 33 (id=493): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x110, 0x2, 0xfffffffd}}], 0x18}, 0x54000) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) syz_extract_tcp_res(&(0x7f0000000000), 0x7, 0x80) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000080)) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) 3m32.802850989s ago: executing program 34 (id=683): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000000), &(0x7f0000000180)=ANY=[@ANYBLOB="030252a5"], 0xc, 0x2) syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012b02865a2b402505a3a4e6770102030109022d0001078c200f09041407034200e407090507034000020c640905041a0004f1060109050d0200020003f811816786a14bfd6e41c68961fa475268b8a0ab5ca3ce2d447f75dd7379d00b40d0ac180b4a8bbf50d5858f8b237735c83d065d1c1d92d31894104ac63aabcfac5e2cbfb356fc6defdc0606a261c01ac9b17a61fb48fca0d4a79ce4b4326a157be3"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00E'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m54.595774092s ago: executing program 35 (id=815): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20a202, 0x0) r1 = dup(r0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0x440183, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x800, 0x3, 0x0, 0xfffffffffffffff8, 0x5, 0xfffffffffffff2a5, 0x2000000000003ff, 0x2, 0xfffffffffffffffe], 0x0, 0x320306}) syz_open_dev$sndmidi(0x0, 0x2, 0x141121) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="8e04a632d5b0666822c7fcab46ae74ba0d72ff169e6ad9e77e", 0x19, 0x8000, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x800) r8 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IMADDTIMER(r8, 0x80044940, &(0x7f00000000c0)=0x32) read(r8, &(0x7f00000019c0)=""/4107, 0x100b) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0x4, 0x2}, 0x6) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000240)={0x4, 0x3, 0x4, 0x2000, &(0x7f0000ffa000/0x2000)=nil}) fallocate(r5, 0x11, 0x0, 0x2000000074000) 2m41.820772533s ago: executing program 3 (id=933): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x67a, @remote, 0x6}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x29, 0x35, 0x0, 0x0) (async) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) accept(r2, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x28c}) (async) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fe02fe02e8fe50a10a000725250000000c600e41b0000900ac00080325000000160015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) (async, rerun: 32) r6 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r8 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f0000000040)=0x1002, 0x4) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac) sendmmsg$inet6(r0, &(0x7f0000005400)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0xfff, @remote, 0x2}, 0x1c, 0x0}}], 0x40000000000016d, 0x1000) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x988, 0x10, 0x2, 0xfffffff9, 0x9c, 0x90, 0xc8}, &(0x7f0000000600)=0x9c) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000640)={0x7, 0xffff, 0x4, 0x6, 0x2, 0x9, 0x3, 0xc, r9}, 0x20) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000180)=0x51) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000003640)={r11, 0x56}, &(0x7f0000003680)=0x8) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000080)={r11, 0x5}, 0x8) (rerun: 32) 2m41.732211018s ago: executing program 3 (id=934): ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000140)) (async) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x94, r2, 0x1, 0x300, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x80, @loopback, 0x82}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}]}, 0x94}}, 0x40004) (async) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000540)={0x2f, @dev={0xac, 0x14, 0x14, 0x18}, 0x4e21, 0x201, 'sed\x00', 0x2e, 0x6, 0x54}, 0x2c) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)) (async, rerun: 64) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (rerun: 64) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) (async) mount$cgroup(0x0, &(0x7f0000000040)='./file3\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={[{@none}, {@clone_children}], [{@appraise}]}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async, rerun: 64) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x80000000, 0x4, 0x7, 0xe6, 0x4}]}) (rerun: 64) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="40040086b6d0f33c080010e40c2c200010000300", @ANYRES16=r2, @ANYBLOB="04002bbd7000ffdbdf250d000000040002804800078008000100d6a900000c0004000500000000000000080002000600000008000100060000000c00040009000000000000000c000400040000000000000008000200000000082400038008000300300a00000800020006000000080003000300000008000100020000005000078008000100090000000c000300f7ffffffffffffff0c00040008000000000000000c00040001000000000000000c000400490000000000000008000200ffffffff0c00040003000000000000001c000380080002000100000008000100080000000800030000000000c80004800900010073797a30000000000900010073797a31000000002c00078008000200f8ffffff08000100200000000800020080000000080004000000000008000300149900001300010062726f6164636173742d6c696e6b0000440007800800030000f8ffff080002000500000008000300070000000800020003000000080004000300000008000400fbffffff080001000900000008000400ff0f00001c0007800800020003000000080002000900000008000200ff0000000900010073797a30000000002c0206804700040067636d28616573290000000000000000000000000000000000000000000000001f000000ec55c99b1b5ee7f8f2ddc0491bfc39fde9506df2b0107dbfbd79efe92c80ea003e00040067636d2861657329000000000000000000000000000000000000000000000000160000001cfb1121a04c5ffc29750733ce32d5ff83513c9e8aab0000040005000400020060000300c648d10f2430ee22b5e0d263105ba986fc5c294c7fc0c03d6aa67476c4ac629858b794cda52c7183fd3165d22818409516f67f0a1203f03aaff00b8c18ce801cf3635b3baf0a5d64e27a2bac8e120a4325688cbc97bbe370aec6f1384100040067636d286165732900000000000000000000000000000000000000000000000019000000206a36b5225eade52db5ec7a94cd33e6cc48afee5abbec8cb8000000ee000300441c23864e39101382601afbbcf09342141b738997b35426d0349f4b25750db5db4659ee328cc17461c4032ecdaccc75e6f1a78cb44777c09b373da395ed92f5dc5131e46d53e816b78fe6635f6abddc10b15a8e5df3e35d2c164576447d00d84a3918ee3339da0853ab418eb43dc3984547e97da750fbac5537b73d5b26f564979e51165a9d0e91d48d11e3d647f3849f3f157343dca80a2e468f0a3b008575a79cbcf43e7c8ffcab926cef82fa63e928fa646e9422442fd0a9f330bc8f352a774efd19d4e602a8a40025436700bdc63a15cd49ab1de426a6632a358958c2c27894612ccbf9693ab4620000040002005c0004801300010062726f6164636173742d6c696e6b00000900010073797a30000000001c000780080004000004000008000200fdffffff08000400ff0000001c00078008000400050000000800030003000000080001000b000000aded039f11fda7fa60b99ecd883769e691251a9e61f5630498dc329fb97571ea65f1204a54f0ab5dc6d090f2ecd08ea259502f688af4ffecf1e06870879d36701fb94e0ddda7a62505a6df01273b3d9c944946f76358ce30017e61b5bbec043fc9fd34710dffdd48cca8961d8ec627ed93615b28abfe2d941b256e1a716b5048dc453f5a5669313253860718757e7de901c1d4aa1578a082a38d9500e4cd"], 0x440}, 0x1, 0x0, 0x0, 0x4110}, 0x4080) 2m41.492154183s ago: executing program 3 (id=935): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000040)=0x2, 0x4) write$sndseq(r0, &(0x7f0000000580)=[{0x30, 0x3, 0x9, 0x2, @time={0x1, 0x9}, {0x8f, 0xb4}, {0x7, 0xa}, @note={0x40, 0x0, 0x9, 0x4, 0x6}}, {0xb1, 0x4, 0x2, 0x9d, @time={0xc00000}, {0x0, 0x3}, {0x8, 0x8}, @raw8={"19d8b358b908e654d5853eee"}}, {0x0, 0x58, 0x7, 0x5, @tick=0xe7, {0x9, 0x7}, {0x9, 0x40}, @raw8={"a2d1b04ef07631e5a017dccd"}}, {0x1d, 0x0, 0x80, 0x6b, @tick=0x1, {0x0, 0x6}, {0x2}, @quote={{0x4, 0x3}, 0x10, &(0x7f00000001c0)={0x10, 0xff, 0xfb, 0x5, @time={0x7, 0x5}, {0x1, 0x9}, {0xd, 0x3f}, @result={0x1, 0x7fffffff}}}}, {0x2, 0x49, 0x8, 0x40, @tick=0xff, {0xf9, 0x7f}, {0x9, 0x4}, @quote={{0x6, 0x4}, 0x10, &(0x7f0000000200)={0x2, 0x2, 0x68, 0x4, @time={0x8, 0x2}, {0x1}, {0x5, 0x40}, @control={0x8, 0x7f4, 0x4f2e}}}}, {0x1, 0xff, 0x3, 0x7, @tick=0x1, {0x0, 0x2}, {0x9, 0x81}, @queue={0xd9, {0xf3e, 0x7fff}}}], 0xa8) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='x4\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x80}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="14001c001000010000000000000000000500000a20000000050a0500000000000000ab3d7c3700070900010073797a300000000014000000084a0108000000000000000001000000140000001100010000000000000000000100000a4fcd7adcc4e60fb0c5b6454d5b3cb620f6a5feb293d04dbb864c33aee6f461b56fc6edca31c007eb617ae4dab163d033eb44c3da7ea10295fe4066501a9f78dcd242b9a198d99138079bb041b94b979d40a8d602e6b14eded1fff1d68739289883c6ef1b6e1e0daa4c11abe43d1bce4c62569d6d00"/218], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x200088c0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) 2m40.625299044s ago: executing program 3 (id=937): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000010403000000000000000000050000030a00020000000000010000000a"], 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b20d25a80648c2594f90124fc60100c030002180000053582c1", 0x20}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003d0007010000000000000000047c000049ff08800c0001"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0xc000) rseq(0x0, 0x0, 0x4, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c", @ANYRES32=r1, @ANYRESDEC=r1, @ANYRES32=r0, @ANYRESOCT=r1], 0x8c}, 0x1, 0x0, 0x0, 0x140080c2}, 0x4000080) 2m40.480036651s ago: executing program 3 (id=938): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000780), 0x103b43, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$video(&(0x7f0000000100), 0x8, 0x10400) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000000c0)=0x4bf765a6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@rand_addr=0x6c010102, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000380)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000280)={0xa, 0x101, 0x7, {0x8000, 0x1000, 0x4, 0x2}}) 2m40.457532383s ago: executing program 3 (id=939): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) sendto$packet(r3, &(0x7f00000000c0)='?', 0x1, 0x2, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x4, 0x6, @random="a36165f10b98"}, 0x14) sendmmsg$inet(r0, &(0x7f0000001e80)=[{{&(0x7f0000002140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000740)="f2", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x2, 0x240000d4) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=0x0]) read$FUSE(r5, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9, 0x0, 0x21831002, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r5, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x802000) r8 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x1d, &(0x7f00000008c0), 0x4) write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = dup3(r9, r5, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x18d042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x13, r11, 0x0) r12 = dup(r4) ioctl$IOMMU_VFIO_IOAS$GET(r10, 0x3b88, &(0x7f0000000200)={0xc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r12, 0x2000) r13 = syz_usb_connect$cdc_ncm(0x3, 0x9b, &(0x7f0000000b80)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xa7, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x2, 0x1, 0x8, 0x40, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, '>2'}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x2, 0x40, 0x8}, {0x6, 0x24, 0x1a, 0x3, 0x25}, [@obex={0x5}, @country_functional={0x8, 0x24, 0x7, 0x5, 0x0, [0xff50]}, @country_functional={0x8, 0x24, 0x7, 0x9, 0x5, [0x7]}, @obex={0x5, 0x24, 0x15, 0x1}, @country_functional={0xc, 0x24, 0x7, 0xcd, 0x24, [0x5, 0xff6a, 0x5]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x45, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x4, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0x1, 0x5e}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x4, 0xcf, 0x7f, 0xff, 0x2c}, 0x47, &(0x7f0000000400)={0x5, 0xf, 0x47, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x9, 0x6, 0x34, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x7, 0x8, 0x9}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x8, 0xf00, 0x7fff, [0x0, 0xc03f, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x8, 0x1, 0x6, 0xe0}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0xf, 0xd}]}, 0x9, [{0x65, &(0x7f0000000480)=@string={0x65, 0x3, "fe456bb86cdad6b039a497bd2f00b9908802ed8c5152b6e61a1e3560e5a73828204d0261dcaf0047e6c2e9eea9e5a6f275ad231e15603a08df11bc39172a9fe868ffe7b76512829e0fb3be60f0c11c5b117157f3d5158ca9fd7d70ca1779e758460281"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000500)=@lang_id={0x4}}, {0x40, &(0x7f0000000580)=@string={0x40, 0x3, "b8244dd5db649e3dc612cd6f6ca7d6af4731e0742850f34eeb125b53f6d17141839059597f3e592dc3f7926305f3363144688e2d163db5cc64fc8fa3c85d"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x400a}}, {0x5a, &(0x7f0000000680)=@string={0x5a, 0x3, "1d53ffd338feb1c9c48e3f8de7b991d85d831cf035d1de381e0e0b103287abc57c9cb5a9327c4cea5823581d58bc4ef7fdab02320912b28e969d8d185fca133ca36315d47181ce6f7b25fb7b4adff871d91cb9293b7bac66"}}, {0x2d, &(0x7f0000000700)=@string={0x2d, 0x3, "05bd573cd992c1fcc73d5212825e3fceb8c894bdea152fcd39e727cb6ad1f9dd3c813804175a30199ffe6b"}}]}) syz_usb_control_io$cdc_ncm(r13, &(0x7f00000008c0)={0x14, &(0x7f0000000840)={0x20, 0x1, 0x39, {0x39, 0x24, "221f731027c84d2ef3b93b46d214509f9cd5ddf0c40ab4ab829e29ffba35f0c9210f357209658647fd82b0896589b21b5184a9f77d5297"}}, &(0x7f0000000880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b00)={0x44, &(0x7f0000000900)={0x20, 0x14, 0x1d, "fb3035900fb12a1fbad84de560f2aa3222ef3506c798780e4d8139b1d4"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x10}, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x3, 0x6, 0xbd, 0x6, 0x7, 0x5, 0x3, 0x2, 0x2, 0x5, 0x3, 0x2}}, &(0x7f0000000a00)={0x20, 0x85, 0x4, 0xff}, &(0x7f0000000a40)={0x20, 0x83, 0x2}, &(0x7f0000000a80)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000000ac0)={0x20, 0x89, 0x2, 0x1}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) 2m39.795618919s ago: executing program 7 (id=942): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) (async, rerun: 64) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) (rerun: 64) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r2}, 0x0) landlock_restrict_self(r1, 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r2, &(0x7f0000000000)='./file0\x00', 0x4) (async) close_range(r0, 0xffffffffffffffff, 0x2) (async) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x0, 0xfffffffc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) 2m39.701599814s ago: executing program 7 (id=943): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) unshare(0x24060400) (async) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b19a3640d219751284070102030109022b0002070000ac18563dd8399550bba2ef9521593300090400010079319c0009040000000202ff"], 0x0) (async) syz_usb_connect(0x5, 0x893, &(0x7f0000000340)={{0x12, 0x1, 0x111, 0xa5, 0xd2, 0x8b, 0x8, 0x4d8, 0x83, 0x2ef8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x881, 0x4, 0x1, 0x1, 0x0, 0x8, [{{0x9, 0x4, 0x87, 0x80, 0x1, 0x8d, 0x59, 0x41, 0xcb, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x74d}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x3ff, 0xaef4, 0xf}, {0x6, 0x24, 0x1a, 0x8, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x800, 0x4, 0x66}, @acm={0x4, 0x24, 0x2, 0x2}]}], [{{0x9, 0x5, 0xa, 0x10, 0x0, 0x4, 0x0, 0x10}}]}}, {{0x9, 0x4, 0xa3, 0x9b, 0xb, 0x99, 0x46, 0x54, 0x0, [], [{{0x9, 0x5, 0x9, 0x8, 0x3ff, 0x0, 0x4, 0x1}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0x1, 0x7, 0x5}}, {{0x9, 0x5, 0xe, 0x1, 0x20, 0x0, 0x30, 0x8}}, {{0x9, 0x5, 0x9, 0xc, 0x40, 0x2, 0x21, 0x6}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x12, 0x80, 0x7, [@generic={0x98, 0xc, "2ee6fd7004bb1f0fe0871a4583db2b9d46590f0d3ce963ad4db01f59b5fde62867a3113db87869fb9d3213325ceaac64d7528045164cf412743588f997e8367c139192475b8bab016a0b4e8cec92b87309036e89d6e12c96eadec854d1121cbcae5115d88eabcd36bf7d7f895d65da1aebf07ec951e4d83e3ef1de0c58571644bf42ed37f33e4d88e1c0c1a268297cbffefda8dee86f"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x9}]}}, {{0x9, 0x5, 0xb, 0x1, 0x10, 0x5, 0x8, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x1}]}}, {{0x9, 0x5, 0xd34e20aaf7591cb9, 0x10, 0x40, 0x40, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xff, 0x9}]}}, {{0x9, 0x5, 0x7, 0xc, 0x10, 0xa, 0x3e, 0xf6}}, {{0x9, 0x5, 0x0, 0x3, 0x10, 0x9e, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x69}]}}, {{0x9, 0x5, 0xa, 0x4, 0x8, 0x48, 0x3, 0x10}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0x78, 0x3, 0xb0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x1}]}}]}}, {{0x9, 0x4, 0x19, 0xf, 0x3, 0xff, 0xff, 0xff, 0xa, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0x5}, [@mixer_unit={0x6, 0x24, 0x4, 0x6, 0x6, 'h'}, @extension_unit={0xc, 0x24, 0x8, 0x1, 0x4, 0xc, "cdc91f1419"}]}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "adfb"}, {0x5, 0x24, 0x0, 0x2000}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xe8e, 0xf974, 0xd3}, {0x6, 0x24, 0x1a, 0x1000, 0x24}, [@obex={0x5, 0x24, 0x15, 0x7}, @acm={0x4, 0x24, 0x2, 0x6}, @dmm={0x7, 0x24, 0x14, 0x6, 0x4}, @acm={0x4}, @mdlm={0x15, 0x24, 0x12, 0x8}]}], [{{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x23, 0x7, 0xc0, [@generic={0x38, 0x9, "514d2ae0468c4b26979e16cc37bf1b49e7bfd1a0108d9ec4894e6fdf9ab9670baf18175fe0e0fb1e18be4c478542cd6d17f8ab315e46"}, @generic={0x87, 0x10, "b32f0503d32d2a8e773762fda9f4adfd5201a88a682dbfa4f14239b1c5bbc2729a90f936948b1af31175025b6f2ed0aff3286d3c4ec9fb65013751821f3468fba12d2a52d8f89994ccd0ddc0c23f050701751c82f4260ddc1ecb617243c044bd41ef46289046d4fcfbdac56a8b322bf73bb9e62506fee4f49cfbbad4bc8a3c11377799ae10"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x400, 0x29, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x2}]}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x0, 0x2, 0x88, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xf0, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x21, 0x2}]}}]}}, {{0x9, 0x4, 0x0, 0x9, 0x10, 0x9c, 0xcf, 0x45, 0x5, [], [{{0x9, 0x5, 0xc, 0x1, 0x40, 0xb7, 0x5a, 0x10}}, {{0x9, 0x5, 0x80, 0x10, 0x6c416ecdb0df0a3c, 0x7, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x7fff}, @generic={0xdd, 0x8, "18356c51c2df6dc63d445c3fb66d18db63bb7624c88414ae00fecaf9d7b38de45c7286214470c16c282bcf3c008012e38bc110e33b626bcf84d1e02a3ed352f3c6b827984c1e550d2490d18e7ba276450b0126ad9379ab9eb266a37c8d4c2abf9d3832b8518107afcf0695d33e1ae5edf5037a8640129c4e5cdb4e991391b89d9dce90f3dd168774dc24c56ff2bed0e0dd60310b9443e9ec8a87973476e845da721fd057c4de1f38eb4881c8755b6b3f86c4dc9e50795e3532c21d0cb98683ea5b41a94480570715e34a28cb853217561823102151d4d3f5bf7b80"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0x22, 0x2, 0x83}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x0, 0xfd, 0x66, [@generic={0x5a, 0x22, "b9539f08c07501266805833dd885e0c3700e6c266d607d525b34e90d84b9ec62bc34fb009b55afa1ed7dd859f43cd4a98c732c322bf0f243d13ce73386fa474e3ed94ea89a8c2b0d07bf7822fb561e57be4f66fb4ccac069"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0x69, 0x8, 0x9, [@generic={0x12, 0x22, "fe0c54e93e831d37e346430a6375ffc0"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xf000}]}}, {{0x9, 0x5, 0x3, 0xc, 0x10, 0x8, 0x2, 0xe5}}, {{0x9, 0x5, 0x80, 0xc, 0x8, 0x6, 0x1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x27, 0x8001}, @generic={0xac, 0x11, "8e0b120bc9b59a11ba2110550837b317d0253023923ead8efaddf600d552456dfac2aaabc105159226117aa6352dc86c4b8cf3044e2bbc9cff3b35203f4c1fd125907ef18f618e9688f93a69768730a8b1ea174aeffc1f10d352884fa6648603c195a4d594817863c87fbb8e271c07c0e9a1abe2b93550d88b02b14e77f19d3e785a667d7cf0b65f396fa10652c49113397d00b30032027cb82fbcea4aeac097b09fbe5ebd05571c469a"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x2, 0x9, 0x4d, [@generic={0xab, 0x31, "09f0022686e5d0ec03546041413771a10ff61844f31e043e70829b78a623112d0e2437d4d52ba7ca3c7b148d3380beb61a1bfbac3bbca4acad201671755835c770513aa5622b2fdad7ece58d16cfd08905558f2d005523481d7dc828e19380bca2611f54601c405c2b5175e8f9c76b758b23b95d38644e95d5937ac749ae7ce0fa94e75631d20b6d584886260af2e8f494341be1758e3fa4a9d964725a48c4a88bee0944d37c5a7544"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x400, 0x76, 0x7f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x19, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x3}]}}, {{0x9, 0x5, 0xf, 0x1, 0x3ff, 0x6a, 0xb2, 0xb}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x8, 0xe, 0x8, [@generic={0xd8, 0x22, "f5c0f20a4506f08b5d981220825651d77d5df3330bc6f742151d23eff72f41927821aa50b9046e3b126f6ee10576eb00f18dd92f980bf7c4374fba6bf75a4fc3e592d5cdeab4741bc03ccdee543ff3f0b2e85347e8889ffa62fb88a57e136a977b12299c0c655a4b0407ccec33a3b65a72309a0a1585b1b3f0948270086bfaeddadb57b710baefe8d7fe5c5842974841a74298c3f7b71b3b4243bc48e7213b0cce185426edb94d676ba083ce585493de567ebbfd79b95efafe563b2c402496273cbdcca1d5f074ae04ca180b48be9ce35726227382fa"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x6}]}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0x7f, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x8}]}}, {{0x9, 0x5, 0x8, 0xe1596e70e1182562, 0x3ff, 0x3, 0xfa, 0x3, [@generic={0xaa, 0x1, "a348efe9e661b0d865e97b0e6ab16948e8afc399222e022592d55f9263a181674c9b2ff19b935ba02750ea6afbcb97eef3ec3d6c35da11cf30f1adc17d53f3b44551e2daca18284d259331ebbc5f92ef24239357df0e4d0d4db015916e4846feb70de95b089ac2f5aa442ca7bcc7ee261b2646eb83fe317759cc8015b2593c512b613a04cbc323de9f70b01854449f30fa4cb5fe3f4b22950e34c544c4a7735cca8966962a9d3e32"}, @generic={0x93, 0xe, "f9e56a046adde66eec64282b58f7354a043051a94bcb6e9398e9a344363e63a0557c1e0f3e3c12a004708dbd693b788f17744f0dd0b8121262a134aeb6f0950a4466c73e3dab132816e7b0e39a3bb73fb711982a475f8433979410a03327dc4336ae8df6da72bf49ea866bd260412fc63b1bba899065431f4881cd8ed3f619a2129d553460d6a5ca0e08566155fbbc24c7"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x7, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x10, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x100}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x9, 0x80, 0x9, [@generic={0x4, 0xd, "1ce7"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x4}]}}, {{0x9, 0x5, 0xa, 0xd, 0x200, 0x7, 0xca, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0xfff0}]}}]}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x4, 0x40, 0x9, 0x10, 0x87}, 0x76, &(0x7f0000000080)={0x5, 0xf, 0x76, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x6, 0x10, 0x6}, @generic={0x56, 0x10, 0x3, "512248f5f92a06052e49f9fe031ef58593c97e6e11f45745b4e111f4c71bac01739bf5052d0bfe9271a6af051eb8a78b513f025378698abd3d0e1b01c0b56ce36fa7f48610055c15237b6788dc1767e98b30c6"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x9c, 0x0, 0x1, 0x5, 0x2}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x200d}}, {0x2d, &(0x7f0000000180)=@string={0x2d, 0x3, "760256da4753e0796ad9af22a6201c6604f36a6ceae785e3594960ceff1c562bf2b880a903dc37a50df68b"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x861}}, {0xc6, &(0x7f0000000200)=@string={0xc6, 0x3, "42572fb4de2f0d5d036a16d1e7cf51204611818921efcc5d1d7c16956004692c0a22d191eb46a428d207320827d6d177dabcb4ad6582848b21b51ccbd7bc8b5b6fd794b749a9c4b9688393510e3115e59095938d184785ec845989e32080ae498ca68b87dc02d0710d576f581acd4f9047f66bb8108fb9a0af9c937987dd8ca5220d24e7801cd49dddc31bb86fc97c10770cfdedb01ecf468fe591f51ef782b2e902d35971494a9bb2df9a9d1e54826f557f190f5bd6ffde163cf6d9167941c7479d86a0"}}]}) 2m38.339661441s ago: executing program 7 (id=944): syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909047b07022d51d5980905eb03200002020509050412ff"], 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001900)={{0x12, 0x1, 0x200, 0x2, 0xcd, 0x77, 0x10, 0x403, 0xb8d8, 0x30bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xde, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x76, 0xd8, 0xe}}]}}]}}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r1, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r2, &(0x7f0000001500)={0x2020}, 0x2020) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000cc0)=0x0) sendmmsg(r2, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="b0e10714f27a74265c03583783ae7b72c05ec2ee4b2d669b32c617a8404789379e716b9d3fddbdde0a77326fc1c16bdbb504037743875f0bd5712b36c1ef2cf36f8dcabadf6a003ce8b82f24ab7773d5d81663914972af0fa08bb4cce5a5b28541cc1932670a6b5feb337c27faf0aa3baeeaf6ce08d43155e65c97c59c9f26bec457dacedfb88d32b7e1d30e3d0618d7f823f4b628fbf3b46e1f6d1d3fdfbe533db63e54c485b07cceb404f89aa6a53a181e109fbd73386cc7f5ca", 0xbb}], 0x1}}, {{&(0x7f0000000580)=@ax25={{0x3, @default, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000600)="27c4fdb67a18f823fe15c0d5dd7f0baa40a97576b67cbaf6d46a528104372fa706f1ea8f3675e4c9bc8778dfc8c057fad035b46708b8adff72", 0x39}], 0x1, &(0x7f0000000900)=[{0x38, 0xff, 0xfffffff9, "5f45800c553ebe2734a7efc3de83aea150668359b5d897be15c03216881cd953e49d141e"}, {0xd0, 0x10f, 0x2000000, "3d6cdfc958935e3122e37fce90e9e966a16b5e9cc5c93f63d7804f14848a84bdcfeecbb15018c7d31c25376af08b64b8ad91a10b05916bc390388f0fdd598a5a2f06c679da76ad62dc8eeec44ba0355965fd34656b7724941cbe0b4b5285892d2e4c1f3e7bab92865f7a843ae2087262c7e57a935e2c0425c4b79040d6b3aa6091da00f5c463b979a0d273370b074ba19748525fa1fad35e2a53571ad662d406cbbd252c5819fb2afc8addb31bb8071e9701fae9f94b78db56f2d096114ef6"}, {0x68, 0x84, 0x8, "564efa4638e442c5f80ec486d4326d6d4ff53117f65846ee9f6f3f8ac87f0e699265953a33973995a2d07c7a972926243980e66d6ec752a37ef03b50411a19a6513bd8271c944fe699703700db42daa3e24241bddc17"}, {0x78, 0x183, 0x9, "429cda65fd2111d933afd22a3be23313c4c38202cd42c78097b700c659cabdc48a9617bff69e86ed2038b5a551569413e4690589e832511cd7195d8a247dba8ff48d197f9c65759c3cc20d657a09eadda3b8ae411159facb2be3880f6a0fb66b379348bcd30301"}, {0x50, 0x102, 0x4, "560668c07de1d991b2670a956e9be8858299722925f2bfa16414a8ed53d92b408a5ff6c403d9f7d93a648d223883cdc1f78b6157cd433813d95aba201669"}, {0xe0, 0x101, 0x278, "0d2a3bf56e07c37dee4b34082884e048e2503008028c17a708ac219d1b10b370f6ca372b4eca8346b0924b1250ce0d59f485278f44f328ac9085483742c72874b3661d21985d5613f09d7aad008c78f9a05d022aea9b52b3fcbc36d20c4a38ef038fc6d127e32d386a693fb221f28713f073a57c01f776e0178afdb70f04b883353b40fbb450c7a24eb171b4f35768710fae02775fe258cacfb52d49b962f97855066da38a3459b947a2c4be5b637298ecc49a109b3e59c29649b06446613e5c4109238c683c8a6cd4"}], 0x318}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000680)="b35c1bf8c916d1a2d8edd5b7791e1ce84e8bf5c53bf22505f255f007febc90caa464d5e3e45e9bf78025bb86bcd9e64d91c528610a54daed07799fae1e2649c23ea06ffe41c02c2cefd507465e04b36193639a574fa0048600a05324fdf40ee1498145c12d84feb35ec0a0a26969a61c079f2d6a6a543c02ed3264b7b6a591bc5a8caabf630f38cc969db91d891692f10e33d3f43bbf8c6cce2d94e55cf646cb1e5d71571975a5d36889ac845959722d5f3a0d07f5639a68ade1f3ccd8", 0xbd}, {&(0x7f0000000740)="fa41115290fc89833de854c23a4f69482423d2164414394856ece18e61f98b8c355a891932670d3727fc0f235c755c29cc63a98925a7b2fd50611d37d19dfb0690b3d51c07f6", 0x46}, {&(0x7f00000007c0)}, {&(0x7f0000000800)="798e53dae23116abec562f513e3d6371f43b2b81635775d269f3a166164b4fbc32e2459f34b41a411a77a757cb842725590d71dcb57ff92ba0605a43ae845b7940d08e5458ad3b5784c35a9f5615c8c6e7c3185c", 0x54}, {&(0x7f0000000880)="c697d9fffa4a047a4bfe37589b04820412822510600b2c04d9b543c3613d1e08eafb04fb15a7c8f260ad21c95bc984c79f2e6ad3b5bae1d1c1450df6", 0x3c}], 0x5, &(0x7f0000003540)=[{0x80, 0x84, 0x9, "a9b6c2e9949ca6e4f8ec83fbd4bfd42766cc22e5619c4be98b47f8322a2a0e9f8466fa605e32ebed539d74db6302c2c6c862e88126fc01df66ed441223b39bac317b90c4205a41159446a2913cc2444ffd6f194009268a1d1d9215da5ed447d5557f3cccf3d0d158be1115250f"}, {0xc0, 0x114, 0x40, "fa20f36bad2a5735a3d76ac5195d9d4d5aaeb9100e189655dd8cf94e2adc58d169ee15358c6cba4cce1dbfa28694ddebc717e626d06f918d41b173a5046d5566328c2bcc42e403ac67e744ac77b9bcdef1503b0c78088e01fdffda65e8711e1c9186c6b3c1b29c9055276580133ed6f2028e47771186f7e307fb388309605b96c38bc12730c5f96e8a3e6eb6b37bfb4ed8d4c99f4c260f4ff33707abc221a49756ad239d3e287b446e6b4f4fcbf0"}, {0x70, 0x114, 0x1, "def3a420c24223b9e93a2df8ec1855b8d795bc7661bc8d4c351ad9f87faae17750d8011b39cfe7e8fdcf4e15951bb77d5ca92747fe8a2585ca7308a63630391c50c14e1e83cd5bdcfbfa69e7492ab1181be9bca778a3441705e602"}, {0x80, 0x84, 0x5e, "d57457bddd6d8374bf2141358273d18f5621cb0b4d062a68c0dc81f3dbaa7c03a35e653d3b9f5ec36c6f72c81e925a9da6a470f09cc17d10850fbe5d17156b5a23f53d9ff83f5a4d2e36b21a1b80601876e815adec0cce247846d4209121749919a187eac0b8e1154b3b"}, {0x1010, 0x10c, 0xe, "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"}, {0xb0, 0x109, 0x3, "3fab5506f5902c12dc155be48595ceae4104c259f91933ef8e3aac0a623c784a7b6520276e3ca7258a57987dba8054db6ef32698987995667a4f8725bf1aed97bc2ff2b17b1d523e9b1d850d42e8b9c001007d5bc0f5721bfee5491df23ebabced000df56fa4de548751125bd68a219fadf4452682b2efc9227ee6043839d968c76f02cc668db0e7dee230e6b514a842aef4484b3fb8b59068fdb541"}, {0xe0, 0x111, 0x7b, "65b9e16c5f691732f192062b2ec59e376554c5cd02078daa394e44a2ab488b6533b7caa1e2647060ab399d96be556508d5d7de07cb3a70fd30238ad365c7d4240218885b372544fc12dd4a28947fb5bcfde59d5258c4a5e12a28188912d530ab49186d61c149914a633ce86f778f3abec480e9862a49380ee13b9a6135b5cc35043550ef59a065cbdd783ff3f0da8b6b1c93783978df92ed1d0cbd397362e684d134b86db2c626710bdfec6107db6af815eff8ae82f52130e8c15e6a98f9464df668dab074efe66eff6e821c"}, {0xb8, 0x119, 0x18da, "eb3d9bd4beb5569cd86b0f74a3e7d47e17d95d9f9674806acd4ece240ebcb6e4433960713923ff18def93af3134a24d9dc02050fdc72e7dba1a7864d7ecf975ab1b75e6ad0669ee31456847b68d817599a2c6234d90eb9d4402359a597c61ff2963c7c6f4a82ab2adbf32893fabfa226935cd6672d6ef7b8079079ec439221c52737d4e85721d0c85197627c4421ec36ad5ba0288287ac41b6ef9576c02da5c7fd2b67f4fb0e"}, {0x38, 0x117, 0x7, "79d442fe32556fa2024509e072b998031b078464ec41a608ff0d74083523515b194a0ac9df56"}], 0x14c0}}, {{&(0x7f0000000d00)=@nfc={0x27, r3, 0xffffffffffffffff, 0x1}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000d80)="2402e794620fc447e845ddad7a3f84b6303b3904dec19886fc0c6017c63093f7b0dd329206770f3688e410bd343f042ed38c38084936d037f4af004a31cf4ba7e46364c4fa377731a8ed2cc3dc81346a4e34f2e484e84d90", 0x58}, {&(0x7f0000000e00)}], 0x2}}, {{&(0x7f0000000e80)=@isdn={0x22, 0x8, 0x3, 0x5, 0x1}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000f00)="616b7bb8cd0db1d532341aa5ea349328d92466f9911e352528f155fc721fbd759696549ef0267d6f30d858a32c8eb63e76e2985306d66b66425ebb81cdfcd0e6c8a2813beefafe892afadf9c1623346df8fe396b4ddd8496e22caf873a20ea26435b57d21aea5f4c6ae42c1f3b74286e7d728b3c8e42c7a204d05d712cf2b3", 0x7f}, {&(0x7f0000000f80)="fec87c5e859ecf0c510e5002ed09d893cbdd51b817da121486cbe38f1f7b0c9b88a4d9d662e96ab3b2e69db40c6ebd4b745fac6e17400327376f62a8f3218bb4fa0558b8ccd21b9ed8fd742182a0e3f9aabf1d62af6fcd4d4c2804212df6cfc1cbe2a06241d2af191c0929038b8fbdf0f7c13444b7ae5ff382a151879c21be38891a46be9e29fea09f472e55ffcb5d5aa66ecb17328bb1353a29815d1c6eca80abb47860b690d6e04fc0cdd9bda08aec1acf07c83ed70a5d3a8d7c3a488a7f993c3eeaccf65efd7fdb2bcc4fa7fbc1bccb1435ad9d251c86d046ca851bed75897826afdfff49be190198de5bf1b277dabdd4163bd695f9", 0xf7}], 0x2, &(0x7f0000004a00)=[{0xa0, 0x118, 0x10000, "9f3038516c3bdc4e7cf776fc96e1ffab18a44f4f40a5728f0c1e9cac4f0b501af51a98eab72436277a1a0f90d9fd27bd03b4be7bc6f3c51e38b0496cc2128a7926e5196b5da9b665f509f84aa8bbed78ed7422a5e649a9261320e597f97f36cf05bea6712becb58f069408b4277e0fbb1133d04d44630869515576f4cd955b7edef2ea337e841aa299ce6e12ff56"}, {0x58, 0x104, 0x2, "012e929b1dcc62645bfcdc1e8de52117a642b253a1a42492110b4a9ef5c0be4288d77c77b3371058fc0b184ea9342b324575d13e2530865d9dd3740d2a7ece09673d749922e782cf"}, {0x20, 0x110, 0x80000001, "44e404283a131674b7"}, {0x80, 0x0, 0x5b6ce522, "b1e35801974dbec00ed868222aed5bb2054d3d21a5f1fd3364f6956a29a5f740667375126a8d4589e989d3a13247a5a1d20aa24b7a83d2ec297b384991a230d4f9f0ef624391c3edd7ae89b48f4a8357455e1071ad5cf4d175a92d59bd843e8272a7d35282b9dffd37"}, {0x60, 0x10f, 0x3, "67c22a8e38e28b8a68796fc41a6d0251d1c6b5c5b52262e5d55fa516614cdb72a5a55793d3c6cbcc28977042ff449456074142aceeb0fecd3b30b2a725e03fbbdcf1d8712453b5e277d3"}, {0x80, 0x113, 0x74de, "e66f4b7fad6ad64656e96acf8f17fcc35a84fe3c1aa2622a4a2c630dab3fb054733404945fad1898cc7875bd90fb69fa75db088ad4e34d753c5b73629c8176396bb565a8e0e6ec2ce3803089fcabdbcec71fa9c8867e55f538e361bc12691193ba87b0763e0aeb8e6388"}, {0x1010, 0x10f, 0x3, "3d802efc54c35541a6036451ce4357278576bc115a87b099c5ea93961854bf82d4c3803a5feea5d3f06856a8d97262d38ec31719635fa0558b4d429f2b4f627c7542ae3772e2dd3a1f12e0b2476b2d2d40e061c7700a77fe317734ec5ffc45be82bff692d79baf4fde7b81b944160c93e8e68d3d7c1b612743e830349d40ee581850cdf54ae385e1264cd1c59e88067d7b5ad7a9eaa0d1a873664618e8c56136b22ceef0e9efb7d9e18e6d7896c487cdafed0ac0734b5bf6a8c90b13b8ce31e0b3ed933aaf72ba2811319f8e8d86e75328c9a30cb7c433f0da4fb8869168c07df68a1a175e29f501c721dc612c64f21ed5b1fd24fea021d5563450946315bddc31ba6899837564760fb01eceb1587362bcf41b00839d8fcfefa2970f593b96c0d869cfbda9a74570a89e53b5c105af71882201a2e050ecd837e7fdc1d27f69a23a02392a84f0a52a3e1420e4d272f4044f80e4f9b2f5b4ca639a4a2944e99c012731d0c30b01cd64d6e001e97ba97f9c04e0d06840349080c588a9db76c8548f058fbae0c035fa5f5e92f8897c81cb79e21a9b35b87572bec4b1d6393e0d4d20eb7daca96fa06587cbd64c1b788edbc2838e9e949540838ba0ac5a96100607861143431101b5f749a6a69746436b7656c1f3a8702b88e4de7bc71417613ab4fdc7ca4af288e944cca197b99ff6dde86ee7ccd07100c9f88519c4e536e62ba00cc037dc475062adcc150688c4c867a91d894a523512f932f47279ab93aab9e247460a6a575cf7002b5065dc03c4bee476a7c495b33dd930411c836d1bd46bcd36f0dd183a86410dfe41497bb84982f5a8ad25919cb278f61063089d3e441fbb32847e7c39bc07365bcdc8ec186d9c112178e3432a4bbb9b934f6977193d3b2b5460851b2f57e50780e91c31834dd99ce3521da91d3f608a85aca13224d9dffe41bb90510d1795b091d0a4641ea56b3a8e014c451db3e69f96ff00c2ab18bd4d5e817a2176304490620621659eac1c9aef6d9e81c02d63dd3b31d6db348732c38fa78fe8f353b1690b2b4d8cb29f67b72f579e7334925a92b833e8b0a26457149a9ad6bcba61b8a2da14863c7bfb6df84ffacaf84f93ac585696211a4192f9485d0a1d8402a8cc21432612073919920c0b11e917211c8fe7da7a09ec6e6c853bda01c2dbf4dc33dbf763f8e59a7fc789a2e8ed0116daa716643391dddecd065f276216bf141117ef05c182d64e96b8827827a07e00d64bd625fd65d74654045ce98a47a0ecd1902c4432a21e381eecadb4776128fc8043bd3e68e6de0302b77bd6e58c472d0ee48bc99acd850596cee44ec2a0890302cb5f142c1acda908416d62bfd110501e814b757600e93e559759513f51e261aac0c555ebb0fddc6701ab9f7e287e41f527c33cce2a6057b552aba5a943c4a169c56f2dbc0187cabfed88a2ad0448e3d5f8e15d8e7f042830401a9729386a52fae44342876e1d4d8202f40a933edcfa058bf5fefd2d685dac09500a50b38db08a8cab9d0a3b296873ce8fd3d55bdc9f0b615b897234a8e24b54f323a7d133dcbdd5b8f4bb482fccc520d44adac434527988742c6abc56a5467724e872b44bd10e440c617e6d1580087800c88391f8daf7d677268bda699c04387a04ae20fadec501d248c79fbef3a3ec239d918f9cae3d8e42fe87e39f2786f85f29fc7629faa605f5efd1370cc924520068cc3ed9460b39262ddc19333b451962e54502fc5b0bba149adeed1a267a80ecbad65b813946b241ae711c334bb504e5febc2846bea280ad6fdd014e3937b3946736fb50db3619573fd2211f2c36fa7b8aeff221fbca748ee05d512b1ce67d9f9c114aae9a968a474a64ed0dca691cf162a914fe0a5de3c627d5d861ef907098f79939a6e161f498d6eb97eec9d02bfee77249906ffa9d198e7122d60d3a5fee8df9638b949560b0cc7bf8c42a3abd70ce15d314c8fed1de0a4d84fee89f8fd42f06f7b6f39e3088327385a62f13148411b29ab2146adeb1f1307848d52140137bc68a14d711a1f93541ad393eba2d8e0b8a93a6775654f2759065c26d2de620c13fbb8b3b11950bb671a886a282a6ca27084b3eb091e15e2492b45f883fa203ed2ce6eecdeb38fe473dfd2638132734641bff57017d04f1a9954f20350231dbcb8b045655a22d4a473d6306e5071b015607bffe53a6962d845aa0ca276ea35d3b5cff42407c16ea05e1468f80b43fcfdeedf4ab595b5be032fb62c975cb15bb708a2756f331201f9451353017413c16413a5dda0fa6d12255d77261adb658ceabecba2d6567dbfba70e754a074e54f717c664b58679d9a2373b9945462c2fc8030df2cd1953f4d0db38b5e2aaf2ef9925e293a7418049ce936e9cee1afea2e85a6c8f3abd75c5682326d95b93291464ba4df967d2acca96b57e707afe5e8e7769cfbfe51fffcb805d32e60a08e452ce92768a8d997f1df68a2386298e1b826f4db8002635870808e9fefb5064c1baa6b10d27c5b4cfbe80c5e6fcf0ca2536c5c6f3b8ae9490c002798d3476a72e625ad742b4fefc5a981d1b7f492d2b370884ce95e105098ccdc30a9d8edb0f41d088a23d585a4efa91b1c9f2fb6d0901a1faa5396f2ef20b9c0a514f2ead7f7ab1147898d1e6f874de90fd95a06f67cad6a34c3c8b381128fe10f476f79f97a832e2bd9e0db5f7daf6bc58f839923084edf0096274ff4c11c02407244963af631d9271180bfc2bfc191ba5b399a5721b8ae7335e887509351820b92a5c66be45fc8a5aa3fdfe345b8e54da45fce695f318a25e1ed98dfc325c9712ae429ab4bccf5d8c3ce387e4f1ddd6cee230cfaa98b981d5892d7e2bca07506a0fcab63ca39f9321e86b15901438fa386246d172a5d4366c3b22fed655c8f3c273203aabf7b3414f599a2f04e9823693de4fa1a48d4e249a93cdef1091664f8ec405ebafd1022f8c19d39197ebebf256bffd161bb244beb5892b254686f8d8efc619348031360515a59171acf6fc46a0a17064b0b0557c9f7cee268926be26ce609c857783cc2cab0c3bdfdfa756826a94411f0d3b056d3fbce04d320dc5fb9d9f88ba467054cbdefd0dce5aa8f1f31f69eebf2fc51f8d1d996eff2e4c1cae6ddbe4b0e6ae31cc229038971cda576df82b8b0a1c1614a87615d063660f5636624f900434eaea3068c2d35f06d6d594d3abf389c7e484d26a7f0afddad8c1b90e84c4dbc19931de6368306efe75989abe06fde4b4df8bf900b022298a567d5c2011bddafa87098e8465a3f5aba1ec7e7232ed1f983a6f1d110f3eba2ed06ae06879e95886f65ce09a2521676e2e87f07315ee9407314150e88d400919a0f3d5f1521062d7d558f5ccdd4ee0f40407bebfebb7e359b6f6fdf9cd5326016cf975d3d5181792120b2dbe547beb812143daa5178dc7bd7f079bc18c11456bad6b6020f96f5060dec3a8aa97172f48c4be8eee980c92bce76afa054d2c00d9f7b343434d166e39e0d99726ee7f66730cdc19430d4a4b7bbd527d09adc949c01aeb4be3efca23b34ff9d14684cbc83e5cccaf2f9be2c18922dbf492ddc22071c7faddb91d0ea3ece476f6eb757b35faf4f4666da82937f64c80653decde3aa3179551c41b6dbc2ab06ae69dfdaf568419aa57a21df853ce132967ac5df3a0270839fe2cb4cda1dc6897fb5af59623ab0ca638c2984993f03f783169c7a34d31767ff1ff3dcb2a37a7c4623853a2d01e529b2c3738238207ab0cc431eedb2536bdf8c931e02562da0df8465693fd570f84a28c542377bca5e136a6c18c438b7ce770d29eab033d99c0ae94b4951ea93056a0c11f1e0f8a02a59c7932d6bc5eb5409cae5407cd8dc4f2ec809f96bfd8f7d63d53e4b3b2c71e8e5c79141514088d3133ab7ae092c1cf48e9fe89458ca9f1169d56df240ed85eb8bc388e27d1fed603586a4fb8562831ddedbaf1a0ab1dc862bb1a46a8dc3e680b72938f5975a98117a26141515910e62718a2f67684fa15fb848d7d50258ad33e59e0fb6e611566db500ca732222d3db943922a80bdf976fd9d0ca9203d9485613a027b64f371fb6cc6b4bc87740b2c221edb9a9a36a2c2ca103ef8fd227f0ac2a0c5125b7c2c279caebb3ef4131e0a103a902ad4e387c7223c6afc1fffbe9c492a0955954d2b2879640b063d7cfdb301c1d1cbe2f3b2ba04d7e3e78c3f0a6eda109621f59f3749242b91142f80e7605b9a685780b6b163bdff5c990cea2643baefe54ef2bcc044f04c1128fdcb45d92abb1bcd8f009529d10bd8c207a75040d7e3aa8a9b8af8575c77be4f4f756fb6226167d0a65619c2959147035c4a120f9cd7f3081da085147ba6fe685d16151e42a298810ec0e8b65e30e66e8c9dd4cd38a52250bfbf44140146687d4873d8d9cc109f64c6369f72338b80a889f3ab4f19add66feca02ec171da5629b8c32a79fc572578f69aed65efd3335de5be6a57ad875bc778d5dab9581bd55965ba4c2f74a83ec3c2b10146d1f350d93647e1313378e6ed1d740b8f0020691fcac1dc26344585ffecb8f838ceb127a450d06d3d2b332b996f2f252839f6d721b2b776b1333d49eac3c6bd89e55163c937b287936c1fcc5733a6ed6f5b86313cbe6ec5333c0146794b4acc45e77da1359fb9702610d17ca7111b7c7d9aa3aa83c6454110ef6b983fa944bb4ff71e97dc5fda7814529c933e8c040c5a5f43e64ed0e90f05fc1d768ac7f5985c52cf8bb21a2435a37bbcb7ad96174d19e909aac6014d6d1db6362f67dd69b15bb257268d8c20d29196059ec736c50da2cb9dda38feb125883dd49f761a0a69917c8b21fe05f62c35eb8fe67fed9f1b0508501585b6f6a49270507ed14b72ebd53ee599267ff08d8b8855a4ac24d718dc97dd9b83fb64859a74c5a267ab17eb092c0cca895d5e473d6136c0e9f25eb465fe836eae185bfd8f5c07cdc5cf11f2ef3977efd54331c13952f850a466f0ed5a38a08f57dc56bc98cdfc49a13bba6d0fabc683503c7d0b0f5e4657dbc7777245a9f284deb19d6d72e7e29c5f9bc3d580547d8a37c2d1b31b20858d8ddfe18ee07b8832c75d463ad3afbbf313f53e67c95abbdcf239f62dcaf5e26b6846883a88a964f7887d5ffe5f5f968946ae2c401e25c1ccb26e518e440061c1caf2d5c00ed270a77603fbd6f4f2fed5451e5087a23312a0368311c1c25f30dcbc17a01fe4377af37e141b146ed88410f53fd5557a35efbfa1238bc3dd3792a03d919087ec1ca762e19957c95a9b28b96be3c34a4b6717852477a7b39e484b358f08d9d85ce48336824c87d8439487aeb783e0c4a43832e0546c82b2ab17b7ce469baacb4a0b0fd0558f8f6136e191bc12566737be4d897ac69ebe87f010b4ea6716474a6d3014e54d1118a33f55e3454394c0b040f7d196d4af1eda98a5137b0c8fc1ec0e772c9e3dee3983e7586a6f50539c6b7331de526a79e5daa7f37c1326bae2adc3508bf89b61ff2a69cb3c5bb7b213cd21054a999742ed850f31dc3e9b622aa9dac1cf4493f7af617daf98a16b0fad25b82c6a4d06507c0f2990863c62492babe6e51a6170209217bddfd5baa4b2affc72b4c32c0da249bf902a8f32a60c8cef3e84e0b5c0ef90a87a1466f97da743eb3a434334ee026be95f5f39f0f030f06615e9424f84d69d2ff072e7c1509a716b54e705813c7879bcc4d27b069c569fe5ccf54db8974a111522fb95891ab9867f0930a4354f451c1aea8b863ee0e96e44ce9be90d762a2459fcb6b31c957e0150767afa9e42ac5856047516cd37"}, {0xc0, 0x6, 0x6, "ae379f73d84b1e81b126866601e16fb072d6e0a80ed64140f7a414c1352fc0367da8a43d1d4ee027f1598ad3dc34186c0f88af2217222e2458771489294b34af606df1cd3cda5e38abfe584c070764abcb82033c26804d9e8ea0405f31aa4d8b50bfe4839a32a0b1f405a1c20c9b674d5c0ca04a3e012ced38a5d6ab4baa6da1a91e27b4d6e0d34caa1400519323117dd4a8dbd531ec536851beaaeab938ead860dc5e357e0f40b79399288978"}], 0x1348}}], 0x5, 0x44001) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xfa, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x9302a4d6e6c47c1d, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe8, 0x3, 0x1, 0xfb, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x1}, [@selector_unit={0x8, 0x24, 0x5, 0x4, 0x9, "21ec78"}, @mixer_unit={0xb, 0x24, 0x4, 0x1, 0xab, "47b11d9af603"}, @extension_unit={0x9, 0x24, 0x8, 0x3, 0x7, 0xe, "f5d8"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x307, 0x1, 0x4}, @selector_unit={0x9, 0x24, 0x5, 0x5, 0x1, "1fd520f4"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x2fb, 0x4, 0x0, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x80, 0x5, 0x4, "f5d2974083"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x7, 0x2, 0xe, 0x4, "bc7dcd208590cc"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1000, 0x6, 0x7a, "156622"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xff, 0x1, 0x7, 0x6, "d176"}, @as_header={0x7, 0x24, 0x1, 0x6d, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x1, 0x6, {0x7, 0x25, 0x1, 0x80, 0x3, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x7, 0x3}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x2}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xfb, 0x4, 0x7, 0x4, "a0", "c6"}]}, {{0x9, 0x5, 0x82, 0x9, 0x1a7, 0x8, 0x4, 0x0, {0x7, 0x25, 0x1, 0x81, 0xb, 0x9}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x1c, 0x1, 0x0, 0x8, 0xcb}, 0xd8, &(0x7f0000000200)={0x5, 0xf, 0xd8, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0xe, "23b2ea99172bbc9a6b9a97a6b8d39589"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xa0, 0x8, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "36519bb513d9024050746952e6c06906"}, @generic={0x95, 0x10, 0x1, "271309d95eee8560f6b797ac58d7a6eb7f35301bb71bf510d8517012d2126270f952a5ba0cf7108b66a739a6e53d36b227a69bd7ce1f8ca5ff71aaac66d4506c5a8cbf5ee1f670c629b22edca29c4e20e0d26ca2e19f633985aa70a9f67986571c2fbc4efc3915727d31cdcad3b7705156c5836cc61c9ca0d82c7bfbbc059595afd85f4c24a9faa526f111d04b857fbb7a76"}, @ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0x0, 0xff0f, 0x7}]}, 0x5, [{0x58, &(0x7f0000000140)=@string={0x58, 0x3, "a79aecb8d54922c3f8d2a453ac0ecc6861ea45185631333b6208ee121000c211f4c7af57ceb933a6352e7f139bfa7dc263bc24038f59635c4adbe2cca864577b9aef80bce1673c653b4d27c296a767f41348335000e6"}}, {0xd, &(0x7f0000000300)=@string={0xd, 0x3, "9c2870fcb130b82485209a"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x477}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc0c}}]}) 2m36.926157543s ago: executing program 7 (id=950): write(0xffffffffffffffff, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) write(0xffffffffffffffff, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async) 2m36.782287294s ago: executing program 7 (id=952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndctrl(&(0x7f00000007c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = userfaultfd(0x800) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000019100)=""/162, 0xa2}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000800)) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000000000)=ANY=[@ANYBLOB="680200000005010400000000000000000700000254020100010000000800000005f7070002000900", @ANYRESDEC=r0, @ANYRESHEX=r0], 0x268}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x94, 0x0, &(0x7f0000000300)=[@register_looper, @increfs_done={0x40106308, 0x2}, @register_looper, @acquire={0x40046305, 0x2}, @exit_looper, @register_looper, @increfs_done={0x40106308, 0x3}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/119, 0x77, 0x2, 0x1f}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/173, 0xad, 0x2, 0x22}, @fda={0x66646185, 0x6, 0x0, 0x39}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}, 0x40}, @release={0x40046306, 0x2}], 0xaf, 0x0, &(0x7f00000003c0)="fcf3a4cc87ecc58440b0999cc0f60df16a5618700fb01f4586cc08d7b343f1ebcf740ae9f2625064a46f547c3136198ebd29157d3eed03d4380b515ad491477dfc37702ed9fe0ed2d8ab4c6d8dfb2059435d5c85187e49c28ee49c2dbfa442b41b2ba90cc90b30e76d9661c2cb7753f0d348ec8212c74fbae90237d6ca4da61a1d6a54103e9e1154d5b03ed2232514122f4be39921b0752a8eef6d7cc6165a343783a68cf396b2f012b1e46032c060"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) 2m34.768100442s ago: executing program 7 (id=963): ioprio_set$pid(0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000800)=""/183, 0xb7}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f0000000540)=""/229, 0xe5}], 0x4}, 0x101}], 0x4, 0x40010022, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r2, 0x0, 0x201f00) 2m24.918373753s ago: executing program 36 (id=939): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) sendto$packet(r3, &(0x7f00000000c0)='?', 0x1, 0x2, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x4, 0x6, @random="a36165f10b98"}, 0x14) sendmmsg$inet(r0, &(0x7f0000001e80)=[{{&(0x7f0000002140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000740)="f2", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x2, 0x240000d4) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=0x0]) read$FUSE(r5, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9, 0x0, 0x21831002, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r5, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x802000) r8 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x1d, &(0x7f00000008c0), 0x4) write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = dup3(r9, r5, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x18d042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x13, r11, 0x0) r12 = dup(r4) ioctl$IOMMU_VFIO_IOAS$GET(r10, 0x3b88, &(0x7f0000000200)={0xc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r12, 0x2000) r13 = syz_usb_connect$cdc_ncm(0x3, 0x9b, &(0x7f0000000b80)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xa7, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x2, 0x1, 0x8, 0x40, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, '>2'}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x2, 0x40, 0x8}, {0x6, 0x24, 0x1a, 0x3, 0x25}, [@obex={0x5}, @country_functional={0x8, 0x24, 0x7, 0x5, 0x0, [0xff50]}, @country_functional={0x8, 0x24, 0x7, 0x9, 0x5, [0x7]}, @obex={0x5, 0x24, 0x15, 0x1}, @country_functional={0xc, 0x24, 0x7, 0xcd, 0x24, [0x5, 0xff6a, 0x5]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x45, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x4, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0x1, 0x5e}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x4, 0xcf, 0x7f, 0xff, 0x2c}, 0x47, &(0x7f0000000400)={0x5, 0xf, 0x47, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x9, 0x6, 0x34, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x7, 0x8, 0x9}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x8, 0xf00, 0x7fff, [0x0, 0xc03f, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x8, 0x1, 0x6, 0xe0}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0xf, 0xd}]}, 0x9, [{0x65, &(0x7f0000000480)=@string={0x65, 0x3, "fe456bb86cdad6b039a497bd2f00b9908802ed8c5152b6e61a1e3560e5a73828204d0261dcaf0047e6c2e9eea9e5a6f275ad231e15603a08df11bc39172a9fe868ffe7b76512829e0fb3be60f0c11c5b117157f3d5158ca9fd7d70ca1779e758460281"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000500)=@lang_id={0x4}}, {0x40, &(0x7f0000000580)=@string={0x40, 0x3, "b8244dd5db649e3dc612cd6f6ca7d6af4731e0742850f34eeb125b53f6d17141839059597f3e592dc3f7926305f3363144688e2d163db5cc64fc8fa3c85d"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x400a}}, {0x5a, &(0x7f0000000680)=@string={0x5a, 0x3, "1d53ffd338feb1c9c48e3f8de7b991d85d831cf035d1de381e0e0b103287abc57c9cb5a9327c4cea5823581d58bc4ef7fdab02320912b28e969d8d185fca133ca36315d47181ce6f7b25fb7b4adff871d91cb9293b7bac66"}}, {0x2d, &(0x7f0000000700)=@string={0x2d, 0x3, "05bd573cd992c1fcc73d5212825e3fceb8c894bdea152fcd39e727cb6ad1f9dd3c813804175a30199ffe6b"}}]}) syz_usb_control_io$cdc_ncm(r13, &(0x7f00000008c0)={0x14, &(0x7f0000000840)={0x20, 0x1, 0x39, {0x39, 0x24, "221f731027c84d2ef3b93b46d214509f9cd5ddf0c40ab4ab829e29ffba35f0c9210f357209658647fd82b0896589b21b5184a9f77d5297"}}, &(0x7f0000000880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b00)={0x44, &(0x7f0000000900)={0x20, 0x14, 0x1d, "fb3035900fb12a1fbad84de560f2aa3222ef3506c798780e4d8139b1d4"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x10}, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x3, 0x6, 0xbd, 0x6, 0x7, 0x5, 0x3, 0x2, 0x2, 0x5, 0x3, 0x2}}, &(0x7f0000000a00)={0x20, 0x85, 0x4, 0xff}, &(0x7f0000000a40)={0x20, 0x83, 0x2}, &(0x7f0000000a80)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000000ac0)={0x20, 0x89, 0x2, 0x1}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) 2m19.550148146s ago: executing program 37 (id=963): ioprio_set$pid(0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000800)=""/183, 0xb7}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f0000000540)=""/229, 0xe5}], 0x4}, 0x101}], 0x4, 0x40010022, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r2, 0x0, 0x201f00) 2m4.024523055s ago: executing program 8 (id=1075): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async, rerun: 32) r2 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x140a, 0x2, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r4) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000c04) (async, rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r7, 0x8e834ab5546fe5cb, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044030}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x24, r9, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x24}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r11, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) (async, rerun: 64) r12 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r13 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022d00010000000009040000050300020009210000330122050009058103"], 0x0) syz_usb_control_io(r13, 0x0, 0x0) (async) syz_usb_control_io(r13, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0xe, 0x3b, {0x3b, 0x10, "60d4115e4a6b086995dbb816a4f923936b455bd612c103dd040379d2ea130943c7f66c4274954a0c063c8d4fc851204a6ea2bd449644e94485"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES8=r13, @ANYRESHEX=r12, @ANYRESDEC=r4, @ANYRESOCT=r4, @ANYRESOCT=r4, @ANYRESOCT, @ANYRESHEX, @ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x28, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8001, 0x1e}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m3.656723883s ago: executing program 8 (id=1079): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd", 0x12}], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd", 0x12}], 0x1) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) 2m3.132094481s ago: executing program 8 (id=1080): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000001a0000200000000000201500", 0x0, 0x48) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f00000002c0)={&(0x7f0000ffa000/0x1000)=nil, 0x1000}) ioctl$RNDADDENTROPY(r1, 0x40045201, &(0x7f0000000000)=ANY=[]) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000004000000a6"]) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount$nfs(&(0x7f0000000040)='\x00', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x0) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @random="e2b03a0a83c5"}, 0x14) sendmmsg$unix(r5, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x1, 0x40004) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x6) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000140)={0x0, 0xd, 0xfffffffffffffff7, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000540)={r7, 0x7fffffff, 0x2356}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)) 2m2.192029835s ago: executing program 8 (id=1083): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12011003ae7a3218c60512922891010203010902240003f809000809e70207001d80ed06b0263aa6002bde7d0009046f0800ffffff00"], &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0x1b, 0x4e24, 0x6, @loopback, 0x6}, {0xa, 0x4e21, 0x80, @empty, 0x4}, 0xffffffffffffffff, 0x8}}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x81, 0x20203843, 0x3, [0x2], [0x800, 0x0, 0x9], [0x0, 0x0, 0x4]}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) r6 = syz_open_dev$radio(&(0x7f0000002b40), 0x3, 0x2) ioctl$VIDIOC_QUERYMENU(r6, 0xc02c5625, &(0x7f0000000000)={0x98f907, 0x1, @value}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="262c0d3f3477035f8ea6ed09a27ba7df0840a9166e447bc1dff0a28a6721e616375e8364764e85c1c76949017a3df471f84f4c8df4389a6efaf467161bff8f888314c548935d1bb6fa001c34131d0d32f1271ba9cd1690b7360c760d9afb2d20b745ee5a8d0fba870262ea078f357a939a0701ce1dc538204c9b5ec9e83e6b7e546fce493fee8eaefb6bac233a06ac061564f65fd746d0caab3ed26a3fe49ed23e0b56fccee4d6fe7867869dd383d76613f9a84ac049e595a2a6b242141c91999404986fdd35aa383f80cce7152d4f875f55d2e3547ffe7ad854200482afa9ec89e10d7607595bcc04c52e512201c980fa83743ed62f4389e5e0145b497de5a0dd2eee2ea397c1653353be0f2b4798ca264c46f2850e5b2d5e47ca241019eeca52ee9b41b7e312bdb5dbefd39b5bfc90d87a25b1a675", @ANYRES16=r3, @ANYBLOB="010029bd7000000000008900000008000300", @ANYRES32=r5, @ANYBLOB="04001d80"], 0x20}}, 0x0) write$sequencer(r1, &(0x7f0000000080)=[@x={0x94, 0x9, "4900b8759e5d"}, @l={0x92, 0x0, 0x0, 0x11, 0xfe}], 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000180)=""/160, 0xa0}], 0x1, 0x1ef, 0x1000) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f00000000c0)={'veth1_virt_wifi\x00', @broadcast}) ioctl$IMGETDEVINFO(r7, 0x80044944, &(0x7f0000000100)={0x116}) 1m59.144120447s ago: executing program 8 (id=1092): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002380)={0x50, 0xffffffffffffffda, r1, {0x7, 0x2b, 0x2, 0x100000, 0x9, 0x1, 0x10001, 0x40, 0x0, 0x0, 0x10, 0x7}}, 0x50) umount2(&(0x7f0000000080)='./cgroup\x00', 0xf) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe02000200000000", 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000b80)='./file0\x00', 0x0, 0x2368ae, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0x3, 0xfff, {0xffffffffffffffff}, {0xee01}, 0xffffffffffffffff, 0x1298}) mount$9p_unix(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0), 0x10003, &(0x7f0000000280)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x3b}}, {@afid={'afid', 0x3d, 0x7}}, {@ignoreqv}], [{@smackfstransmute={'smackfstransmute', 0x3d, '^{\\.('}}, {@euid_gt={'euid>', r3}}, {@uid_lt={'uid<', r4}}]}}) 1m58.988150783s ago: executing program 8 (id=1093): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0xfffffffffffffe8e, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r2, 0x0, 0x201f00) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)='9', 0x1}], 0x1) 1m48.961112085s ago: executing program 9 (id=1143): r0 = socket$netlink(0x10, 0x3, 0x10) semget(0x2, 0x4, 0x200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f00000001c0)={0xe4, r2, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2d}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0xfffffffc}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "62389cf49afa50070a7fca77432f3f390adb087285078001"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "98efe19c141374eac010126892db0162747e2b2bc54ecba0"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "28111e083948edf62ed7c59fb003cf37bb5ec883faa484ad"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_vlan\x00'}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4040}, 0x20004014) 1m48.871338274s ago: executing program 9 (id=1144): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b20009058501"], 0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0xc0, 0x2, 0x3, 0xb3, 0x5, 0x1}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) listen(r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x81000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x70, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x6, 0xf0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "859e"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x9, 0xfff, 0xc}, {0x6, 0x24, 0x1a, 0x5}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x8, 0x0, 0xad}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0xff, 0x40, 0x8b}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xb0, 0x3, 0x4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0xff, 0x2, 0x0, 0x20, 0x1}, 0x2d, &(0x7f00000001c0)={0x5, 0xf, 0x2d, 0x2, [@generic={0x1d, 0x10, 0xa, "4c20121924e8a9f05500c17d44587e5365e2f05155fdcde5669b"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x9, 0x79, 0x3}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x4c0a}}, {0xc5, &(0x7f00000003c0)=@string={0xc5, 0x3, "ffb10afb9cfb35076cdd87443e661682e587c8a502a39b8c65698c4ed2e4a225c08d4679cff76669735f17b4d366b474e3a5768205034648b86a3c11b4536c3508902ad682f8d528d81ba60eb294f18400b0684189d925964243c388dd52675defc28448ae4cb677a35844108bdf0cddf692ce4ca763d5121db9b5c1da0d2e983cbc4155cf1e4b8b42a8cf7286f781562016e2336801614fc7aeece37ebb51b3d8e3c500dd0639f53935c9b9b32c6e8c408596ecb2a19c355792cf8fdabf9dc9c4cb5b"}}]}) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000140)) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m47.404119767s ago: executing program 9 (id=1151): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, &(0x7f0000000040)) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000900)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x2}, @generic={0x3, "710e4f599d2a62db5fee1c8fdba5"}, @sco={0x1f, @none}, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffc, 0x5e, 0x6}) 1m47.37011136s ago: executing program 9 (id=1152): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c000080"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b"], 0x68}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x1, [{{0x9, 0x4, 0x0, 0x4, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xda, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48) r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) syz_usb_control_io$sierra_net(r6, &(0x7f00000000c0)={0x14, &(0x7f0000000180)={0x0, 0x21, 0xb7, {0xb7, 0xf, "999563e684f83ad61f06a9c6d31280990889e81879196ce9b92c473f46b5c6933c456301ac840b6ef65734ba67b082473cda9104e952e922c398fda0234d871318a6f4175464b798a2cc0628ea66eb8b00db793b6137de6a6f749dc29fffdb89002f07d5169ec0482603121fd5c1058c6c14a00790556d8de22d6b4f54ca872971435f851ac80e521a31a02a4f53cd87a89fde26cc68f3b91a79960d77e8097a3c311911f5e207c6617a16b4ed60a67207b2d0c501"}}, &(0x7f0000000080)={0x0, 0x3, 0x2b, @string={0x2b, 0x3, "9aa02f353ec7da93e9455ed77c82737da4c0c7f1789fb648fdca1a45724451c14e332987bdf0e0a754"}}}, &(0x7f0000001080)={0x1c, &(0x7f0000000bc0)={0x20, 0x3f, 0x2a, "c0dc519ad33aff18bae4cf6827fa7eb68af2cfb1b3a8e4a0ec8677ce0f704389f8e20d1f8a9de065a3ce"}, 0x0, &(0x7f0000000100)}) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x960, &(0x7f0000000280)=ANY=[@ANYBLOB="5c09004e5cc7e94750a7abd1b0156dbdb4d7ba57387f2bdd943841fb75e16a00e3c9c5fbf4661e3835b44b7388e23bc9b30747f4af9bb9a30208b64aee725c7caf739e23e01346bf1b13f1a7bbb305e27f6c93f65ebe1a3993bb6d6dd7432dc92f8fe8ea6b1b29f145b65dd78ed416974177dbb8b2e77db04b6fa903b239c42e97e935edb5858d8bdc0c3553e5b6e26eadf2c02cddf6a85caeca76403f5a6a4b18aae3a411fbf2483238e48cbe716da39c3e7a7b802b80e1be05c16923950e730ac3614d942f66baa33f16b9879e8efa0f65d50fe1a9107685239d242de6bc1e56ad6f7495f88ef1ff7ce40000000896e9da05ba05f60c956d5f0c74bf3d0c7d72a3438854d7bc1b84cee63b8573957b00f7dba9b6c56b9cf480b47361c0aed618cf91036f873cf39cbbd470e93c15cd0a9fe2a179e37e6c9e49a46ce803b67efc78ffebb7bd043601e3d54b943f5936d4fb730887aada1b9b4cb9d6f791683eb86cb01771583a12e79cd975618ba2dd3fd7ad17f67abcbbc06deed6613d16a3312962a536d9052fa2b0ff70298046ce365dfd038d364b20859c6200db105dd768572d20750a027ca3b39df44bb3dc89758f67ee11a171185d64fec65f3f5d7220baef211906c880f25b3a0a3a84970132c74291d80e900389e09a6dc7561a48a15edc472835123c82b8018bd7f362eff9d14af0719650ce2ba0cb6c62de350ff2884b03cf0ecd992b7ec60615f1938fdf95c2e7fbb715e322ae50c777ebf49f35cc9efaa5c973c2c4e23e50fa8fd0a06ebfbb3e129633aacf10245f5b0d63004a1b7d0666971b9ee2c5926925ceddaee7f3c0955ba87fe24a7514dea2e83c788a802bcfcf70f22ac3461e69ec644f1d1672c3e9979d35ce4b28984e56cb8b86a605d2a17d14b3f16f0be176b99d07caaa781e1240f07d083758faeee385fdf642d481dd17d4f5663377431ef2e1f3dc43fb4d8bdf9044963710207538787d0c195d7ad3093b92b6cebb3b8d9a76d79fe9fc72a20897b714f09c5eed43feb22eeb68b5f81766996c10bf338023a9c5c83b618aba3dd191c006f9f941e5423f7b99dd765ceb64df82060f2c89ded081d24d6c03cc2e50f08b9fede7e99b23649e5240e256176271b8223868d86506e604050bdc7fa4b640f8e662076b37b6ad274edd345136a0873327773daacf63a44cdb4fd583fc732c89fdef3a51a6314b50512b7c156c18c404b130b1995137633d6f662ae2953a0de7ab78ba7f2a9a3b68eca8753370d391d18a2099828b6b99962589a74b84fc80513a1478c97a6f1b0343aa64d5d045277eeb0da48e2d3cbbd1f1b5dd0888f1f091b3ec4d3baf5a20ab48f413bfe319a32b3211858200db55bce4c674704ec6f65224bd919ccab11908c84ca1a97b0dc65ac4ef0c876d8acde88be86b432e62861f0972fd0e9180812d1f688200c53f4d3474a4ed45f4c2ccb50b01cb87fd5d7d3ce604d58cc93c43a28c3c8e1dd3f7d0e2e6d9f8216d3325976695d1bb65a865fa98bda52f2e804f8762e25205b4b6f2c3b1e7edde5f99a6a7f999cda6e7866eb3d3f3e4a089057296d42753a592c90c5807c4f64f433ac02be5141278cc81fce6b301f8298546d7990a0e61d0ac08fdd1c9e9c9b50ffb3aa927a8e788c9a47e60e1ae80f48fee6ce4b1a38f0de37e502872f3ffec47776ab446521d85ac797b1bb4d8d15639a0fe78361e0bddab5d19e7ef54cb60db4e8c61fcc2b668f28401b7665d05344a3ad27cc481e65fe29af815feb3bfddf00d6a800fbd0dc6821724c8b9964d91f0f0845dc4296cf4619109d58545941926bd71cfe51285d4d5c38f134cf722917002a0dc2d9fffde96b48b0bc07f45c63b201f6110001b8de821ff1475bacb3dc9d9f4488ae9ed9c90d64677f9bcaa28d3209f14408470f5b80ac60975c3007cc3700bd7c003d8f381f58254ab45eeae9172a7d8136bc76b2ada3d3a1f1e1bda5e2f6b4adca4e68d0586ec00e334d054006cbd2289865cf91d2951d8a5d81f594f58343b473487278c810f299853511e24cee4a86f2e7319acd94254d9a2a5993d7edba723ac7c001ae78662c72d925180d4db6665df943f4e7eeeeb720fee4deb47e72387866902edee0552f27bd6cfaeba56d5bf6ee5bc2f27c176010b574e0a2cc93c72c49a164f7408b57ca6e488414b1030a5b93c2bd87a35350896cb171a01132eb3ac87f5239bb9e1370989be5c221ca9a47940a95aa37be5d0b08ccd34c6ed08edf96c5ebc4aa71e1de8b8dace4a5a2168f36bee61d0237aeb9da9ef1d96ec541f424ff8f2158803f079998c4600b3ad64fd91f6e779c6653b853d0f1cc4973e3fb23c82d0d23f38d2dcc34b09de7ef3acbef7eb42bc79afb2cb21aeb49a12651b225302e0a49804ab98bdbfe255cbcb0f6e872cb9558d68305d49a1615e8f0f8d8341ebe62dd52807db9ace1e835674b2310d4cac22e5582bb0f648607b0e858e0dc61d09f3fd4fcc2190e3ddd9b3cbd42b1677e58d896969bff9736707d759cdc4ada53a7f4f336a01f89fc674e10f8e8f4a4790ca90bc8d4dfc1e2840c3474fb197e888f1622489d3f6a765a76310f06a14797a2452203f3c3dd4f92e9ee02a8bd8224352b97998908d7cda9f47fcc6fabfe7cd7f6ba5a8c080b7d0ad8e65d167a51724bb8229d4fa120a098fe7dce04c63dc28ab538586e5804c79303c26a83e5a3625a4cfe7b5f29e1a8d25fd2709dd99c210b29f6dcac37e850758f4c4465b87c28833726c5df4f5cf54ae53e98c170c0da7ad0dc7ac158030ed2c8cae1f0bdb130937a27a55ee6cc52368f44623b5f8fd8acd331898bf12d39923c98cfc05f7b41e9d970cea07e4465acba327ec7ae03b1114faff5b52a2f8f5b721bcbbde1d424baf478840dd597f7cd428d60f9a351ea11c04bb0a90642f172c57e91f9f7cf204a72927e4f0e66777dcd4347821e2ee4ccaeb965a6c02688076459b150bec8e4f045e4f0f48084905c9bb85f0df98a8a4dbb9c161110e627e958f079af3baf3db844cd987ffc047b5a0ae3f8b97d1d2c1bd197dee9b3ac0756460dd84d1672cab90815a8d0c36cc26385537714d81401d4413a1aab9f26f4cee049dab79e9d7801f8ffc4988bc57e6031e10164d118bbba8ce953984092295aa9d8660385c81e39b908960de2a82e7a2e6bfec2f27a0ab47764ab7d8bf3e055c3ad10a6fbed77b7d7af10f8402cf4c49d594aeabb991c783b9b960ede788de5f773be4ab5d3507dc246987880cf8865d8754a5dc0371ddb9b97415ce36c9563c87146f5807e06800f7018a3536ed02fad964c6a9"]) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000100), 0x8000000000000, 0x0) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="0a00060008021100000100003000508011000a004abee33908f8eef16f162471f4000000050002"], 0x58}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) 1m45.576244272s ago: executing program 9 (id=1157): r0 = getpid() waitid(0x1, r0, 0x0, 0x4, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'wlan1\x00', @multicast}) 1m45.273619741s ago: executing program 9 (id=1158): r0 = syz_open_dev$media(&(0x7f0000000080), 0x4, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000006c0)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000002100)={0xb16, 0x20343059, 0x1, @discrete={0x8, 0x2}}) 1m44.906252344s ago: executing program 38 (id=1158): r0 = syz_open_dev$media(&(0x7f0000000080), 0x4, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000006c0)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000002100)={0xb16, 0x20343059, 0x1, @discrete={0x8, 0x2}}) 1m43.755542596s ago: executing program 39 (id=1093): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0xfffffffffffffe8e, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r2, 0x0, 0x201f00) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)='9', 0x1}], 0x1) 1m24.607798915s ago: executing program 1 (id=1234): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000080)={0x5, @raw_data="e98cac8ab2f0d77bd773c867132932324e06e550bcda9f255fa83670732f759ee04c82d572d996955bba1fb088c4275fa96dc64c5ef5667de19e2daa64ee46691450c03e2fc3b0d30039d8d6ab025a17297698eed025e7076284860771ec629b5def9dd861b94c8bc65eab7bd69e57c3ad83a9309f2c81a094cceb5a58b4bd64b0f90f623a3bd0a27db6bee8b76e2361cef9ef34a76380bac7efad77a143ac993217a785e1454e72bedceed8ea02bad41e4b5cd0e8abc222ee46522201b9c8cd3f2382e2107ae5bb"}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x80}, 0x1, 0x7}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="310300000000000000000900000008000600", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES64=r9], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r11 = socket$packet(0x11, 0x2, 0x300) r12 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) bind$packet(r11, &(0x7f0000000140)={0x11, 0x16, r13, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl0\x00', r2, 0x2f, 0x56, 0x5, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x1, 0x10, 0x915, 0x7}}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000b80)={0x554, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r10}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r13}, {0x84, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x2, 0xa, 0xa7, 0x7}, {0x6, 0x9, 0x29, 0xfffffffc}]}}}]}}, {{0x8, 0x1, r14}, {0x1c8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6, 0x6, 0x1, 0x40}, {0x0, 0x7, 0x18}, {0xfa, 0xf2, 0x9, 0xb743}, {0x2, 0xf, 0x6, 0x7}, {0x2, 0x4, 0xfb}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x2, 0x9, 0x52, 0x7f}, {0x2, 0x6, 0x24, 0xbf}, {0x2, 0xff, 0x3, 0x7}, {0x9, 0xa, 0x5b, 0x7fffffff}, {0x3, 0x5, 0x6, 0xc}, {0x4, 0x56, 0x7, 0xdf6}, {0x1, 0x8, 0xe}, {0x40, 0x8, 0x5, 0x5}, {0x0, 0xfc, 0x1, 0x1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x554}, 0x1, 0x0, 0x0, 0x44884}, 0x4040894) tkill(r3, 0xb) 1m24.211969575s ago: executing program 1 (id=1236): r0 = socket(0x11, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05604, &(0x7f0000000400)={0x2}) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000640)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) getdents64(0xffffffffffffffff, 0x0, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @broadcast}, 0x14) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1m21.848078299s ago: executing program 1 (id=1246): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8000, 0x3, 0x8, 0x0, 0x3, 0x0}) r1 = syz_open_procfs$pagemap(r0, &(0x7f00000000c0)) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) writev(r2, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000600)="c155", 0x2}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000100)="9d", 0xb99d}], 0x1) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x4c51, &(0x7f00000021c0)=[{0xfffffffffffffff9, 0xffffffff}], 0x1, 0xe1, 0x0, 0x0, 0x40}) 1m21.680600731s ago: executing program 1 (id=1248): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc2, 0x4f, 0x40, 0x2, 0x80, 0x1, 0x3, 0x44, 0x8, 0x0, 0x100000000009}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) (async) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc2, 0x4f, 0x40, 0x2, 0x80, 0x1, 0x3, 0x44, 0x8, 0x0, 0x100000000009}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) (async) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') (async) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x9, 0x4], 0xeeee8000, 0x400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) userfaultfd(0x801) (async) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000fee000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0xf000, 0x2}) (async) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000fee000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0xf000, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x140, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x114, 0x3, 0x0, 0x1, [{0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x103, 0x6, 0x1, 0x0, "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"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x80401, 0x0) (async) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x80401, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f0000000040)={0x1, 0x6}, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a0001007374617465000000080002"], 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$USERIO_CMD_REGISTER(r5, &(0x7f00000001c0), 0x2) close(r5) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m20.726635491s ago: executing program 1 (id=1250): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x22140, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "52dddc2e0fe0354add9a2c2a028e07598a134fc7080100fb00000017fffff300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000000)={"a1fb819c4ba7a03f71ba3fb5829728bc9f1814b6e001e3c8b14619059bf2edbd", 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2}) 1m20.336076064s ago: executing program 1 (id=1252): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x7}, 0x8) listen(r0, 0x5) accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x80800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000005b40)=ANY=[@ANYBLOB="1201100100000010ac05460240000102030109022400010108b0050904000b01033b027f0921faa5090122d10b09058103ff03008f76"], 0x0) 1m19.823713124s ago: executing program 40 (id=1252): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x7}, 0x8) listen(r0, 0x5) accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x80800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000005b40)=ANY=[@ANYBLOB="1201100100000010ac05460240000102030109022400010108b0050904000b01033b027f0921faa5090122d10b09058103ff03008f76"], 0x0) 41.576155208s ago: executing program 5 (id=1444): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prctl$PR_SET_THP_DISABLE(0x44, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="1c0000005e001f3814584707f9f4ffffff000000250000001ff80020", 0x1c) ioctl$VHOST_SET_LOG_FD(r1, 0x8001af85, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000940)={{0xee}}) 40.140733867s ago: executing program 5 (id=1450): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310428bd7000fcdbdf251600000018000180140002006e657464657673696d3000000000000005000200fc000000723fa6deab3833bb225e80b67141d09cdb0bd85a641c6e0e9f20f3000611849a5289769e255e5e5ef881a1274034bc4a79ade15db1882164b3392fe64a683a4f01d1882e28e5b5b311226272406b1892113ed4a0d545ebf3f7ad73ac48904995d5b4b93cdbb08eb2c8dc09b1b639d77df43e6339512ca782d8489222db65b1f5f2d0c0e11ff47568afcad4bde3eac6fb067af5bd50ea7d3a9e60b75f1f391488b52f68d58dbe1848342445719cf847f4532c533b01c098b2c746f6aa1a77c643168ddaa5"], 0x34}}, 0x40) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) madvise(&(0x7f0000025000/0x2000)=nil, 0x2000, 0x11) gettid() 39.949095569s ago: executing program 5 (id=1453): syz_open_dev$usbfs(&(0x7f0000000480), 0x78, 0x41341) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock2(&(0x7f000034f000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x807bff) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x78, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfdfffffd, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7ff7, 0x0, 0x5, 0xb, 0x3, 0x5, 0x405, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3e, 0xd9, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1002, 0xa2, 0x7, 0x953a, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x149, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0x226, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0xf43, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000180)={0x0, 0x0}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r2, 0x80045005, &(0x7f0000000040)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private2, @in6=@private1}}, {{@in6=@private2}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) 38.936356655s ago: executing program 5 (id=1457): rt_sigsuspend(&(0x7f0000000000)={[0x5d]}, 0x8) (async) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x26) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) io_setup(0xe3b9759, &(0x7f00000000c0)=0x0) io_pgetevents(r1, 0xf06, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={[0x9]}, 0x8}) (async) write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'dctcp\x00', 0x3a, '', 0x3a, './file0/file0', 0x3a, [0x50, 0x4f, 0x4f, 0x43, 0x0, 0x4f, 0x43, 0x4f]}, 0x3b) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) rt_sigprocmask(0x2, &(0x7f0000000240)={[0x5]}, &(0x7f0000000280), 0x8) faccessat2(r0, &(0x7f00000002c0)='./file0/file0\x00', 0xd067a4d6821f924b, 0x100) (async) ppoll(&(0x7f0000000300)=[{r0, 0x100}, {r0}, {r2, 0xd000}], 0x3, &(0x7f0000000340), &(0x7f0000000380)={[0x10]}, 0x8) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0x5c, 0x0, &(0x7f0000000500)=[@increfs_done={0x40106308, 0x1}, @register_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x1, 0x2, 0x1a}, @ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/127, 0x7f, 0x1, 0x10}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0xa9, 0x0, &(0x7f0000000580)="da0ba2ec9a3fa09673ead0c29f2e8c7f5effa1e4be5b89ddaf1bafdb4d4dd482b2d4a82116c87e0f9ca09de6531cb70c6646a7cbf348c3096275157b96a4cf423174feb61fafae197e0f2f0f307392e60bc75cefe661b60a1ad41d9873583a98f8662bbc2e38ff92167d626df26ae12abeb3748de22f5939e0a001d38ffa80e0a0968960cc702804d7a3ebd7287095e9d930cbe106bc5c52c22048464e966489be9ad4803d2e9b5646"}) (async) r3 = getpgid(0x0) ptrace$peeksig(0x4209, r3, &(0x7f0000000680)={0x4, 0x0, 0x5}, &(0x7f00000006c0)=[{}, {}, {}, {}, {}]) (async) pselect6(0x40, &(0x7f0000000940)={0x2, 0xe8, 0x0, 0xffffffffffffffff, 0x1, 0x3ff, 0x8000000000000001, 0x7}, &(0x7f0000000980)={0xa, 0x1, 0x2, 0x0, 0x8001, 0x80000001, 0x5, 0x5}, &(0x7f00000009c0)={0x4, 0x1ff, 0x17f6, 0x4, 0x2, 0x100000000, 0x8000, 0x9}, &(0x7f0000000a00)={0x0, 0x3938700}, &(0x7f0000000a80)={&(0x7f0000000a40)={[0x10001]}, 0x8}) (async) r4 = pidfd_getfd(r0, r2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000ac0)={{@hyper, 0x1}, 0x0, 0x0, 0x6}) futex(&(0x7f0000000b00)=0x2, 0x3, 0x0, &(0x7f0000000b40)={0x77359400}, &(0x7f0000000b80)=0x2, 0x2) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000bc0)=@gcm_128={{0x304}, "f55d6cd3e32e89e0", "e2c75006e3c929f12613db093524c6b9", "133278c6", "42ce949f03486bca"}, 0x28) r5 = syz_open_dev$vcsn(&(0x7f0000000c00), 0x3, 0x101000) rt_sigpending(&(0x7f0000000c40), 0x8) (async) ioctl$int_in(r2, 0x5421, &(0x7f0000000c80)=0x9) (async) r6 = syz_open_procfs(r3, &(0x7f0000000cc0)='mounts\x00') ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000d00)={0x4, 0x0, 0x1001, 0x8001, 0x5, 0x4, 0x8, 0x1}) (async) waitid(0x1, r3, &(0x7f0000000d40), 0x8, 0x0) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000dc0), &(0x7f0000000e00), 0x2, 0x0) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001300)={0x0, &(0x7f0000000e40)=[@cpuid={0x14, 0x18, {0x1, 0x4}}, @uexit={0x0, 0x18, 0x4}, @code={0xa, 0x4e, {"6767430fda6100c46105d36efef2f0f694ab781dcf9365660f38816e00260f784307c4c221b8d40fed3ac4c1a112a79d8edbda3e640f205cf3460fa7d0"}}, @cpuid={0x14, 0x18, {0x3, 0x40}}, @rdmsr={0x32, 0x18, {0xab5}}, @cpuid={0x14, 0x18, {0xffffffff, 0xed}}, @code={0xa, 0x4c, {"c423895cd98a660f3881550966b802008ed0f30f098f09788078000f01c466baf80cb8865c1d85ef66bafc0c66ed0f790ef0460fc04600400f2133"}}, @wr_crn={0x46, 0x20, {0x8, 0xffff}}, @wr_crn={0x46, 0x20, {0x0, 0xffff}}, @uexit={0x0, 0x18, 0x4}, @wrmsr={0x1e, 0x20, {0xb21, 0x8}}, @code={0xa, 0x5d, {"0f01d166ba4000b00fee263e6666460fc748d04c0fae02b805000000b9581900000f01d9c74424002d010000c74424020b000000ff2c24450f01df0f013ac4827d1c9a0e0000002e0fc75f04"}}, @wrmsr={0x1e, 0x20, {0x240, 0xe951}}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0x7}, @cpuid={0x14, 0x18, {0x4}}, @rdmsr={0x32, 0x18, {0x9cc}}, @uexit={0x0, 0x18, 0x8}, @code={0xa, 0x77, {"b99c080000b88c4d0000ba000000000f300f20e035100000000f22e048b802000000000000000f23c80f21f835040090000f23f866bad104b808000000ef66baf80cb82eec468aef66bafc0c66ed440f01f80f01f83e263e2ed9f80fc7ae4c000000650f01c4"}}, @wr_crn={0x46, 0x20, {0x4, 0x10}}, @rdmsr={0x32, 0x18, {0x1a2}}, @cpuid={0x14, 0x18}, @code={0xa, 0x78, {"b9640b00000f3266b88d000f00d066b8ba008ec866baf80cb81058198eef66bafc0cedc443516913fc3e360f01d18fc978e19aa7000000676526f3470fc7b58000c0fe66baf80cb868da2d8eef66bafc0cb804000000ef66baf80cb8c8a8f384ef66bafc0c66ed"}}, @code={0xa, 0x73, {"2636363e0f01c848b804000000000000000f23d00f21f835100000030f23f866bad104b000ee6767410f21c10f20d835080000000f22d8c4a1f1dc29c744240087000000c74424026e190000ff2c240f06b9800000c00f3235008000000f30430f09"}}, @code={0xa, 0x8f, {"c422659db94b0000000f01d9c402993d95ae08000066baf80cb892006781ef66bafc0c66b87b0066efc744240009000000c744240208000000ff2c24660f38805859c744240009010000c744240207000000ff1c240fc73c51b917080000b800000000ba000000800f3066baf80cb850df4b85ef66bafc0cb896000000ef"}}], 0x4c0}) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ptrace$peeksig(0x4209, r3, &(0x7f0000001340)={0x400, 0x1, 0x1}, &(0x7f0000001380)=[{}]) (async) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000001400)=0xffffffffffffffff, 0x4) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000001440)) 37.972855976s ago: executing program 5 (id=1459): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_restrict_self(r0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000010c7fea4a1180015000600142603600e120800110000810401040016000a0010", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) landlock_restrict_self(r0, 0x4) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000010c7fea4a1180015000600142603600e120800110000810401040016000a0010", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) (async) 37.591774086s ago: executing program 5 (id=1460): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000300)={0x26d, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x20006, &(0x7f0000000500)=ANY=[]) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = dup(r2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x2, @private1, 0x5}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000006c0)={r7, 0x98b8, 0x10}, 0xc) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000080)=0x2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCCBRK(r3, 0x5428) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000100)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000200)={&(0x7f0000000140)=[r10, r11], &(0x7f0000000180)=[0x81, 0x7, 0xfffffffffffffff6, 0x3, 0x2, 0x4, 0x4, 0x9], 0x2, 0x1}) 22.57812814s ago: executing program 41 (id=1460): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000300)={0x26d, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x20006, &(0x7f0000000500)=ANY=[]) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = dup(r2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x2, @private1, 0x5}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000006c0)={r7, 0x98b8, 0x10}, 0xc) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000080)=0x2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCCBRK(r3, 0x5428) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000100)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000200)={&(0x7f0000000140)=[r10, r11], &(0x7f0000000180)=[0x81, 0x7, 0xfffffffffffffff6, 0x3, 0x2, 0x4, 0x4, 0x9], 0x2, 0x1}) 8.494616174s ago: executing program 4 (id=1575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_MCE_KILL(0x4e, 0x1, 0x40000000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc2, 0x4f, 0x40, 0x2, 0x80, 0x0, 0x3, 0x44, 0x8, 0x0, 0x100000000009}, {0xb, 0xa6f2, 0x8, 0x8, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x9, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x80000000, 0x0, 0x9, 0x4, 0x5], 0xeeee8000, 0x400}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a03000000000000000000020000000900020073797a310000000008000440000000030900010073797a30000000000800034000000005140000001100010000000000000000000000000a"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x9) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'wlan1\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x20, 0x6, "915b508119e8"}}) read$char_usb(r4, &(0x7f0000000280)=""/208, 0xd0) 8.263902296s ago: executing program 4 (id=1576): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000300)={0x28, 0x6, r2, 0x0, &(0x7f0000fec000/0x11000)=nil, 0x11000, 0x200}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x19101204, 0x0, 0x0, 0x1, 0xe, 0x0, 0x0, 0x100, 0x200}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x78, 0x0, 0x4, {0x8001, 0xcd, 0x0, {0xfffffffffffffffe, 0x80, 0x10, 0x7ff, 0xf, 0x2, 0xf79c000, 0x8, 0x20b, 0x6000, 0x578, 0x0, 0x0, 0x80000003, 0xc}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0x300) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000140)="8b5f47ee6f6b2684bced22a9cfb75fe0368d28a6b8e78d19aedf62a3084e1721213ae0baf603a3599d328130f6bdfd69e12a9c1d2dd7d21fc9cdd2072d5b0e6059fbcdc24da6de1bdb153ad26ff0fc720f5ca9b13ba01576561d3ceb7885740b01d72dbaef478b9cd201793a47585ab161e104dc631c12400d3142bb24178d67050b6744125ee31da47d98c9409fa34f18ee2c899b98361d8d4c36a0a6ff33a0f5cea1", 0xa3}], 0x1) socketpair(0x1e, 0xa, 0x0, &(0x7f0000000000)) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc01000000020000000200000000000000000000000000000800"], 0xe0}}, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f00000001c0)={@private0={0xfc, 0x0, '\x00', 0xfd}}, 0x14) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="2017cc"], 0x0, 0x0}) 5.190004387s ago: executing program 4 (id=1592): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xcb, 0x44, 0xe6, 0x10, 0x4dd, 0x9031, 0x5ebc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x2, 0x53, 0xa0, 0x53, [{{0x9, 0x4, 0x91, 0x6, 0x1, 0x2, 0xa, 0x0, 0xa3, [], [{{0x9, 0x5, 0x8, 0x10, 0x10, 0x91, 0xfd, 0x3}}]}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x0, 0x75, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x1, 0x1, 0x0, 0x80, 0xd, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x6, {{0xa, 0x24, 0x6, 0x0, 0x0, "770b856ab8"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x51, 0xf210, 0x2ca9, 0x4}, [@obex={0x5, 0x24, 0x15, 0x6}, @country_functional={0xe, 0x24, 0x7, 0x4, 0x3ff, [0x5, 0x1, 0x6, 0x1]}, @dmm={0x7, 0x24, 0x14, 0x8, 0x6b}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x6, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xe, 0x3, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x6, 0x8}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x8, 0x0, 0xee, 0x40, 0xf}, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x5}]}}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="0401"], 0x4) splice(r4, &(0x7f0000002f80)=0x80000000, r1, &(0x7f0000002fc0)=0x9, 0x4, 0x8) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r7, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0xfffffffffffffffc, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000002700)={0x14, &(0x7f0000002600)={0x40, 0x4, 0xa2, {0xa2, 0x21, "fb09020d119a43ec66358d7271a3e690ed46b1bbde5f2288a08746d676e8918211b678d3ca7d8cbacfedd979ccdc9101fd5707d8a5ad87a1028f1378ffcfab4bccd129b641cc9f65908177fc1ff5f18a7e84b9b7db6d590d49e6381777ccf03418a239c72ff6f024b2d8b138eac31b47edf2e3818c54d13fcb4ccfd528e50f7a47eda512b4aeac19c5fdbd22d23dac4c339ea4dbaf9f46b49a44feb99f3874d9"}}, &(0x7f00000026c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002880)={0x1c, &(0x7f0000002740)={0x20, 0x30, 0x7b, "738ee46977b9cc2a231b26cf4e56832e484e751685fb12c5993907660af1458daa129e95d06a5c473b1095e5b2e0dcfe9828bd9dc55639fd780a4f3a34c47ddc35009950cba956ff6cb25b6e084eb9e7248289c41c8a765475bf9c2027d3fe1e1d2d0bf3fb8c5b90684964be5f9b5476130882e569fdf6042028d9"}, &(0x7f0000002800)={0x0, 0xa, 0x1}, &(0x7f0000002840)={0x0, 0x8, 0x1, 0x5}}) r8 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x8e, &(0x7f00000028c0)=ANY=[@ANYBLOB="12010002020000ff2505a1a440000102030109027c0001010300080904000803020600010924060000c96128d20524000c000d240f0107000000ffff000000072414de5801000c241b0eff0300040a00008d0c241b070009000b080800050c240709060008000700050008241cf6c80d22a70a2407070100010001fe090582021000fc08090503020800064008"], &(0x7f0000002f00)={0xa, &(0x7f0000002980)={0xa, 0x6, 0x310, 0x3, 0x4, 0x67, 0x40, 0xd5}, 0xb4, &(0x7f00000029c0)={0x5, 0xf, 0xb4, 0x3, [@generic={0x24, 0x10, 0xa, "75c52c0bafad54ca45792816a7790f379ebb877a1438ee40c316e18906529e2810"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x8, 0x4, 0x9}, @generic={0x81, 0x10, 0x1, "7619af239733c1678463dd0d8acd354fb42e7bebe88b8c25151fe2ecc7f93646bfda062eba84b9e18407f3e231d2f7cb448a596505c81703f592889e66bcae9caf458d17f1e31ce899e08158109524be577bff587e9a46dd56e1ba8fe76c0d71429eed86f673ad9828f347a7c3ddfcb25532a25e898b2c6fca3daebf1c75"}]}, 0x6, [{0xef, &(0x7f0000002a80)=@string={0xef, 0x3, "f28c455082373b629140a5df09dbf5cf77a74c8b19626955d24e11d10ea846f24c9dd9d614d65f16470ce967d475ec92b47a69913c02dbff677a56a71a494251b24fd9127479f7eb92a09eecd8358d951651c0499951f055d2c6f3d932511a6bc7ea604ad50d861b4ffc6d17c149a3017cca19579288ee101cb1d1b39c794d6f6ff287e503444b2ca3fa6645fdddbbbe89b139506f762d3f355dc32d5236a3e8e481e05b5c79e59231936ea2ed672a4d58029ebbacc64f4a479bf239fe72e13d63766f86c714f3ac48ac423ccd4e2409feec0e727cbf32361693581e22a02ac3b4adbf400d6bf77bdb6a10a089"}}, {0x94, &(0x7f0000002b80)=ANY=[@ANYBLOB="94032675c1be544376a9120cc4cd9258c1dee7489b7b7705de62c7a2113adf7137964917e728df1191767c04cd0dcf40be02f11d21da2b2600d3baa2b0f7ec4be68fcc19cd951d797cab5eac6d3895145fc55eb9bea3286b643abb9600b8f15857b5731151240ae7dea8a5f21963b5ee7beac79f9a86d4d10eee9f93844e7d4c434bcfac617a8fe194f4b9915c00000000000000"]}, {0x79, &(0x7f0000002c40)=@string={0x79, 0x3, "a4aeedeafa3110edf1fdb7783076507619bf9351ad8a0f89cf2a626617f03c76d4184ba7676e9228a797c2e463cb84ba423c74109366826d28f73e607a97ab18abd5bdc6fd7162d9a2b4b75a1bb4cccb12e8b8557c72bc3cc05493d65acdbc044ce30c4c9d8c124f40d2d460ef57be7511b0d07a8fad30"}}, {0x4, &(0x7f0000002cc0)=@lang_id={0x4, 0x3, 0x447}}, {0xdd, &(0x7f0000002d00)=@string={0xdd, 0x3, "56971d339820d8e1ca37ba094d044918264b6b7ab9862e227852b8ee59ad0cd67ac327388f2bbc595aafc75f282a0f6260bfc7b21c738052caa33f940ec48c7e6f00377b0308d8cd77aae65531d4d1e2a3393ecc5df0800c1838f353ea985a521b2c1ad95e85f4310c7bcd0bc1cafb98ae42ccc61eabc776a85bad94944f353781d66622960e5e4bce5e7370300fbe4cc8362c4ce45fc60372316f1c09f0150598c8de42a1614a18c4b3576dc20369ad4a9dc2d3367c89f26ccf6b7e1a802859fdbdb495e34c867f89c74e8bb45dea5e7236136de1546088b8fba6"}}, {0xc7, &(0x7f0000002e00)=@string={0xc7, 0x3, "e695113bfc6d7510c3090399021ac87a3543f0867193309b2f4d46818952e3b39e38a5dd063213281172ccffe82108a773c8785b970f905fa8de2b6651fa4786e6756f7478a694a09f3884ef05ec062bf81bedebed3deafd66c6a7423a923aafecde34b8659f9af51389f8820ab8d699423c92903ce1dc7dfee3912ef0ad4cd6c00601e1de97d0f143ae810b3b02bba37afb3dab4fdb89c13edcbc8b0db3e71c72d968cc99d84e776e95a69423606903cc9e4fe3cdf4bbcb836472d2368fc97ceff1a19086"}}]}) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0x21dc, &(0x7f0000000400)={[{0x55, 0x4e00, "e0db819632d25721ee51e02e10719d2adba4e5d1c7ee1214ef61a712708c84c4946358361e93a94c368ac261eb1cb31b541cbce856dfa7cc1c4703fc3d2dc9a6c3758f3e3ab6e538cb621508b6eac21751f120c707"}, {0x1000, 0x4e00, "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"}, {0x1000, 0x4e00, "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"}, {0x7d, 0x4e00, "c3cafb7f1c880bd8d6a8393fbf1296401315262516552ab7bfafdf85f58e9d64d2d42d10c7cfdf952076e3ded076e9e1761625f8f1894e7fcd067758290ee2057022f2f8234c3b25c006510dd170e5c48e391d45d9834cbd419f41450f84cb3a3db2335e266b20e1ef61a840bc428b50920274a49f473665f95c114782"}, {0x4a, 0x4e00, "5bcc751791e2604fb39999bb174299de8036914154565f8d9f4074a0fd6c1b3b82e48c0859376498767770098b189a4a194d1edd9d0fcb94b91571475dac8862bbf3f2924848554fa6f4"}, {0x9d, 0x4e00, "1b7984095a2ad4d50fd9e5255b581ab68872798d32c5c9481fc315f9fbfe7245d60097de8ce32f11404bce4d66fc076f92755410b4ccce3a68d778e7cf9fd701469fd301c54b3e0cdd093f0648843dd30571e90a922be77d208fa25a80216bc22c097bbe2b45238106548ca78d51e352e7a6ce6c69ddf1f315f50dbacb151495fc0a81d55ec11ea8ce2d24a26215fa75b1e69b21eb722bb5542b47ac03"}]}) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1c0a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0xe0, 0xb, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0xa, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0xc69}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x64, 0xb, 0xfa}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x4, 0x0, 0x8}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x4, 0x37, 0x97, 0x8, 0x7}, 0x4b, &(0x7f0000000280)={0x5, 0xf, 0x4b, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "40e12079672bfdceb6147dd1059f4bc6"}, @ss_container_id={0xffffffb4, 0x10, 0x4, 0x5, "83d374fdde030a37e08558ca4edff68e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xc, 0x5, 0x7}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x0, 0xf0f, 0x6, [0x0, 0xf]}]}, 0x1, [{0x69, &(0x7f0000000300)=@string={0x69, 0x3, "15c5fa875f26712e4ad9013bfce4b77025935b63051dd28165a6646c03081b500fdab415230a564b4055c0ab25ca9d31882c558dff31c6116e60e4bea4d7e21c35cdd0f55325f4f4802dba5e372459a4808df8d0cd5291597658b24ab6ed34b8ecaad32c1405fe"}}]}) 4.083962802s ago: executing program 2 (id=1600): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@local, @in=@multicast1, 0x4e23, 0x6, 0x4e23, 0x9, 0x2, 0xa0, 0x80, 0x5c}, {0x7fffffff, 0x2, 0xdd, 0x6, 0x4, 0x20400, 0x7fffffffffffffff, 0x5}, {0x6, 0x401, 0x80, 0x6}, 0x3, 0x6e6bbe, 0x0, 0x1, 0x3}, {{@in=@remote, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x7f4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x26f3}}, 0xe8) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000003f40)={0x0, 0x7, 0x1, 0x5, 0x0, 0x1}, 0x14) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r5, 0x0, 0x0, 0x80800) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='cramfs\x00', 0x800, 0x0) 4.029589492s ago: executing program 2 (id=1601): syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585", @ANYRES32], 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585", @ANYRES32], 0x0) (async) 3.512972162s ago: executing program 6 (id=1605): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@mark={{0x18, 0x1, 0x3d, 0x8}}], 0x18}}], 0x1, 0x20000844) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.767728559s ago: executing program 6 (id=1607): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x800004003) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="00aa9d782a4f495ee00000000000000000"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000e40)=0x2) lseek(r1, 0x8, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc) fcntl$setpipe(r1, 0x407, 0x4) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f00000001c0)={0x4, @broadcast}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000140), 0x0, 0x80000, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000400), &(0x7f0000000440)=0x4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r8, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r9, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r9, 0x89ed, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) fcntl$setstatus(r8, 0x4, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r10 = dup(r7) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500), &(0x7f0000000540)=[0x0], 0x1, 0x4, 0x0, 0x1}) 2.635994869s ago: executing program 6 (id=1609): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40000000000004) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000004c0b000000000000f9ff000000000000ae0b0000000000000600080000000000"]) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xcc}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd2(0x1, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000380)={0x80, r7}) close_range(r4, 0xffffffffffffffff, 0x0) r8 = accept4(r3, 0x0, 0x0, 0x80800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/81, 0x51}, {&(0x7f0000000900)=""/83, 0x53}, {&(0x7f0000000a00)=""/81, 0x51}], 0x3}, 0x10021) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f0000000880)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r11, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_PIT2(r10, 0x4040ae77, &(0x7f0000000140)) lsm_get_self_attr(0x64, 0x0, 0xfffffffffffffffd, 0x1) ioctl$KVM_SET_PIT(r10, 0x8048ae66, &(0x7f00000006c0)={[{0x9, 0x7, 0x3, 0x5, 0x5, 0x2, 0x4d, 0x3, 0xf9, 0x1, 0x80, 0x4, 0x8000200000000002}, {0x8ea6, 0x80, 0x4, 0xc4, 0x4, 0x7, 0x6, 0x3, 0x7, 0xff, 0x40, 0x7d}, {0xe2a5, 0x401, 0x1, 0x9, 0x2, 0x6, 0x8, 0xf, 0xff, 0x4, 0x56, 0x40, 0x8}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x9, 0xffffffffffff8000, 0x7fff, 0x5, 0xd, 0x4, 0xc9, 0x5, 0x85, 0x2, 0x401, 0x5, 0x3, 0xea, 0x31f, 0xfffffffffffffd], 0x8000000, 0x285f40}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x8900, 0x0) 2.634881671s ago: executing program 2 (id=1610): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.kill\x00', 0x275a, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="400100001000130729bd7000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e210002020000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000ffff64010100000000fe3200000000000000000000000000ffffac1414bb000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000041050000000000000000000000000000ffffffffffffff7f000000000000000000000000000000000000000000000000000000002cbd7000003500000a00040050000000000000004e001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000060000000210400000000"], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x3800, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x36, 0x0, 0x0) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r5, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, 0x0) (async) syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) r6 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWPHYS(r6, 0x4004480d, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x1}, {r6, 0x1000}, {0xffffffffffffffff, 0x626}, {r6, 0xc20}, {}], 0x5, 0x101) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x32}, 0x2, @in=@multicast1, 0x3506, 0x0, 0x0, 0x7, 0x0, 0x80}}, 0xe8) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) (async) sendmsg$FOU_CMD_GET(r7, 0x0, 0xc010) (async) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x40000) (async) close_range(r2, 0xffffffffffffffff, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, 0x0) ioctl$IOMMU_IOAS_COPY$syz(r8, 0x3b83, 0x0) 2.584223804s ago: executing program 6 (id=1611): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000997aa910c6250290ba79010203010902120001000000000904"], 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r5, 0x1, 0x0, 0xfffffffe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003095a6c209911aa6870a4010203010902120001faff800309041b1800ffffff04"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0xe}, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x8, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r9}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', r9, 0x29, 0x86, 0x0, 0x2, 0x2e, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7800, 0x80, 0x5, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x10, 0x80, 0x0, 0xe06, {{0xa, 0x4, 0x3, 0x4, 0x28, 0x66, 0x0, 0x37, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@lsrr={0x83, 0xf, 0x42, [@empty, @empty, @remote]}, @ra={0x94, 0x4}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000600)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x3, 0x0, 0x74, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast2, 0x20, 0x20, 0x7f, 0x3e1}}) r12 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r12, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) setsockopt$packet_int(r13, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r13, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r14, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f00000005c0)={&(0x7f0000000080), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x2040040}, 0x4044805) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4) r15 = creat(&(0x7f00000021c0)='./cgroup.net/devices.allow\x00', 0xc1) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r16, 0x2, &(0x7f0000000c80)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r15, 0x0, 0xfdff}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000400)="4ad4bd82e7394dda629b3f91ec7b1c3d89e4b64a1ad711bad6832ddedb0a8a2973b54b555962aae8354b240c8672c026c539ca3339633599fad878ec81e880a9", 0x40, 0x7fff, 0x0, 0x2}]) 2.10996047s ago: executing program 4 (id=1612): r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0xbc1, 0x4) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x401, 0x4) socketpair(0x26, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r3, 0x20b, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd, 0x78}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004c010}, 0x4000044) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'dvmrp1\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000003c0)={0x1d, r5}, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r3, 0xba9185ab99d02512, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x281}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x247}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20000804) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0xddc11c11f5228358}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x178, 0x1403, 0x400, 0x70bd26, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dummy0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'tunl0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x178}, 0x1, 0x0, 0x0, 0x2000a0d0}, 0x40040) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000007c0), r1) sendmsg$FOU_CMD_GET(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, r7, 0x20, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x84}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000014}, 0x80) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000900), 0x444001, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000940)={0xc}) writev(r8, &(0x7f0000000980), 0x0) sendmsg$kcm(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000a40)="5c2f483683a501385d56ae6eab0a8cc9248269deffdd241948af8fb84cd30f344b1394e945fcc3df3a1a9221f840f3ecd80fb283aadb0e242dcbb41ab7a60350", 0x40}], 0x1}, 0x84) close_range(r6, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x0, 0x8, 0x30, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000b00)={0x2e, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @pad1, @enc_lim={0x4, 0x1, 0xe}, @jumbo={0xc2, 0x4, 0x9}, @pad1, @ra={0x5, 0x2, 0x3}, @pad1, @calipso={0x7, 0x10, {0x3, 0x2, 0x25, 0x8d, [0xfffffffffffffff9]}}, @ra={0x5, 0x2, 0x6}]}, 0x38) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000b40)={0x3, 0x7, 0x0, 0x80000000, 0xff, 0xff, 0xffff6fe1, 0x0, 0x0}, &(0x7f0000000b80)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000bc0)={r10, 0x1}, &(0x7f0000000c00)=0x8) 2.064034814s ago: executing program 2 (id=1613): r0 = syz_usb_connect$hid(0x6, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="00220500000027efffce47"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="100100000000"], 0x0}) 1.882303388s ago: executing program 4 (id=1614): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x7) (async) dup(r0) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x68001, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r4) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYRES16=r2, @ANYRES32=r2]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) (async) socket(0x10, 0x803, 0x0) (async) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x1, 0x46, {0xe, @tcp_ip4_spec={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x4e21, 0x7}, {0x0, @remote, 0xe, 0x4, [0x7, 0xffffff01]}, @ah_ip4_spec={@remote, @local, 0x73, 0x3}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, 0x8, 0x5, [0xf, 0x9]}, 0x102, 0x3}}}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x84000, 0x0) 1.863606335s ago: executing program 6 (id=1615): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = syz_open_dev$cec(&(0x7f0000000380), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000040)=0x20) sendmmsg(r2, &(0x7f0000004380), 0x34000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1209022400010000000009040015000122070009058103c6d9830e000000000000000000000000000000000000000000000000000000d8c9e641cd009d0b0cddeefb746ad92a544279e28f4fd10e37e2d42cf3610114ca0b81519d40912e9f0837a20523fdf61e4fbf9a5022011f636bfd178bbef24967cc0e1de04ffb0283fca347d1db9ed6d67d9dd20d14dcb28e9fb5be256fb5920de11d0eccfbb76e9aca0bac4db5a40d3c01ecc1b15fdb4738d480bcac6adcccd14cd3109a9058fd05ce7cdb127130f1daae54c98c8a"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="20226d0000006d231769628600b160a85903e5c6e941b880d824d730c42773f11dda73d2b0798ff77d932c863a27ec269af6c3c08b1313629493a7421e3b257989a7c1af520af26bfcb5e1858ad403f3554982060edea899a631706e87df7a395ca9cabf89370ef882ac5ca60bef4f64f0c99e"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = add_key$keyring(&(0x7f0000001180), &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r7) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r6, @ANYRES64=r6, @ANYRESOCT=r6, @ANYRESHEX=0x0], 0x10448) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000efff0000000500000a6c000000090a010400000000000000000a0000010900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3000118008000100636d700024000280080001400000000d1000038009000100f07f563cf50b00000800024000000001140000001100010000000000000000000100000a"], 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r9, 0x11c, 0x1, 0x0, &(0x7f0000000040)) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) 1.723928026s ago: executing program 0 (id=1616): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x8) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) (async) setresgid(0x0, r2, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async) write$P9_RLERRORu(r0, &(0x7f0000019200)=ANY=[@ANYBLOB="150000000702001370386e08005404323030302e03"], 0x15) (async) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x1) (async) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x803}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async) r6 = getpid() sched_setaffinity(r6, 0x0, 0x0) (async) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) (async) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000c81a3954d376bc26"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) (async) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r7, 0x0, 0xfffffffffffffffc) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) (async) r8 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_notify(r8, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) (async) r9 = syz_open_procfs(r6, &(0x7f0000000000)='pagemap\x00') pread64(r9, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 1.606345122s ago: executing program 4 (id=1617): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x2}, 0x2, 0x2}}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x55, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x2000, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x0, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x89, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x5, 0x0, 0x5, 0x10000, 0xbdb], 0x1, 0x3c4210}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x33fe0) 1.49105984s ago: executing program 2 (id=1618): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r1, 0x8100, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0xbff}, @ib={0x1b, 0xf, 0xfff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x8, 0x3}}}, 0x118) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') chdir(&(0x7f0000000140)='./bus\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c1000000a000000000000", 0x58}], 0x1) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 1.424091852s ago: executing program 0 (id=1619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x4}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x1c}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x84}}, 0x24000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r2, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x49}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x8}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000100001a4745c345971df160003000000060001"], 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000126bd700009000000000000000800159727808672cc43b0c68afea5aa00a3000000"], 0x1c}, 0x1, 0x0, 0x0, 0x814}, 0x4008840) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 1.29926492s ago: executing program 0 (id=1620): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000007c0), 0x42140, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000800)=0x2) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000000)={0xb6, 0x0, 0x40000000000000}) 1.295538194s ago: executing program 2 (id=1621): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e20, 0x4, @local, 0x9a52}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="84020201"], 0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x4c, 0x4}, {0x6, 0x1, 0x9}]}) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="3080", 0x2, r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000002c0)={r4, 0x6, 0x30, 0x5, 0xd}, &(0x7f0000000300)=0x18) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0xb}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x148}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, 0x58}}, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000017dcb4401e040c4098af000000010902120001000000000904"], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000017dcb4401e040c4098af000000010902120001000000000904"], 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x18, 0x3b, 0x92, 0x20, 0x13b1, 0x42, 0x5816, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xca, 0x0, 0x1, 0x7a, 0x8b, 0xb5, 0x0, [], [{{0x9, 0x5, 0x2, 0x0, 0x3ff}}]}}]}}]}}, 0x0) 995.504571ms ago: executing program 0 (id=1622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x20, 0x0, &(0x7f00000008c0)) (async) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x20, 0x0, &(0x7f00000008c0)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01"], 0x36) 811.212429ms ago: executing program 0 (id=1623): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='map_files\x00') getdents64(r1, &(0x7f0000001fc0)=""/4079, 0xfef) getdents64(r1, 0x0, 0x0) 694.333605ms ago: executing program 0 (id=1624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r0}}, './cgroup\x00'}) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x220}, 0x1, 0x0, 0x0, 0x44000}, 0x8840) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000240)={0x2}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r5, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/92, 0x5c}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendfile(r4, r3, &(0x7f0000000180)=0x58, 0x3fffff) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0xa6, 0x111c8a, 0x0, 0x8000007, 0x6, 0x4, 0x1, 0x0, 0x7, 0x9}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r8 = fsopen(&(0x7f0000000000)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x5) fchdir(r9) syz_kvm_setup_cpu$x86(r1, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f00000004c0)="6666f40fc7b4c7000f06baf80c66b8cc09c08a66efbafc0ced0fc79a00000f08b879008ed0262ef30f09d3b1c10064f30f09", 0x32}], 0x1, 0x40, &(0x7f0000000540)=[@efer={0x2, 0xd000}], 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000024c0)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0xa, 0x0, 0x8d}, @mpls={[], @ipv6=@icmpv6={0xc, 0x6, "2c6eab", 0x9a, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x3, '\x00', {0x8, 0x6, "9ceb84", 0xfff, 0x88, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [], "24e94f1dd9c63c4739690ca7f51b00fc0bde28938b9727be6851cde871cd4e5095c69a2865d90b4db53dec56f5ec28b32bb8f360015110fe7586663955f18b659fe3db6e98637ade5b274e9fb839bbc4e209795aa5a074cb72743c0a9a8ba51ef8bc19e6d33bbd1184e8"}}}}}}, 0xd0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='romfs\x00', 0x208402, 0x0) 0s ago: executing program 6 (id=1625): socket$xdp(0x2c, 0x3, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x18, 0x31, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x1, 0x0, 'lblcr\x00', 0x7, 0xfffffff8}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) r3 = dup2(r1, r1) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) pipe2(&(0x7f0000000000), 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)="390000fa461ad7e48489bffa56020013f811186809fc071200000f0000ff3f21396963d43e89b0ee000000170a001700e0da8979d2fc6ca957beec11251d35fec79e0b9971bcbedac0eeed49dbacf96eeb9b91", 0x53}], 0x1) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000340)=ANY=[@ANYRES8=r4]) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000300)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8], [0x40], [0x7f]], '\x00', [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}], '\x00', 0x1000}) syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r10 = userfaultfd(0x80801) ioctl$UFFDIO_API(r10, 0xc018aa3f, 0x0) ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000080)={&(0x7f00000001c0)=[{0x1, 0xb210, 0x0, 0x0}, {0x9, 0xb801, 0x0, 0x0}], 0x2}) kernel console output (not intermixed with test programs): .627899][ T9668] team0: Port device team_slave_1 added [ 276.637584][ T24] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 276.660717][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.671371][ T24] usb 9-1: Product: syz [ 276.676949][ T24] usb 9-1: Manufacturer: syz [ 276.683072][ T24] usb 9-1: SerialNumber: syz [ 276.721749][ T9668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.729392][ T9668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.758320][ T9668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.773519][ T9668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.780632][ T9668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.810534][ T9668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.958174][ T9668] hsr_slave_0: entered promiscuous mode [ 276.966492][ T9668] hsr_slave_1: entered promiscuous mode [ 276.978221][ T9668] debugfs: 'hsr0' already exists in 'hsr' [ 276.984868][ T9668] Cannot create hsr debugfs directory [ 277.322955][ T9682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.354690][ T9682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.417526][ T9695] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1020'. [ 277.434925][ T24] (unnamed net_device) (uninitialized): Assigned a random MAC address: de:d7:ee:9a:8d:4b [ 277.454017][ T9668] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 277.528752][ T24] rtl8150 9-1:1.0: eth13: rtl8150 is detected [ 277.539640][ T9668] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 277.561695][ T9668] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 277.567219][ T24] usb 9-1: USB disconnect, device number 3 [ 277.593639][ T9668] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 277.790234][ T9668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.817111][ T9668] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.829916][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.837127][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.844682][ T5866] Bluetooth: hci6: command tx timeout [ 277.857366][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.864511][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.205984][ T9716] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1023'. [ 278.292675][ T5951] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 278.389169][ T9668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.544675][ T5866] Bluetooth: hci5: command tx timeout [ 278.883261][ T9668] veth0_vlan: entered promiscuous mode [ 278.911982][ T9668] veth1_vlan: entered promiscuous mode [ 278.991819][ T9668] veth0_macvtap: entered promiscuous mode [ 279.002415][ T5951] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 279.031876][ T9668] veth1_macvtap: entered promiscuous mode [ 279.054722][ T1029] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 279.057414][ T9668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.084792][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1026'. [ 279.089859][ T9668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.098435][ T9735] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 279.131119][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.147911][ T9735] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 279.150380][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.163530][ T1029] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 279.188120][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.201264][ T5951] usb 9-1: Using ep0 maxpacket: 8 [ 279.215068][ T5951] usb 9-1: unable to get BOS descriptor or descriptor too short [ 279.224005][ T5951] usb 9-1: config 2 has an invalid interface number: 227 but max is 0 [ 279.232170][ T5951] usb 9-1: config 2 has no interface number 0 [ 279.238532][ T5951] usb 9-1: config 2 interface 227 has no altsetting 0 [ 279.248118][ T5951] usb 9-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=60.04 [ 279.261542][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.278147][ T5951] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.335068][ T5951] usb 9-1: Product: syz [ 279.339246][ T5951] usb 9-1: Manufacturer: syz [ 279.347084][ T5951] usb 9-1: SerialNumber: syz [ 279.536751][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.557362][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.593824][ T5951] usb 9-1: USB disconnect, device number 5 [ 279.675041][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.707558][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.736978][ T9747] netlink: 'syz.4.1030': attribute type 10 has an invalid length. [ 279.750300][ T9747] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1030'. [ 279.903214][ T5866] Bluetooth: hci6: command tx timeout [ 280.184770][ T9755] netlink: 80 bytes leftover after parsing attributes in process `syz.8.1032'. [ 280.262654][ T981] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 280.432924][ T981] usb 10-1: Using ep0 maxpacket: 16 [ 280.456951][ T981] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 280.470601][ T981] usb 10-1: config 0 has no interface number 0 [ 280.481631][ T981] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 280.493585][ T981] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 280.522137][ T981] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 280.552496][ T981] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 280.562011][ T981] usb 10-1: Product: syz [ 280.571990][ T981] usb 10-1: SerialNumber: syz [ 280.586440][ T981] usb 10-1: config 0 descriptor?? [ 280.637363][ T981] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 280.682917][ T981] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input34 [ 280.834690][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 281.051193][ T24] usb 10-1: USB disconnect, device number 2 [ 281.079712][ T24] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 281.852346][ T5858] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 281.987821][ T5861] Bluetooth: hci6: command tx timeout [ 282.022541][ T5858] usb 10-1: Using ep0 maxpacket: 32 [ 282.032582][ T5858] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 282.071329][ T5858] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x8E has invalid wMaxPacketSize 0 [ 282.103747][ T5858] usb 10-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 282.118330][ T5858] usb 10-1: config 0 interface 0 has no altsetting 0 [ 282.129076][ T5858] usb 10-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 282.140683][ T5858] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.153286][ T5858] usb 10-1: config 0 descriptor?? [ 282.350878][ T9782] syzkaller1: entered promiscuous mode [ 282.357955][ T9782] syzkaller1: entered allmulticast mode [ 282.371643][ T9778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.386801][ T9778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.621505][ T5858] hid_parser_main: 5 callbacks suppressed [ 282.621525][ T5858] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 282.623147][ T43] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 282.635829][ T5858] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 282.677672][ T5858] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 282.685696][ T5858] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 282.696734][ T5858] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 282.718109][ T5858] hid-thrustmaster 0003:044F:B65D.0011: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.9-1/input0 [ 282.749811][ T5858] hid-thrustmaster 0003:044F:B65D.0011: Unexpected non-int endpoint [ 282.794731][ T43] usb 9-1: Using ep0 maxpacket: 32 [ 282.811876][ T43] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.815131][ C0] hid-thrustmaster 0003:044F:B65D.0011: URB to get model id failed with error -71 [ 282.839196][ T5858] usb 10-1: USB disconnect, device number 3 [ 282.858286][ T9785] fido_id[9785]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 282.858614][ T43] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 282.905712][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.915127][ T43] usb 9-1: Product: syz [ 282.919296][ T43] usb 9-1: Manufacturer: syz [ 282.924115][ T43] usb 9-1: SerialNumber: syz [ 282.945886][ T43] usb 9-1: config 0 descriptor?? [ 282.956397][ T43] usb 9-1: bad CDC descriptors [ 282.974308][ T43] usb 9-1: unsupported MDLM descriptors [ 283.216578][ T5858] usb 9-1: USB disconnect, device number 6 [ 284.004194][ T981] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 284.064374][ T5861] Bluetooth: hci6: command tx timeout [ 284.168710][ T981] usb 10-1: Using ep0 maxpacket: 16 [ 284.184009][ T981] usb 10-1: config index 0 descriptor too short (expected 102, got 36) [ 284.192679][ T981] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.208304][ T981] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 284.225742][ T981] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 284.261535][ T981] usb 10-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 284.270825][ T981] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.285681][ T981] usb 10-1: Product: syz [ 284.289973][ T981] usb 10-1: Manufacturer: syz [ 284.294709][ T981] usb 10-1: SerialNumber: syz [ 284.307314][ T981] usb 10-1: config 0 descriptor?? [ 284.323806][ T981] port100 10-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 284.519922][ T9803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.544848][ T9803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.558372][ T9803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.587946][ T9803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.604528][ T9803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.629991][ T9803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.651239][ T9803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.662701][ T9803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.674321][ T9803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.685764][ T9803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.720376][ T981] usb 10-1: USB disconnect, device number 4 [ 285.793309][ T981] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 285.971130][ T981] usb 10-1: Using ep0 maxpacket: 16 [ 285.998486][ T981] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.024278][ T981] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 286.037555][ T981] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 286.050027][ T981] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 286.067167][ T981] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 286.105697][ T981] usb 10-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 286.127986][ T981] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.148685][ T981] usb 10-1: Product: syz [ 286.156506][ T981] usb 10-1: Manufacturer: syz [ 286.178135][ T981] usb 10-1: SerialNumber: syz [ 286.216309][ T981] usb 10-1: config 0 descriptor?? [ 286.244542][ T981] xbox_remote_probe: endpoint_in message size==0? [ 286.629646][ T981] usb 10-1: USB disconnect, device number 5 [ 286.811858][ T9820] usb usb8: usbfs: process 9820 (syz.8.1051) did not claim interface 0 before use [ 286.851453][ T9820] netlink: 'syz.8.1051': attribute type 3 has an invalid length. [ 287.047036][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1054'. [ 287.593023][ T9824] trusted_key: syz.8.1053 sent an empty control message without MSG_MORE. [ 288.079087][ T9844] overlayfs: failed to clone upperpath [ 288.178124][ T9846] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 288.477171][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1063'. [ 289.113084][ T24] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 289.279925][ T24] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 289.290322][ T24] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 289.337358][ T24] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.363850][ T24] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 289.374366][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.383776][ T24] usb 10-1: Product: 殡諷ﶫ朶竧퓃᧤벺⇛枟撜ì®ìœ½ë…ºä¾ë‘±ãŒ¾â‹°ï²…ꘜ߽蛑漀긽ㆣᘡ䵫Ⴕҕ䠒䙼물裘 [ 289.399883][ T24] usb 10-1: Manufacturer: 㦰꣑ìœå›£ë¥¶ëª…筂壦刚슀î—璀㻥잺ਖ਼ꠙJ雛憺ç¢æ”붲阢籠鉳쿎ሻ围쇉脟ᄕç낛乶ì’蛹è¼á”€ç„ꑖ傸燘å¿é‘ë¶â“¯ì•»ï‰é’“탠쪨ꔕ乶敠帱뤽ῠ [ 289.421001][ T24] usb 10-1: SerialNumber: 糣㖟݉ৗ튙ë â¾¢ã« ã‘¯è§æˆ¿á²è³‡ê»êˆŒè¦‘렭葱৽㘙輔걉㽀å¬îµ¸ï»©å˜•â¬—ᧄÌ彥굻瘛⸱রꧦ㕪ã¨ï¼§ç›¶ç¾áŠ¥êšŽç§å€žâ¬ªæ»¢ì¼¾á«›îŒ¼ä“­Þ²á¨Ÿé¯¦ë”›é“㪖ä„åƒáŸ‰é£ä ³ê¨ƒë§ë«ºì°—㈓䈷ﲔ謦ῂ婄ï„赲札î­á¿²ï††ç¡œåŒ¾Ì§î™¶ê³€åŸ®é§„똓ᬜ뫘ᕩ믭䆳充낊ᇗ촉￨䛗倾똰횪➪迡섈ë¢ë ² [ 289.453505][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.901409][ T9866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.919200][ T9866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.940124][ T24] usb 10-1: 0:2 : does not exist [ 289.982026][ T24] usb 10-1: USB disconnect, device number 6 [ 290.029825][ T6076] udevd[6076]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.387928][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1071'. [ 290.420270][ T9882] veth1_macvtap: left promiscuous mode [ 291.154335][ T5858] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 291.220405][ T9911] overlayfs: failed to resolve './file0': -2 [ 291.320153][ T5858] usb 10-1: not running at top speed; connect to a high speed hub [ 291.368809][ T5858] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 959, setting to 64 [ 291.398657][ T5858] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.412919][ T5858] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.421116][ T5858] usb 10-1: Product: syz [ 291.431035][ T5858] usb 10-1: Manufacturer: syz [ 291.435846][ T5858] usb 10-1: SerialNumber: syz [ 291.450352][ T9901] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 291.635704][ T9920] program syz.8.1080 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.653948][ T9920] nfs: Bad value for 'source' [ 291.898094][ T5858] cdc_ncm 10-1:1.0: bind() failure [ 291.936363][ T5858] cdc_ncm 10-1:1.1: probe with driver cdc_ncm failed with error -71 [ 291.950407][ T5858] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71 [ 291.961636][ T5858] usbtest 10-1:1.1: probe with driver usbtest failed with error -71 [ 292.000324][ T5858] usb 10-1: USB disconnect, device number 7 [ 292.786087][ T43] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 292.804680][ T981] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 292.942538][ T981] usb 9-1: device descriptor read/64, error -71 [ 292.952609][ T43] usb 10-1: Using ep0 maxpacket: 32 [ 292.968472][ T9928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.982395][ T9928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.997575][ T43] usb 10-1: unable to get BOS descriptor or descriptor too short [ 293.016446][ T43] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 293.027963][ T43] usb 10-1: can't read configurations, error -71 [ 293.207870][ T981] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 293.343387][ T981] usb 9-1: device descriptor read/64, error -71 [ 293.453104][ T981] usb usb9-port1: attempt power cycle [ 293.802347][ T981] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 293.823249][ T981] usb 9-1: device descriptor read/8, error -71 [ 294.074731][ T981] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 294.106047][ T981] usb 9-1: device descriptor read/8, error -71 [ 294.238674][ T981] usb usb9-port1: unable to enumerate USB device [ 295.232590][ T43] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 295.948067][ T24] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 296.102473][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 296.117904][ T24] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 296.130006][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 296.143153][ T24] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 296.156775][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 296.167918][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 296.185856][ T24] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 296.194849][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 296.209849][ T24] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 296.223246][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 296.237245][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 296.251676][ T24] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 296.259326][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 296.271573][ T24] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 296.283300][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 296.296311][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 296.318969][ T24] usb 9-1: string descriptor 0 read error: -22 [ 296.326750][ T24] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 296.338531][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.373671][ T24] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 296.691852][ T9965] netlink: 'syz.2.1096': attribute type 3 has an invalid length. [ 296.710354][ T9965] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1096'. [ 296.726513][ T9965] 9pnet_fd: Insufficient options for proto=fd [ 296.877434][ T9971] overlayfs: failed to clone upperpath [ 297.807424][ T9983] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 297.829130][ T9983] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1103'. [ 297.836956][ T9982] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1103'. [ 297.935390][ T9983] 9pnet: Could not find request transport: xen [ 297.945311][ T9984] 9pnet: Could not find request transport: xen [ 298.122101][ T9989] ptm ptm14: ldisc open failed (-12), clearing slot 14 [ 298.241900][ T9994] netlink: 'syz.9.1105': attribute type 1 has an invalid length. [ 298.257255][ T9994] netlink: 15 bytes leftover after parsing attributes in process `syz.9.1105'. [ 298.454656][T10002] overlayfs: failed to clone upperpath [ 298.571280][T10002] overlay: ./file2 is not a directory [ 298.696042][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1108'. [ 298.962318][ T5858] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 299.102676][ T5858] usb 10-1: device descriptor read/64, error -71 [ 299.342306][ T5858] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 299.509350][ T5858] usb 10-1: device descriptor read/64, error -71 [ 299.643308][ T5858] usb usb10-port1: attempt power cycle [ 300.006323][ T5858] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 300.033039][ T5858] usb 10-1: device descriptor read/8, error -71 [ 300.273856][ T5858] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 300.314393][ T5858] usb 10-1: device descriptor read/8, error -71 [ 300.430162][ T5858] usb usb10-port1: unable to enumerate USB device [ 301.156168][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'. [ 301.630282][T10063] overlayfs: failed to clone upperpath [ 302.462319][ T5858] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 302.612291][ T5858] usb 10-1: device descriptor read/64, error -71 [ 302.818822][T10052] cgroup: fork rejected by pids controller in /syz4 [ 302.858599][ T5858] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 303.049344][ T5858] usb 10-1: device descriptor read/64, error -71 [ 303.172778][ T5858] usb usb10-port1: attempt power cycle [ 303.522494][ T5858] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 303.553978][ T5858] usb 10-1: device descriptor read/8, error -71 [ 303.802329][ T5858] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 303.825612][ T5858] usb 10-1: device descriptor read/8, error -71 [ 303.945042][ T5858] usb usb10-port1: unable to enumerate USB device [ 304.728960][T10130] ieee802154 phy1 wpan1: encryption failed: -22 [ 304.823201][T10132] netlink: 'syz.2.1135': attribute type 4 has an invalid length. [ 304.831085][T10132] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1135'. [ 305.487283][T10142] syzkaller1: entered promiscuous mode [ 305.492983][T10142] syzkaller1: entered allmulticast mode [ 306.113778][ T43] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 306.210443][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1145'. [ 306.274747][ T43] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.296326][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 306.319306][ T43] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 306.334011][ T43] usb 10-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 306.346513][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.358876][ T43] usb 10-1: config 0 descriptor?? [ 306.608111][ T43] usb 10-1: USB disconnect, device number 19 [ 307.381683][T10188] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1152'. [ 307.396832][T10188] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1152'. [ 307.642690][ T5910] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 307.824685][ T5910] usb 10-1: too many endpoints for config 0 interface 0 altsetting 4: 255, using maximum allowed: 30 [ 307.866367][ T5910] usb 10-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 307.883649][ T5910] usb 10-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 307.899575][ T5910] usb 10-1: config 0 interface 0 has no altsetting 0 [ 307.910067][ T5910] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 307.933103][ T5910] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.957644][ T5910] usb 10-1: config 0 descriptor?? [ 307.971011][T10188] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 308.400675][T10188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.413604][T10188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.471804][T10188] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1152'. [ 309.412846][ T5910] usbhid 10-1:0.0: can't add hid device: -71 [ 309.421495][ T5910] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 309.443678][ T5910] usb 10-1: USB disconnect, device number 20 [ 309.551285][ T36] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.705085][ T36] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.800162][ T36] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.964591][ T36] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.235189][ T36] bridge_slave_1: left allmulticast mode [ 310.247134][ T36] bridge_slave_1: left promiscuous mode [ 310.256873][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.301948][ T36] bridge_slave_0: left allmulticast mode [ 310.308531][ T36] bridge_slave_0: left promiscuous mode [ 310.317161][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.420101][ T5866] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 310.438786][ T5866] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 310.451204][ T5866] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 310.468595][ T5866] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 310.480185][ T5866] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 311.124973][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.188188][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.208531][ T36] bond0 (unregistering): Released all slaves [ 311.841027][ T5866] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 311.850638][ T5866] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 311.861814][ T5866] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 311.886044][ T5866] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 311.894861][ T5866] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 312.061958][T10243] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1169'. [ 312.339076][ T36] hsr_slave_0: left promiscuous mode [ 312.391321][ T36] hsr_slave_1: left promiscuous mode [ 312.406041][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.426111][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.448784][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.456515][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.500745][ T36] veth1_macvtap: left promiscuous mode [ 312.509856][ T36] veth0_macvtap: left promiscuous mode [ 312.516743][ T36] veth1_vlan: left promiscuous mode [ 312.523161][ T36] veth0_vlan: left promiscuous mode [ 312.550267][ T5866] Bluetooth: hci6: command tx timeout [ 313.207908][ T36] team0 (unregistering): Port device team_slave_1 removed [ 313.263952][ T36] team0 (unregistering): Port device team_slave_0 removed [ 313.950886][T10257] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.1173'. [ 313.982898][ T5866] Bluetooth: hci7: command tx timeout [ 314.235349][T10210] chnl_net:caif_netlink_parms(): no params data found [ 314.622443][ T5866] Bluetooth: hci6: command tx timeout [ 314.704153][T10210] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.745704][T10210] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.767009][T10210] bridge_slave_0: entered allmulticast mode [ 314.780611][T10210] bridge_slave_0: entered promiscuous mode [ 314.866997][T10210] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.876948][T10210] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.884598][T10210] bridge_slave_1: entered allmulticast mode [ 314.897028][T10210] bridge_slave_1: entered promiscuous mode [ 315.120951][T10210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.191665][T10236] chnl_net:caif_netlink_parms(): no params data found [ 315.222114][T10210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.618665][T10210] team0: Port device team_slave_0 added [ 315.636866][T10210] team0: Port device team_slave_1 added [ 315.845419][T10210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.853312][T10210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.883205][T10210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.895158][T10236] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.911452][T10236] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.918979][T10236] bridge_slave_0: entered allmulticast mode [ 315.929012][T10236] bridge_slave_0: entered promiscuous mode [ 315.940724][T10236] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.953314][T10236] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.960540][T10236] bridge_slave_1: entered allmulticast mode [ 315.970027][T10236] bridge_slave_1: entered promiscuous mode [ 315.980023][T10210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.997609][T10210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.027620][T10210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.065773][ T5866] Bluetooth: hci7: command tx timeout [ 316.111710][T10236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.171463][T10236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.249430][T10210] hsr_slave_0: entered promiscuous mode [ 316.276761][T10210] hsr_slave_1: entered promiscuous mode [ 316.291472][T10210] debugfs: 'hsr0' already exists in 'hsr' [ 316.303702][T10210] Cannot create hsr debugfs directory [ 316.476745][T10236] team0: Port device team_slave_0 added [ 316.515739][T10236] team0: Port device team_slave_1 added [ 316.703793][ T5866] Bluetooth: hci6: command tx timeout [ 316.775946][T10236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.777005][T10313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1181'. [ 316.787002][T10236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.840143][T10236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.874731][T10236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.884624][T10236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.914296][T10236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.039271][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.219112][T10236] hsr_slave_0: entered promiscuous mode [ 317.296543][T10236] hsr_slave_1: entered promiscuous mode [ 317.315432][T10236] debugfs: 'hsr0' already exists in 'hsr' [ 317.321168][T10236] Cannot create hsr debugfs directory [ 318.038438][T10340] erspan0: mtu less than device minimum [ 318.142757][ T5866] Bluetooth: hci7: command tx timeout [ 318.502703][T10348] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1187'. [ 318.786949][ T5866] Bluetooth: hci6: command tx timeout [ 319.153832][T10210] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 319.176592][T10210] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 319.199904][T10210] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 319.256285][T10210] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 319.446559][T10236] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 319.562098][T10236] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 319.601732][T10236] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 319.636076][T10236] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 319.960811][T10210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.069797][T10236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.099072][T10210] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.134151][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.141325][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.201493][T10236] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.227491][ T5866] Bluetooth: hci7: command tx timeout [ 320.243500][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.250655][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.292095][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.299283][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.381970][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.389181][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.871272][T10210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.047474][T10430] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1194'. [ 321.155020][T10210] veth0_vlan: entered promiscuous mode [ 321.189534][T10236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.235560][T10210] veth1_vlan: entered promiscuous mode [ 321.331920][T10236] veth0_vlan: entered promiscuous mode [ 321.418863][T10210] veth0_macvtap: entered promiscuous mode [ 321.450604][T10210] veth1_macvtap: entered promiscuous mode [ 321.484592][T10236] veth1_vlan: entered promiscuous mode [ 321.584235][T10210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.634666][T10236] veth0_macvtap: entered promiscuous mode [ 321.684881][T10210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.728175][T10236] veth1_macvtap: entered promiscuous mode [ 321.770444][ T1112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.815296][ T1112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.914085][ T1112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.946185][ T3032] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.988779][T10236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.076931][T10236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.131519][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.191715][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.210438][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.232385][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.332127][ T3032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.373705][ T3032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.500709][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.554859][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.751761][ T3032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.795559][ T3032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.851606][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.879122][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.516481][T10499] block nbd1: Attempted send on invalid socket [ 323.558861][T10499] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 324.496115][ T5951] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 324.543023][ T981] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 324.669590][ T5951] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 324.697205][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.725814][ T981] usb 2-1: Using ep0 maxpacket: 16 [ 324.735919][ T5951] usb 1-1: Product: syz [ 324.740125][ T5951] usb 1-1: Manufacturer: syz [ 324.765384][ T5951] usb 1-1: SerialNumber: syz [ 324.770202][ T981] usb 2-1: unable to get BOS descriptor or descriptor too short [ 324.781208][ T981] usb 2-1: too many configurations: 39, using maximum allowed: 8 [ 324.802529][ T5951] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 324.822046][ T981] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 324.830486][ T981] usb 2-1: can't read configurations, error -61 [ 324.848977][ T5858] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 325.006235][ T981] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 325.192459][ T981] usb 2-1: Using ep0 maxpacket: 16 [ 325.219648][ T981] usb 2-1: unable to get BOS descriptor or descriptor too short [ 325.232735][ T981] usb 2-1: too many configurations: 39, using maximum allowed: 8 [ 325.261670][ T981] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 325.322282][ T981] usb 2-1: can't read configurations, error -61 [ 325.374842][ T981] usb usb2-port1: attempt power cycle [ 325.380669][T10554] overlayfs: failed to resolve './file1': -2 [ 325.612420][ T5903] usb 1-1: USB disconnect, device number 59 [ 325.748255][ T981] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 325.782695][ T981] usb 2-1: Using ep0 maxpacket: 16 [ 325.803941][ T981] usb 2-1: unable to get BOS descriptor or descriptor too short [ 325.811655][ T981] usb 2-1: too many configurations: 39, using maximum allowed: 8 [ 325.839982][ T981] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 325.847745][ T981] usb 2-1: can't read configurations, error -61 [ 325.915160][ T5858] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 325.942284][ T5858] ath9k_htc: Failed to initialize the device [ 325.948993][ T5903] usb 1-1: ath9k_htc: USB layer deinitialized [ 325.993493][ T981] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 326.046276][ T981] usb 2-1: Using ep0 maxpacket: 16 [ 326.055945][ T981] usb 2-1: unable to get BOS descriptor or descriptor too short [ 326.071673][ T981] usb 2-1: too many configurations: 39, using maximum allowed: 8 [ 326.084965][ T981] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 326.093437][ T981] usb 2-1: can't read configurations, error -61 [ 326.115013][ T981] usb usb2-port1: unable to enumerate USB device [ 326.627463][T10578] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 326.645382][T10578] overlayfs: failed to set xattr on upper [ 326.651250][T10578] overlayfs: ...falling back to index=off. [ 326.660017][T10578] overlayfs: ...falling back to uuid=null. [ 326.680039][ T5858] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 326.862971][ T5858] usb 1-1: Using ep0 maxpacket: 32 [ 326.875540][ T5858] usb 1-1: unable to get BOS descriptor or descriptor too short [ 326.890059][ T5858] usb 1-1: config 5 has an invalid interface number: 52 but max is 0 [ 326.920478][T10584] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 326.932963][ T5858] usb 1-1: config 5 has no interface number 0 [ 326.942033][ T5858] usb 1-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 326.955116][ T5858] usb 1-1: language id specifier not provided by device, defaulting to English [ 326.985012][ T5858] usb 1-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 327.004718][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.020918][ T5858] usb 1-1: Product: Ñ [ 327.027303][ T5858] usb 1-1: SerialNumber: syz [ 327.043682][T10573] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 328.239283][T10605] @: renamed from vlan0 (while UP) [ 328.324498][ T5910] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 328.516592][ T5910] usb 2-1: unable to get BOS descriptor or descriptor too short [ 328.570121][ T5910] usb 2-1: config 1 interface 0 altsetting 155 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 328.593161][ T5910] usb 2-1: config 1 interface 0 has no altsetting 0 [ 328.602127][ T5910] usb 2-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 328.619401][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.638983][ T5910] usb 2-1: Product: syz [ 328.649087][ T5910] usb 2-1: Manufacturer: syz [ 328.662411][ T5910] usb 2-1: SerialNumber: syz [ 328.908912][ T5910] usbhid 2-1:1.0: can't add hid device: -71 [ 328.946903][ T5910] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 329.016724][ T5910] usb 2-1: USB disconnect, device number 45 [ 329.236160][ T5861] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 329.252008][ T5861] Bluetooth: Wrong link type (-57) [ 329.294706][ T5861] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 329.297900][T10635] pim6reg: entered allmulticast mode [ 329.350273][ T5861] Bluetooth: hci0: command 0x0406 tx timeout [ 329.372452][ T5858] aircable 1-1:5.52: aircable converter detected [ 329.401095][ T5858] usb 1-1: aircable converter now attached to ttyUSB0 [ 329.422692][ T5858] usb 1-1: USB disconnect, device number 60 [ 329.439093][ T5858] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 329.457532][ T5858] aircable 1-1:5.52: device disconnected [ 329.819941][T10646] netlink: 5404 bytes leftover after parsing attributes in process `syz.1.1229'. [ 329.852705][T10646] netlink: 5404 bytes leftover after parsing attributes in process `syz.1.1229'. [ 330.146598][T10665] netlink: 'syz.2.1233': attribute type 2 has an invalid length. [ 330.155260][ T5910] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 330.171754][T10665] netlink: 'syz.2.1233': attribute type 1 has an invalid length. [ 330.200211][ T981] libceph: connect (1)[c::]:6789 error -101 [ 330.229456][ T981] libceph: mon0 (1)[c::]:6789 connect error [ 330.245405][T10664] ceph: No mds server is up or the cluster is laggy [ 330.347881][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.361436][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.413031][T10673] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1235'. [ 330.435305][ T5910] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 330.470586][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.486070][ T5910] usb 1-1: config 0 descriptor?? [ 330.694915][T10683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.717744][T10683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.880809][ T24] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 330.888994][ T5910] usb 1-1: string descriptor 0 read error: -71 [ 330.926371][ T5910] uclogic 0003:256C:006D.0012: failed retrieving string descriptor #200: -71 [ 330.986993][ T5910] uclogic 0003:256C:006D.0012: failed retrieving pen parameters: -71 [ 331.006625][ T5910] uclogic 0003:256C:006D.0012: failed probing pen v2 parameters: -71 [ 331.035698][ T5910] uclogic 0003:256C:006D.0012: failed probing parameters: -71 [ 331.044632][ T5910] uclogic 0003:256C:006D.0012: probe with driver uclogic failed with error -71 [ 331.059124][ T5910] usb 1-1: USB disconnect, device number 61 [ 331.098650][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.137640][ T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 331.173708][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.197912][ T24] usb 2-1: config 0 descriptor?? [ 331.214834][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 331.424258][ T5910] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 331.585261][ T5910] usb 1-1: device descriptor read/64, error -71 [ 331.615188][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 331.627604][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 331.643302][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 331.659517][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 331.687031][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 331.715080][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 331.735800][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 331.754485][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 331.763994][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 331.783488][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 331.795882][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 331.806461][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 331.818503][ T24] pwc: recv_control_msg error -32 req 02 val 2900 [ 331.835668][ T24] pwc: recv_control_msg error -32 req 02 val 2800 [ 331.844042][ T5910] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 331.986848][ T5910] usb 1-1: device descriptor read/64, error -71 [ 332.056421][T10678] netlink: 'syz.1.1236': attribute type 10 has an invalid length. [ 332.113500][ T5910] usb usb1-port1: attempt power cycle [ 332.121903][T10678] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.158874][T10678] bond0: (slave team0): Enslaving as an active interface with an up link [ 332.181905][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 332.193298][ T24] pwc: Registered as video103. [ 332.223115][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input35 [ 332.309421][ T24] usb 2-1: USB disconnect, device number 46 [ 332.486257][ T5910] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 332.557552][ T5910] usb 1-1: device descriptor read/8, error -71 [ 332.781620][T10730] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1244'. [ 332.822340][ T5910] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 332.854409][ T5910] usb 1-1: device descriptor read/8, error -71 [ 332.965614][ T5910] usb usb1-port1: unable to enumerate USB device [ 334.425221][ T9] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 334.463085][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.652234][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 334.675149][ T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 334.694677][ T9] usb 1-1: config 0 has no interface number 0 [ 334.714409][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.726015][ T9] usb 1-1: config 0 interface 184 has no altsetting 0 [ 334.756668][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 334.774763][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.783439][ T9] usb 1-1: Product: syz [ 334.787623][ T9] usb 1-1: Manufacturer: syz [ 334.799071][ T9] usb 1-1: SerialNumber: syz [ 334.814564][ T9] usb 1-1: config 0 descriptor?? [ 334.827258][ T9] smsc75xx v1.0.0 [ 334.889593][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.047664][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.230986][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 335.258715][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 335.317406][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 335.358475][ T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 335.370135][ T12] bridge_slave_1: left allmulticast mode [ 335.379555][ T9] usb 1-1: USB disconnect, device number 66 [ 335.385542][ T12] bridge_slave_1: left promiscuous mode [ 335.391276][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.436822][ T12] bridge_slave_0: left allmulticast mode [ 335.462219][ T12] bridge_slave_0: left promiscuous mode [ 335.482400][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.858832][ T5861] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 335.873074][ T5861] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 335.882476][ T5861] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 335.918844][ T5861] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 335.929266][ T5861] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 335.976361][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1255'. [ 336.220992][ T5866] Bluetooth: hci2: unexpected subevent 0x04 length: 68 > 11 [ 336.234030][T10806] netlink: 'syz.0.1258': attribute type 8 has an invalid length. [ 336.368174][T10816] netlink: 'syz.0.1258': attribute type 4 has an invalid length. [ 336.449686][T10819] netlink: 'syz.0.1258': attribute type 4 has an invalid length. [ 336.978071][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.000716][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.057870][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 337.105567][ T12] bond0 (unregistering): Released all slaves [ 337.116616][T10838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.181449][T10842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.215377][T10842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.315047][T10838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.348738][T10846] overlayfs: invalid origin (000000035b0000000000008a94416592a5356de08457fbc30ece5e7e7e318cb2b4b22122228598eed09a) [ 337.682278][ T907] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 337.836928][ T12] hsr_slave_0: left promiscuous mode [ 337.847565][ T907] usb 1-1: config 1 has an invalid descriptor of length 137, skipping remainder of the config [ 337.863247][ T907] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.873734][ T907] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 337.890651][ T12] hsr_slave_1: left promiscuous mode [ 337.896738][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.905486][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.914096][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.928158][ T907] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 337.932820][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.944339][ T907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.944362][ T907] usb 1-1: Product: syz [ 337.944377][ T907] usb 1-1: Manufacturer: syz [ 337.944390][ T907] usb 1-1: SerialNumber: syz [ 338.062471][ T5866] Bluetooth: hci6: command tx timeout [ 338.077898][ T12] veth1_macvtap: left promiscuous mode [ 338.086003][ T12] veth0_macvtap: left promiscuous mode [ 338.093200][ T12] veth1_vlan: left promiscuous mode [ 338.098693][ T12] veth0_vlan: left promiscuous mode [ 338.171407][T10846] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1266'. [ 338.221512][ T907] usb 1-1: 0:2 : does not exist [ 338.264394][ T907] usb 1-1: USB disconnect, device number 67 [ 338.387836][ T6076] udevd[6076]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.174030][ T12] team0 (unregistering): Port device team_slave_1 removed [ 339.240397][ T12] team0 (unregistering): Port device team_slave_0 removed [ 340.037598][T10794] chnl_net:caif_netlink_parms(): no params data found [ 340.142415][ T5866] Bluetooth: hci6: command tx timeout [ 340.490021][T10794] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.531284][T10794] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.551053][T10794] bridge_slave_0: entered allmulticast mode [ 340.571884][T10794] bridge_slave_0: entered promiscuous mode [ 340.582432][T10794] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.589603][T10794] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.612458][T10794] bridge_slave_1: entered allmulticast mode [ 340.620126][T10794] bridge_slave_1: entered promiscuous mode [ 340.835197][T10794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.864855][T10794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.979883][T10794] team0: Port device team_slave_0 added [ 341.083980][T10794] team0: Port device team_slave_1 added [ 341.113746][ T30] audit: type=1800 audit(1758064826.923:9): pid=10914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1280" name="bus" dev="ramfs" ino=34752 res=0 errno=0 [ 341.274744][T10794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.285285][T10794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.327022][T10794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.343970][T10794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.350920][T10794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.378553][T10794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.556979][T10794] hsr_slave_0: entered promiscuous mode [ 341.591632][T10794] hsr_slave_1: entered promiscuous mode [ 341.614820][T10794] debugfs: 'hsr0' already exists in 'hsr' [ 341.626471][T10794] Cannot create hsr debugfs directory [ 341.703341][ T907] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 341.844028][ T907] usb 1-1: device descriptor read/64, error -71 [ 341.983216][ T30] audit: type=1326 audit(1758064827.793:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10916 comm="syz.2.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1ef8eba9 code=0x7fc00000 [ 342.093390][ T907] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 342.148276][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'. [ 342.222737][ T5866] Bluetooth: hci6: command tx timeout [ 342.222988][ T907] usb 1-1: device descriptor read/64, error -71 [ 342.376666][ T907] usb usb1-port1: attempt power cycle [ 342.736343][ T907] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 342.788510][ T907] usb 1-1: device descriptor read/8, error -71 [ 342.852924][T10794] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 342.878656][T10794] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 342.892087][T10794] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 342.915700][T10794] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 343.037071][ T907] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 343.104917][ T907] usb 1-1: device descriptor read/8, error -71 [ 343.148343][T10794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.219907][T10794] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.242787][ T907] usb usb1-port1: unable to enumerate USB device [ 343.244298][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.256296][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.282537][ T3032] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.289691][ T3032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.344693][T10970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1290'. [ 343.352237][T10794] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 343.365109][T10794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 343.683440][T10979] fuse: Bad value for 'group_id' [ 343.688418][T10979] fuse: Bad value for 'group_id' [ 343.830897][T10794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.303249][ T5866] Bluetooth: hci6: command tx timeout [ 344.694867][T10794] veth0_vlan: entered promiscuous mode [ 344.738091][T10794] veth1_vlan: entered promiscuous mode [ 344.857482][T10794] veth0_macvtap: entered promiscuous mode [ 344.934768][T10794] veth1_macvtap: entered promiscuous mode [ 344.999786][T10794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.032146][T10794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.102398][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.140042][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.174393][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.229049][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.405524][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.446779][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.598030][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.640501][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.146723][ T5858] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 346.331555][T11066] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1306'. [ 346.344196][ T5858] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 346.370203][ T5858] usb 6-1: config 0 has no interface number 0 [ 346.379209][ T5858] usb 6-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 346.394169][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.434226][ T5858] usb 6-1: config 0 descriptor?? [ 346.468765][ T5858] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.105/input/input36 [ 346.672085][T11050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.703156][T11050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.745612][T11050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.757411][T11050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.774453][ T5217] bcm5974 6-1:0.105: could not read from device [ 346.817699][ T5217] bcm5974 6-1:0.105: could not read from device [ 346.832449][ T5858] usb 6-1: USB disconnect, device number 18 [ 346.873273][ T6076] bcm5974 6-1:0.105: could not read from device [ 346.916349][ T6076] udevd[6076]: Error opening device "/dev/input/event4": No such file or directory [ 346.970151][ T6076] udevd[6076]: Unable to EVIOCGABS device "/dev/input/event4" [ 347.008249][ T6076] udevd[6076]: Unable to EVIOCGABS device "/dev/input/event4" [ 347.017280][ T6076] udevd[6076]: Unable to EVIOCGABS device "/dev/input/event4" [ 347.034697][ T6076] udevd[6076]: Unable to EVIOCGABS device "/dev/input/event4" [ 347.048204][ T6076] udevd[6076]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 347.121790][ T5232] udevd[5232]: worker [6076] terminated by signal 6 (Aborted) [ 347.156437][ T5232] udevd[5232]: worker [6076] failed while handling '/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.105/input/input36/event4' [ 347.712307][ T5858] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 347.882665][ T5858] usb 6-1: device descriptor read/64, error -71 [ 348.122932][ T5858] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 348.282338][ T5858] usb 6-1: device descriptor read/64, error -71 [ 348.376620][T11129] can0: slcan on ptm0. [ 348.399434][ T5858] usb usb6-port1: attempt power cycle [ 348.539514][T11130] can0 (unregistered): slcan off ptm0. [ 348.759917][ T5858] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 348.822863][ T5858] usb 6-1: device descriptor read/8, error -71 [ 349.078833][ T5858] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 349.144274][ T5858] usb 6-1: device descriptor read/8, error -71 [ 349.263012][ T5858] usb usb6-port1: unable to enumerate USB device [ 349.405372][T11164] No control pipe specified [ 349.423326][T11164] netlink: 'syz.2.1323': attribute type 10 has an invalid length. [ 349.501751][T11164] batman_adv: batadv0: Adding interface: netdevsim0 [ 349.555155][T11164] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.580698][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.659466][T11164] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 349.963050][T11185] netlink: 'syz.2.1327': attribute type 83 has an invalid length. [ 350.062755][ T5858] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 350.159459][T11192] netlink: 'syz.2.1328': attribute type 10 has an invalid length. [ 350.241650][ T5858] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 350.255730][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.279029][ T5858] usb 1-1: config 0 descriptor?? [ 350.295516][ T5858] gspca_main: spca508-2.14.0 probing 8086:0110 [ 350.447749][T11192] bond0: (slave team0): Releasing backup interface [ 350.508749][ T5858] gspca_spca508: reg_read err -32 [ 350.521224][T11192] team0 (unregistering): Port device team_slave_0 removed [ 350.585167][T11192] team0 (unregistering): Port device team_slave_1 removed [ 350.680515][T11192] team0 (unregistering): Port device dummy0 removed [ 350.745642][ T5858] gspca_spca508: reg_read err -71 [ 350.761735][ T5858] gspca_spca508: reg_read err -71 [ 350.769799][ T5858] gspca_spca508: reg_read err -71 [ 350.779158][ T5858] gspca_spca508: reg write: error -71 [ 350.794833][T11201] nfs: Unknown parameter 'workdir' [ 350.796790][ T5858] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 350.856357][ T5858] usb 1-1: USB disconnect, device number 72 [ 350.877245][ T30] audit: type=1804 audit(1758064836.683:11): pid=11201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1329" name="/newroot/2/bus/file0" dev="overlay" ino=36 res=1 errno=0 [ 350.909818][T11201] C: renamed from team_slave_0 (while UP) [ 350.938670][T11201] netlink: 'syz.5.1329': attribute type 4 has an invalid length. [ 350.949325][T11201] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1329'. [ 350.963401][T11201] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 351.178193][T11212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1333'. [ 351.383399][ T43] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 351.549101][T11227] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1336'. [ 351.562480][T11227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1336'. [ 351.574241][T11227] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1336'. [ 351.602265][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 351.641870][ T43] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 351.658018][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 351.671712][ T43] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 351.699194][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 351.726121][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 351.753408][ T43] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 351.766406][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 351.801478][ T43] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 351.894216][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 351.912233][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 351.952010][T11244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1341'. [ 351.969450][ T43] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 351.980969][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 351.995657][ T43] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 352.011548][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 352.026316][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 352.045685][ T43] usb 6-1: string descriptor 0 read error: -22 [ 352.051990][ T43] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 352.065985][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.084210][ T43] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 352.150106][T11251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.203196][T11251] netlink: 'syz.0.1342': attribute type 3 has an invalid length. [ 352.242561][T11251] netlink: 'syz.0.1342': attribute type 3 has an invalid length. [ 352.287762][ T43] usb 6-1: USB disconnect, device number 23 [ 352.634268][T11272] Invalid/unusable pipe [ 352.733440][ T5858] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 352.887317][ T5858] usb 1-1: device descriptor read/64, error -71 [ 353.022745][ T30] audit: type=1800 audit(1758064838.843:12): pid=11285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1348" name="bus" dev="tmpfs" ino=48 res=0 errno=0 [ 353.042994][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.192583][ T5858] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 353.345902][ T5858] usb 1-1: device descriptor read/64, error -71 [ 353.474439][ T5858] usb usb1-port1: attempt power cycle [ 353.842524][ T5858] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 353.891776][ T5858] usb 1-1: device descriptor read/8, error -71 [ 354.283735][ T5858] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 354.333707][ T5858] usb 1-1: device descriptor read/8, error -71 [ 354.442613][ T5858] usb usb1-port1: unable to enumerate USB device [ 355.012257][ T5858] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 355.036166][T11330] netlink: 'syz.4.1352': attribute type 1 has an invalid length. [ 355.172280][ T5858] usb 6-1: Using ep0 maxpacket: 32 [ 355.180617][ T5858] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 355.235994][ T5858] usb 6-1: config 0 interface 0 has no altsetting 0 [ 355.260311][ T5858] usb 6-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 355.277262][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.294633][ T5858] usb 6-1: config 0 descriptor?? [ 355.728050][ T5858] usbhid 6-1:0.0: can't add hid device: -71 [ 355.740045][ T5858] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 355.753795][ T5858] usb 6-1: USB disconnect, device number 24 [ 355.932909][ T43] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 356.017319][T11361] syz.5.1357 (11361) used obsolete PPPIOCDETACH ioctl [ 356.118704][ T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 224, changing to 11 [ 356.174483][ T43] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 356.196639][ T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 356.209509][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.219345][ T43] usb 1-1: Product: syz [ 356.224371][ T43] usb 1-1: Manufacturer: syz [ 356.232687][ T43] usb 1-1: SerialNumber: syz [ 356.472391][ T43] cdc_ncm 1-1:1.0: bind() failure [ 356.502092][ T43] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 356.522266][ T5910] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 356.552309][ T43] cdc_ncm 1-1:1.1: bind() failure [ 356.581825][ T43] usb 1-1: USB disconnect, device number 77 [ 356.712612][ T5910] usb 6-1: Using ep0 maxpacket: 32 [ 356.736691][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.779955][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.814795][ T5910] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 356.847950][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.887554][ T5910] usb 6-1: config 0 descriptor?? [ 356.943021][ T5910] hub 6-1:0.0: USB hub found [ 357.129247][ T5910] hub 6-1:0.0: 1 port detected [ 357.945076][ T5858] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 358.112244][ T5858] usb 1-1: Using ep0 maxpacket: 16 [ 358.128008][ T5858] usb 1-1: no configurations [ 358.139933][ T5858] usb 1-1: can't read configurations, error -22 [ 358.282768][ T5858] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 358.385386][ T5910] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 358.409354][ T5910] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 358.436893][ T5910] usbhid 6-1:0.0: can't add hid device: -32 [ 358.462118][ T5910] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 358.503741][ T5858] usb 1-1: Using ep0 maxpacket: 16 [ 358.535768][ T5858] usb 1-1: no configurations [ 358.536178][ T5910] usb 6-1: USB disconnect, device number 25 [ 358.540380][ T5858] usb 1-1: can't read configurations, error -22 [ 358.552859][ T5858] usb usb1-port1: attempt power cycle [ 358.905433][ T5858] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 358.962481][ T5858] usb 1-1: Using ep0 maxpacket: 16 [ 358.990676][ T5858] usb 1-1: no configurations [ 359.005315][ T5858] usb 1-1: can't read configurations, error -22 [ 359.099615][T11437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.165818][ T5858] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 359.172736][T11437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.242900][ T5858] usb 1-1: Using ep0 maxpacket: 16 [ 359.264016][ T5858] usb 1-1: no configurations [ 359.288996][ T5858] usb 1-1: can't read configurations, error -22 [ 359.324442][ T5858] usb usb1-port1: unable to enumerate USB device [ 359.628707][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1373'. [ 359.638102][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1373'. [ 360.502304][ T43] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 360.663954][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 360.682217][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.728831][ T43] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 360.748194][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.763203][ T43] usb 6-1: config 0 descriptor?? [ 360.848865][T11490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1378'. [ 360.900085][T11490] overlayfs: failed to clone upperpath [ 360.988761][T11492] QAT: Invalid ioctl 21531 [ 361.187355][T11478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.202783][T11478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.263314][ T43] bigben 0003:146B:0902.0013: unexpected rdesc, please submit for review [ 361.281665][ T43] bigben 0003:146B:0902.0013: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.5-1/input0 [ 361.292895][ T43] bigben 0003:146B:0902.0013: not enough fields in HID_OUTPUT_REPORT 0 [ 361.301146][ T43] bigben 0003:146B:0902.0013: no output report found [ 361.467182][ T43] usb 6-1: USB disconnect, device number 26 [ 361.932269][ T43] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 362.095693][ T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.121032][ T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 362.162316][ T43] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 362.187934][ T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 362.211587][ T43] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 362.230412][ T43] usb 1-1: Product: syz [ 362.242389][ T43] usb 1-1: Manufacturer: syz [ 362.248037][ T43] usb 1-1: SerialNumber: syz [ 362.263498][ T43] cdc_mbim 1-1:1.0: MBIM functional descriptor missing [ 362.274670][ T43] cdc_mbim 1-1:1.0: bind() failure [ 362.571922][ T43] usb 1-1: USB disconnect, device number 82 [ 363.029525][T11561] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1387'. [ 363.350961][T11569] serio: Serial port ptm0 [ 363.642960][ T43] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 363.838695][ T43] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 363.878782][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.915370][ T43] usb 1-1: Product: syz [ 363.919551][ T43] usb 1-1: Manufacturer: syz [ 363.939912][ T43] usb 1-1: SerialNumber: syz [ 364.096713][T11594] fuse: Unknown parameter 'subj_user' [ 364.909217][T11611] af_packet: tpacket_rcv: packet too big, clamped from 388 to 4294967272. macoff=96 [ 365.182305][ T5861] Bluetooth: hci4: command 0x0406 tx timeout [ 365.379492][ T43] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 365.611635][ T43] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 365.655945][ T43] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 365.679177][ T43] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 365.690192][ T43] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 365.707728][ T43] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 365.738676][ T43] usb 1-1: USB disconnect, device number 83 [ 366.532310][T11660] netlink: 'syz.2.1409': attribute type 10 has an invalid length. [ 366.562363][ T24] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 367.242770][ T24] usb 1-1: device descriptor read/64, error -71 [ 367.495062][ T24] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 367.656693][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 367.676751][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 68: 232, using maximum allowed: 30 [ 367.689712][ T24] usb 1-1: config 0 interface 0 altsetting 68 has 0 endpoint descriptors, different from the interface descriptor's value: 232 [ 367.704613][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 367.715084][ T24] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 367.729708][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.739468][ T24] usb 1-1: Product: syz [ 367.745538][ T24] usb 1-1: Manufacturer: syz [ 367.751618][ T24] usb 1-1: SerialNumber: syz [ 367.764272][ T24] usb 1-1: config 0 descriptor?? [ 369.805732][T11670] tipc: Started in network mode [ 369.810663][T11670] tipc: Node identity ac14142f, cluster identity 4711 [ 369.824457][T11670] tipc: New replicast peer: 0.0.0.0 [ 369.837164][T11670] tipc: Enabled bearer , priority 10 [ 369.872572][T11688] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 370.040171][ T24] airspy 1-1:0.0: usb_control_msg() failed -71 request 09 [ 370.048152][ T24] airspy 1-1:0.0: Could not detect board [ 370.058664][ T24] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 370.077575][ T24] usb 1-1: USB disconnect, device number 85 [ 370.672542][ T9] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 370.737131][T11734] /dev/nullb0: Can't open blockdev [ 370.854635][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 370.874921][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 370.885673][ T9] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 370.901716][ T9] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 370.913451][ T9] usb 1-1: Product: syz [ 370.918871][ T9] usb 1-1: Manufacturer: syz [ 370.925347][ T9] usb 1-1: SerialNumber: syz [ 370.955820][ T5951] tipc: Node number set to 2886997039 [ 370.982265][ T5858] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 371.144068][ T5858] usb 6-1: Using ep0 maxpacket: 16 [ 371.155251][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 371.174123][ T5858] usb 6-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 371.185156][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.204093][ T5858] usb 6-1: config 0 descriptor?? [ 371.231805][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1429'. [ 371.285819][ T9] usb 1-1: palm_os_3_probe - error -110 getting connection information [ 371.305883][ T9] visor 1-1:1.0: probe with driver visor failed with error -110 [ 371.569985][T11755] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20000 [ 371.635100][ T5858] mcp2200 0003:04D8:00DF.0014: USB HID v0.04 Device [HID 04d8:00df] on usb-dummy_hcd.5-1/input0 [ 371.706682][ T9] usb 1-1: USB disconnect, device number 86 [ 371.824388][ T43] usb 6-1: USB disconnect, device number 27 [ 371.857996][T11768] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.1435'. [ 371.868593][T11764] netlink: 'syz.2.1434': attribute type 4 has an invalid length. [ 371.871137][T11768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1435'. [ 371.894909][T11768] netlink: 125920 bytes leftover after parsing attributes in process `syz.0.1435'. [ 372.452448][ T907] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 372.553008][T11784] lo: left promiscuous mode [ 372.612394][ T907] usb 1-1: device descriptor read/64, error -71 [ 372.867531][ T907] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 373.012848][ T907] usb 1-1: device descriptor read/64, error -71 [ 373.126960][ T907] usb usb1-port1: attempt power cycle [ 373.423220][ T24] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 373.502332][ T907] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 373.543673][ T907] usb 1-1: device descriptor read/8, error -71 [ 373.592672][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 373.619598][ T24] usb 6-1: config 0 has an invalid interface number: 25 but max is 0 [ 373.639730][ T24] usb 6-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 373.652101][ T24] usb 6-1: config 0 has no interface number 0 [ 373.664410][ T24] usb 6-1: too many endpoints for config 0 interface 25 altsetting 198: 151, using maximum allowed: 30 [ 373.677722][ T24] usb 6-1: config 0 interface 25 altsetting 198 has 0 endpoint descriptors, different from the interface descriptor's value: 151 [ 373.691320][ T24] usb 6-1: config 0 interface 25 has no altsetting 0 [ 373.700433][ T24] usb 6-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 373.726919][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.737213][ T24] usb 6-1: Product: syz [ 373.741397][ T24] usb 6-1: Manufacturer: syz [ 373.748571][ T24] usb 6-1: SerialNumber: syz [ 373.761394][ T24] usb 6-1: config 0 descriptor?? [ 373.792259][ T907] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 373.822873][ T907] usb 1-1: device descriptor read/8, error -71 [ 373.836675][T11802] netlink: 'syz.4.1448': attribute type 6 has an invalid length. [ 373.945193][ T907] usb usb1-port1: unable to enumerate USB device [ 374.006522][ T24] cypress_m8 6-1:0.25: Nokia CA-42 V2 Adapter converter detected [ 374.009442][T11803] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1448'. [ 374.021835][ T24] nokiaca42v2 ttyUSB0: required endpoint is missing [ 374.039737][ T24] usb 6-1: USB disconnect, device number 28 [ 374.049166][ T24] cypress_m8 6-1:0.25: device disconnected [ 375.710428][ T24] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 375.842286][ T24] usb 1-1: device descriptor read/64, error -71 [ 376.082299][ T24] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 376.234267][ T24] usb 1-1: device descriptor read/64, error -71 [ 376.371906][ T24] usb usb1-port1: attempt power cycle [ 376.762305][ T24] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 376.833760][ T24] usb 1-1: device descriptor read/8, error -71 [ 376.854527][T11843] netlink: 'syz.5.1459': attribute type 17 has an invalid length. [ 376.882251][T11843] netlink: 'syz.5.1459': attribute type 16 has an invalid length. [ 376.917080][ T5861] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 376.920313][T11843] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1459'. [ 376.934486][ T5861] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 376.945748][ T5861] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 376.964555][ T5861] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 376.972435][ T5861] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 377.084176][ T24] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 377.123487][ T24] usb 1-1: device descriptor read/8, error -71 [ 377.233975][ T24] usb usb1-port1: unable to enumerate USB device [ 377.627568][T11844] chnl_net:caif_netlink_parms(): no params data found [ 377.914099][T11844] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.921332][T11844] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.965264][T11844] bridge_slave_0: entered allmulticast mode [ 378.039814][T11844] bridge_slave_0: entered promiscuous mode [ 378.059171][T11844] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.070106][T11844] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.088430][T11844] bridge_slave_1: entered allmulticast mode [ 378.109035][T11844] bridge_slave_1: entered promiscuous mode [ 378.268989][T11844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.286418][T11844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.319376][T11865] comedi comedi0: Minor 48 is invalid! [ 378.379462][T11844] team0: Port device team_slave_0 added [ 378.396743][T11844] team0: Port device team_slave_1 added [ 378.464851][T11844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.479248][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.502241][T11844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.543587][T11844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.617611][T11844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.661783][T11844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.689498][T11844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.789845][T11844] hsr_slave_0: entered promiscuous mode [ 378.799613][T11844] hsr_slave_1: entered promiscuous mode [ 378.807816][T11844] debugfs: 'hsr0' already exists in 'hsr' [ 378.815280][T11844] Cannot create hsr debugfs directory [ 378.882293][ T5910] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 379.022560][ T5866] Bluetooth: hci8: command tx timeout [ 379.035007][ T5910] usb 1-1: Using ep0 maxpacket: 16 [ 379.048286][ T5910] usb 1-1: config 4 has an invalid interface number: 9 but max is 0 [ 379.060323][ T5910] usb 1-1: config 4 has no interface number 0 [ 379.067620][ T5910] usb 1-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 379.077655][ T5910] usb 1-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 935 [ 379.087618][ T5910] usb 1-1: config 4 interface 9 has no altsetting 0 [ 379.104772][ T5910] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 379.115004][T11844] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.127343][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.136747][ T5910] usb 1-1: Product: syz [ 379.142115][ T5910] usb 1-1: Manufacturer: syz [ 379.146998][ T5910] usb 1-1: SerialNumber: syz [ 379.159032][T11869] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 379.170396][T11869] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 379.193137][ T5910] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 379.284188][T11844] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.409873][T11844] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.481076][T11869] syzkaller1: entered promiscuous mode [ 379.512865][T11869] syzkaller1: entered allmulticast mode [ 379.572709][ T5866] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 379.591467][T11844] batman_adv: batadv0: Removing interface: netdevsim0 [ 379.614360][T11844] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.728528][ T1029] usb 1-1: Failed to submit usb control message: -71 [ 379.735931][ T5858] usb 1-1: USB disconnect, device number 95 [ 379.761466][ T1029] usb 1-1: unable to send the bmi data to the device: -71 [ 379.788757][ T1029] usb 1-1: unable to get target info from device [ 379.803733][ T1029] usb 1-1: could not get target info (-71) [ 379.811078][ T1029] usb 1-1: could not probe fw (-71) [ 379.989843][T11844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 380.007406][T11844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 380.030484][T11844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 380.082028][T11844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 380.425402][T11897] /dev/nullb0: Can't open blockdev [ 380.433008][T11844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.460250][T11844] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.497358][ T3032] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.504545][ T3032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.578724][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.585891][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.102354][ T5866] Bluetooth: hci8: command tx timeout [ 381.122424][ T43] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 381.239720][T11844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.303016][ T43] usb 1-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 381.327271][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 381.353455][ T43] usb 1-1: SerialNumber: syz [ 381.369619][ T43] usb 1-1: config 0 descriptor?? [ 381.386564][ T43] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 381.391666][T11844] veth0_vlan: entered promiscuous mode [ 381.394933][ T43] dvb-usb: bulk message failed: -22 (3/0) [ 381.411883][ T43] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 381.426982][ T43] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 381.446030][T11844] veth1_vlan: entered promiscuous mode [ 381.452580][ T43] usb 1-1: media controller created [ 381.457842][ T43] dvb-usb: bulk message failed: -22 (5/0) [ 381.480728][ T43] dvb-usb: MAC address reading failed. [ 381.510718][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 381.530944][T11844] veth0_macvtap: entered promiscuous mode [ 381.568004][T11844] veth1_macvtap: entered promiscuous mode [ 381.568914][ T43] dvb-usb: bulk message failed: -22 (6/0) [ 381.591943][T11844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.617742][T11844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.644367][ T3032] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.657132][ T43] dvb-usb: bulk message failed: -22 (6/0) [ 381.680980][ T43] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 381.699996][ T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input37 [ 381.700750][ T3032] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.734823][ T43] dvb-usb: schedule remote query interval to 100 msecs. [ 381.741781][ T43] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 381.766617][ T3032] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.837327][ T43] usb 1-1: USB disconnect, device number 96 [ 381.844319][ T3032] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.962084][ T43] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 382.168746][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.200586][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.295546][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.330862][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.561044][T11938] fuse: Unknown parameter '0x00000000000000040x0000000000000005' [ 382.755482][T11944] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 383.182772][ T5866] Bluetooth: hci8: command tx timeout [ 383.902594][ T24] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 383.962503][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 384.052863][ T24] usb 1-1: device descriptor read/64, error -71 [ 384.162742][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 384.181710][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 384.209200][T11998] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1479'. [ 384.224085][ T9] usb 3-1: config 6 interface 0 altsetting 4 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 384.236423][ T9] usb 3-1: config 6 interface 0 has no altsetting 0 [ 384.258189][ T9] usb 3-1: string descriptor 0 read error: -22 [ 384.266040][ T9] usb 3-1: New USB device found, idVendor=05ef, idProduct=8884, bcdDevice= 0.03 [ 384.283517][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.314302][ T24] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 384.493432][ T24] usb 1-1: device descriptor read/64, error -71 [ 384.510415][T12009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1480'. [ 384.541824][ T43] usb 3-1: USB disconnect, device number 47 [ 384.634018][ T24] usb usb1-port1: attempt power cycle [ 384.806751][T12017] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1482'. [ 385.002247][ T24] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 385.044948][ T24] usb 1-1: device descriptor read/8, error -71 [ 385.262464][ T5866] Bluetooth: hci8: command tx timeout [ 385.292256][ T24] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 385.353250][ T24] usb 1-1: device descriptor read/8, error -71 [ 385.470273][ T24] usb usb1-port1: unable to enumerate USB device [ 385.542315][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 385.717335][ T9] usb 3-1: config 11 has an invalid interface number: 130 but max is 0 [ 385.729386][ T9] usb 3-1: config 11 has no interface number 0 [ 385.737234][ T9] usb 3-1: config 11 interface 130 has no altsetting 0 [ 385.752825][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a0.98 [ 385.761890][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.771836][ T9] usb 3-1: Product: syz [ 385.776143][ T9] usb 3-1: Manufacturer: syz [ 385.780740][ T9] usb 3-1: SerialNumber: syz [ 385.998489][T12023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.023160][T12023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.047343][T12023] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 386.054233][T12023] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 386.081762][T12023] vhci_hcd vhci_hcd.0: Device attached [ 386.096547][T12028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.108594][T12028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.123838][T12023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.152379][T12023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.177276][T12026] vhci_hcd: connection closed [ 386.187112][ T50] vhci_hcd: stop threads [ 386.201841][ T9] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 386.241407][ T50] vhci_hcd: release socket [ 386.246359][ T9] usb 3-1: USB disconnect, device number 48 [ 386.255360][ T50] vhci_hcd: disconnect device [ 386.287589][T12030] trusted_key: encrypted_key: insufficient parameters specified [ 387.025774][ T907] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 387.182732][ T907] usb 3-1: Using ep0 maxpacket: 32 [ 387.200997][ T907] usb 3-1: config 11 has an invalid interface number: 28 but max is 0 [ 387.221813][ T907] usb 3-1: config 11 has no interface number 0 [ 387.230354][ T907] usb 3-1: config 11 interface 28 altsetting 1 bulk endpoint 0xA has invalid maxpacket 16 [ 387.242432][ T907] usb 3-1: config 11 interface 28 has no altsetting 0 [ 387.254123][ T907] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=a8.08 [ 387.264553][ T907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.274294][ T907] usb 3-1: Product: syz [ 387.279575][ T907] usb 3-1: Manufacturer: syz [ 387.285757][ T907] usb 3-1: SerialNumber: syz [ 387.298261][T12038] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 387.332333][ T5903] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 387.498489][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.522135][T12038] usb usb8: usbfs: process 12038 (syz.2.1489) did not claim interface 32 before use [ 387.540451][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.552606][ T5903] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 387.566928][ T5903] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 387.577275][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.592641][ T5903] usb 1-1: config 0 descriptor?? [ 387.596274][T12038] block nbd2: Attempted send on invalid socket [ 387.611233][T12038] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 387.628080][T12038] XFS (nbd2): SB validate failed with error -5. [ 387.727045][ T907] usbserial_generic 3-1:11.28: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 387.739833][ T907] usbserial_generic 3-1:11.28: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 387.754963][ T907] usbserial_generic 3-1:11.28: generic converter detected [ 387.783134][ T907] usb 3-1: generic converter now attached to ttyUSB0 [ 387.799815][ T907] usb 3-1: USB disconnect, device number 49 [ 387.817640][ T907] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 387.826808][ T907] usbserial_generic 3-1:11.28: device disconnected [ 388.015938][ T5903] hid-udraw 0003:20D6:CB17.0015: unknown main item tag 0x3 [ 388.043394][ T5903] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0015/input/input39 [ 388.184149][ T5903] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0015/input/input40 [ 388.213610][ T5903] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0015/input/input41 [ 388.311054][ T5903] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0015/input/input42 [ 388.457295][ T5903] hid-udraw 0003:20D6:CB17.0015: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.0-1/input0 [ 388.553112][ T5903] usb 1-1: USB disconnect, device number 101 [ 388.590100][T12052] autofs: Unknown parameter '' [ 388.608753][T12053] fido_id[12053]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 388.628354][T12052] netlink: 'syz.2.1493': attribute type 16 has an invalid length. [ 388.647167][T12052] netlink: 'syz.2.1493': attribute type 3 has an invalid length. [ 388.658011][T12052] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.1493'. [ 389.302442][ T43] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 389.462438][ T43] usb 3-1: Invalid ep0 maxpacket: 16 [ 389.598337][ T43] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 389.753778][ T43] usb 3-1: Invalid ep0 maxpacket: 16 [ 389.780308][ T43] usb usb3-port1: attempt power cycle [ 390.133303][ T43] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 390.192939][ T43] usb 3-1: Invalid ep0 maxpacket: 16 [ 390.210927][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 390.222842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 390.322308][ T43] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 390.374453][ T43] usb 3-1: Invalid ep0 maxpacket: 16 [ 390.379982][ T43] usb usb3-port1: unable to enumerate USB device [ 390.824186][ T9] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 390.992489][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 390.999406][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.012536][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 391.024427][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 391.040059][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 391.058034][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 391.076973][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 391.088206][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 391.097362][ T9] usb 1-1: Manufacturer: syz [ 391.122956][ T9] usb 1-1: config 0 descriptor?? [ 391.422466][ T9] rc_core: IR keymap rc-hauppauge not found [ 391.428380][ T9] Registered IR keymap rc-empty [ 391.437619][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.464791][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.494093][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 391.513276][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input43 [ 391.529705][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.544654][T12075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.557214][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.561404][T12075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.584580][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.614535][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.646366][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.672355][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.693854][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.716399][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.742504][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.768809][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.795083][ T9] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 391.808631][ T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 392.418254][ T5858] usb 1-1: USB disconnect, device number 102 [ 392.830000][ T5861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 392.849489][ T5861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 392.860106][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 392.870492][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 392.881701][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 392.891904][ T5861] Bluetooth: hci7: hardware error 0x09 [ 393.542548][T12108] veth0_to_bridge: entered promiscuous mode [ 393.584899][ T1029] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.732538][ T5910] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 393.907334][ T5910] usb 1-1: config 39 has an invalid interface number: 2 but max is 1 [ 393.917390][ T5910] usb 1-1: config 39 has an invalid interface number: 208 but max is 1 [ 393.951913][T12092] chnl_net:caif_netlink_parms(): no params data found [ 393.969593][ T5910] usb 1-1: config 39 has no interface number 0 [ 393.982087][ T5910] usb 1-1: config 39 has no interface number 1 [ 394.029056][ T5910] usb 1-1: config 39 interface 2 has no altsetting 0 [ 394.035987][ T43] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 394.045318][ T5910] usb 1-1: config 39 interface 208 has no altsetting 0 [ 394.067584][ T5910] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=c4.36 [ 394.097897][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.124219][ T5910] usb 1-1: Product: syz [ 394.128518][ T5910] usb 1-1: Manufacturer: syz [ 394.133433][ T5910] usb 1-1: SerialNumber: syz [ 394.207218][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 394.227827][ T43] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.248352][ T43] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.274145][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 394.280871][T12092] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.298435][ T43] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 394.312026][T12092] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.330621][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.331804][T12092] bridge_slave_0: entered allmulticast mode [ 394.348826][ T43] usb 3-1: config 0 descriptor?? [ 394.370048][ T5910] mdc800 1-1:39.2: probe fails -> wrong Interface [ 394.381705][T12092] bridge_slave_0: entered promiscuous mode [ 394.419792][ T5910] mdc800 1-1:39.208: probe fails -> wrong Interface [ 394.427402][T12092] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.435002][T12092] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.442488][T12092] bridge_slave_1: entered allmulticast mode [ 394.450229][T12092] bridge_slave_1: entered promiscuous mode [ 394.474566][ T5910] usb 1-1: USB disconnect, device number 103 [ 394.587448][T12127] tmpfs: Unknown parameter 'usrquota' [ 394.623750][T12092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.658638][T12092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.710250][T12092] team0: Port device team_slave_0 added [ 394.739625][T12092] team0: Port device team_slave_1 added [ 394.831660][T12092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.855254][T12092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.883326][T12092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.902067][T12092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.911152][T12092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.958751][T12092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.026571][T12095] Bluetooth: hci3: command tx timeout [ 395.076284][T12138] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1517'. [ 395.079031][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 395.085461][T12138] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1517'. [ 395.134994][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 395.145927][ T43] usb 3-1: USB disconnect, device number 54 [ 395.240797][T12138] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1517'. [ 395.267791][T12092] hsr_slave_0: entered promiscuous mode [ 395.278641][T12092] hsr_slave_1: entered promiscuous mode [ 395.285591][T12092] debugfs: 'hsr0' already exists in 'hsr' [ 395.291321][T12092] Cannot create hsr debugfs directory [ 395.433804][ T9] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 395.510052][ T5861] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 395.570647][T12092] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.614220][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 395.624127][ T9] usb 1-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 395.641256][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.665372][ T9] usb 1-1: config 0 descriptor?? [ 395.720517][T12092] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.819143][T12092] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.884093][T12140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.899241][T12140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.916373][ T5861] Bluetooth: hci5: command 0x0406 tx timeout [ 395.917442][ T5903] usb 1-1: USB disconnect, device number 104 [ 396.019753][T12092] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.032437][T12147] usb usb8: usbfs: process 12147 (syz.2.1521) did not claim interface 0 before use [ 396.050563][T12149] comedi comedi4: bad chanlist[2]=0x00050000 chan=0 range length=2 [ 396.160821][T12151] netlink: 'syz.2.1523': attribute type 3 has an invalid length. [ 396.213080][T12151] netlink: 'syz.2.1523': attribute type 4 has an invalid length. [ 396.232270][T12151] netlink: 'syz.2.1523': attribute type 5 has an invalid length. [ 396.261213][T12151] netlink: 'syz.2.1523': attribute type 6 has an invalid length. [ 396.270770][T12151] netlink: 'syz.2.1523': attribute type 7 has an invalid length. [ 396.283183][T12151] netlink: 'syz.2.1523': attribute type 7 has an invalid length. [ 396.298199][T12151] netlink: 13014 bytes leftover after parsing attributes in process `syz.2.1523'. [ 396.317366][T12092] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 396.356402][T12092] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 396.381496][T12092] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 396.420730][T12092] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 396.641755][T12092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.666556][T12164] 9pnet_fd: Insufficient options for proto=fd [ 396.681869][T12092] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.712943][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.720152][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.763391][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.770531][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.102384][ T5866] Bluetooth: hci3: command tx timeout [ 397.272625][ T24] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 397.288523][T12092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.328680][T12179] ieee802154 phy1 wpan1: encryption failed: -22 [ 397.472911][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 397.488369][ T24] usb 3-1: config 0 has no interfaces? [ 397.524300][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 397.546192][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.558608][ T24] usb 3-1: Product: syz [ 397.565705][ T24] usb 3-1: Manufacturer: syz [ 397.572032][ T24] usb 3-1: SerialNumber: syz [ 397.585834][ T24] usb 3-1: config 0 descriptor?? [ 397.752631][ T5910] usb 1-1: new low-speed USB device number 105 using dummy_hcd [ 397.799234][T12092] veth0_vlan: entered promiscuous mode [ 397.811064][ T24] usb 3-1: USB disconnect, device number 55 [ 397.817415][T12092] veth1_vlan: entered promiscuous mode [ 397.870224][T12092] veth0_macvtap: entered promiscuous mode [ 397.886739][T12092] veth1_macvtap: entered promiscuous mode [ 397.918701][T12092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.924258][ T5910] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 397.936618][ T5910] usb 1-1: config 0 has no interface number 0 [ 397.949215][T12092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.964094][ T5910] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 397.975528][ T3032] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.983602][ T5910] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 398.024243][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.033228][ T5910] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 398.037573][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.051488][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.066555][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.100745][ T5910] usb 1-1: config 0 descriptor?? [ 398.144274][ T5910] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 398.208689][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.233639][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.280854][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.290327][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.419825][T12192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.438613][T12192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.449419][T12192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.458376][T12192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.547525][T12196] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1502'. [ 398.569419][ T5910] usb 1-1: USB disconnect, device number 105 [ 399.142803][T12224] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 399.192053][ T5866] Bluetooth: hci3: command tx timeout [ 399.233752][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 399.402537][ T9] usb 7-1: device descriptor read/64, error -71 [ 399.459599][T12236] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 399.652313][ T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 399.812422][ T9] usb 7-1: device descriptor read/64, error -71 [ 399.922488][ T9] usb usb7-port1: attempt power cycle [ 400.292302][ T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 400.323550][ T9] usb 7-1: device descriptor read/8, error -71 [ 400.575199][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 400.624582][ T9] usb 7-1: device descriptor read/8, error -71 [ 400.752835][ T9] usb usb7-port1: unable to enumerate USB device [ 401.262505][ T5861] Bluetooth: hci3: command tx timeout [ 401.352312][ T43] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 401.515793][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.530242][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.549796][ T43] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 401.560564][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.586253][ T43] usb 1-1: config 0 descriptor?? [ 402.056678][T12266] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1554'. [ 402.239110][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 402.250603][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 402.287679][ T43] usb 1-1: USB disconnect, device number 106 [ 402.719402][T12284] fuse: Unknown parameter 'fd¯À2Š' [ 402.889227][T12292] tipc: Enabling of bearer rejected, failed to enable media [ 403.024811][ T5861] Bluetooth: hci9: command 0x1003 tx timeout [ 403.031868][ T5866] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 403.152446][ T5903] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 403.323985][ T5903] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.339551][ T5903] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.363570][ T5903] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.389821][ T5903] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 403.401687][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.424532][ T5903] usb 1-1: config 0 descriptor?? [ 403.435035][ T5903] rndis_host 1-1:0.0: skipping garbage [ 403.440516][ T5903] usb 1-1: bad CDC descriptors [ 403.497392][ T5910] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 403.637564][ T5903] usb 1-1: USB disconnect, device number 107 [ 403.657182][ T5910] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 403.687699][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.716418][ T5910] usb 3-1: Product: syz [ 403.738534][ T5910] usb 3-1: Manufacturer: syz [ 403.754653][ T5910] usb 3-1: SerialNumber: syz [ 403.774764][ T5910] usb 3-1: config 0 descriptor?? [ 403.785264][ T5910] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 403.793652][ T5910] usb 3-1: setting power ON [ 403.798164][ T5910] dvb-usb: bulk message failed: -22 (2/0) [ 403.805476][T12320] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 403.811894][T12320] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 403.823514][ T5910] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 403.852708][ T5910] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 403.889524][ T5910] dvb_usb_cxusb 3-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 403.993261][ T5910] usb 3-1: USB disconnect, device number 56 [ 404.512306][ T5910] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 404.656166][ T5910] usb 1-1: device descriptor read/64, error -71 [ 404.822823][ T24] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 404.912595][ T5910] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 404.975634][T12349] overlayfs: failed to clone upperpath [ 404.986088][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.005668][ T24] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0127, bcdDevice=7b.4a [ 405.021826][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.036249][ T24] usb 3-1: Product: syz [ 405.040540][ T24] usb 3-1: Manufacturer: syz [ 405.045546][ T24] usb 3-1: SerialNumber: syz [ 405.054943][ T5910] usb 1-1: device descriptor read/64, error -71 [ 405.065009][ T24] usb 3-1: config 0 descriptor?? [ 405.083878][ T24] kvaser_usb 3-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 405.187915][ T5910] usb usb1-port1: attempt power cycle [ 405.279058][ T5924] usb 3-1: USB disconnect, device number 57 [ 405.533001][ T5910] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 405.561876][ T5910] usb 1-1: device descriptor read/8, error -71 [ 405.802373][ T5910] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 405.832548][ T5910] usb 1-1: device descriptor read/8, error -71 [ 405.950326][ T5910] usb usb1-port1: unable to enumerate USB device [ 406.298292][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1575'. [ 407.236000][T12369] netlink: 'syz.2.1578': attribute type 10 has an invalid length. [ 407.261425][T12369] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 407.557535][T12374] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1579'. [ 407.849900][T12380] program syz.0.1582 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 408.525083][T12389] block device autoloading is deprecated and will be removed. [ 408.560855][ T5903] kernel write not supported for file /275/clear_refs (pid: 5903 comm: kworker/0:4) [ 408.578566][T12391] tipc: Enabling of bearer rejected, already enabled [ 408.782528][T12400] netlink: 44 bytes leftover after parsing attributes in process `\'. [ 408.791203][T12400] netlink: 72 bytes leftover after parsing attributes in process `\'. [ 408.953155][ T43] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 409.092428][ T43] usb 1-1: device descriptor read/64, error -71 [ 409.332245][ T43] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 409.466171][ T43] usb 1-1: device descriptor read/64, error -71 [ 409.466299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 409.553509][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 409.584368][ T43] usb usb1-port1: attempt power cycle [ 409.715926][ T9] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 409.725592][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.739088][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.759612][ T9] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 409.772418][ T9] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 409.780478][ T9] usb 3-1: Manufacturer: syz [ 409.794127][ T9] usb 3-1: config 0 descriptor?? [ 409.803938][ T9] igorplugusb 3-1:0.0: endpoint incorrect [ 409.932381][ T43] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 409.959591][ T43] usb 1-1: device descriptor read/8, error -71 [ 410.003176][T12404] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1590'. [ 410.040436][ T9] usb 3-1: USB disconnect, device number 58 [ 410.054384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 410.136191][T12413] tipc: Enabling of bearer rejected, failed to enable media [ 410.212333][ T43] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 410.243994][ T43] usb 1-1: device descriptor read/8, error -71 [ 410.352951][ T43] usb usb1-port1: unable to enumerate USB device [ 410.432304][T12431] cgroup: Unknown subsys name 'appraise' [ 410.954162][ T43] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 411.125566][ T43] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65535, setting to 8 [ 411.156735][ T43] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 411.179375][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.201418][T12435] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 411.428983][T12435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.452998][T12435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.470321][ T43] usb 3-1: string descriptor 0 read error: -71 [ 411.483787][ T43] hub 3-1:32.0: USB hub found [ 411.492325][ T43] hub 3-1:32.0: config failed, can't read hub descriptor (err -22) [ 411.583172][ T43] usb 3-1: USB disconnect, device number 59 [ 411.811553][T12448] netlink: 'syz.0.1606': attribute type 6 has an invalid length. [ 411.837565][T12448] netlink: 'syz.0.1606': attribute type 6 has an invalid length. [ 412.302700][ T5861] Bluetooth: hci3: command 0x0405 tx timeout [ 413.327319][T12489] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 413.533861][ T30] audit: type=1326 audit(1758064899.353:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12492 comm="syz.2.1621" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff88658eba9 code=0x0 [ 413.638159][T12496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.682773][T12496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.703436][T12496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.724067][T12496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.882639][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 414.047905][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 414.071582][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.084063][ T9] usb 3-1: config 0 descriptor?? [ 414.105100][ T9] pwc: Creative Labs Webcam 5 detected. [ 414.392256][ T5861] Bluetooth: hci3: command 0x0405 tx timeout [ 414.745393][ T43] IPVS: starting estimator thread 0... [ 414.833139][T12507] IPVS: using max 27 ests per chain, 64800 per kthread [ 414.942548][ T31] INFO: task syz.3.939:9428 blocked for more than 143 seconds. [ 414.960097][ T31] Not tainted syzkaller #0 [ 414.975672][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 415.012220][ T31] task:syz.3.939 state:D stack:25608 pid:9428 tgid:9428 ppid:5855 task_flags:0x440040 flags:0x00004004 [ 415.034231][ T31] Call Trace: [ 415.037592][ T31] [ 415.040535][ T31] __schedule+0x1798/0x4cc0 [ 415.045507][ T31] ? __lock_acquire+0xab9/0xd20 [ 415.050445][ T31] ? __lock_acquire+0xab9/0xd20 [ 415.055849][ T31] ? __pfx___schedule+0x10/0x10 [ 415.060839][ T31] ? schedule+0x91/0x360 [ 415.065353][ T31] schedule+0x165/0x360 [ 415.069528][ T31] schedule_preempt_disabled+0x13/0x30 [ 415.076961][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 415.084262][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 415.091548][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 415.100336][ T31] ? page_cache_ra_order+0x3a2/0xe70 [ 415.107450][ T31] down_read+0x98/0x2e0 [ 415.111698][ T31] page_cache_ra_order+0x3a2/0xe70 [ 415.118819][ T31] do_sync_mmap_readahead+0x25e/0x7a0 [ 415.124459][ T31] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 415.131876][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 415.137538][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 415.145324][ T31] filemap_fault+0x6b9/0x12b0 [ 415.150106][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 415.155556][ T31] ? kmem_cache_alloc_noprof+0x3b8/0x6e0 [ 415.163646][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 415.168966][ T31] ? pte_alloc_one+0x1f9/0x310 [ 415.174066][ T31] __do_fault+0x138/0x390 [ 415.178420][ T31] __handle_mm_fault+0x1842/0x5440 [ 415.184172][ T31] ? lock_vma_under_rcu+0x1a3/0x450 [ 415.189391][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 415.195187][ T31] ? lock_vma_under_rcu+0x3d2/0x450 [ 415.203236][ T31] ? __pfx_do_futex+0x10/0x10 [ 415.208013][ T31] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 415.214923][ T31] handle_mm_fault+0x40a/0x8e0 [ 415.219806][ T31] do_user_addr_fault+0xa81/0x1390 [ 415.225168][ T31] ? rcu_is_watching+0x15/0xb0 [ 415.230029][ T31] ? trace_page_fault_user+0x84/0x1e0 [ 415.237192][ T31] exc_page_fault+0x82/0x100 [ 415.243551][ T31] asm_exc_page_fault+0x26/0x30 [ 415.248433][ T31] RIP: 0033:0x7fa3c3a55134 [ 415.254917][ T31] RSP: 002b:00007ffcf02645d0 EFLAGS: 00010246 [ 415.261015][ T31] RAX: 0000200000000b80 RBX: 0000000000000001 RCX: 0000000000000000 [ 415.272528][ T31] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000555566df93c8 [ 415.281859][ T31] RBP: 00007ffcf02646d8 R08: 0000000000000000 R09: 0000000000000000 [ 415.291900][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 00007fa3c3dd609c [ 415.303688][ T31] R13: 00007fa3c3dd6090 R14: fffffffffffffffe R15: 00007ffcf0264720 [ 415.313426][ T31] [ 415.316505][ T31] INFO: task syz.7.963:9488 blocked for more than 143 seconds. [ 415.324725][ T31] Not tainted syzkaller #0 [ 415.329680][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 415.338590][ T31] task:syz.7.963 state:D stack:26056 pid:9488 tgid:9487 ppid:9194 task_flags:0x440140 flags:0x00004004 [ 415.351260][ T31] Call Trace: [ 415.354758][ T31] [ 415.357703][ T31] __schedule+0x1798/0x4cc0 [ 415.372275][ T31] ? __lock_acquire+0xab9/0xd20 [ 415.377160][ T31] ? __lock_acquire+0xab9/0xd20 [ 415.382023][ T31] ? __pfx___schedule+0x10/0x10 [ 415.411122][ T31] ? schedule+0x91/0x360 [ 415.418999][ T31] schedule+0x165/0x360 [ 415.428278][ T31] schedule_preempt_disabled+0x13/0x30 [ 415.439397][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 415.453825][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 415.493858][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 415.512442][ T31] ? page_cache_ra_order+0x3a2/0xe70 [ 415.522653][ T31] down_read+0x98/0x2e0 [ 415.531137][ T31] page_cache_ra_order+0x3a2/0xe70 [ 415.541172][ T31] filemap_get_pages+0x468/0x1de0 [ 415.565336][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 415.585406][ T31] ? __pfx_filemap_get_pages+0x10/0x10 [ 415.591691][ T31] ? stack_trace_save+0x9c/0xe0 [ 415.616989][ T31] ? __pfx___might_resched+0x10/0x10 [ 415.628000][ T31] ? kasan_save_track+0x4f/0x80 [ 415.640486][ T31] filemap_splice_read+0x581/0xc60 [ 415.659921][ T31] ? __pfx_filemap_splice_read+0x10/0x10 [ 415.680156][ T31] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 415.688312][ T31] ? alloc_pipe_info+0x374/0x4d0 [ 415.700268][ T31] ? __pfx_filemap_splice_read+0x10/0x10 [ 415.727939][ T31] splice_direct_to_actor+0x4a9/0xcc0 [ 415.746976][ T31] ? __pfx_direct_splice_actor+0x10/0x10 [ 415.764432][ T31] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 415.784984][ T31] do_splice_direct+0x181/0x270 [ 415.796562][ T31] ? __pfx_do_splice_direct+0x10/0x10 [ 415.806923][ T31] ? common_file_perm+0x1b5/0x230 [ 415.821439][ T31] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 415.854019][ T31] ? bpf_lsm_file_permission+0x9/0x20 [ 415.868690][ T31] ? security_file_permission+0x75/0x290 [ 415.874607][ T31] ? rw_verify_area+0x255/0x4d0 [ 415.879552][ T31] do_sendfile+0x4da/0x7e0 [ 415.886916][ T31] ? __pfx_do_sendfile+0x10/0x10 [ 415.891973][ T31] ? __se_sys_futex+0x36f/0x400 [ 415.897125][ T31] __se_sys_sendfile64+0x13e/0x190 [ 415.902739][ T31] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 415.908542][ T31] ? do_syscall_64+0xbe/0xfa0 [ 415.915220][ T31] do_syscall_64+0xfa/0xfa0 [ 415.919900][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.926268][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.936105][ T31] ? clear_bhb_loop+0x60/0xb0 [ 415.940838][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.951509][ T31] RIP: 0033:0x7f74d418eba9 [ 415.959063][ T31] RSP: 002b:00007f74d509a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 415.969952][ T31] RAX: ffffffffffffffda RBX: 00007f74d43d5fa0 RCX: 00007f74d418eba9 [ 415.979828][ T31] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 415.990127][ T31] RBP: 00007f74d4211e19 R08: 0000000000000000 R09: 0000000000000000 [ 416.000282][ T31] R10: 0000000000201f00 R11: 0000000000000246 R12: 0000000000000000 [ 416.008314][ T31] R13: 00007f74d43d6038 R14: 00007f74d43d5fa0 R15: 00007ffe57203e08 [ 416.018192][ T31] [ 416.021688][ T31] [ 416.021688][ T31] Showing all locks held in the system: [ 416.039157][ T31] 5 locks held by kworker/0:0/9: [ 416.044249][ T31] #0: ffff888021ec5148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 416.056020][ T31] #1: ffffc900000e7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 416.068318][ T31] #2: ffff888144b27198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 416.077350][ T31] #3: ffff888077d2b198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 416.128531][ T31] #4: ffff88804c1ae160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 416.139164][ T31] 3 locks held by kworker/u8:0/12: [ 416.144687][ T31] #0: ffff88801a889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 416.157826][ T31] #1: ffffc90000117ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 416.170226][ T31] #2: ffffffff8f955108 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 416.179784][ T31] 1 lock held by khungtaskd/31: [ 416.184739][ T31] #0: ffffffff8e53c820 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 416.197391][ T31] 2 locks held by kworker/u8:3/50: [ 416.207140][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 416.226112][ T31] #1: ffff8880b8724008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 416.236023][ T31] 2 locks held by kworker/u8:8/3032: [ 416.241440][ T31] 2 locks held by getty/7435: [ 416.247078][ T31] #0: ffff88814e00d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 416.257074][ T31] #1: ffffc90003a732f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 416.314257][ T31] 2 locks held by syz.6.815/8988: [ 416.319302][ T31] 1 lock held by syz.3.939/9428: [ 416.339738][ T31] #0: ffff888148c2fc48 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3a2/0xe70 [ 416.359744][ T31] 1 lock held by syz.7.963/9488: [ 416.367500][ T31] #0: ffff888148c2fc48 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3a2/0xe70 [ 416.386908][ T31] 1 lock held by syz.8.1093/9958: [ 416.391947][ T31] #0: ffff888148c2fc48 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3a2/0xe70 [ 416.409548][ T31] 1 lock held by syz-executor/11844: [ 416.416033][ T31] #0: ffff888058518448 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1a3/0x450 [ 416.433479][ T31] 1 lock held by syz.5.1460/11850: [ 416.442295][ T31] #0: ffff888148c2faa8 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: blkdev_write_iter+0x50b/0x710 [ 416.464154][ T31] 1 lock held by syz.4.1617/12484: [ 416.469276][ T31] #0: ffffffff8e542180 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 416.480813][ T31] 2 locks held by syz.0.1624/12502: [ 416.486246][ T31] #0: ffffffff8f955108 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 416.496624][ T31] #1: ffffffff8e5422b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 416.526300][ T9] pwc: Failed to set LED on/off time (-71) [ 416.549743][ T31] 2 locks held by syz.0.1624/12503: [ 416.557795][ T31] [ 416.560137][ T31] ============================================= [ 416.560137][ T31] [ 416.577760][ T9] pwc: send_video_command error -71 [ 416.580360][ T31] NMI backtrace for cpu 1 [ 416.580383][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 416.580403][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 416.580413][ T31] Call Trace: [ 416.580421][ T31] [ 416.580428][ T31] dump_stack_lvl+0x189/0x250 [ 416.580451][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.580468][ T31] ? __pfx__printk+0x10/0x10 [ 416.580502][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 416.580531][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 416.580557][ T31] ? __pfx__printk+0x10/0x10 [ 416.580584][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 416.580605][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 416.580632][ T31] watchdog+0xf60/0xfa0 [ 416.580655][ T31] ? watchdog+0x1e2/0xfa0 [ 416.580677][ T31] kthread+0x711/0x8a0 [ 416.580704][ T31] ? __pfx_watchdog+0x10/0x10 [ 416.580721][ T31] ? __pfx_kthread+0x10/0x10 [ 416.580746][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 416.580764][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.580782][ T31] ? __pfx_kthread+0x10/0x10 [ 416.580806][ T31] ret_from_fork+0x4bc/0x870 [ 416.580833][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 416.580859][ T31] ? __switch_to_asm+0x39/0x70 [ 416.580876][ T31] ? __switch_to_asm+0x33/0x70 [ 416.580892][ T31] ? __pfx_kthread+0x10/0x10 [ 416.580916][ T31] ret_from_fork_asm+0x1a/0x30 [ 416.580949][ T31] [ 416.580955][ T31] Sending NMI from CPU 1 to CPUs 0: [ 416.588215][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 416.596728][ C0] NMI backtrace for cpu 0 [ 416.596741][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 416.596758][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 416.596768][ C0] Workqueue: usb_hub_wq hub_event [ 416.596790][ C0] RIP: 0010:preempt_count_add+0x0/0x1a0 [ 416.596809][ C0] Code: c1 7c 97 48 8b 3c 24 e8 ee 3d 94 00 eb 8c e9 f1 fe ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 53 49 bf 00 00 00 00 00 fc ff df 48 c7 c0 [ 416.596822][ C0] RSP: 0018:ffffc900000e6588 EFLAGS: 00000002 [ 416.596836][ C0] RAX: 0000000000000002 RBX: 0000000000000899 RCX: 0000000000000000 [ 416.596846][ C0] RDX: 00000000000000d7 RSI: ffffffff8c0503e0 RDI: 0000000000000001 [ 416.596856][ C0] RBP: 0000000000000000 R08: ffff888141f88237 R09: 1ffff110283f1046 [ 416.596866][ C0] R10: dffffc0000000000 R11: ffffffff8b8a3540 R12: 1ffffffff344c6a6 [ 416.596878][ C0] R13: 00000000ffffffff R14: 000000d7cc703c5c R15: 0000000000000094 [ 416.596889][ C0] FS: 0000000000000000(0000) GS:ffff8881257a7000(0000) knlGS:0000000000000000 [ 416.596901][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 416.596912][ C0] CR2: 00007ffdb746dff8 CR3: 00000000751d4000 CR4: 00000000003526f0 [ 416.596926][ C0] DR0: fffffffffffffff8 DR1: 0000000000000006 DR2: 0200000000000000 [ 416.596936][ C0] DR3: 0000000000000003 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 416.596946][ C0] Call Trace: [ 416.596952][ C0] [ 416.596957][ C0] delay_tsc+0x65/0xc0 [ 416.596979][ C0] wait_for_lsr+0x160/0x2f0 [ 416.597003][ C0] serial8250_console_write+0x134c/0x1ba0 [ 416.597026][ C0] ? __lock_acquire+0xab9/0xd20 [ 416.597042][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 416.597061][ C0] ? console_flush_all+0x13a/0xb10 [ 416.597088][ C0] ? console_flush_all+0x13a/0xb10 [ 416.597110][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 416.597131][ C0] ? console_flush_all+0x13a/0xb10 [ 416.597150][ C0] console_flush_all+0x6f3/0xb10 [ 416.597170][ C0] ? console_flush_all+0x13a/0xb10 [ 416.597192][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 416.597216][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 416.597232][ C0] console_unlock+0xbb/0x190 [ 416.597250][ C0] ? vprintk_emit+0x2ee/0x590 [ 416.597267][ C0] ? __pfx_console_unlock+0x10/0x10 [ 416.597284][ C0] ? vprintk_emit+0x280/0x590 [ 416.597302][ C0] ? vprintk_emit+0x495/0x590 [ 416.597319][ C0] ? vprintk_emit+0x2ee/0x590 [ 416.597335][ C0] ? vprintk_emit+0x2ee/0x590 [ 416.597353][ C0] vprintk_emit+0x4c5/0x590 [ 416.597372][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 416.597398][ C0] _printk+0xcf/0x120 [ 416.597417][ C0] ? __pfx__printk+0x10/0x10 [ 416.597437][ C0] ? __pfx__printk+0x10/0x10 [ 416.597458][ C0] ? send_video_command+0x156/0x180 [ 416.597477][ C0] pwc_set_video_mode+0x1036/0x1830 [ 416.597497][ C0] usb_pwc_probe+0x1107/0x1b30 [ 416.597516][ C0] ? __pfx_usb_pwc_probe+0x10/0x10 [ 416.597532][ C0] ? __pm_runtime_set_status+0x785/0xa50 [ 416.597557][ C0] usb_probe_interface+0x668/0xc30 [ 416.597581][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 416.597601][ C0] really_probe+0x26d/0x9e0 [ 416.597618][ C0] __driver_probe_device+0x18c/0x2f0 [ 416.597633][ C0] driver_probe_device+0x4f/0x430 [ 416.597650][ C0] __device_attach_driver+0x2ce/0x530 [ 416.597666][ C0] bus_for_each_drv+0x251/0x2e0 [ 416.597683][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 416.597698][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 416.597720][ C0] __device_attach+0x2b8/0x400 [ 416.597741][ C0] ? __pfx___device_attach+0x10/0x10 [ 416.597763][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 416.597786][ C0] bus_probe_device+0x185/0x260 [ 416.597804][ C0] device_add+0x7b6/0xb50 [ 416.597826][ C0] usb_set_configuration+0x1a87/0x20e0 [ 416.597857][ C0] usb_generic_driver_probe+0x8d/0x150 [ 416.597878][ C0] usb_probe_device+0x1c4/0x390 [ 416.597899][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 416.597918][ C0] really_probe+0x26d/0x9e0 [ 416.597935][ C0] __driver_probe_device+0x18c/0x2f0 [ 416.597950][ C0] driver_probe_device+0x4f/0x430 [ 416.597966][ C0] __device_attach_driver+0x2ce/0x530 [ 416.597982][ C0] bus_for_each_drv+0x251/0x2e0 [ 416.597999][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 416.598014][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 416.598035][ C0] __device_attach+0x2b8/0x400 [ 416.598056][ C0] ? __pfx___device_attach+0x10/0x10 [ 416.598083][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 416.598105][ C0] bus_probe_device+0x185/0x260 [ 416.598123][ C0] device_add+0x7b6/0xb50 [ 416.598144][ C0] usb_new_device+0xa39/0x16f0 [ 416.598166][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 416.598183][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 416.598199][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.598217][ C0] hub_event+0x2958/0x4a20 [ 416.598256][ C0] ? __pfx_hub_event+0x10/0x10 [ 416.598274][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 416.598294][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 416.598308][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 416.598325][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 416.598343][ C0] process_scheduled_works+0xae1/0x17b0 [ 416.598371][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 416.598396][ C0] worker_thread+0x8a0/0xda0 [ 416.598424][ C0] kthread+0x711/0x8a0 [ 416.598445][ C0] ? __pfx_worker_thread+0x10/0x10 [ 416.598462][ C0] ? __pfx_kthread+0x10/0x10 [ 416.598481][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 416.598496][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.598512][ C0] ? __pfx_kthread+0x10/0x10 [ 416.598531][ C0] ret_from_fork+0x4bc/0x870 [ 416.598549][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 416.598568][ C0] ? __switch_to_asm+0x39/0x70 [ 416.598583][ C0] ? __switch_to_asm+0x33/0x70 [ 416.598597][ C0] ? __pfx_kthread+0x10/0x10 [ 416.598617][ C0] ret_from_fork_asm+0x1a/0x30 [ 416.598640][ C0] [ 416.606428][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 416.606444][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 416.606464][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 416.606474][ T31] Call Trace: [ 416.606482][ T31] [ 416.606490][ T31] dump_stack_lvl+0x99/0x250 [ 416.606510][ T31] ? __asan_memcpy+0x40/0x70 [ 416.606530][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.606548][ T31] ? __pfx__printk+0x10/0x10 [ 416.606582][ T31] vpanic+0x237/0x6d0 [ 416.606603][ T31] ? __pfx_vpanic+0x10/0x10 [ 416.606625][ T31] ? preempt_schedule_common+0x83/0xd0 [ 416.606651][ T31] panic+0xb9/0xc0 [ 416.606670][ T31] ? __pfx_panic+0x10/0x10 [ 416.606691][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 416.606719][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 416.606747][ T31] watchdog+0xf9f/0xfa0 [ 416.606770][ T31] ? watchdog+0x1e2/0xfa0 [ 416.606794][ T31] kthread+0x711/0x8a0 [ 416.606827][ T31] ? __pfx_watchdog+0x10/0x10 [ 416.606845][ T31] ? __pfx_kthread+0x10/0x10 [ 416.606870][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 416.606889][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.606908][ T31] ? __pfx_kthread+0x10/0x10 [ 416.606933][ T31] ret_from_fork+0x4bc/0x870 [ 416.606956][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 416.606983][ T31] ? __switch_to_asm+0x39/0x70 [ 416.607001][ T31] ? __switch_to_asm+0x33/0x70 [ 416.607017][ T31] ? __pfx_kthread+0x10/0x10 [ 416.607043][ T31] ret_from_fork_asm+0x1a/0x30 [ 416.607076][ T31] [ 416.607482][ T31] Kernel Offset: disabled