last executing test programs: 3m38.667028019s ago: executing program 2 (id=3): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x919009, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f00000000c0)=0x1) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x0, 0x7ffffffb}]}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x0, 0x0) sendto$inet(r0, &(0x7f00000001c0)='\x00', 0x1, 0x200008d0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10) 3m37.702080591s ago: executing program 2 (id=14): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="819b24bd7000fbdbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) (fail_nth: 2) 3m37.381721431s ago: executing program 2 (id=16): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f00000005c0)=ANY=[@ANYBLOB="f994f7e986b1", @ANYRES8=r1, @ANYBLOB="45ec724c6c1a6ec0882d81cd27469ac4d0794734d46c53679a7030a7333a6850c143bc8838f795f7be5aa96b015f384909da2f7ad3d51056339a5deb01eb973b022da898a97e3fe6fad54aa4c018ed95a58e6daca4fec241fc417aaf36030b5f34eefea422b1d327e4325202ff864f3eb9dfe14529f545752db184822d600986548dcb494ec3dd1f980919efe2acd53ec72e31897376fd50f9cf6737d9ee7f8594e056742eec3fce449c6bd0844b05a974dc157da4eda0af72157cef8df925a1be3f5274629ee5f2c92818a66ed5444bb79ff7cd9c65f70f59b4b6857aaa82ebb4799e0f"]) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000180)) keyctl$get_keyring_id(0x0, r3, 0xc311) 3m37.280670915s ago: executing program 32 (id=16): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f00000005c0)=ANY=[@ANYBLOB="f994f7e986b1", @ANYRES8=r1, @ANYBLOB="45ec724c6c1a6ec0882d81cd27469ac4d0794734d46c53679a7030a7333a6850c143bc8838f795f7be5aa96b015f384909da2f7ad3d51056339a5deb01eb973b022da898a97e3fe6fad54aa4c018ed95a58e6daca4fec241fc417aaf36030b5f34eefea422b1d327e4325202ff864f3eb9dfe14529f545752db184822d600986548dcb494ec3dd1f980919efe2acd53ec72e31897376fd50f9cf6737d9ee7f8594e056742eec3fce449c6bd0844b05a974dc157da4eda0af72157cef8df925a1be3f5274629ee5f2c92818a66ed5444bb79ff7cd9c65f70f59b4b6857aaa82ebb4799e0f"]) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000180)) keyctl$get_keyring_id(0x0, r3, 0xc311) 3m25.075545803s ago: executing program 1 (id=78): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) write$sndseq(r1, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) bind$l2tp6(r0, &(0x7f0000000280)={0xa, 0x0, 0x6, @dev={0xfe, 0x80, '\x00', 0x32}, 0xcc, 0x3}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x17, 0xa, 0x0, 0x3, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_x_sec_ctx={0x1, 0x18, 0x81, 0x9}]}, 0x1b}}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES64=r2, @ANYRES8=r1, @ANYRES16=r0], 0x70}}, 0x10) 3m24.934590618s ago: executing program 1 (id=79): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1a101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0xa, 0x2b17, 0xe6}) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x4) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a60800002ef20f5e870078000026b87aeabbc900bbc9000f302f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x6b}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000005c0)={"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"}) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x7ff, 0x4, 0x22, 0x4, 0xb8, 0x2, 0x5, 0x9, 0x9, 0xd, 0x6, 0xe}, {0x7, 0x3b6, 0x63, 0x3, 0x4, 0x5, 0x3, 0x5, 0xe0, 0x5, 0x9, 0x0, 0xffffffffffffff81}, {0x3, 0x81, 0x38, 0x3, 0x2, 0xeb, 0x1, 0x7, 0x8, 0x8b, 0xff, 0x8, 0x200d}], 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1a101, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0xa, 0x2b17, 0xe6}) (async) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x4) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a60800002ef20f5e870078000026b87aeabbc900bbc9000f302f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x6b}], 0x1, 0x14, 0x0, 0x0) (async) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000005c0)={"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"}) (async) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x7ff, 0x4, 0x22, 0x4, 0xb8, 0x2, 0x5, 0x9, 0x9, 0xd, 0x6, 0xe}, {0x7, 0x3b6, 0x63, 0x3, 0x4, 0x5, 0x3, 0x5, 0xe0, 0x5, 0x9, 0x0, 0xffffffffffffff81}, {0x3, 0x81, 0x38, 0x3, 0x2, 0xeb, 0x1, 0x7, 0x8, 0x8b, 0xff, 0x8, 0x200d}], 0x2}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 3m24.813584835s ago: executing program 1 (id=80): mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000c) (async) syz_usb_connect(0x5, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x92, 0xfc, 0x2, 0x20, 0x742, 0x200a, 0x7188, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3, 0x1, 0x50, 0x9, [{{0x9, 0x4, 0xbb, 0x21, 0x2, 0x88, 0xc3, 0xd5, 0x8, [], [{{0x9, 0x5, 0x6, 0x1, 0x3ff, 0xb, 0x8, 0x9}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x4, 0x0, 0xe}}]}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0}) (async) r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote, @default, 0x1, @default}, &(0x7f0000000140)=0x1c, 0x80000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000009, 0x80010, r1, 0x509f3000) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYRES32=r0], 0x6c}}, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xe04000, 0x0) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 64) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x6, 0x9, &(0x7f0000000080)={{0x21, @remote, 0x0, 0x3, 'sh\x00'}, {@private=0xa810101, 0x4, 0x0, 0x0, 0x100000, 0xfffffffe}}, 0x44) getsockopt$inet_tcp_int(r3, 0x6, 0x9, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048045}, 0x4000000) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 3m23.567234669s ago: executing program 1 (id=88): socket$packet(0x11, 0xa, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af3650400410038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x50}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44051) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,size=8']) chdir(&(0x7f0000000140)='./file0\x00') ftruncate(0xffffffffffffffff, 0x82081fc) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x80a7a000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000002d00)={0xfffffffe, 0x0, 0xffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="4030210000002121fef1df879f581b9fdbbddce0720b141235ae5de7650a70710666d5c62a4f9db95430d6836a25a6775ac0cc5f03b8cceb5988fa90478612f2"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000003040)=ANY=[@ANYBLOB="080008000003000001000000000045000028000000000089907800000000e000000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c613c85a462949"], 0x36) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c) recvmmsg(r6, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000004b40)=""/262, 0x106}], 0x1}, 0x5}], 0x1, 0x100, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000bbbbbbbbbb88c9aaaaaaaa2986dd6d00200800eb11ff20010000000000000000000000000001ff0200000000000000000000000000014f194e2000eb90"], 0x125) 3m20.460667877s ago: executing program 1 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x200000, 0x80) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) open(&(0x7f00000000c0)='./file0\x00', 0x200000, 0x80) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) (async) 3m20.394893121s ago: executing program 1 (id=102): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x3, 0x1200000000}, 0x0) setrlimit(0x0, &(0x7f00000000c0)={0x9, 0x4}) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x20000) syz_open_dev$video(&(0x7f0000000100), 0x4e, 0x20300) syz_usb_connect(0x5, 0x24, &(0x7f00000022c0)={{0x12, 0x1, 0x201, 0x45, 0x96, 0x8c, 0x8, 0x4b4, 0x9320, 0xed7f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xd, 0x4d, 0xe0, 0x2, [{{0x9, 0x4, 0xb9, 0x7, 0x0, 0x81, 0x36, 0xcc, 0x41}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 3m4.67994042s ago: executing program 33 (id=102): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x3, 0x1200000000}, 0x0) setrlimit(0x0, &(0x7f00000000c0)={0x9, 0x4}) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x20000) syz_open_dev$video(&(0x7f0000000100), 0x4e, 0x20300) syz_usb_connect(0x5, 0x24, &(0x7f00000022c0)={{0x12, 0x1, 0x201, 0x45, 0x96, 0x8c, 0x8, 0x4b4, 0x9320, 0xed7f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xd, 0x4d, 0xe0, 0x2, [{{0x9, 0x4, 0xb9, 0x7, 0x0, 0x81, 0x36, 0xcc, 0x41}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 2m12.757044658s ago: executing program 4 (id=551): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac053702000000000001090224000100006000090400800203000200092107040001220500090581032007090807"], 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x6, @sdr={0x31303553, 0x6}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="200108"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2m11.109322266s ago: executing program 4 (id=553): syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14000000100001"], 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)}], 0x1, &(0x7f00000003c0), 0x0, 0x20000041}}], 0x1, 0xc004) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="c24beeb02a10184a04fe61a0c81e3edc04f375a48ba96f5b696534c2a7d8617422c20dbe325bc3cc5e0d138cadc15c9bac6bcdeeddae723612324fc1c5e97adf36226c6ee2ec5324d2f42867bf7389730e89014a8e8618ee1bc22d33551ded0d10bf6e94716f1ae707c31890f89a5df5056cf848605377df5ae9e49fd66eb8"]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000d40)=""/4096) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000063c0)="dbf36da2a43581802354a57c95b45368cde794cb24b3831e93bdb4b2a8613aa79c49d139f4ae897397ce9987ede61471e4764305007444601986a395f425fb8151f85a48fbd5ce30ba38ada804d66af36fbc4dfe21fcbf76340cd4d6008dcda8b88e98cc5c4368393f65934514a42ccd08a59ae953c34a992285559ba43009d4b9d15107c3d7d0c99c01f1eb92dd0de8d74bfda0be689305fdaebb5e9976925d1508013a05c8ddff7ae10ec7a6bcd63fc42f10766db13caa16ba55f25101f1dfe73d7ffdf7afaf35937798fae32c715e9b0cebb5782a353412fdf0c507b2b1844d6a3817e58b244fbf1875ffe0d16f66155243e4bb280a4645fe31a801d7eee9087ed832fecb687a99307ed0539bebeb436b8bd120489d8123e6c271e52801cf4fec1c2914dd9fe75903247b7f36ed4c7f854a8bf7524466e6724441d790a395ff4453b3c4e1229833b3a0a96894fc528ed57eb8496ee3ff2930791a96701d319c6145216530a50b4890f4eede03a09a8f06524ce97a49163343a50101cf86e7e60e90e909e6bee993d441d176ff1ef84de9fb753d2760e34b2c4e8e2006347deb1f46f2a4e0de1d1d6822521bf1cedc8ebe5b0c693ae1f72143d8a276666d07d4b7295c7005a4d3dc9dda3c58c673b75c8666337f18db92cb67d70f5dac810324afa9be13dc1297eac580ca2f43c1205da7f8f7c4a7ad038059fcd853ec2e0f351a20056e295408100f9cf3516c1cbd663346fdfb6bc5c111dc40f854a68c5b79e2b59b01c2a888a0cf26d600c2f8cdefcb8186633427ca7ef59ecab19ed63523b502973f1753108048f780ea94d9860dfec49659dd273678369f0bfaaeb5d846fc7823eecbef0654cfad0ecee9d9eb18312d6ad5e94f39c9fd429d5018aa3de4604047fa73ede0e4cccb92e715406a5d2a13905e4d46d770376a36f772816ff1a732f64b0b571a1cf8d452648bfaa33a381e68ef6457132af13f23dfe999866b278bb74fd174205cb489ec46a23476ad6ea07d20bb9fc65832397e6d629b2c89ad8e2a0a4fe17893bd536aec6a95584f224f6727a7e21045a5241940c2a1d6295fe1febfa2a627e58e20a3952a2bf33f46918db6aad36ac26602edf4434b04fae6303eacaaa05939a9d72425c504276764982dc636f6ba8591942d89b146453828e367118883e6e2f3f57f9c2104ec88669abdc04a5d980eb2f0f958d87de205e530c262c158c167f607f3a6e699f943d1ce996b8b4c12ec17409237d0b928d8355a414774d1a83cee78c2d43d652ac22feb37993ed9d452290ea2238aab40afb1ddd87281e6798b10e0d2cbf3c40f4570607b642e0b814b95126ac382bc9605805a83989470a0a31ee01d268084288dbd73743298e8a76402b68bbccc8a1b843d58aa63dea4339b9a03b07e8b5be8158423cb516b332ca4e24b737020e880789514f44806c5ff7967f8400a0e9e2f94846b4b38a199c86bbd309609033200aa69a301935b7eb0089da25bb467fba78b6119af56873d6bc010b835d0a7c929d71023ab0ad8cde080055bc4714ad2a4ec311fa80ebe8b0440dfcc486bcb313a06a86b09e614536da8aba642667595e4154ce22c2d2783699ea7ef5b99334113dbf96dcf5b1314ece113ed40542f9ea8f459bbbe766e3e4f9edbb82a61aa7388e0c4c62b4fec4f5a1c4aaaf836fd11b83f734737b699b75eb02a1cdb8180cb0b0cbe934f4653355f50f8a4e1549c6ed4c732ea2f6de8ce399de6bb3035d1bd6989cd056ee71f79cd742f949da0fd37e74598ceb7f8aab6146a05d0fa22fffb4c90477b6fd7a9864f257934affe6ac422b996fe0458a019eff1b88bd829a49409571f3cbb1dacc2f67df4aa76393e79df6f4be6c3bc3321d7e2411c10be4f948455198c24ff3800d028147aa5a066ff184b26784a53ece91286a51f9b861320fb03ce2fdf4ab5e671926082617397be7080983622b4ba7f16d3ab999a86b17990ca458a8ed7cd81bc1375cb14219e5ba8787327330651ce997e764076f29b75d6d0d7c1cd46fa554af482f9362068c4fbee7b828676ad855d0d0d4402d1b4df179e7036aaf90e5b1e55b71dc3c21a790fdcdb57feda92662177918bdbb10dc54609227432a43e910a2716a88f6e9afb7f9875059eadc1f4cbf682d2b8284c3de69923704138de2441254bd89beee70f41bdf0c2e09de22ad1e537e3f832ba00c9a2131a9799c940bd0dd1d5b158aecd21c7cb946e54055426f8337f6743c35afd1dc7f64aa26067bd71e6f19a9c1937aa0979e5dd8f3265a5b37488ebc588e678ae601bc15118ec627a7ee52aaa2542b5806e196880e47d512fc3f78c64a59769d92399ca7d336a87b376074d02815904f2e3f5e116143942cdccab9cbceac732b99b1f310cd3324f9fda3ab2c0c53f6208f07fcf8cd2fe95000fdcc5207da09ea45a84689bc91a2d09b350aa776798f463819c63d27c78f9c64413b7f6032e550849aab212ee7f483464d1e00b4fb5b9a0c5e0eaa1e38d2fe5e040093ae123dc435ea0548afc1c1116a17b08b53a047c5ae15b26dbf03cd46b4126591cb9f21bff503f0834d2427aca89183894a08fc7fc8d43877f6702dea3c8020b83151756efcd397c8ecdd2c9568dd020647aaba096ec7eeef45875d2c242e114999866c7f285e8bc8715818b1ee724865689ab9f0eac6474616a07de1b05570ece3f2f9ad5bd29361543dafa45da3a30cbdd8406b4c0e755fe9f0a4dc8cf87c59c9606af1e7e08f41a17e5625648714b02bc03135932e6721ef5e6b8f4be76c1c5e1c1423038d0ca85724490f682704f5cdeee2136db7c38231ae0eed9a24ed65cf1f76239ed10733153388b6e9159345652aca6c8307cb003e088fdbe75dbc47b81268691619227e4f604d1c33f358d6fd1dd1157c5e51701105a291f5aa34cbc9451a3ec908b5435360f928c8905e97496c8cff6564f1a9b9af4b90b5665ca455ae699ea70bfe7c610712af44b5870a67e94afcbf46be73e8299c94c2945f96ca26144c4062db7cc189a9a1d9adecffba8d923b8b465869eb1e766c202e0564157534eb32843fd3da22714aff0b7afbd9c61f7656a2c7d3c6a69d22dc4417df325dba2ceab0a89b6655c7c33b96a23dfd4401028035c97277fbc98d7de3337d4e934b17374f3378b0b586037d9e820e7089741b14aa051ae02c37353ee0fd5f4f447c845cfa6f96b8da19465e0ef5058b6f5ea462fcf27886b9506581a2e151f1d846642e7618884362f27d8f9289c89bae32e7710311efae38c04e09f05550b1070826bdb2e80e11c3e63dd6f051bb35588b42589f45dd0ad2fd5d69f40fceda2ebd118a10961091ae2291edd367119fb13865eca5a60ca5440570a35559252c95ad80e6c49f6e35a94af6ac832fb33711ebb251f2d08a709ed06dc44f4fa89eec4d973f8bd9959e12cb2f0db3a75f6d11f4fdcf6b0c3643f80caddb1fc3ac5d5f350c49ee6ba4b0e34c060fee5a5f89fc6718e4d99ffe22b381fbf14cd03bb459b329511bfe3ada80ada80fb658ac17f89425ed8e955a293e973668ee8b75f17a26cffda80b69488fd094d8d1fdab379fafc882c24a49876db6964eca68ce75f6514684e23e93e6dceeb4eca6530d12331dd98295a807e6aee23e64ebbed7d4bfd146647dab6913e73838751ee6234f931a65ee814529ac10b17052b46610cabb7c2a235fd26b009399e6730d4964e9949b30195520d419118a19ff9a2b2f23f82a5e8f1f23f57ce2503973fc2c5642fdbb29ef3834a063d84b30a0e14ef8f85140b4bb074623eb69b798fe12e689051bdbb30c31259334d9a380855a57fcfdd6a09c09bdd77d3d66a74163621a2b95a84be453085253de4d781e9a6f7514859e38a78bb0466177dc556ba9de4c9ac956954e7fb975e95940fcddd6051a7e115ce3c6ba1d526f7c9a798641e3ea553c00e07d72b58bc20fe5b2bce8e0b13008e1bc9a793b6da0af5f30e23ce108560276f8e17c4e64b69fb05a5ca8202391a05d5a4528c60e58bd6cb26fdce6ea2f6158cae5e079989b854b1c7729627e3567bc1767604e280e03b5570f8f57b9f170295fef1715c8591450f91b89546f4b4d2008b9b631ed64371b9f09ac7962b6dd56ef9b51910ec22e4d305a29c95cdd5d5b2478dcd74646744a061230f29c84418393a95400d450f6e8b7218d0de1b0a7b23d55c39241c731677b8163ec6bf7be363c9d41bfca8cb142d74aa6cc9746c1432932b8e26697fd19441491ba12bc3671408aaa6c4ab6f0483a19aae976db8706edd4ca594f03fc247ffa917d548780165aa321c643a667894854a6059037a4611d3a6bee5a3cb54bebc29b33403b2c600aa16419298064314b223f1d1cbcbfc5a059fd7a893f374d686a02f0cc3b9a348337d3be20378754a32b5e585ceb998828c89dfbd2d11b65dfe559171da5d51784aa29aa97bf6bba5b95d9e8162fe7d16fe4d155a9bf260315e5c1dc61717e5b099b4f5e49c4132949f3f56b514766aead44190cfa12a96675b5791ffc9c7067b102fa21f0e26725ca68c6a703674fcdbdb6f9266be4f490cf2a2ec672db4532f246baf4765ad8cb716b2b8f1b8fefd884cbbc65a5477f017c5b46c312da447c6d186aed92ca703859e505e0a31b0d87260b81e0803620a7e1283c91627bf752b9fa05effc83ed9fa4f554e97a425e30a254610933811d0ecabbb6c03135dff0556032ce32387a3d6a86221057d5c955079661ba7aa15cb99ce4f08bb7e613450420036353d280341b3e6f2d6eed887dfb4d45361dacd200eae50f48bd98ec8a059b7e19cdd2b6de12c8d61a57168791a20dd5975b470eac9c9876d23e28a6e0b2ec33360c396f805fbe05e57e01dec8a022515db6f730c58916eadf8ab29031948dbda1988f6db5ed9f27e755645897df1151122ff4a7be2549b080988390afacd4dcc17f8035fdac588e8e11c00b4dfca8789858ad6677d52de49e45e8e6df73e65cbb27d384bf6ba614a3a0703568e549efb1340714864a8ae79264f49ea1208a0c6641871ed7d96e362e421a3e24b88d9c47b73070000008e1b0e128889adde4043b85e4c3f44961785e06f28909230e5299562f41ce51fc4034dc8e4719efb1f2ac616af996d347ce67573eed0119ce8942775ff6f02ebcabb3b4fef3d3111d0398dc85261a6580eaaf8051fa09b46179d856732ea290bdfc26457376923316170f27cf7849cedbb5939efdfe573ab056bc654386d7ea62bec211084661f073d081854e5bd3f0e77f37cb244ab90a22799072b3e54dab36b6358d2a7bed3208cbe8c19baf03540f31d6b08054f0847e2a7680a5835bd36e34f00f802b04e93bf6b25c7bc6b06bca8945d5bc9784138ce356ddc139fa64e4b6114020d7e67bef6bd0a39b2cdeef1121fb09b4b25c6819a0784b3617ee01f834a8f9875d206b637202a29ff95cc45ca7fd40d0f10d568a49b972f4f6404f90349b384b6ee6119dfbe563c6679ba357dcf35fda057d2561a282d28212dacf1fd930e34e81a6fb2fbe75c654efabe573a61606032f963782263719f983f0d62c511bd560525f69f72fac00d0a09928b2ce440c1ed88e2894c081a07479052ebf576d79a232f2773e23aa8ef577a20659902dbfa97631af45a9fe2e575f36b8f0202cd0b7ae5054784c37633982080681510d5c14bc2deb1790272fd0384babdad16fff576117dcb7a436bff035e309d943a301ee58cb374a99bdb98d415fd756aa140875fe2c11d13e8be64b8727999ccc1b7598b8b707cd019bc54b595228af91ca7e9a546f2134eb2ff88123c44690864678f4d549c8e3fbdaa01907de8ab8eaede637a064e3b345718cf7a451e66433e50b6db45430014f2ffc885ca2269aea41e7ee8b25f731d7e409e169ec48f53e1b4b21734a24876765a3a1be10b4d734874e8e9e0d8a3bbdac2bededdd625e7a681e5e69855dcc9085db529ef28578f79ac24338b8401b4131ec9a1b5c4cfd26be9c66a35cc0f0809afa75e5a65eb20d451ca38c975eb2ee86735471b4c7a3afa07ecab162c1ce5092ba91dc22b5f2b7a680c2b6ff33f216b7e69819f727516e605dedbe9bd83364198a46c81055b8ab64ab4840494f07cc2efc05513247468e6538432ef84e9b61b13fdb89326e4fc25935e175fabfc3b5c337745ead515a76424ad39ae8ed5bbb6bd58bdcf7327b8095d69409be85cfa6584676c9739903fec09a7dcbc3f1d70a2332c6f21936ac757405e3442033abd1e2cb19673bc35885f3f6aa4ae33fa7aa132a21df7be47dae27a29851eebd968a09f59d0e727d5cc485583f9bf487d3e520a1122e2d7da6e9a2b37d448b1349b1f45c32fe424a626c4774c7b05e29e29e13c40f64da6c162e1a0d2e0d9e7c7f6656efea11db29f4d813584c49b41974ea0870074557e118cf8500d12a2b59e17a51635b2b04e58446b3b55950df93f473c73c6fad48b67ebee80290e025d9fbedf30f01e8ce69e5d65b1e2179ff9ef905fa864b4c1a3277636f1ce6a383708ad2d4eac1d38fb3bf4d2e7df21f61124ffad5936fbffa7822ca75a9bbfb67a091827b5c0b6ed6d0862e82742f6f30f91f8d6fe587d690ca4317f7368899dd952052e06ec9ee8ba602b7eb10100008000000000e147b8fdb5513048e5b096c181ac7a2944df6160c7ac4172c87e22ac2b9613a230d6b893b684aaabcf8a47fb7dd45722855741481a18be51067d1848c6279ae8ca8d514dd34b45435ffedb79ff1c6a8052debbdcf9a31694b70783225d3e51a089e0ad6a26e7c16a1f649d3ffd71115e66de4a7a66b70dde37a5677e7fa7745b3f25db07ddd2f08f6fe1190fad536605147bbea35ed3d5b5eb5eda1266a96d868f4b83780773af2fe9ab8c8a27d8f794ef80003cdd227e239de596541c12d8d76c6e499827b55cde124f143533907d17dbd66d75be69328536857c3ab04ab1cb2142bb49f7bfac9cac478ae48c54e797546ba1de758b8504a6580e86906e182cbe7fc4ccb786bfddc92c94a1fa3087f1b9cc1ccda51a76dd81933f6b7d386ad2e714538919d10aaab263667ea7901b7b0ec71049d2a38d52878cc9646b1f088391a6ebab0f72591d8549815206e5544c7e3d4a86d5328aafe70d32d5f3a14f0d9d4a9d02b7dc1d4019d5f25c8bfedeaa71710883376e3d4463dfad1a7e4f7c238148b524e801e345b280569c199eec378a2349812ea24a3d0b75c4b7398e8fa6fc612180063f73a795c545a209cc176c28acfe22c589a934f485ed24d9c75ff80844ff11c8d5728b353f9b356cc2280d8a1dbca1dd93f1b2742048547c6f034311af62d560adea5b9438e21bf8907ba1e9ae285aa75d708fb34b407a74ebfc4c4b150ec854ab7d546ede8f1734bebdc449f77bffc1896d9ffebf3eb9a0a88abdedb9739ffa4c75119c380d4884a4ed2a89d5825beb01f94ca0a573f8777d8e73f878d3b47b5216f6db25651c699a25f4227a614cd78e2326062a0955a680593593363bffd8067b70607ecfb4826dcb93ecffaa65aff84ee5bf3b821df39ea00e812904be07e2190dceaada2aefd572017bc291d03da752e9c3cac81dc4b487b6c5db711dcd73e6a93ce6eec4d4a30fe285b73e1b231cd42baf18e7a3e15a6ca14dd616240a86f3c89891c4ea96ea26c6d653bf65c9d6b3aa309cbd1adce01d683365249a74ce2360948d2ff5a7e27417bed053c0a93662d5ba6f4b49c466170aec6c2630ce578d5a3a40d568526c7febcd4b51ecead2ce1a390433ab290c952a339290a3b51e6880ee12f471491ec066945b2e32082cd1ab961972be9335700e6d441e791a989da5932b89004c5f14e3df9a5649400056bd4ee9acf68b82c6e474e64719d2976bec539bcc04862d711301b004e01a4ee3fc039fe94decec3fb2a83f88c336b9a2014926ba29ae0e19afd59273d7619534a199980f464af75803a7666ea14297c5d733441dce02180005f40f6247505723ceb76fbbe16623b1ac2c22baf5f7405ded00a17572a2bf05de1355594e9348cb56a746ac423a120ea80e8c78a866ac1c662a8739d7b9c918a78c7de7533dbe0b2ed55944688436887179e05159001cdef89aff115516dcd240b6ea8febb9778b81e02865af30b2648830cc5d1ac15d5d0359d43aa06d521a1f47ef346d36a6d1dca0376771e14c62d215f6308fdff28766e479346a4e0ed759bd969fc6d68b2751f1d4a5fdeb48ab5ff8ee63aaf4bd55c59cde01e0b4484710dbefe608a34037699891546cac10eb5fcc754ffe2c9060803511e86ef2d917c8882a9b73c52f0643a6bc1e31a63d821227a947ee29788c0fc6ffb579e06fec7b7e09b3462f65bdcb023c99c34f5c4d943c300f3a4dcbc8844c87233d4f31b79dacd7876aed46261c2883bf681143cd870718146030ac559a0181709b18ac13896a9f5cb64fb896df31f3a5fd8b4080de82fd9ab4c723684815c41d190c93180e29b7fb7476d4488d1081a3f3af827e2016cd0f9a71ad3f2313a512fb9956783bdcf03227f175088ea017ee16808aba4d856b8aa83b5907666ad02d0e54556420a269b6dac641c741d530c3f9d06519c4c6e3c66d1d64e56192c73df76a6b3479ab4ada4e7dc3d78ecad0892aec4a727aa36c929c270bc1267ca0039d8b6d767fbafba8582afe3cf799a7cf7ba362e8840da6a4b60b63d4996e30bd6b90bb2061ac7ef287ee7f36dbf972f540fba7536061c52285de9a521066ce4020f1c16f4f4440102a8930c7cb2436d4102a8fe460dd349bbe2490476f43e3ac6d772bf2a31a7bef76f6644eef3211c7ba9271b0bbf0d9419e4d1490ca234ec2a8158c4574ede545ea0ceaf120b7d0a5833dbd404530e4acf2b5d4c1482e86f445b2b5619276701ba2e23d04e76abfe84c0da8ff87c7549899d40ddc3316d9eea8df993147ca6dbfc7674788dcbfaf39b245ddc7dd00f3c2b6f6a4396241e785d9d6a3a5d0af56cf80e5a8e5c68af7766daacff3654608659cacdbc730630470f77d0669b96ad8dac942f8e8625de312e4eaed3f8c75eb8b874ab2642070ce121e897bbca61aad6d7b4133b4c66e142ea8b43c1a194f1029e7444445d2b9fa52aa8842b82f5048cdc5c61503fea1bb3bed30dc203cc5943f3dbaeab1fddc0ca4c7ea41576c8a79a860ed2ad4ee2c621553aaf93d1a4c616918ef827314eee78aa82a7eec2ec4a32070040ae09306bd121104632081a5fd2092b6d46e3da7da0ef5b5f45bed1cb84e9a39dbf0eaccedef05897f3d69aa8bd14b4f37d70669da5a00f820316a27230be8516aec0d27bbd77ae86077b445652286eacf8f9da1ddc846465eebf195fc68388b3e314ae4e5da355c55c4bc9dbef0412e25ccf86b9cf210c4220acf55782f5611b4696748521bf1813854ef25f4811622495e52328bf2663a4f0ee1f52cc551c912f43a5033c8e283a33f8389e11b8adf2795478dab0c9813e9b6c6632a5ea6ab1cd20fa242253ff4fbbc5b9ce2e4f4d1873b809fa559c75aa75bda376dec693cf7e14ba4ab874829d3c565132f2fb4c3c2c4431ee9cda50ecb5aea993fe95898255d6d87e42885507ede4ef3e629fe0a571b476247dd03d274b265c2b627a9c37ea092747cea398499553921b777722b814a34ce785b66307b2357e49a01c7af9d2609173095ec71a9db224368c258fde234105be963ed062ed565998a502e70dcef466d4660050486a31cd542ee1d0c4d875fd1d82b8ceabde73a2cb961d27e320c36b853e9ffb8c3a9d224ee110463ede87f4136fafa8ab37f1f5de4bce85daa261e016c3d3743012c0fd5b8e3bcf503753521d60c9f862973eed959610033c5ed1f3f0419b667074ffccec9c60a81724c36131339a2455eb5273376ac27edb9e99863b18943b49934d1c6c2f4371ca1175119b7c911c3e579e01381ab70e7788832574d9182e229e4aafac2272d9cddf71667da8eb0c809ae2e96c1acf0130e56bd029e340edff2b077f901f3e294747b7c9fe52edaf9f6b77516ca18649cff6f7696e3cb06606e966fb94db2f04923b215f1a1d9c06b5dd79fc664d8c662dd763bce6dfa675027af7a62b91c0603df1a97217c3c16fa6074c0d423dd28f9fd38534dc1deb40c282691c5fd04b00a553876111253e220ea2dd0f52fd6636f50fb0f3a19b1e25b0268c4847f6aa7b8ed47c7fbcab383962ef2c20b3df16efb264e591afb0b68f44ae610adca9a8f25ffbe58bb3214ddd872d7a575fe1fd8bfebda95882e04bbda9a4eda1cb48cce714c0c1c245517c393c27b2afd8b14be4a10db6885e29a4db4026803c12e0b8a987dc016de63e5a56c98ef48d45969d2496eed9a598d1983ac84644a117bb67d774e8ef5625b658fb63bcde7e5e56b30d975bf202826606da840411a0fe17edc2761428e5f6389d9d1bb592fafa2a54b16a6903af919272a3e4aabcb86f062e21e7e25d883ac70cddb038c71308a63df85a3728e140cb5c0b04f9995784c9608a9433106cca8280f302f7f0a2bc7c4b44e315f50a6a7ffc48bfb0c7138b788d446a36156f89e06b7103067014fd5aedb83a833b50e5ccfb70a3a4ac704fa5bfebb828620324588f625db8512ca0e9d18c2323576aba532cca18244fb93870283c6a76b1ccb82298f6f5ab9abbfd89dea79976a0d89618d5ac5c0d151e2e14809c2bf46fc3f9281207727f1425c222e3f4f859cff1af71a4dacbb95bd119b64eb4496a500ae932f5fe161ac98c1bda3a33661e7f2a7eb9f1a29eb0c94aada1d87d1f1c7d9d7f23723532120549bba526655b0939adbf1e66b02b56554f2d6d042290ebdf81488caef33ed79428c32e075f1743b2776b8bb50c08b7b8573246cf8540800000000000000b62f4c6091b0330819bac7e997ae887dc69f3957deb80ed7014650f280676a22629bd3d5117eebb1bcdf2fc4f30556dec0aac9bb6bdcb2bb9d3f55324a72ca177efa1febe12254fbf3d6d4e110fa941e4c6d4a10cebfa76dfba84788ff8752b7ce53392b6aeb71d4c1b7a6357c658491d71e3e2a2a7f55d7c15f65d73ce52489b882dd8fd34f4330101861f74afb756b5d389f0cf6b2543e0dde58312ed4f2bf84600bbc317424d61f2b2d2fb34e0af92f3cc84d4e8c14f0427e0b48bfaf33dca5160a20bf986797ac5a4cbb7140ec26bc24e183a745eae315c672fec1975204f1fe3aad5ba91ab116a816852e0b767498388bbe43af58c480699d83dc47728b8d73606bde54466d1420493806c58970ddd13f2edf6dd8944aa71a2b72718043d6f64fdbfd2aceb5683b406a1aaaa6b5cd2e21c337f49c69d79562db35c0e15a6b32db531f4b61562d2c5461e80a221ab114736b82eacb982dfaa27d091f2ac49e569912d5830ed9cd4b4fee87c4124ec4408bf1b33e32153518af443b3476b4f8d96e14d90503fd0b776dc1a7f3f05ed38087d7ead10bc6b7314aa77f402151f07002aea90e748674848afd63fb76750380f492bfb53acb413bf7b05842be64b3dbfba0eb3805ab5a50076dd61974f3aef6f8eb68c85b26dea899df3d91b81317fe8004b1e695708015e169180e440e", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x60, 0x0, 0x800000000000ed2a, {{0x7, 0x10000007ffd, 0x3, 0x2, 0x400002, 0xd7c, 0x0, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x6, 0x4]}}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x101100, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000b80)={{r5}, "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"}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @null, @bpq0, 0x3, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 2m11.045919826s ago: executing program 4 (id=554): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000001f0001c000000000047d5c"]) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f00001fa000/0x2000)=nil, &(0x7f000063e000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000274000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f00005dc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000000)={0x0, 0x38, 0x3b, 0x1e, 0x1, 0x1040003, 0x5}) openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x101, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x3, [], [0x4800000], [0x0, 0x1001000], [0x4, 0x0, 0x7]}) 2m11.010535516s ago: executing program 4 (id=555): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00#)'], 0x0, 0x0, 0x0}, 0x0) (rerun: 64) 2m7.822822409s ago: executing program 4 (id=571): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0f0200003900", 0x6}], 0x1}, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000400)={&(0x7f00000001c0)=[{0x2, 0x400, 0x8d, &(0x7f00000000c0)="06ce0e60fba91c45ba1c1e8f16f4e797c3249675eee194949cd83fcaaece0de65d70cd2947d11c11fdab2e1e744a47708e40ad74afc3a87c28c88bee933fc20b016428f5d6fdfb65c18a11a13dd1a325e3bee026504f4a15e8385570aa7c77cea4b2b7268c527f9b23bbd5c1e7f11854ac4bcb391d648cff3e6d85c78c38b4b94dfd5ff5566b9fb9e0a24c3679"}, {0x1, 0x4000, 0x77, &(0x7f0000000280)="e105e6859b2b65a4bc7ba4986a12382d6cebd4474b710058ee80e10535e399910e5726e5e5dd75c2a455a6d3d9c490a8687a56de689e2cc7b5629f7cca57e0e0b0971b5147068077c227ec4fe651005270fd18a87a8ac495e9e3291c2be99cc4981dcd6c8f7ec563dbf976985d804e13f59aec78493acd"}, {0x10, 0x8000, 0xde, &(0x7f0000000300)="5254e6d93b0afa9647ff965a3034a03d5dda0382da508b4252fa38a1118c6d7af93e57aa56808f641690c30a8048b91bd720af60e4e64003d04813334809a740e98849285463d40f5eb7fc10e506207aed349a0ed45e0c610cbabbd4950d9a6cac4a571a7afa7c6c32089c7644da3c6eff7f0b75d18dcb57b0f68e360935e72b2b591e6bec3fa6f7dada9bd4a60b78d524af201aaad58fef9caf2c3beaa750d7594b7e8d840813661259b6af7cb94e14657128f49bf8490d6c47799442d5fe1b9c48a96b5afa7ecd61a4fe9325ab134d53050f5c1640a35afbed186eae6a"}], 0x3}) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) (async) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async, rerun: 64) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) (rerun: 64) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000e40)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="010083000000fedbdf250f0000000c00078008000100460c0001"], 0x20}, 0x1, 0x0, 0x0, 0x2805}, 0x40000010) (async, rerun: 64) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000f80)=ANY=[@ANYBLOB, @ANYRESOCT=r1, @ANYBLOB="04002dbd7000ffdbdf25120000000c00028008000200060000005800048034000780080004000600000008000200f8ffffff08000400050000000800040003000000080001001900000008000100130000001300010062726f6164636173742d6c696e6b00000900010073797a310000000008000280040004000c00078008000200020000001800028004000400080001000b00000008000100050000001c0007800c00030040000000000000000c0003000900000000000000"], 0xc0}, 0x1, 0x0, 0x0, 0x4004084}, 0x20044800) (async, rerun: 64) write$P9_RFSYNC(r0, &(0x7f0000000c40)={0x7, 0x33, 0xfffe}, 0x7) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io(r2, &(0x7f0000000600)={0x2c, &(0x7f00000004c0)={0x40, 0x13, 0x14, {0x14, 0xd, "282fa06b647ffe3809e8f770e79d82abdff3"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}, &(0x7f0000000540)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x5, 0xd9}]}}, &(0x7f0000000580)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x2, 0xd, 0x5, '/KFQ', "88dbd5ad"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x80, 0xe, 0x0, 0x3, 0x85f5}}}, &(0x7f0000000b80)={0x84, &(0x7f0000000640)={0x20, 0x4, 0xa6, "aae418c0d778f21081b3f48053dc8868d9ecb5fadc989f113686f115fbb10c1d15425485fe3ea6f4c518f996c2896b7e34aef4c15e7984d221f393f4f77f202fc9ae5dd8b4960ed378511294832f2a56e8abd7b883bc79190f67a74679ef677e9b37e8ade4ff53b05705fcd64a7c8e7a084ac8c97fa49cb0852a92e80e5655fc4d1b5dd50df3bf4b583a42047f3f707ef8b2df7f304a58ee3d38316b32c20444ddeabc8c5777"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x60, 0x2, [0xf0f0]}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0xf7e}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000940)={0x40, 0xb, 0x2, "22c7"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "259f"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0xa}}) (rerun: 32) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async, rerun: 32) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)) (async) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x3) (async, rerun: 32) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async, rerun: 32) write$sndseq(r1, &(0x7f0000000080), 0x0) (async, rerun: 32) socket$kcm(0x10, 0x400000002, 0x0) (async, rerun: 32) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYRESOCT=r1], 0xfe33) 2m5.475680053s ago: executing program 4 (id=580): r0 = syz_open_dev$video(&(0x7f0000000500), 0x0, 0x20900) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) r5 = syz_socket_connect_nvme_tcp() ioctl$BTRFS_IOC_GET_FEATURES(r5, 0x80189439, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="fb7f4715b97985bd12974cfd04ad11ed7d311dc50ffdaeb3f079e1e468fac204ac5083738951804da9ae003a0d1cccfdf2da22f2c6979339c863bb9bfefbaa219a7de470b9c955ea0a6e6bcfd304a52d2bbe726c026546131260a4bf6a62"], 0x5c}, 0x1, 0x0, 0x0, 0x24044c04}, 0x24040014) madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r10, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/47, 0x2f}, {&(0x7f0000001e40)=""/104, 0x63}], 0x2}, 0x2}], 0x1, 0x1, 0x0) sendmmsg$inet6(r10, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="b458b09a7bc6afad62c3f97125bc54bad5b9f64492fb3237f80678f40515a15a9bc7f8f9c9244e7fe0c328f6457f6d457effb6e3090a2f0e0a47d7c95dddc94d4d0ca124", 0x91}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}}, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r11, 0x4b72, &(0x7f0000000300)={0x5, 0x0, 0x3, 0x1d, 0x97, 0x0}) 1m50.236080943s ago: executing program 34 (id=580): r0 = syz_open_dev$video(&(0x7f0000000500), 0x0, 0x20900) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) r5 = syz_socket_connect_nvme_tcp() ioctl$BTRFS_IOC_GET_FEATURES(r5, 0x80189439, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="fb7f4715b97985bd12974cfd04ad11ed7d311dc50ffdaeb3f079e1e468fac204ac5083738951804da9ae003a0d1cccfdf2da22f2c6979339c863bb9bfefbaa219a7de470b9c955ea0a6e6bcfd304a52d2bbe726c026546131260a4bf6a62"], 0x5c}, 0x1, 0x0, 0x0, 0x24044c04}, 0x24040014) madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r10, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/47, 0x2f}, {&(0x7f0000001e40)=""/104, 0x63}], 0x2}, 0x2}], 0x1, 0x1, 0x0) sendmmsg$inet6(r10, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="b458b09a7bc6afad62c3f97125bc54bad5b9f64492fb3237f80678f40515a15a9bc7f8f9c9244e7fe0c328f6457f6d457effb6e3090a2f0e0a47d7c95dddc94d4d0ca124", 0x91}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}}, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r11, 0x4b72, &(0x7f0000000300)={0x5, 0x0, 0x3, 0x1d, 0x97, 0x0}) 1m37.64124906s ago: executing program 5 (id=737): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x8, 0x5, 0x6, 0xca2, 0x7fffffffffffffff, r0}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x1f, 0x2, @tid=r1}, &(0x7f0000000100)=0x0) timer_settime(r3, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000180)) timer_gettime(r3, &(0x7f00000001c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x888c1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) timer_settime(r3, 0x0, &(0x7f0000000240)={{}, {0x77359400}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000300)={0x374, r5, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "eccaff37cb07e9f59e3483ab04b3341135c521d19c68d1b389f0"}}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbc}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_NODE={0x1bc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf4, 0x3, "6874fe7ce0036d58c36aa0ce3ace02897a7310d29579867e58f90d3518cf07b0d4d58b367d4c40cc53c81874fa722667e96ccf969943b44b6aa7f1f53c06b0ecdce10eaaa6054adf789b0e56b7462a65803dfce51499210ffc458a4ca7fdd6a1482e21fddf210eabf75a4e37dd511082cd9fe5322f83d70991def8e670582399a02db7feec5c13fad37e4e4fe6456f091b372080c673314acb1a6e6eeea477a08c81f0e3908340dccc649a2e0184cf5fe8129e28efc2c3b1c90c9f29ca02dc195ac8a9a77685402e3e724d3df3086761c3b99220bee34d32d38316a6d71bdd670234ef40b112d6be84a2892ee82298d8"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ID={0x55, 0x3, "580abbcc828792029e368592bb35f32a16e24980c14180848de0e2bd06c1ac764271465d9e281939b92506a79058570db75ed06618131cdee994d77007c3836b71bf251e638999891bad2f6a61ee078006"}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "fed3b04494928e7416d3c1c0715b30cc5734e08f7e4239cbeb58fcfa76c9ca3acc"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x97, 0x3, "25a8b255dd449e17241f71035f35667aa9751c9143cdf7982a1ece66e32aebb3ed9cb036ee5e931574da2382f00cb5a38ee00010c8feb44fc148c1b8fddb51c9c6dbe2ce8325f81c7266f1b0802b8db799b3be3ac9d19e996a0e3191e187cacf88f65bddc082a95319b9b7f0b011ecf292b50ad1746e8637e80b748100d7c58ae964e734cdc2f1a7516f5fb1e1c89c89c2cd56"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc0000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}]}, 0x374}, 0x1, 0x0, 0x0, 0x40011}, 0x40) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r6, 0x4008af74, &(0x7f0000000740)={0x9, 0x17, "ccc1d84ca66cd5a742dc02b60a781398aa75bd7246b75e"}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000840)={'gre0\x00', &(0x7f00000007c0)={'syztnl1\x00', r8, 0x40, 0x7808, 0x2, 0x9, {{0x15, 0x4, 0x1, 0x20, 0x54, 0x67, 0x0, 0x3, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x17}, {[@timestamp_addr={0x44, 0x3c, 0xb2, 0x1, 0x9, [{@multicast1, 0x5478f2cd}, {@multicast2, 0xc8}, {@private=0x8, 0xac6}, {@private=0xa010100, 0x8}, {@rand_addr=0x64010101, 0x5}, {@multicast1, 0x7}, {@loopback, 0x1c}]}, @end]}}}}}) r9 = socket$netlink(0x10, 0x3, 0x9) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000880)) ioctl$SIOCGSTAMP(r9, 0x8906, &(0x7f00000008c0)) timerfd_create(0x8, 0x0) setsockopt$sock_void(r7, 0x1, 0x24, 0x0, 0x0) r10 = accept$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000940)=0x14) setsockopt$packet_int(r10, 0x107, 0xb, &(0x7f0000000980), 0x4) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000a40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000a00)={0xffffffffffffffff}, 0x333}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r11, &(0x7f0000000a80)={0x15, 0x110, 0xfa00, {r12, 0x2, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e20, @empty}}}, 0x118) r13 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r13, 0x8002af76, &(0x7f0000000c00)) 1m37.629717553s ago: executing program 5 (id=738): socket(0xa, 0x2400000001, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x2a, 0x0, &(0x7f0000e5f000)) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, &(0x7f00000024c0)=[{&(0x7f0000000000)="974e8263", 0x4}], 0x1, 0xf, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f00000003c0)={0x2}) ioctl$TIOCMBIS(r5, 0x5416, &(0x7f0000000040)=0x5) 1m37.585745138s ago: executing program 5 (id=739): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000280)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x2, 0x0, 0x0, 0x3, 0x0, 0x16, 0x0, 0x58}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) (async) r3 = epoll_create(0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m37.441561322s ago: executing program 5 (id=740): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) openat$nullb(0xffffffffffffff9c, 0x0, 0x121003, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2a) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800, &(0x7f0000000100)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x32, 0x35, 0x65]}}]}) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', r2, &(0x7f0000000240)='./file0/file0\x00', 0x272) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = socket(0x11, 0x3a331a60420e8ece, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a0000}}) r4 = socket$inet6(0xa, 0xa, 0x5) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x82) fchdir(r6) openat(r2, 0x0, 0x224843, 0x58) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003e004b0200000000fdffffff0a000000"], 0x14}, 0x1, 0x6000000}, 0x0) 1m37.259522245s ago: executing program 5 (id=741): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x1) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@nodevmap}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@nodevmap}]}}) 1m37.009743466s ago: executing program 5 (id=743): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m36.841378916s ago: executing program 35 (id=743): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m10.540054702s ago: executing program 6 (id=896): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', &(0x7f0000000080)={0x4400, 0x49, 0x32}, 0x18) openat(r0, &(0x7f0000000100)='./file2\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file2\x00', 0x1) 1m10.433648971s ago: executing program 6 (id=897): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "2dc3fa5474cf6690", "50822f66b97a105f5b00d8edc5151b4a", "b2356f41", "06b950e7846e2394"}, 0x28) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@empty, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) (async) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="12042bfdd3fc03fc01004788031c09100628", 0x12, 0x4, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m10.369007868s ago: executing program 6 (id=899): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x10004004, 0x0, 0xfffe, 0x0, 0x2, 0x0, 0x0, 0x100}}, 0x50) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close_range(r0, r1, 0x0) (async) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = fsmount(r4, 0x1, 0x9) fchdir(r5) r6 = openat2(r3, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x101080, 0x20, 0x4}, 0x18) r7 = openat(r6, &(0x7f0000000140)='./file0\x00', 0x0, 0x92) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, 0x0) 1m10.101394347s ago: executing program 6 (id=900): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000340), &(0x7f0000000440), 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="3b000000010002", 0x7) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) unlink(&(0x7f00000004c0)='./file0\x00') mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x500, 0x40) r3 = open_tree(r2, &(0x7f0000000300)='\x00', 0x89901) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)={0x14, r5, 0x70d, 0x70bd26, 0x2ddfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) r6 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r6, &(0x7f0000001e80)=""/96, 0x60) move_mount(r3, &(0x7f0000000500)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x100000000000000) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m9.950302633s ago: executing program 6 (id=902): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x969200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000100)='./control\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x6, 0xfffffffffffffbff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x2000000, 0xfffffffffffffffc, 0x100000000, 0x40, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x7ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0xf290, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8]}) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r1, r1}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={'xxhash64-generic\x00'}}) rmdir(0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r4, 0x4068aea3, &(0x7f0000000080)={0x80, 0x0, 0x2}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x49, @string={0x49, 0x3, "56f90ec2a7c1e1831433babae60c9213806850d3895db982403f22636b8382a57e0dc961c2dcbfc552e28d3ab8ae15b5be0745544ec88e03694c49c990a8c74461d5aa82e7ee67"}}, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r7, 0x84, 0x7f, 0x0, &(0x7f0000000000)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad558fac11d875397bdb22d0022b45f819e01177d3d45ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) sendfile(r2, r2, 0x0, 0x8000002) syz_open_procfs(0x0, &(0x7f00000001c0)='attr/keycreate\x00') 1m9.547083579s ago: executing program 6 (id=906): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000100)={0x7}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') read$FUSE(r1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r3, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5469444c5f237a5fc331205c0d826aecc83a34cf288d0b57"}]]}, 0x64}}, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2084022, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=8,size=4']) 1m8.972906993s ago: executing program 36 (id=906): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000100)={0x7}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') read$FUSE(r1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r3, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5469444c5f237a5fc331205c0d826aecc83a34cf288d0b57"}]]}, 0x64}}, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2084022, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=8,size=4']) 7.733536344s ago: executing program 7 (id=1330): r0 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x28, 0x1, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x0, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)={0xb0, r3, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x44, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x3, 0x8}}, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x18, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, "d9"}, @NL80211_FTM_RESP_ATTR_LCI={0x7, 0x2, "6378e4"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x19, 0x91, "c8224f47d85607c510c6726dc3afd7cfd80e59d720"}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xb0}}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r3, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ad9c1a812246"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x24000810}, 0x10) 7.578542094s ago: executing program 7 (id=1331): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a5000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000140)="66b9530200000f32660fe05900f30f09f20f1ed80fc739660f38813d0f01c2660f381793b23b660f3a405962b667f2aa", 0x30}], 0x1, 0x69, &(0x7f0000000300)=[@cr0={0x0, 0x10001}, @flags={0x3, 0x100000}], 0x2) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)={0x38, r3, 0x1, 0x0, 0x4, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x10, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7ffffffe}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r5}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r6, 0x0) rt_sigprocmask(0x2, &(0x7f0000001140)={[0x800]}, 0x0, 0x8) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x184, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x134, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffc}]}}}, {0x5c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8fe1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xd1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3ff}]}}}, {0x58, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xf78a}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x48, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xf77}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xcea7510e2969a6ff}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6005}]}]}], {0x14}}, 0x1ac}, 0x1, 0x0, 0x0, 0x850}, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x80a0000, 0x1000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0xffffbfff, '\x00', @p_u32=&(0x7f0000000040)}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) utimensat(r7, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3c) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@flushpolicy={0x38, 0x12, 0x105, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@empty, @in6=@loopback, 0x2, 0x1, 0xff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24020800}, 0x20040810) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x115603, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_RUN(r9, 0xae80, 0x0) 7.341549639s ago: executing program 7 (id=1333): timer_create(0x3, &(0x7f00000001c0)={0x0, 0x24, 0x4, @thr={&(0x7f0000001180)="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", &(0x7f0000000180)="9e7a45efe8c1ad2f5635cfe6f31af064194cc02bb048b1ca9d5d594c374f3984c9e138840633a35050e95e6376459bbae1154e8c6e14580675"}}, &(0x7f00000003c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000400)={{0x77359400}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000054000000080001007063690011000200303030303a30303a31302e3000000000242bd5b570e999af1e675b50143ff06e6c02e93846c20a0f7ca7d73119829bec2bcf9939"], 0x30}}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x30}, 0xc) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, 0x0, 0x6b) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000005c0)={0x8, 0x0, 0xfff, 0xfffffffa}, 0x10) sendmmsg$inet(r1, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}], 0x1, 0x40081) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x9, 0xfffffffd, 0x5}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000440)={0x1, 0x204, 0xc684, 0x9}, 0x10) r6 = syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x200, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x1, 0x2, 0x40, 0x8, 0x77, 0x23}, {0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xfb, 0x2e}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, &(0x7f0000000700)={0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="07e1868600"], 0x0}, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, 0x0, 0x20000000) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000009b40)=[{{0x0, 0x0, &(0x7f0000000980)}}, {{0x0, 0x0, &(0x7f0000000580)}}], 0x2, 0x40020) 4.408214766s ago: executing program 0 (id=1352): ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f00000003c0)={0x2, &(0x7f0000000340)=[{0xffff6a58, 0xae, &(0x7f0000000200)="b254e560742ad943fc89136fd927da114e60cdf0f7218e26b18346247284ecf05c54f8b4b02b621c7c1fdce46ac4e9cec9cf474e6244a3739d09310a0a83814bd8b96456c5421ecf6d8ec3a82d77a10ec010eb17a2a055944400b2f00110674ed8b8bf8e4d33ffac1d4dfeabd5aa2e2dd74bb3ec47281b6f50bc5e73c73a836a3e5c4fbc65fbb4acf4bd9f9dca7de9c42e3bbe57c3965a6ad32fea4d0e017a0a30fa1c746382ea275c4764c02968", 0x1}, {0x8000, 0x19, &(0x7f0000000300)="b784e58eb6eb8dc6a86325b5ebb73bbe338e890b9744056f0f", 0x0, 0x1}]}) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10, 0x800) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000080)={{0x73, @multicast1, 0x4e22, 0x1, 'sh\x00', 0xb, 0x9, 0x19}, {@local, 0x4e23, 0x10000, 0x80, 0x0, 0x8}}, 0x44) syz_usb_connect(0x2, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905"], 0x0) 4.303695152s ago: executing program 7 (id=1353): syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[], 0x0) 3.830154926s ago: executing program 0 (id=1355): socket$pppl2tp(0x18, 0x1, 0x1) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) (async) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0}) (async) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, 0x0) 3.256710121s ago: executing program 0 (id=1356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) (async) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000003000000000000000100000000000000d0"]) (async) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0}) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002a2b8d240bb2170200b87010203010902240001a00800040904c81e010103f70909050803ff0304060902210725"], 0x0) 2.639274819s ago: executing program 0 (id=1361): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x3b3cc1e9e7df1ab7}}, 0x9b) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x4, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x24, 0x10, 0x6, 0x7, 0xfff, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0xe0000000, 0x1, 0x2, 0x4, 0x1000, 0xd497, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x4000003, 0x8, 0x7fff, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xc, 0xfc, 0x1000, 0x5, 0x6, 0x6, 0x10000, 0x70, 0xc, 0x633, 0xd, 0x23, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffbfff2, 0x63, 0x7, 0x2, 0x3, 0xfffffff3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x206, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) write$binfmt_register(r1, &(0x7f0000002700)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x7, 0x3a, '\xdb]\xff', 0x3a, 'nr0\x00', 0x3a, './bus', 0x3a, [0x4f, 0x55, 0x50, 0x0, 0x4f, 0x50, 0x50, 0x4f, 0x46]}, 0x35) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x220a00) sendmsg$NFT_BATCH(r3, &(0x7f00000026c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002680)={&(0x7f0000002940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x1b8, 0x16, 0xa, 0x505, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x178, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'bridge0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'nr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'veth0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0xd0, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x9f, 0x8, "048e871b43ff63491d6dc95ae290459d574749ab47683c46583b63faf9292fd2fc55f2d4f1b96a97870204bebf1329853b1064ae0dd951448c796c91950b8b8b05d23fb92cd68a4585bf684f190e20d7b0e4e5f1cb983e231db04f65d10da965c33994d138c493aecdc0a0a1568a0438daaec1cf35a825f5612c25cb8b8b816efbe9250587a86f876652cee946de0b2c27413655fb99d3dee133fa"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, @NFT_MSG_DELRULE={0x60, 0x8, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x118, 0x14, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xf7, 0x8, "1033a1a4adc9d6fa2bc8434a3d2d0af005e3d335749cb5311d843ea248b3b70d990fdf02b7061ea720f720d7aca7cc40f416353ccb22984d5486ac50c9735041aa7e8e0b43f96cf910397523073d8217583a502980deeb035035904083180cd5e6a941051ec3ee5ddd440a2d1ac4b3cb40c64d10a9231e5b1ac01dc622ca61b7986fed02bdb16e5d95351119d4f6d39f5a2cfc44024ab25d950b6eb58fe0ed1947962e7373fedf17109e2453da3c8cf8f71fbe1e244550b51b24e5bb1ba4585b5ff348433741a171030d60d2d2a2b1a8ca41801650e544842980106f2691ddcbf7cbdc71fad772153dd674d58f5e19d9894d23"}]}, @NFT_MSG_NEWCHAIN={0x12c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000}]}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x92d1505}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd6dcba3}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x64, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'geneve1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'tunl0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b30e25c}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6df5e783}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x270345ea}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x755b44ff}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x40}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x554}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r5 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000002740), &(0x7f0000002780)=0xe, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f00000027c0)=0x1, 0x4) lseek(r4, 0xffffffffffffffff, 0x1) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') pipe2(&(0x7f0000002800)={0xffffffffffffffff}, 0x800) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=ANY=[@ANYBLOB="14000000107aacd326577c30f60000000000000a2c000000050a03000000000000000000020000000c01024001090001007379bf7a300000000033000000080a03000000000000000000020000030900010073797a30000000001400000011000100895995ea000000000000000000"], 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000002900)={'syztnl0\x00', &(0x7f0000002840)={'sit0\x00', r9, 0x8008, 0x7800, 0x1, 0x5, {{0x22, 0x4, 0x2, 0x7, 0x88, 0x66, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@ssrr={0x89, 0x13, 0x6f, [@empty, @remote, @multicast1, @private=0xa010102]}, @lsrr={0x83, 0x3, 0x6c}, @noop, @rr={0x7, 0xb, 0x60, [@private=0xa010100, @multicast2]}, @cipso={0x86, 0x32, 0xffffffffffffffff, [{0x7, 0x12, "6f8158e1fa9069e46516a556ba2c2e8d"}, {0x2, 0x7, "227ede811a"}, {0x7, 0xb, "0a9780d135ccb10fef"}, {0x7, 0x8, "ba026884324f"}]}, @end, @lsrr={0x83, 0x13, 0x60, [@private=0xa010101, @empty, @broadcast, @rand_addr=0x64010100]}, @noop, @generic={0x83, 0x9, "0762b7f2923f99"}, @noop]}}}}}) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r10, &(0x7f0000000080)={0x2020}, 0x2020) 2.27650829s ago: executing program 8 (id=1364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x1, 0x2000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x1000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) r5 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb}, 0xc) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x4d, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r6) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r7}) keyctl$KEYCTL_MOVE(0x1e, r7, r6, r8, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2.169420347s ago: executing program 3 (id=1365): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) pselect6(0x40, &(0x7f0000001380)={0x6, 0xfffffffffffffffa, 0x9, 0x5d7, 0x6, 0x8, 0xc444}, &(0x7f00000013c0)={0xf, 0x9, 0x400, 0x6, 0x8000, 0xb, 0x4ea2, 0x400}, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x70, 0x8000, 'syz0\x00', 0xffffffff}, 0x3, 0x20000000, 0x7, 0x0, 0x1, 0xfffffffc, 'syz0\x00', &(0x7f0000000180)=['/dev/snd/controlC#\x00'], 0x13}) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000002010400000000000000000a00000004"], 0x58}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e22, 0xffff8000, @mcast2}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000480)={r7, 0x2}, 0x8) bind$802154_raw(r5, &(0x7f0000000380)={0x24, @short={0x2, 0xffff}}, 0x14) r8 = socket$unix(0x1, 0x2, 0x0) r9 = open(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000280), 0x800008, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c646f6e020100000072616920162c00"]) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[], 0x8397de475a1b5b02) 1.985660377s ago: executing program 0 (id=1366): r0 = socket(0x2, 0x3, 0x64) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x9, 0x4, 0x100, 0x4, 0x2, 0x80000001, 'syz0\x00'}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000ffdbdf251400000008000300", @ANYRES32=r8, @ANYBLOB="4d8b5f7b2131668bce1c2e777b46fa1d929c6c6268fae602c92d170f80a9520e975da447637dc74b591120c7a4235289f311f76b773ad2b2c5ef5d821929e3bd699abc59"], 0x1c}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r4, @ANYBLOB="0a0006000802110000000000060066008e880000200033"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e8}, 0x6e) 1.982196776s ago: executing program 0 (id=1367): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008"], 0x34}}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4d, 0x0, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3]}}) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f00000006c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="aa", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="307ddfb9", 0x4}, {&(0x7f0000000340)="ced98c1a5f5a93258dfa9a8c31878af8d7be921a531da9e6c50efdba96722424d55ce610a4d9b534b3aa09618dfc04f5504e30a263ad3fedf0a7381a8a", 0x3d}], 0x2}}], 0x3, 0x2000c8c0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="93503d", 0x3}], 0x1}}], 0x1, 0x40) recvmmsg(r3, &(0x7f00000046c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x45}, {&(0x7f0000001280)=""/79, 0x45}], 0x2}, 0xc8b}], 0x1, 0x120, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r6 = gettid() r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44e, 0x120c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@global=@item_012={0x1, 0x1, 0x1, "ed"}, @global=@item_012={0x0, 0x1, 0x2}, @global=@item_4={0x3, 0x1, 0xa, "8f416f32"}]}}, 0x0}, 0x0) setpgid(0x0, r6) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="170900000000000000000100000008000900ffffffff06001a004e2100000500070000000000060002000100000008000a0004000000"], 0x3c}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.963906569s ago: executing program 8 (id=1368): syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='ac,,']) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001bc0)=ANY=[], 0x11a0}, 0x1, 0x0, 0x0, 0x8040}, 0x8080) recvmsg(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/114, 0x72}, {&(0x7f00000004c0)=""/46, 0x2e}], 0x2}, 0x40) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x3ff, 0x1, 0xd2, 0x2, 0x1}) bind$unix(r3, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) (async) bind$unix(r3, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000002080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) 1.88184005s ago: executing program 8 (id=1369): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000100100000c0000008f000000000100b9"], 0x28}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$getflags(r1, 0x408) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x12c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x104, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0xcc, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xbc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DATA={0x9c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "7a5ea34b96e621337cde7e99b794fefcf74f6506eba705487cb08517add6a536dd82099ec329446779c94d86418d756edac64103d8c8a01cf47db7c16f3a1b0ed8"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1a0}}, 0x0) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000100100000c0000008f000000000100b9"], 0x28}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) fcntl$getflags(r1, 0x408) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x12c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x104, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0xcc, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xbc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DATA={0x9c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "7a5ea34b96e621337cde7e99b794fefcf74f6506eba705487cb08517add6a536dd82099ec329446779c94d86418d756edac64103d8c8a01cf47db7c16f3a1b0ed8"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1a0}}, 0x0) (async) 1.789624882s ago: executing program 8 (id=1370): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f00000004c0)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) (async) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, 0xffffffffffffffff) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f00000000c0)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_disconnect(0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac09}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fe2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebdddad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8523b29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) fsopen(0x0, 0x0) (async) fchdir(0xffffffffffffffff) (async) mount$fuse(0x0, 0x0, 0x0, 0x8, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x32, 0x33, 0x7a, 0x8, 0x644, 0x8021, 0x4778, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x30, 0xe, [{{0x9, 0x4, 0x1, 0x1, 0x0, 0xff, 0xbc, 0x54, 0x8}}]}}]}}, 0x0) 1.286642094s ago: executing program 3 (id=1371): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffc888) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x23, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.25213095s ago: executing program 7 (id=1372): write$cgroup_pressure(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)={0x14, 0x14, 0x1, 0x70bd2d, 0x0, "", [@generic='\t']}, 0x14}], 0x1}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00008fb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000eb4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_io_uring_setup(0x7688, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x19e}, 0x0, 0x0) 1.121545821s ago: executing program 7 (id=1373): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002280)='./file1\x00', 0x400, 0x10) (async) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) socket$inet_tcp(0x2, 0x1, 0x0) (async) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) (async) r5 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) (async) syz_usb_control_io(r5, 0x0, 0x0) (async) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r6, 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x5, 0x537, &(0x7f0000002480)={{0x12, 0x1, 0x110, 0x65, 0xc4, 0xfb, 0x40, 0x458, 0x700f, 0xaab6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x525, 0x1, 0x1, 0x9, 0x10, 0x40, [{{0x9, 0x4, 0x89, 0xd, 0xe, 0x41, 0x2a, 0xe0, 0x9, [], [{{0x9, 0x5, 0xa, 0x8, 0x20, 0xf2, 0x6, 0x2a}}, {{0x9, 0x5, 0xe, 0x2, 0x40, 0x7f, 0xf8, 0x3}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x68, 0x0, 0x4, [@generic={0xa0, 0xa, "4b36ced00ef74936067240125f6b2f435bf42bdfaec982101f475e36f33ba7e2812c10267ed5f2c6498d7be450e5322159b42af270f84449a6d1a7540a284da699d31df2bad925cdf331f6f55da60e919a4418118a63ddc2fd2db5973276a6c52b7c4bf22350a6ea7048b78a910b3b63bb1fdb4a72d137e600329f910e163d1f88c57c0c14ca94495bc5ad5eb95da94239c3ca8521fa58653e219f00b7b2"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x9}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0xe, 0x8, 0x9}}, {{0x9, 0x5, 0x2, 0xc, 0x10, 0x2, 0xf0, 0x0, [@generic={0x4a, 0x22, "8fe852fcf6c0c23137e9a01e4c9d12ad1529e4750e6c019fae1c03eb42f9790e44f0ee53bc5b2986f123a1d9220b5a69dfaeba85f57f78c331d961b1e425711c3329ee60066abbb5"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x40, 0x1, 0xfe, 0x0, [@generic={0x64, 0x3, "4691cb75d93edd8635192e9e2589ebb2f068faab737fb1add0f6e9f77853cba6ada4c0ab441735eb86a67f3ea6e2c00fa0f4a9758f6ede9c5442c826df7bc32f90d00faec83c14c3cc63e6070f95603efca9c98138c40dfaeaa139bb481f7ced602f"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x1, 0x10, 0xfb, [@generic={0x57, 0xa, "5ecf39efe3d3cfce4d090faa62bbba2b7b8f887d3e82fe40e0fae485ec31368c295192d7bf9152adc2ab303ebd082962beb04858e2ad8e33a7162f93271cf15d40fbeac3c5f0fa1efec46bfedc45e27ac64bdda73a"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x4}]}}, {{0x9, 0x5, 0x4, 0x2, 0x608, 0x7f, 0xb, 0x89, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x7fe5}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x34, 0x7, 0x4, [@generic={0xee, 0x1, "eccc7c6c9a36d66ce043027d142cc51579c0e2725ab9ecdbf7466fd63ac2403b78b64ccfb0769d0728a0859859aeac847f916f809f952a9052ceb99b177a187b1710ee9a01f9dc56f3610906cb3ad2567c77caa8c26fbcf7bde41226de045f530291d700d75f2967debcdf7cc4bc5e60fbc79d9d469acbd1c70cd4f5041c2d932915c4d401b0ac777f05888f6487ee9ced493bf8e0280304b9bfc40475786191d78c937f58085b669be03907730b84a44e33ab1593b32077bc0a1a35fc26f979edcf95399cfe977e0aa173103b1b19b9106efb2bfd29a7715438fbc130269a7e73c2d4dcdbd2267d5391049c"}, @generic={0x40, 0x11, "e24c2b18fde45dcd93393467fc0087f09db11b486e3d93492bafa64126410e459379b2999c7014122cdd69dad84624c97a6a4f4c19f3ef385872874d3663"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x34, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3e, 0x7}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x40, 0x5, 0x5, [@generic={0x96, 0xf, "cf7f2642da35bd8bd4741d5a925a06b3ad9ebef7af0a8e4b8a37e3a4edf4fed8bd886f7355a7735153de5d0042d93088bca369dd458910b490a6c218dd1a9e9ce453ed82e30d9e13b442fbd18523f755140bab1cad3a6e172b8255dfd70ccc79ffb99dcc7dad4ec1417c875d48959b28db21c002209b7350de045a2ecea7314a2bd5aa313825c3b57b5f67d2b5a4170f77cc0bb2"}, @generic={0xf0, 0x5, "8ca402922b616dcdc9f6958683d0670d0bf0e8bbacb9dc241d1d92164e2c5fd94fccd30271c442f167d8db1de2e13332a372bf8d854b5fdc0b59590fb223bc462308935eaa0a7d56e973e14d333054cd8c4ad636636cde76c5ded15afdbddd265cc64cecb7f6890dcf2821060790855aaeac2bdd10e6fa3ebdf146ab26d56ef9b186bb0fba79d9914d2c8259f34ca6a09babd811fe9c8dcec757394b522b3d8767219610048160c83e4150ae51d7408de9a5267292e8701a160c2362e7b5f3a848052880e478939ab99b83aa100baa59e391cb917d7532ff5d553ae1409a84e2c4e476d4304e2d45a66fcf1f6571"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x5, 0xa, 0x47, [@generic={0x19, 0x9, "3db869635fa38e8b5f82ed5710f500a17684cee031788b"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x6, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x6d, 0xd, 0x3}}]}}]}}]}}, &(0x7f0000002380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x10, 0x8, 0x7, 0x8, 0x4}, 0x84, &(0x7f00000029c0)={0x5, 0xf, 0x84, 0x1, [@generic={0x7f, 0x10, 0xa, "d5fdf93063380a2d3526f3e8d58646b2dc80db32ce3f34eb65cb0958d5c8419d81f49bea0d1af5f2b92a4a50d398f7d7051086024eb9d61fa27042a447e60ee1f3b0984de169881aede987a7d1a78ec09e9ac7bbf46c3278992c73ceb72360c6288a94954428959f6daadfb1493aa99bebe8e32148155a96cbcf965f"}]}, 0x4, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x96, &(0x7f0000002a80)=@string={0x96, 0x3, "f02805b59afef9e5eabcec2326875d0f1812169b15c662d23b6047322398dc067a37379c1c1a54c1745248f49220261ee264c37d1ab82de618962913e351a508dea3b1dcc5483ed67dbba7940361ea7f4bdffc83561290563f62053f1455c1e05467b4c0e1998eda35e578cc3a2901a2636773c02460e9f2edddaf9fdd6b5dbbdca1374793051f8847a38a4307999b770cabebd2"}}, {0x2d, &(0x7f0000000180)=@string={0x2d, 0x3, "03dca27fbaf72b74729b3279dcd0d122dca34716ea2bdcecf7e83c967fbfcc45fec10dbe5e734ff833be6e"}}, {0x4, &(0x7f00000022c0)=@lang_id={0x4, 0x3, 0x42f}}]}) 1.120132266s ago: executing program 8 (id=1374): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0xd4, "9dbbbb559e6394bf6515790d86f79de2e7c7d68ecf56e4cfe8d7dc0da7e2d0d4313b883e6a11cece0ca20158d627913313ee416402ceecca6aaaccd7338b0ef96a72967fbdf2887136bbbe1131f4069aa98afe7d3d7afad42f188386489af8469e05886a27b8405be20a051b1ab346027805aafc3650ba4c77d3648383b0877e8dafb08b0a02d9642e02ae0238170c10cda5caa0a3061f55793a4d2c3c06ef40de2c922d84b1827c02f6dfa84f6b30c67cd2668530bbe06fbb7a190b74b0b0c8f159778595b4facea358dfccbe1eeccbb1ec9c90"}, &(0x7f0000000080)=0xdc) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x2, 0x96fd, 0x97b2, r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000002c0)={0x402f, r2, 0x80000}) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000300), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r5, 0x303, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r2, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x64, 0x1, 0x5, 0x8000, 0x80be, 0x3, 0x1, 0x3}, 0x0) r7 = getpgrp(0xffffffffffffffff) fcntl$lock(r6, 0x24, &(0x7f0000001400)={0x1, 0x0, 0x40, 0x2, r7}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000014240)=@newchain={0x1010, 0x64, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffe0}, {0x7, 0x10}, {0xd, 0xe}}, [@f_rsvp6={{0xa}, {0xfe0, 0x2, [@TCA_RSVP_ACT={0xfdc, 0x6, [@m_ife={0xec, 0x16, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}]}, {0xb5, 0x6, "70bba28a4e6276e4d70bb9e723edc2b221a3c949011b5c6223f007b805b5283fd87035bb249d8481f11e46c24cb44454119ea96d8cc9d0a5e5f776d14edcec4463528e77a48cde1624be2dfb865994a5510d9fdb11680a31f0d2f5e14347a67e48ec1d10d6882e688566bdec74c93df059b602c7058b78fe5a34e207350e16376023dd46e7b1eada7b11ef3e2de2b449859302189c9c8a1f2640d2b7f855baeaa3e0a05c9e657a2192c978024e3b2fade2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x9c, 0x6, 0x0, 0x0, {{0x7}, {0x4}, {0x71, 0x6, "2fe482d4424291957f74615368d507d1806bd6d6e0e64c485c2295459fd973872b5765363ad80a2abfc68b88b4e1e347d16460e676c2b795096641d9c22eda092fba9a489ce698647413c130da75c611ecef78cc11bb12b00fd5367319557d3a3eaf71d88e7fb78b0929aecf57"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0xe50, 0x13, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0xb, 0x200, 0x20000000, 0x5, 0xfffffffe}, 0x2, 0x7}, [{0x80000000, 0x8, 0x5, 0x10, 0xe, 0xffffffff}, {0x401, 0x7fff, 0x2e79, 0x3, 0x2, 0x4}, {0xfffffffa, 0x7fffffff, 0xffffff00, 0x80, 0xfffffffe, 0x5}, {0xffff6f28, 0x9, 0x5, 0x6, 0x53d16876, 0xfff}, {0xc04, 0x4, 0x6, 0x4, 0x81, 0x9}, {0xf, 0x2, 0x1000, 0x101, 0x7, 0x9}, {0x9, 0x0, 0x1d78, 0x3, 0x101, 0x7}, {0x40, 0x4, 0x10001, 0xe, 0x2, 0x7}, {0x2, 0x7, 0x6, 0x2, 0x3}, {0x1, 0x3ff, 0x4, 0x2, 0x9, 0x462}, {0x80000001, 0x8, 0x8001, 0x4, 0x7fff, 0x5ccf}, {0x7, 0x3, 0x4, 0x6, 0x833f, 0x839e}, {0x6, 0x8, 0xe4, 0x3, 0x1, 0x5}, {0x401, 0x5, 0x5, 0x6, 0xfff, 0x100}, {0xd, 0x2, 0x2, 0x92b3, 0x1ff, 0xa}, {0x1, 0x5, 0x9075, 0x9, 0x1, 0x7fffffff}, {0x1, 0x7, 0x7, 0x1, 0x1000, 0x6}, {0x1, 0xffffff80, 0x6, 0x5, 0xffffff00, 0x7f}, {0x1, 0x8, 0x9, 0x8, 0x1, 0x9}, {0x800, 0x3, 0x5, 0x4, 0x0, 0x5}, {0x9, 0x80, 0x9, 0x4, 0x6}, {0xf, 0x2, 0x7fffffff, 0x10001, 0x6, 0x800}, {0x7, 0x9d, 0x8, 0x4, 0x5}, {0x200, 0x9, 0xed70c591, 0x18f7, 0x3, 0x4}, {0xff, 0x3, 0x9, 0x4, 0x7, 0x3}, {0x5, 0x5, 0x4, 0xfffffffb, 0x10001, 0x8}, {0x9, 0x1698, 0x1000, 0x80, 0x2, 0x9}, {0xb40, 0x5, 0xfffffff9, 0x5, 0x7fffffff, 0xfffffffc}, {0x1, 0x4, 0xec6, 0x5, 0x1, 0x3}, {0x0, 0x0, 0x101, 0x968, 0x4b, 0x5}, {0x101, 0x0, 0x2, 0x5, 0x5b20, 0x7}, {0x2, 0x0, 0x4, 0x205, 0x4, 0x1680}, {0x4, 0x3, 0x7ff, 0x7fff, 0x640669a7, 0x401}, {0x9, 0x9, 0xba8e, 0x9, 0x1, 0x58e}, {0x7ff, 0x6, 0x80000000, 0x6, 0x103, 0x30bc0ae6}, {0xc, 0x4, 0x9, 0x1, 0x1, 0x4}, {0x4, 0x4, 0x7, 0x3, 0x5, 0x2}, {0x2, 0x1, 0x9, 0x6, 0x2, 0x5}, {0x6bacc848, 0x400, 0x800, 0xfffffffc, 0x5, 0x100}, {0x4, 0xd, 0x9, 0x8, 0xe, 0x5f48}, {0x5, 0xfffffffa, 0x80000001, 0x6, 0x1ff, 0x9}, {0xffff, 0x6, 0x2, 0x7, 0x9, 0xfffffffb}, {0xce, 0x9, 0x8, 0x0, 0x1, 0x7}, {0x2, 0xfffffffd, 0x3, 0x8, 0x9, 0x1}, {0x6, 0x2, 0x6, 0x2, 0x0, 0x4}, {0x6ec, 0x5a4, 0xff, 0xb, 0x1}, {0xffff, 0x6778dbd2, 0x2, 0x0, 0x3, 0x5}, {0x3, 0x1ff, 0x59d, 0x4, 0x6, 0x6a}, {0x3, 0xffff8000, 0x8, 0x3, 0x3, 0x3}, {0x7d, 0xd3ed, 0x8, 0x100, 0x4, 0x1c}, {0x3a, 0xf, 0x7fffffff, 0x0, 0x7fff, 0x10001}, {0x5, 0x1, 0x8, 0xffffff01, 0x200, 0x1}, {0x1, 0x9, 0x1, 0x5, 0xb12a, 0x1}, {0x5, 0x200, 0xfffffe96, 0x3, 0x3, 0x8}, {0x6, 0x4, 0x7, 0x64d, 0x7fff, 0x5}, {0x3, 0x657, 0xcf2, 0x1, 0xfffff26f, 0xb5}, {0x8e36, 0x2, 0x40, 0x8, 0x0, 0x4}, {0x81, 0xd, 0x2, 0x9, 0xc, 0xff}, {0x3, 0x1, 0x10, 0x1, 0x0, 0x3}, {0x7fff, 0xe0000, 0x0, 0x3, 0x400, 0x2}, {0x3, 0x8000, 0xffffffff, 0x0, 0x318, 0x8}, {0x8, 0x1, 0x1ff, 0x7, 0x0, 0x2}, {0x3, 0xfffffffd, 0x2, 0x2, 0x100, 0x81}, {0x7, 0x7, 0x3, 0x8001, 0x49, 0x3}, {0x7, 0x529, 0xf483, 0x0, 0x4, 0x5}, {0x4, 0x9, 0xe57, 0x34c84, 0x3fc, 0x7fff}, {0xd643, 0xfffff000, 0x5b30, 0xd6a, 0x40, 0x7}, {0x6, 0x361, 0x1, 0x80000000, 0x2, 0xffff0001}, {0x9db, 0x7, 0x4, 0x6, 0x401, 0x9}, {0x2, 0x1000, 0x1, 0xfffffffe, 0x9, 0xfffffe00}, {0x1, 0x9, 0x3, 0x8000, 0x7, 0x2}, {0x2, 0x0, 0x1, 0x8, 0x10001, 0x6}, {0x2, 0xffffffff, 0x7ff, 0x7ff, 0x4, 0x4}, {0x7, 0x7f, 0x7ff, 0x9, 0x818, 0xff}, {0x400, 0xc4a, 0x3, 0x9da3, 0x401, 0x1ff}, {0xfff, 0x8000, 0x5, 0x287, 0x6, 0x1}, {0x4, 0xffffffff, 0x4, 0x8000, 0x324f, 0x80000000}, {0x9, 0x1a2f, 0x1000, 0x7, 0x2, 0x92}, {0x9, 0x2, 0x7f, 0xbfe, 0x0, 0x2}, {0x6, 0x10000, 0x101, 0x10000, 0x1ff, 0xa4}, {0x15e, 0x8, 0x6, 0xf3, 0x9, 0x3}, {0x7, 0x10001, 0x36262b96, 0x9, 0xe, 0xfe0}, {0x8, 0x5, 0xf0a, 0xc, 0x0, 0x3}, {0x3, 0x10, 0xff, 0x4d04, 0xfffffff1, 0x9}, {0x1ff, 0x7, 0x8, 0x2, 0x4, 0xfff}, {0x6, 0x7, 0x5, 0x8, 0x8, 0x7}, {0x8, 0x5, 0x80, 0x46, 0x7, 0x1}, {0x81, 0xfffffff2, 0x1, 0x9, 0x7}, {0x9, 0xfffffff8, 0x81, 0xbea, 0x0, 0x8}, {0x80000000, 0x0, 0x3, 0x2, 0xe, 0x7}, {0xb2, 0x8, 0xc8, 0xfc, 0x5}, {0x9, 0x5, 0x80000001, 0xa, 0x1, 0x7}, {0x30, 0x2, 0x80000001, 0x7, 0x1, 0xf01}, {0x8, 0x7, 0x4, 0xc, 0x10, 0x7}, {0x3, 0x1, 0x2, 0x2, 0x3, 0xfffffffc}, {0x5, 0x51b0, 0xa00000, 0x4, 0x0, 0x7}, {0x9, 0xfffffff7, 0x5, 0x5, 0x401, 0x4}, {0x52259249, 0x3, 0x6, 0x9, 0x6, 0x4}, {0xb, 0x6, 0xe934, 0x0, 0x4, 0x6}, {0x7f, 0x7b29, 0x6, 0x6, 0x3, 0x836}, {0xf59, 0x7, 0x9, 0x1, 0x6, 0xffff8000}, {0x266, 0x3, 0x8, 0xd, 0x5, 0xc}, {0x7, 0x6, 0x10001, 0xfffffff9, 0x8001, 0x5}, {0x1, 0xe82a, 0x5, 0xfff, 0x80, 0x4}, {0x1ff, 0x8, 0xac4, 0x5, 0x8, 0x8}, {0x8, 0x5, 0xfffffff6, 0xa, 0x0, 0x9a3}, {0x7, 0x6, 0x80, 0x0, 0x6, 0x4}, {0x9, 0xffffffff, 0x6, 0xa, 0x4, 0x8}, {0x7, 0x7, 0x5, 0x4, 0x9, 0x40}, {0x5, 0x3, 0xf8, 0x1, 0x8001, 0x8}, {0x9, 0xd, 0x0, 0x6a1, 0x991e, 0x4}, {0x6, 0x6, 0x700000, 0x9, 0xf8b6, 0x3}, {0x0, 0x6, 0x4cf, 0x40, 0x6, 0xf9}, {0xffff, 0x80000000, 0x1, 0x7, 0x5, 0x2}, {0x9, 0x9, 0x2, 0x238, 0x0, 0x4}, {0x7, 0x8, 0x4, 0x40, 0x7, 0x9}, {0x800, 0xfffffffa, 0xcc, 0x0, 0x7, 0x6}, {0xc2c, 0x1, 0xc, 0x5, 0x9, 0x8}, {0xd68, 0x7, 0xae43, 0xfffffffe, 0x4}, {0x7789, 0x2, 0xa9, 0xc3, 0x7, 0x1}, {0x800, 0x2cc, 0x4, 0x3, 0xa, 0xffffac34}, {0x8, 0x200, 0x4, 0x7, 0x4, 0x74}, {0x800, 0x9, 0xd46, 0xfffffffc, 0x9, 0xc}, {0x800, 0xff, 0x4, 0x7, 0x5, 0x7}, {0xe, 0x8, 0xf4c7, 0xcff6, 0x8}, {0xffff, 0x4, 0xbca, 0x9, 0x3, 0x4}, {0x400, 0x4, 0x10001, 0x4f, 0xa, 0x9}, {0x7, 0x4e, 0x6, 0xa3b, 0x4, 0x3}], [{0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x1}, {}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x4}, {0x3}, {0x1}, {0x1}, {0x4}, {}, {0xbc5000cc5ce4ea89}, {0x1}, {0x2, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x7, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {}, {0x4}, {0x1}, {}, {0x3, 0x5acd9c11ca7104fa}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0xad94fba8a18f02ef, 0x1}, {0x5}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1010}, 0x1, 0x0, 0x0, 0x20044010}, 0x81) recvmmsg$unix(r9, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/4112, 0x1010}], 0x1}}], 0x1, 0x10100, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r2, 0xf518, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000060000000000000000010073797a30020000000900020073790001800c0001007061796c6f6164001c0002800800044000000001"], 0x84}}, 0x0) setsockopt$inet6_opts(r6, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) 989.711398ms ago: executing program 8 (id=1375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904000003710559"], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f"], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x1) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peekuser(0x3, r3, 0x388) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = fcntl$dupfd(r5, 0x406, r6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) flock(r7, 0x5) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000052c0)={0x368, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}, @nested={0x304, 0x5, 0x0, 0x1, [@nested={0x300, 0x124, 0x0, 0x1, [@generic="e52cfdc68ae361504fb4c62b8d9ac5e3dbef730cb2cf00eac243342b13b4b2783e39f91b", @nested={0xc1, 0x95, 0x0, 0x1, [@nested={0x4, 0x151}, @generic="9f04e2e04c5e100d9e58807b0096f337701f7abd7496b5b3ca4cc3c940ca62110404496d613fb09e1b288a498db87682d4352c7b0bdf2c65590cd71a73eb0e7784562bf1f677c65ddb15175cb931cab7a37a62f6e4c9c52327f48dd9952d429bb2a199dc6ddee341de7a400bdd0e6928657e2de5a6d05869fb6773ae19db71894e2711b8864a9b1d9178a18d0e0329ae717bc4892619efe6e32e57f3b248aab32dbf6abddece7fa450210297ee", @typed={0x8, 0xac, 0x0, 0x0, @uid}, @nested={0x4, 0xd7}]}, @typed={0x4, 0x138}, @nested={0x20d, 0x110, 0x0, 0x1, [@typed={0x14, 0x67, 0x0, 0x0, @ipv6=@mcast1}, @generic="11277c096e5b2d7552ca4f113df5e2b9cb2c8a2aedb1ac80f4027491f90f75b0286a2340c5a0f49430ed6ffe7c03ece4148486d5976f0ae19577fbfc7a8d2ca4f725832d", @generic="037e1ee9f7b0a4220dd524d682cc8cbbbdea4835ea4084f3a42b8263beaacbb438155fb626b5605be64b919ff93802c1e5e24c6193c4198fee8b119e011113f8920122e3b4fffc8efce6031d349a3848fc3126e8aeb1d282b47c74f6e6648e6179a4be3bd11a2c4b84623e4129c26e0c4a7b9293fb5b2598cd45c43ab1910968bb4aff9c74ad264076f3134d86dc36948a4daa60062b27cb2fefcf86572d37bcd40a7ed907bb11a98cea45381165f55a6fe6bd1897874865ab2987ae36390edcc29f987d98c534e2", @generic="081b173ca8c2c3138757b83f4768f5a0e07d1416eb8cc8d0fac2af900348d0587fd3d18489f4d44c5fd6f5a340322156f395402e880b7def364e3d08298d018b6e2a2eacfb0fe275314f07c051c112b70523e0dd9a59166bc4358134bb63c4a540d8545f7f7f85d829", @nested={0x4, 0x53}, @generic="95ee4c3a9c6424b78ca9e13d79519fd93d569f0e73125311f414ab609624114982a1df7b89262ede6bdab02ab1886d3197d0ff5dc7fd26fc1baf07a6b0eac5bb9d7109c54efe4c72aae082e9726422bdaeb64f1eb08e9d04ccd4d078542502ee386e0955d63dabb459ad711c1d", @nested={0x4, 0x1e}, @generic="e0e599aa90e954075c89b6"]}]}]}]}, 0x368}, 0x1, 0x0, 0x0, 0x4}, 0x804) ioctl$KVM_RUN(r4, 0xae80, 0x0) 675.520081ms ago: executing program 3 (id=1376): r0 = syz_io_uring_setup(0xb0b, &(0x7f0000000000)={0x0, 0x828f, 0x4, 0x0, 0x28f}, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x80010, r0, 0x10000000) (async) r1 = inotify_init1(0x1800) (async) r2 = signalfd4(r0, &(0x7f0000000100)={[0x7ff]}, 0x8, 0x0) (async) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x318}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f00000001c0)={[0x5]}, 0x8) rt_sigprocmask(0x2, &(0x7f0000000200)={[0x1]}, &(0x7f0000000240), 0x8) (async) r3 = syz_io_uring_setup(0x70ce, &(0x7f0000000280)={0x0, 0x585d, 0x20, 0x1, 0x213, 0x0, r2}, &(0x7f0000000300), &(0x7f0000000340)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000380)={0x73622a85, 0x0, 0x3}) (async) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f00000003c0)=0x4) (async) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000400)={0x7, 0x4}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x0, 0x10, 0x8, 0x10000}]}) (async) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r2, 0x4068aea3, &(0x7f00000004c0)) (async) r5 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x2000)=nil, 0x6000) shmdt(r5) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000540)={0xff5, 0x3, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) (async) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000018480)) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000184c0)={'vxcan1\x00'}) (async) ppoll(&(0x7f0000018500)=[{r0, 0x583}, {r4, 0x100}], 0x2, &(0x7f0000018540)={0x0, 0x989680}, &(0x7f0000018580)={[0x7fffffff]}, 0x8) (async) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r2, 0x4068aea3, &(0x7f00000185c0)={0xce, 0x0, r2}) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000018640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1f) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000018900)={0x0, &(0x7f0000018880)=[@set_irq_handler={0xbe, 0x20, {0x73, 0x2}}, @cpuid={0x14, 0x18, {0x8, 0x31ee}}, @wr_drn={0x6e, 0x20, {0x1, 0x5}}], 0x58}) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000189c0)=[@textreal={0x8, &(0x7f0000018940)="0f4c944ea1260fc758c266b92a0a000066b8b000000066ba000000000f300f8d5eea640fc71f640f01c9baf80c66b8acaad78066efbafc0c66ed66b9a20200000f32650f01c43e660f71f600", 0x4c}], 0x1, 0x60, &(0x7f0000018a00)=[@efer={0x2, 0x1000}, @cr4={0x1, 0x4}], 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000018a40)={0x6}) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000018a80)=0x6) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000018ac0), 0x40) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r8, 0x40a85321, &(0x7f0000018b00)={{0x3, 0x1}, 'port0\x00', 0x6c, 0x10000, 0x0, 0x1, 0x7, 0x4, 0x5, 0x0, 0x5, 0x8}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000018bc0)={{0x3, 0x6}, 'port1\x00', 0xc0, 0x10042, 0x2, 0x1ff, 0x20000000, 0x7, 0x8, 0x0, 0x4, 0x43}) 545.652718ms ago: executing program 3 (id=1377): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r1) sendmsg$NFC_CMD_DISABLE_SE(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x410) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x7, 0x3, 0x1c, 0x5, 0x2, 0x4e, 0x3, 0xf9, 0x1, 0x80, 0xc, 0x8000200000000000}, {0x6, 0x6, 0x8, 0xc4, 0x2, 0x7, 0x7, 0xf1, 0x7, 0xff, 0x41, 0x7d}, {0xe2a5, 0x4, 0x1, 0x9, 0x2, 0x9, 0x8, 0xb, 0xff, 0x6, 0x3, 0x3, 0x8}]}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f0000000100)={0x40, 0x22, 0x6f, {0x6f, 0xe, "7e10255f6f1e0bd322c100d8446874c1eff586d32340f6c589b00821a0ebcf6621ed266bd84f358792537037c29b5f6d86ab53328a3773c429cc084db61128005956ba71bb4bea9b42d384c4be5d1e244f1701ffdc34f995c156ed027e0d556332e57bd12e69f43ecb192748d2"}}, &(0x7f0000000180)={0x0, 0x3, 0xa2, @string={0xa2, 0x3, "1e284b860e249914443dd48fe07e724690c55af3cd233b6f86111d8532b9f935582b5269cd0e2ebb7bdebe77af4274ac919b9c4a603c570ae02c0a2d8676d05899b2fabe77777745f11b6d182be78f8e266caaaf296551b315009ff036a282fba28f717d2482c96d4c6aff6fa25430b521f8c19bd7c2a86d406b1251d348e669421f0aa93c2616755caa0875952d373907f7dbb6308f7716fcfc2242834b0470"}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000280)={0x40, 0x16, 0x30, "e34ab208b498956c9c17d69937021522d9886141b819b9a23d053596e6da8e40781431d4261a3361bcf4a3693b11c648"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000340)={0xc0, 0x5, 0x4, 'Fhl;'}, &(0x7f0000000380)={0x40, 0x5, 0x4, "51e6bf59"}}) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 32.954748ms ago: executing program 3 (id=1378): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000140)={0xe8, 0xa}, 0x2) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(r2, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x9, 0xa, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x3, 0x4, 0x0, 0x6e6bbf, 0x10001, {0x6, 0x33, 0x33, 0xe, 0x0, 0x81, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x36}, @in6=@mcast1}}]}, 0x50}}, 0x804) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newsa={0x210, 0x10, 0x413, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x7, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x19}, {0x0, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6, 0x1, 0x1}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x120, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x6a0, 0x40, "7ae978427b16add9e6b50c9917d0e0684cb2e60cc12d218d2c0dd4f81a2794386c2854f80f29e30ea5941274b7112138f4681d7b48e958aa1a4577c31877c970bcc8279b198282de74f2f11ca971130a0ac5493f7c626f090f66642002dcefedaff8b9f920158e0abb36aea91b19f65e79e979875b16e42caa29201702d61a715efd70d9ecaf93370272d3ed6bfa585393b0e95a8b9be247ff6760e83e2d67a7a031a0a8ff584f49d917e146e6629998395a87d71f3ba290e28aa7842380b9658eca5fafc753365a1edf090f08afb8c04961448e"}}]}, 0x210}}, 0x804) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000140)={0xe8, 0xa}, 0x2) (async) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) symlinkat(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) renameat2(r2, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x2) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x9, 0xa, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x3, 0x4, 0x0, 0x6e6bbf, 0x10001, {0x6, 0x33, 0x33, 0xe, 0x0, 0x81, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x36}, @in6=@mcast1}}]}, 0x50}}, 0x804) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newsa={0x210, 0x10, 0x413, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x7, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x19}, {0x0, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6, 0x1, 0x1}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x120, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x6a0, 0x40, "7ae978427b16add9e6b50c9917d0e0684cb2e60cc12d218d2c0dd4f81a2794386c2854f80f29e30ea5941274b7112138f4681d7b48e958aa1a4577c31877c970bcc8279b198282de74f2f11ca971130a0ac5493f7c626f090f66642002dcefedaff8b9f920158e0abb36aea91b19f65e79e979875b16e42caa29201702d61a715efd70d9ecaf93370272d3ed6bfa585393b0e95a8b9be247ff6760e83e2d67a7a031a0a8ff584f49d917e146e6629998395a87d71f3ba290e28aa7842380b9658eca5fafc753365a1edf090f08afb8c04961448e"}}]}, 0x210}}, 0x804) (async) 0s ago: executing program 3 (id=1379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0xffffffff, "fa02c800"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000000c0)=0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) syz_open_procfs$namespace(r6, 0x0) setns(r7, 0x24020000) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000200)=""/82) umount2(&(0x7f0000000040)='.\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) writev(r9, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f2329aec811aef54910bde3a2a179cb11ac1a71cc538c0897a022140c068a6696ae776a06e97b6022c92458c1a740a98c34049c1ad69e028f2f78a0d109195c5cbc7acf16207932b5a99e0bc7097ea24fe17d8727f5a7476ba550104a0d0f4a30e911e1ff858893937f534770440d3f429808a4548397cb5835197635a11207b33b84adc056ff2595aaeac06b0ea08eb149e9b0bd836e61397ba1a43877f78638a153f956cadd07d53f0341daf1d1a2eb5aa84c5a3a290ba84e9f9d41d86c509a33fe7ae8418e465b76d3814e941b54795675f9db26cef7324b82fca0a014664276e8991c5d01aee8a34f96246236d15d615e8a12f8425e342", 0xf9}], 0x1) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) kernel console output (not intermixed with test programs): 286] option from the mount to silence this warning. [ 189.352175][ T8286] ======================================================= [ 189.388381][ T8286] overlayfs: failed to clone upperpath [ 189.487927][ T8262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.507391][ T8262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.531661][ T8262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.541992][ T8262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.568838][ T8262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.585424][ T8262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.594735][ T8262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.614844][ T8262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.643873][ T8262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.659472][ T8262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.738330][ T43] gspca_spca1528: reg_w err -71 [ 189.758750][ T43] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 189.789772][ T43] usb 6-1: USB disconnect, device number 34 [ 189.866246][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.663'. [ 189.953727][ T8302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.663'. [ 190.579144][ T5828] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 190.721718][ T8312] netlink: 'syz.5.665': attribute type 10 has an invalid length. [ 190.742396][ T8312] bond0: (slave team0): Enslaving as an active interface with an up link [ 190.769820][ T5828] usb 4-1: too many configurations: 37, using maximum allowed: 8 [ 191.044670][ T10] IPVS: starting estimator thread 0... [ 191.148972][ T8317] IPVS: using max 30 ests per chain, 72000 per kthread [ 191.307709][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 191.317618][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 191.328911][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 191.337099][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 191.345837][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 191.420013][ T8321] lo speed is unknown, defaulting to 1000 [ 191.609025][ T5874] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 191.791891][ T5874] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 191.822108][ T5874] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 191.832168][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.840547][ T5874] usb 6-1: Product: syz [ 191.844779][ T5874] usb 6-1: Manufacturer: syz [ 191.850306][ T5874] usb 6-1: SerialNumber: syz [ 191.874201][ T5874] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 191.988251][ T8321] chnl_net:caif_netlink_parms(): no params data found [ 192.126831][ T8321] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.134318][ T8321] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.142191][ T8321] bridge_slave_0: entered allmulticast mode [ 192.151917][ T8321] bridge_slave_0: entered promiscuous mode [ 192.162574][ T8321] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.175992][ T8321] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.183525][ T8321] bridge_slave_1: entered allmulticast mode [ 192.192340][ T8321] bridge_slave_1: entered promiscuous mode [ 192.242828][ T8321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.257068][ T8321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.278246][ T5874] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 192.325839][ T8321] team0: Port device team_slave_0 added [ 192.350156][ T8321] team0: Port device team_slave_1 added [ 192.424340][ T8321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.431604][ T8321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.458505][ T8321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.474045][ T8321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.481232][ T8321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.512142][ T8321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.576249][ T8321] hsr_slave_0: entered promiscuous mode [ 192.583299][ T8321] hsr_slave_1: entered promiscuous mode [ 192.589770][ T8321] debugfs: 'hsr0' already exists in 'hsr' [ 192.595517][ T8321] Cannot create hsr debugfs directory [ 192.735834][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.807263][ T5828] usb 4-1: string descriptor 0 read error: -71 [ 192.819206][ T5828] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 192.834259][ T8321] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 192.841633][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.865837][ T8321] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 192.874129][ T5828] usb 4-1: can't set config #1, error -71 [ 192.907201][ T5828] usb 4-1: USB disconnect, device number 62 [ 192.911681][ T8321] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 192.930065][ T8321] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 192.958159][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.034841][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.137753][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.176362][ T8321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.217761][ T8321] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.237769][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.244995][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.280427][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.287622][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.365254][ T8353] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 193.369907][ T5830] Bluetooth: hci2: command tx timeout [ 193.377981][ T8353] block device autoloading is deprecated and will be removed. [ 193.395174][ T8321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.406415][ T8321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.489682][ T12] bridge_slave_1: left allmulticast mode [ 193.495374][ T12] bridge_slave_1: left promiscuous mode [ 193.520396][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.536034][ T12] bridge_slave_0: left allmulticast mode [ 193.578778][ T12] bridge_slave_0: left promiscuous mode [ 193.584655][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.864483][ T24] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 194.031514][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 194.046571][ T24] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 194.060385][ T24] usb 4-1: config 0 has no interface number 0 [ 194.080158][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 194.095931][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.107140][ T24] usb 4-1: Product: syz [ 194.112081][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.120784][ T24] usb 4-1: Manufacturer: syz [ 194.128430][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.137673][ T24] usb 4-1: SerialNumber: syz [ 194.145595][ T24] usb 4-1: config 0 descriptor?? [ 194.153521][ T12] bond0 (unregistering): Released all slaves [ 194.168935][ T24] smsc95xx v2.0.0 [ 194.260357][ T12] tipc: Left network mode [ 194.338398][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.344903][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.389622][ T793] usb 6-1: USB disconnect, device number 35 [ 194.403802][ T8321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.883400][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 194.972869][ T12] hsr_slave_0: left promiscuous mode [ 195.003286][ T12] hsr_slave_1: left promiscuous mode [ 195.014560][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.034761][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.052785][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.066789][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.110660][ T12] veth1_macvtap: left promiscuous mode [ 195.116241][ T12] veth0_macvtap: left promiscuous mode [ 195.134475][ T12] veth1_vlan: left promiscuous mode [ 195.158759][ T12] veth0_vlan: left promiscuous mode [ 195.448851][ T5830] Bluetooth: hci2: command tx timeout [ 195.554041][ T8425] netlink: 260 bytes leftover after parsing attributes in process `syz.5.682'. [ 195.860274][ T10] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 195.939661][ T12] team0 (unregistering): Port device team_slave_1 removed [ 195.972781][ T12] team0 (unregistering): Port device team_slave_0 removed [ 195.998738][ T10] usb 6-1: device descriptor read/64, error -71 [ 196.245240][ T10] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 196.399066][ T10] usb 6-1: device descriptor read/64, error -71 [ 196.446327][ T8321] veth0_vlan: entered promiscuous mode [ 196.482029][ T8321] veth1_vlan: entered promiscuous mode [ 196.509450][ T10] usb usb6-port1: attempt power cycle [ 196.585737][ T8321] veth0_macvtap: entered promiscuous mode [ 196.617696][ T8321] veth1_macvtap: entered promiscuous mode [ 196.669780][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 196.686885][ T8321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.714252][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 196.733723][ T8321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.752696][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 196.785706][ T8238] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.790235][ T24] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 196.811232][ T24] usb 4-1: USB disconnect, device number 63 [ 196.823685][ T8238] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.855339][ T8238] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.866129][ T10] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 196.880213][ T8448] fuse: root generation should be zero [ 196.893584][ T8238] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.912994][ T10] usb 6-1: device descriptor read/8, error -71 [ 197.115793][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.147923][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.168897][ T10] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 197.193395][ T10] usb 6-1: device descriptor read/8, error -71 [ 197.223086][ T8238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.234321][ T8238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.275798][ T8465] /dev/nbd0: Can't lookup blockdev [ 197.312061][ T10] usb usb6-port1: unable to enumerate USB device [ 197.529439][ T5830] Bluetooth: hci2: command tx timeout [ 197.783459][ T30] audit: type=1800 audit(1762918625.098:89): pid=8486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.696" name="nullb0" dev="tmpfs" ino=478 res=0 errno=0 [ 197.848944][ T5828] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 197.933578][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 197.944858][ T8495] netlink: 268 bytes leftover after parsing attributes in process `syz.0.698'. [ 198.022580][ T5828] usb 7-1: unable to get BOS descriptor or descriptor too short [ 198.043710][ T5828] usb 7-1: not running at top speed; connect to a high speed hub [ 198.060258][ T5828] usb 7-1: config 1 has an invalid interface descriptor of length 5, skipping [ 198.074224][ T5828] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.098841][ T5828] usb 7-1: config 1 has 3 interfaces, different from the descriptor's value: 19 [ 198.125986][ T5828] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 59, changing to 4 [ 198.147383][ T5828] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 198.181009][ T5828] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 198.197251][ T5828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.208723][ T5828] usb 7-1: Product: syz [ 198.212923][ T5828] usb 7-1: Manufacturer: syz [ 198.217648][ T5828] usb 7-1: SerialNumber: syz [ 198.368810][ T794] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 198.470075][ T5828] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 198.528749][ T794] usb 4-1: Using ep0 maxpacket: 32 [ 198.547026][ T794] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 198.563483][ T5828] usb 7-1: USB disconnect, device number 2 [ 198.570884][ T794] usb 4-1: config 0 has no interface number 0 [ 198.570933][ T794] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 198.573578][ T794] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 198.631965][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.658157][ T794] usb 4-1: Product: syz [ 198.702881][ T794] usb 4-1: Manufacturer: syz [ 198.711080][ T794] usb 4-1: SerialNumber: syz [ 198.736578][ T794] usb 4-1: config 0 descriptor?? [ 198.754636][ T794] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 198.770696][ T8524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.783289][ T794] em28xx 4-1:0.132: Video interface 132 found: [ 198.802776][ T8524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.998697][ T43] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 199.107217][ T8538] sit0: entered promiscuous mode [ 199.133316][ T8538] netlink: 'syz.0.708': attribute type 1 has an invalid length. [ 199.147717][ T794] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 199.184172][ T8538] netlink: 1 bytes leftover after parsing attributes in process `syz.0.708'. [ 199.188670][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 199.207716][ T43] usb 6-1: no configurations [ 199.213334][ T43] usb 6-1: can't read configurations, error -22 [ 199.358723][ T43] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 199.509446][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 199.515475][ T43] usb 6-1: no configurations [ 199.521645][ T43] usb 6-1: can't read configurations, error -22 [ 199.528241][ T43] usb usb6-port1: attempt power cycle [ 199.578724][ T5908] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 199.608687][ T5830] Bluetooth: hci2: command tx timeout [ 199.730117][ T5908] usb 7-1: Using ep0 maxpacket: 8 [ 199.742630][ T5908] usb 7-1: unable to get BOS descriptor or descriptor too short [ 199.756100][ T794] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 199.765748][ T794] em28xx 4-1:0.132: board has no eeprom [ 199.772987][ T5908] usb 7-1: config 8 has an invalid interface number: 52 but max is 2 [ 199.781543][ T5908] usb 7-1: config 8 has an invalid interface number: 43 but max is 2 [ 199.789859][ T5908] usb 7-1: config 8 has an invalid interface number: 36 but max is 2 [ 199.798379][ T5908] usb 7-1: config 8 has an invalid interface number: 247 but max is 2 [ 199.806623][ T5908] usb 7-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 199.815522][ T5908] usb 7-1: config 8 has 4 interfaces, different from the descriptor's value: 3 [ 199.824969][ T5908] usb 7-1: config 8 has no interface number 0 [ 199.831116][ T5908] usb 7-1: config 8 has no interface number 1 [ 199.837185][ T5908] usb 7-1: config 8 has no interface number 2 [ 199.843302][ T5908] usb 7-1: config 8 has no interface number 3 [ 199.849545][ T794] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 199.857359][ T794] em28xx 4-1:0.132: analog set to bulk mode. [ 199.863472][ T5908] usb 7-1: config 8 interface 52 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 199.874291][ T5908] usb 7-1: config 8 interface 52 altsetting 7 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 199.885266][ T43] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 199.893480][ T5887] em28xx 4-1:0.132: Registering V4L2 extension [ 199.907379][ T794] usb 4-1: USB disconnect, device number 64 [ 199.915502][ T5908] usb 7-1: config 8 interface 43 altsetting 1 bulk endpoint 0xB has invalid maxpacket 64 [ 199.928083][ T794] em28xx 4-1:0.132: Disconnecting em28xx [ 199.939917][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 199.947755][ T5908] usb 7-1: config 8 interface 43 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 199.961227][ T43] usb 6-1: no configurations [ 199.966132][ T43] usb 6-1: can't read configurations, error -22 [ 199.972718][ T5908] usb 7-1: config 8 interface 43 altsetting 1 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 199.984358][ T5908] usb 7-1: config 8 interface 43 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 7 [ 199.997689][ T5908] usb 7-1: too many endpoints for config 8 interface 36 altsetting 216: 237, using maximum allowed: 30 [ 200.010878][ T5908] usb 7-1: config 8 interface 36 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 237 [ 200.026317][ T5908] usb 7-1: config 8 interface 247 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 200.037156][ T5908] usb 7-1: config 8 interface 247 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 200.048257][ T5908] usb 7-1: config 8 interface 247 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 200.059928][ T5908] usb 7-1: config 8 interface 247 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 200.078800][ T5908] usb 7-1: config 8 interface 247 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 200.090069][ T5908] usb 7-1: config 8 interface 247 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 200.106996][ T5908] usb 7-1: config 8 interface 247 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 200.117866][ T5887] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 200.125758][ T43] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 200.133762][ T5887] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 200.141872][ T5887] em28xx 4-1:0.132: No AC97 audio processor [ 200.150626][ T5908] usb 7-1: config 8 interface 247 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 200.163138][ T5887] usb 4-1: Decoder not found [ 200.167746][ T5887] em28xx 4-1:0.132: failed to create media graph [ 200.174426][ T5908] usb 7-1: config 8 interface 247 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 200.185279][ T5887] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 200.192210][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 200.198688][ T43] usb 6-1: no configurations [ 200.203286][ T43] usb 6-1: can't read configurations, error -22 [ 200.211498][ T5908] usb 7-1: config 8 interface 247 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 200.223529][ T5887] em28xx 4-1:0.132: Remote control support is not available for this card. [ 200.232400][ T43] usb usb6-port1: unable to enumerate USB device [ 200.238852][ T794] em28xx 4-1:0.132: Closing input extension [ 200.245294][ T5908] usb 7-1: config 8 interface 247 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 200.260894][ T5908] usb 7-1: config 8 interface 247 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 200.273995][ T794] em28xx 4-1:0.132: Freeing device [ 200.281104][ T5908] usb 7-1: config 8 interface 52 has no altsetting 0 [ 200.288278][ T5908] usb 7-1: config 8 interface 43 has no altsetting 0 [ 200.298443][ T5908] usb 7-1: config 8 interface 36 has no altsetting 0 [ 200.305223][ T5908] usb 7-1: config 8 interface 247 has no altsetting 0 [ 200.318039][ T5908] usb 7-1: New USB device found, idVendor=19d2, idProduct=1135, bcdDevice=7e.d9 [ 200.327350][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.337209][ T5908] usb 7-1: Product: 倛 [ 200.352787][ T5908] usb 7-1: Manufacturer: 疮 [ 200.423582][ T8559] netlink: 260 bytes leftover after parsing attributes in process `syz.0.713'. [ 200.574276][ T8543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.582808][ T794] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 200.583865][ T8543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.607717][ T5908] option 7-1:8.52: GSM modem (1-port) converter detected [ 200.642703][ T5908] usb 7-1: USB disconnect, device number 3 [ 200.659266][ T5908] option 7-1:8.52: device disconnected [ 200.740375][ T794] usb 4-1: unable to get BOS descriptor or descriptor too short [ 200.751652][ T794] usb 4-1: config 13 has an invalid interface number: 50 but max is 3 [ 200.760050][ T794] usb 4-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 200.770361][ T794] usb 4-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 200.779361][ T794] usb 4-1: config 13 has no interface number 0 [ 200.785531][ T794] usb 4-1: config 13 interface 50 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 200.798509][ T794] usb 4-1: config 13 interface 50 has no altsetting 0 [ 200.807604][ T794] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 200.816905][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.825425][ T794] usb 4-1: Product: syz [ 200.829746][ T794] usb 4-1: Manufacturer: syz [ 200.834324][ T794] usb 4-1: SerialNumber: syz [ 201.074983][ T794] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 201.076112][ T60] usb 4-1: Failed to submit usb control message: -71 [ 201.092525][ T60] usb 4-1: unable to send the bmi data to the device: -71 [ 201.099960][ T60] usb 4-1: unable to get target info from device [ 201.106556][ T60] usb 4-1: could not get target info (-71) [ 201.113321][ T60] usb 4-1: could not probe fw (-71) [ 201.121527][ T794] usb 4-1: USB disconnect, device number 65 [ 201.608985][ T793] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 201.762570][ T793] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 201.788725][ T793] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.796752][ T793] usb 7-1: Product: syz [ 201.810826][ T793] usb 7-1: Manufacturer: syz [ 201.815452][ T793] usb 7-1: SerialNumber: syz [ 201.826939][ T793] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 201.838688][ T5828] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 201.858886][ T5874] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 201.978783][ T5828] usb 4-1: device descriptor read/64, error -71 [ 202.178745][ T793] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 202.218765][ T5828] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 202.341437][ T793] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 202.350635][ T5828] usb 4-1: device descriptor read/64, error -71 [ 202.357987][ T793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.369748][ T793] usb 6-1: config 0 descriptor?? [ 202.378524][ T793] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 202.461203][ T5828] usb usb4-port1: attempt power cycle [ 202.475318][ T8583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.485623][ T8583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.501311][ T8583] netlink: 56 bytes leftover after parsing attributes in process `syz.6.720'. [ 202.516325][ T8583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.535839][ T8583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.556656][ T8601] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 202.565512][ T8602] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 202.631404][ T10] usb 7-1: USB disconnect, device number 4 [ 202.637926][ T793] gp8psk: usb in 128 operation failed. [ 202.658745][ T793] gp8psk: usb in 137 operation failed. [ 202.676977][ T793] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 202.687490][ T793] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 202.696704][ T793] usb 6-1: media controller created [ 202.723015][ T793] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 202.775797][ T793] gp8psk_fe: Frontend attached [ 202.790197][ T793] usb 6-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 202.799841][ T793] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 202.815015][ T5828] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 202.849171][ T5828] usb 4-1: device descriptor read/8, error -71 [ 202.889361][ T5874] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 202.900534][ T793] gp8psk: usb in 138 operation failed. [ 202.906019][ T793] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 202.916785][ T5874] ath9k_htc: Failed to initialize the device [ 202.926298][ T10] usb 7-1: ath9k_htc: USB layer deinitialized [ 202.932603][ T793] gp8psk: found Genpix USB device pID = 203 (hex) [ 203.108743][ T5828] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 203.129182][ T5828] usb 4-1: device descriptor read/8, error -71 [ 203.240215][ T5828] usb usb4-port1: unable to enumerate USB device [ 203.268782][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 203.384413][ T5908] usb 6-1: USB disconnect, device number 44 [ 203.439607][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 203.449712][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 203.457943][ T10] usb 7-1: config 0 has no interface number 0 [ 203.466632][ T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.478491][ T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.489873][ T10] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 203.500006][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.519861][ T5908] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 203.528666][ T10] usb 7-1: config 0 descriptor?? [ 203.656291][ T8634] binder: 8633:8634 ioctl 5416 200000000040 returned -22 [ 203.811082][ T8640] tmpfs: Group quota inode hardlimit too large. [ 203.956763][ T10] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 203.965521][ T10] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 204.150164][ T10] ft260 0003:0403:6030.0013: failed to retrieve chip version [ 204.158035][ T10] ft260 0003:0403:6030.0013: probe with driver ft260 failed with error -71 [ 204.171998][ T10] usb 7-1: USB disconnect, device number 5 [ 204.260902][ T60] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.336855][ T8645] 9p: Unknown access argument : -22 [ 204.367428][ T60] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.440649][ T60] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.538782][ T60] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.562014][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 204.582294][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 204.590285][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 204.598271][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 204.607399][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.690855][ T8651] lo speed is unknown, defaulting to 1000 [ 204.978365][ T8664] netlink: 'syz.6.747': attribute type 11 has an invalid length. [ 205.473789][ T8679] fuse: Unknown parameter '000000000000000000030x00000000000000060x000000000000000300000000000000000000' [ 205.568267][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.594182][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.611360][ T60] bond0 (unregistering): (slave team0): Releasing backup interface [ 205.630267][ T60] bond0 (unregistering): Released all slaves [ 205.691418][ T8684] netlink: 'syz.0.753': attribute type 10 has an invalid length. [ 205.746404][ T8682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.060269][ T10] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 206.151214][ T8651] chnl_net:caif_netlink_parms(): no params data found [ 206.237883][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 206.250139][ T10] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 206.295528][ T10] usb 4-1: string descriptor 0 read error: -22 [ 206.308788][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 206.328084][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.409136][ T5828] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 206.520240][ T10] usb 4-1: reset high-speed USB device number 70 using dummy_hcd [ 206.580850][ T5828] usb 7-1: config 0 has an invalid interface number: 96 but max is 0 [ 206.589467][ T5828] usb 7-1: config 0 has no interface number 0 [ 206.595572][ T5828] usb 7-1: config 0 interface 96 has no altsetting 0 [ 206.607926][ T5828] usb 7-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=f1.73 [ 206.617720][ T5828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.625854][ T5828] usb 7-1: Product: syz [ 206.626509][ T60] hsr_slave_0: left promiscuous mode [ 206.630401][ T5828] usb 7-1: Manufacturer: syz [ 206.640291][ T60] hsr_slave_1: left promiscuous mode [ 206.640653][ T5828] usb 7-1: SerialNumber: syz [ 206.646639][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.655486][ T5830] Bluetooth: hci1: command tx timeout [ 206.659942][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.669002][ T5828] usb 7-1: config 0 descriptor?? [ 206.678562][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.691465][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.714662][ T60] veth1_macvtap: left promiscuous mode [ 206.720324][ T60] veth0_macvtap: left promiscuous mode [ 206.727331][ T60] veth1_vlan: left promiscuous mode [ 206.735038][ T60] veth0_vlan: left promiscuous mode [ 206.895620][ T5828] usb 7-1: USB disconnect, device number 6 [ 207.067200][ T60] team0 (unregistering): Port device team_slave_1 removed [ 207.097616][ T60] team0 (unregistering): Port device team_slave_0 removed [ 207.381260][ T10] usb 4-1: USB disconnect, device number 70 [ 207.663310][ T8651] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.672738][ T8651] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.681890][ T8651] bridge_slave_0: entered allmulticast mode [ 207.691463][ T8651] bridge_slave_0: entered promiscuous mode [ 207.704111][ T8651] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.725366][ T8651] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.735274][ T8651] bridge_slave_1: entered allmulticast mode [ 207.743527][ T8651] bridge_slave_1: entered promiscuous mode [ 207.766647][ T8737] tipc: Enabled bearer , priority 0 [ 207.782304][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 207.823239][ T8651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.851348][ T8651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.874755][ T8730] tipc: Disabling bearer [ 207.915241][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'. [ 207.929317][ T8651] team0: Port device team_slave_0 added [ 207.945399][ T8651] team0: Port device team_slave_1 added [ 207.975683][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.002184][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.013292][ T10] usb 7-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 208.044027][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.057377][ T8651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.070068][ T10] usb 7-1: config 0 descriptor?? [ 208.073304][ T8651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.094087][ T8752] /dev/nbd0: Can't lookup blockdev [ 208.103313][ T8651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.128179][ T8651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.135442][ T8651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.162196][ T8651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.243532][ T8755] fuse: Unknown parameter 'fd0x0000000000000006' [ 208.303164][ T60] IPVS: stop unused estimator thread 0... [ 208.304170][ T8651] hsr_slave_0: entered promiscuous mode [ 208.341551][ T8651] hsr_slave_1: entered promiscuous mode [ 208.492574][ T8739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.527536][ T8739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.548766][ T8739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.568867][ T8739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.588509][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 208.600734][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 208.629414][ T10] usb 7-1: USB disconnect, device number 7 [ 208.724283][ T8651] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 208.736754][ T5830] Bluetooth: hci1: command tx timeout [ 208.754008][ T8651] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 208.766921][ T8651] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 208.780377][ T8651] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 208.904539][ T8651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.934060][ T8651] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.947634][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.954846][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.977088][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.984299][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.277721][ T8651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.603251][ T8651] veth0_vlan: entered promiscuous mode [ 209.618270][ T8651] veth1_vlan: entered promiscuous mode [ 209.663643][ T8651] veth0_macvtap: entered promiscuous mode [ 209.676015][ T8651] veth1_macvtap: entered promiscuous mode [ 209.706421][ T8651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.722932][ T8651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.744270][ T1165] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.753881][ T1165] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.764348][ T1165] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.780504][ T1165] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.942774][ T8815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.982476][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.999438][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.124782][ T3515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.154734][ T3515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.159215][ T794] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 210.372025][ T794] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.405593][ T794] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 210.448099][ T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 210.459296][ T8835] fuse: Bad value for 'group_id' [ 210.459316][ T8835] fuse: Bad value for 'group_id' [ 210.475264][ T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 210.487921][ T794] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 210.511076][ T794] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 210.528685][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 210.548238][ T794] usb 4-1: Product: syz [ 210.599232][ T794] usb 4-1: Manufacturer: syz [ 210.610575][ T794] usb 4-1: SerialNumber: syz [ 210.626015][ T794] usb 4-1: config 0 descriptor?? [ 210.820090][ T5830] Bluetooth: hci1: command tx timeout [ 210.922909][ T794] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 210.943152][ T794] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 211.775780][ T8885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.791432][ T8885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.328830][ T5874] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 212.376408][ T8913] Scaler: ================= START STATUS ================= [ 212.384443][ T8913] Scaler: ================== END STATUS ================== [ 212.494981][ T30] audit: type=1326 audit(1762918639.808:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8921 comm="syz.3.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2618f6c9 code=0x7ffc0000 [ 212.519495][ T30] audit: type=1326 audit(1762918639.808:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8921 comm="syz.3.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2618f6c9 code=0x7ffc0000 [ 212.523949][ T8922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.551795][ T8922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.563102][ T5874] usb 7-1: unable to get BOS descriptor or descriptor too short [ 212.568414][ T8922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.579991][ T5874] usb 7-1: not running at top speed; connect to a high speed hub [ 212.581137][ T8922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.596683][ T30] audit: type=1326 audit(1762918639.808:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8921 comm="syz.3.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2618f6c9 code=0x7ffc0000 [ 212.612247][ T8922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.621981][ T5874] usb 7-1: config 106 has an invalid interface number: 8 but max is 0 [ 212.631884][ T8922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.644901][ T5874] usb 7-1: config 106 has no interface number 0 [ 212.647790][ T30] audit: type=1326 audit(1762918639.808:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8921 comm="syz.3.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2618f6c9 code=0x7ffc0000 [ 212.652273][ T5874] usb 7-1: config 106 interface 8 has no altsetting 0 [ 212.682197][ T30] audit: type=1326 audit(1762918639.808:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8921 comm="syz.3.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d2618f6c9 code=0x7ffc0000 [ 212.707044][ T30] audit: type=1326 audit(1762918639.808:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8921 comm="syz.3.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2618f6c9 code=0x7ffc0000 [ 212.731433][ T5874] usb 7-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 212.734690][ T30] audit: type=1326 audit(1762918639.808:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8921 comm="syz.3.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2618f6c9 code=0x7ffc0000 [ 212.740935][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.740960][ T5874] usb 7-1: Product: syz [ 212.740979][ T5874] usb 7-1: Manufacturer: syz [ 212.740994][ T5874] usb 7-1: SerialNumber: syz [ 212.787704][ T30] audit: type=1326 audit(1762918639.808:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8921 comm="syz.3.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2618f6c9 code=0x7ffc0000 [ 212.813534][ T30] audit: type=1326 audit(1762918639.808:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8921 comm="syz.3.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3d2618f6c9 code=0x7ffc0000 [ 212.836072][ T30] audit: type=1326 audit(1762918639.808:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8921 comm="syz.3.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2618f6c9 code=0x7ffc0000 [ 212.889328][ T5830] Bluetooth: hci1: command tx timeout [ 212.972711][ T8899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.984432][ T8899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.000286][ T5874] kalmia 7-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 213.020544][ T5874] kalmia 7-1:106.8: probe with driver kalmia failed with error -22 [ 213.047038][ T5874] usb 7-1: USB disconnect, device number 9 [ 213.087417][ T8927] overlay: Unknown parameter 'subj_role' [ 213.095091][ T8927] netlink: 328 bytes leftover after parsing attributes in process `syz.0.790'. [ 213.222287][ T8934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.231355][ T8934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.629413][ T8938] tipc: Failed to obtain node identity [ 213.635020][ T8938] tipc: Enabling of bearer rejected, failed to enable media [ 214.099053][ T8964] netlink: 'syz.3.800': attribute type 11 has an invalid length. [ 214.106983][ T8964] netlink: 168 bytes leftover after parsing attributes in process `syz.3.800'. [ 214.248887][ T5874] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 214.378844][ T5874] usb 7-1: device descriptor read/64, error -71 [ 214.618945][ T5874] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 214.686811][ T8980] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 214.696974][ T8980] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 214.705621][ T8980] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 214.713756][ T8980] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 214.749086][ T5874] usb 7-1: device descriptor read/64, error -71 [ 214.864513][ T8992] netlink: 'syz.3.808': attribute type 40 has an invalid length. [ 214.872778][ T5874] usb usb7-port1: attempt power cycle [ 214.876719][ T8992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.887940][ T8992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.209512][ T5874] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 215.229328][ T5874] usb 7-1: device descriptor read/8, error -71 [ 215.436776][ T9003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.446424][ T9003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.470977][ T5874] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 215.499306][ T5874] usb 7-1: device descriptor read/8, error -71 [ 215.609709][ T5874] usb usb7-port1: unable to enumerate USB device [ 215.949700][ T9022] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 216.025965][ T9028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.036255][ T9028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.047778][ T9028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.057419][ T9028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.666248][ T9034] netlink: 104 bytes leftover after parsing attributes in process `syz.3.820'. [ 216.947925][ T9044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.956798][ T9044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.116264][ T9051] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 217.128376][ T9051] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 217.147927][ T9054] overlay: Unknown parameter 'fowner<00000000000000000000' [ 217.438718][ T5887] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 217.578757][ T5887] usb 7-1: device descriptor read/64, error -71 [ 217.702626][ T9073] lo speed is unknown, defaulting to 1000 [ 217.818665][ T5887] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 217.968699][ T5887] usb 7-1: device descriptor read/64, error -71 [ 218.078882][ T5887] usb usb7-port1: attempt power cycle [ 218.418693][ T5887] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 218.442334][ T5887] usb 7-1: device descriptor read/8, error -71 [ 218.691391][ T5887] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 218.722864][ T5887] usb 7-1: device descriptor read/8, error -71 [ 218.839659][ T5887] usb usb7-port1: unable to enumerate USB device [ 220.582215][ T9136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.651841][ T9139] syzkaller1: entered promiscuous mode [ 220.660074][ T9136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.669941][ T9139] syzkaller1: entered allmulticast mode [ 222.127205][ T9164] tracefs: Unknown parameter 't' [ 222.782125][ T9199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.820247][ T9199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.848871][ T5908] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 222.998671][ T5908] usb 7-1: Using ep0 maxpacket: 16 [ 223.011763][ T5908] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.028693][ T5908] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.051713][ T5908] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.061161][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.069641][ T5908] usb 7-1: Product: syz [ 223.073919][ T5908] usb 7-1: Manufacturer: syz [ 223.078517][ T5908] usb 7-1: SerialNumber: syz [ 223.813419][ T9228] netlink: 592 bytes leftover after parsing attributes in process `syz.3.851'. [ 223.860466][ T5908] usb 7-1: 0:2 : does not exist [ 223.881713][ T5908] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 223.914117][ T9228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.960333][ T5908] usb 7-1: USB disconnect, device number 18 [ 224.073395][ T5958] udevd[5958]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.361907][ T5908] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 224.528670][ T5908] usb 7-1: Using ep0 maxpacket: 8 [ 224.540831][ T5908] usb 7-1: config 0 has an invalid interface number: 96 but max is 0 [ 224.558686][ T5908] usb 7-1: config 0 has no interface number 0 [ 224.564908][ T5908] usb 7-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 224.594400][ T5908] usb 7-1: config 0 interface 96 has no altsetting 0 [ 224.622957][ T5908] usb 7-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 224.642397][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.660790][ T5908] usb 7-1: Product: syz [ 224.670894][ T5908] usb 7-1: Manufacturer: syz [ 224.685685][ T5908] usb 7-1: SerialNumber: syz [ 224.704574][ T5908] usb 7-1: config 0 descriptor?? [ 224.945310][ T5908] usb 7-1: USB disconnect, device number 19 [ 225.212928][ T9267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.241118][ T9267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.047558][ T9274] netlink: 20 bytes leftover after parsing attributes in process `syz.6.860'. [ 226.081585][ T9277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.861'. [ 226.100656][ T9279] netlink: 20 bytes leftover after parsing attributes in process `syz.6.860'. [ 226.385053][ T9077] syz.0.830 (9077) used greatest stack depth: 15528 bytes left [ 226.478782][ T794] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 226.618973][ T794] usb 7-1: device descriptor read/64, error -71 [ 226.714944][ T9297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.723649][ T9297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.868694][ T794] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 226.998685][ T794] usb 7-1: device descriptor read/64, error -71 [ 227.109354][ T794] usb usb7-port1: attempt power cycle [ 227.366394][ T9321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.377127][ T9321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.448677][ T794] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 227.469381][ T794] usb 7-1: device descriptor read/8, error -71 [ 227.708727][ T794] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 227.729445][ T794] usb 7-1: device descriptor read/8, error -71 [ 227.839771][ T794] usb usb7-port1: unable to enumerate USB device [ 227.923249][ T9326] SQUASHFS error: Failed to read block 0x0: -5 [ 227.932444][ T9326] unable to read squashfs_super_block [ 228.202601][ T9336] evm: overlay not supported [ 228.508139][ T9338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.517049][ T9338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.629994][ T9341] netlink: 'syz.0.881': attribute type 4 has an invalid length. [ 228.645632][ T9341] netlink: 'syz.0.881': attribute type 4 has an invalid length. [ 228.662647][ T5887] lo speed is unknown, defaulting to 1000 [ 229.291754][ T9358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.339103][ T9358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.462688][ T9358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.606135][ T9419] overlayfs: failed to clone upperpath [ 231.914874][ T1165] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.083421][ T1165] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.169681][ T1165] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.227378][ T9427] tipc: Started in network mode [ 232.232795][ T9427] tipc: Node identity c6018b3c2a94, cluster identity 4711 [ 232.243976][ T9427] tipc: Enabled bearer , priority 0 [ 232.259778][ T9426] tipc: Disabling bearer [ 232.327894][ T1165] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.383500][ T9431] netlink: 'syz.0.910': attribute type 46 has an invalid length. [ 232.529186][ T9434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.614702][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 232.622839][ T9434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.633638][ T1165] bridge_slave_1: left allmulticast mode [ 232.642443][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 232.643614][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 232.643629][ T30] audit: type=1326 audit(1762918659.958:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9433 comm="syz.3.912" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d2618f6c9 code=0x0 [ 232.650806][ T1165] bridge_slave_1: left promiscuous mode [ 232.683739][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 232.691756][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 232.699545][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.707800][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.719134][ T1165] bridge_slave_0: left allmulticast mode [ 232.724859][ T1165] bridge_slave_0: left promiscuous mode [ 232.745412][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.056056][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.067660][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.080123][ T1165] bond0 (unregistering): Released all slaves [ 233.117736][ T9438] lo speed is unknown, defaulting to 1000 [ 233.685522][ T9464] Invalid ELF header type: 3 != 1 [ 233.918232][ T1165] hsr_slave_0: left promiscuous mode [ 233.924240][ T1165] hsr_slave_1: left promiscuous mode [ 233.930607][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.938110][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.946404][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.954277][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.971179][ T1165] veth1_macvtap: left promiscuous mode [ 233.976721][ T1165] veth0_macvtap: left promiscuous mode [ 233.982716][ T1165] veth1_vlan: left promiscuous mode [ 233.988048][ T1165] veth0_vlan: left promiscuous mode [ 234.293685][ T9472] netlink: 'syz.0.918': attribute type 10 has an invalid length. [ 234.345544][ T9473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.918'. [ 234.374493][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 234.408711][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 234.743560][ T9472] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.751403][ T9472] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.783533][ T9472] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.790748][ T9472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.798205][ T9472] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.805407][ T9472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.820949][ T9472] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 234.822863][ T5827] Bluetooth: hci2: command tx timeout [ 234.830362][ T9473] bridge_slave_1: left allmulticast mode [ 234.842013][ T9473] bridge_slave_1: left promiscuous mode [ 234.847780][ T9473] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.857216][ T9473] bridge_slave_0: left allmulticast mode [ 234.863017][ T9473] bridge_slave_0: left promiscuous mode [ 234.869130][ T9473] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.890054][ T9473] bond0: (slave bridge0): Releasing backup interface [ 234.994610][ T9438] chnl_net:caif_netlink_parms(): no params data found [ 235.170764][ T9438] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.178112][ T9438] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.186515][ T9438] bridge_slave_0: entered allmulticast mode [ 235.209049][ T9438] bridge_slave_0: entered promiscuous mode [ 235.225503][ T9438] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.236271][ T9438] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.246770][ T9438] bridge_slave_1: entered allmulticast mode [ 235.255214][ T9438] bridge_slave_1: entered promiscuous mode [ 235.306764][ T9438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.320955][ T9438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.381935][ T9438] team0: Port device team_slave_0 added [ 235.391862][ T9438] team0: Port device team_slave_1 added [ 235.437952][ T9438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.446818][ T9438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.477783][ T9438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.497166][ T9438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.520565][ T9438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.617138][ T9438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.667909][ T9493] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 235.684635][ T9496] 9pnet_fd: p9_fd_create_tcp (9496): problem connecting socket to 127.0.0.1 [ 235.780365][ T9438] hsr_slave_0: entered promiscuous mode [ 235.807484][ T9438] hsr_slave_1: entered promiscuous mode [ 235.815308][ T9438] debugfs: 'hsr0' already exists in 'hsr' [ 235.828739][ T9438] Cannot create hsr debugfs directory [ 235.887777][ T9508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.902939][ T9508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.162327][ T9438] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 236.175569][ T9438] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 236.190626][ T9438] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 236.210013][ T9438] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 236.324646][ T9438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.350723][ T9438] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.365854][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.373103][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.388350][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.395582][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.645950][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.928'. [ 236.891681][ T5827] Bluetooth: hci2: command tx timeout [ 236.905470][ T9438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.044377][ T9564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.062417][ T9564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.093370][ T9564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.104227][ T9564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.116396][ T9564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.131417][ T9564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.342063][ T9438] veth0_vlan: entered promiscuous mode [ 237.363747][ T9438] veth1_vlan: entered promiscuous mode [ 237.413419][ T9438] veth0_macvtap: entered promiscuous mode [ 237.426440][ T9438] veth1_macvtap: entered promiscuous mode [ 237.454047][ T9438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.472763][ T9438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.493758][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.511106][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.522198][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.532168][ T1165] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.628215][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.653355][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.696158][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.709010][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.796241][ T9581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.807985][ T9581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.875154][ T9584] veth0_vlan: left promiscuous mode [ 238.072908][ T9597] overlayfs: failed to resolve './file1': -2 [ 238.834384][ T9612] netlink: 'syz.0.942': attribute type 27 has an invalid length. [ 238.919309][ T9612] sit0: left promiscuous mode [ 238.969077][ T5827] Bluetooth: hci2: command tx timeout [ 239.127013][ T9622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.169606][ T9622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.499893][ T5908] lo speed is unknown, defaulting to 1000 [ 239.505681][ T5908] syΆ: Port: 1 Link DOWN [ 239.587184][ T12] netdevsim netdevsim0 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.597193][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.615497][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.632859][ T5908] lo speed is unknown, defaulting to 1000 [ 239.668797][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.099290][ T9645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.108051][ T9645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.724410][ T9654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.735217][ T9654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.753881][ T9654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.764532][ T9654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.777761][ T9654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.787021][ T9654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.049853][ T5827] Bluetooth: hci2: command tx timeout [ 241.219073][ T9597] Set syz1 is full, maxelem 65536 reached [ 241.427261][ T9664] Unknown options in mask b7f2 [ 241.511777][ T9669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.521753][ T9669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.524047][ T5908] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 241.690086][ T5908] usb 9-1: Using ep0 maxpacket: 16 [ 241.700832][ T5908] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.712535][ T5908] usb 9-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 241.721922][ T5908] usb 9-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 241.730011][ T5908] usb 9-1: Product: syz [ 241.757227][ T5908] usb 9-1: config 0 descriptor?? [ 241.766472][ T5908] gspca_main: spca501-2.14.0 probing 0000:0000 [ 241.933999][ T9673] tmpfs: Unknown parameter 'quoti' [ 241.969041][ T5908] gspca_spca501: reg write: error -71 [ 241.978429][ T5908] spca501 9-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 241.997545][ T5908] spca501 9-1:0.0: probe with driver spca501 failed with error -22 [ 242.032842][ T5908] usb 9-1: USB disconnect, device number 2 [ 242.896964][ T9680] afs: Unknown parameter 'audit' [ 242.902505][ T9680] netlink: 1 bytes leftover after parsing attributes in process `syz.7.958'. [ 242.917341][ T9680] xt_policy: neither incoming nor outgoing policy selected [ 242.938879][ T5908] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 243.108976][ T5908] usb 9-1: Using ep0 maxpacket: 32 [ 243.126180][ T5908] usb 9-1: unable to get BOS descriptor or descriptor too short [ 243.249330][ T5908] usb 9-1: config 0 has an invalid interface number: 251 but max is 1 [ 243.267846][ T5908] usb 9-1: config 0 has an invalid interface number: 2 but max is 1 [ 243.322727][ T9690] serio: Serial port ptm0 [ 243.354742][ T5908] usb 9-1: config 0 has no interface number 0 [ 243.381390][ T5908] usb 9-1: config 0 has no interface number 1 [ 243.387547][ T5908] usb 9-1: config 0 interface 251 has no altsetting 0 [ 243.401208][ T5908] usb 9-1: config 0 interface 2 has no altsetting 0 [ 243.444722][ T5908] usb 9-1: New USB device found, idVendor=413c, idProduct=81a4, bcdDevice=ae.9f [ 243.464277][ T5908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.487703][ T5908] usb 9-1: Product: syz [ 243.501515][ T5908] usb 9-1: Manufacturer: syz [ 243.516379][ T5908] usb 9-1: SerialNumber: syz [ 243.562453][ T5908] usb 9-1: config 0 descriptor?? [ 243.806880][ T5908] usb 9-1: selecting invalid altsetting 0 [ 243.813325][ T5908] usb 9-1: Could not set interface, error -22 [ 243.830403][ T5908] usb 9-1: USB disconnect, device number 3 [ 244.456101][ T9710] overlayfs: failed to resolve './file2': -2 [ 244.591723][ T9716] binder: 9713:9716 ioctl c0306201 200000000080 returned -14 [ 244.608766][ T9716] binder: 9713:9716 ioctl c0306201 200000000080 returned -14 [ 244.741823][ T9723] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 244.974427][ T9750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.989142][ T9750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.998039][ T9750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.016006][ T9750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.026755][ T9750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.036821][ T9750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.047556][ T9750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.059393][ T9750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.068230][ T9750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.088984][ T9750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.097938][ T9750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.107907][ T9750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.184937][ T9758] cgroup: Invalid name [ 245.328695][ T9623] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 245.398354][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'. [ 245.480574][ T9623] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 245.489043][ T9623] usb 9-1: config 0 has no interface number 0 [ 245.495191][ T9623] usb 9-1: config 0 interface 41 has no altsetting 0 [ 245.504511][ T9623] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 245.513930][ T9623] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.521972][ T9623] usb 9-1: Product: syz [ 245.526368][ T9623] usb 9-1: Manufacturer: syz [ 245.534756][ T9623] usb 9-1: SerialNumber: syz [ 245.542590][ T9623] usb 9-1: config 0 descriptor?? [ 246.133674][ T9771] netlink: 'syz.3.982': attribute type 21 has an invalid length. [ 246.172265][ T9623] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -22 [ 246.208933][ T9771] netlink: 'syz.3.982': attribute type 1 has an invalid length. [ 246.371362][ T9756] netlink: 2384 bytes leftover after parsing attributes in process `syz.8.976'. [ 246.481933][ T9787] netlink: 16 bytes leftover after parsing attributes in process `syz.7.985'. [ 246.702558][ T9800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.989'. [ 246.921263][ T9807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.931163][ T9807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.275100][ T9810] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 247.284269][ T9810] overlayfs: missing 'lowerdir' [ 247.336223][ T5827] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 247.347774][ T5827] CPU: 0 UID: 0 PID: 5827 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 247.347800][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 247.347813][ T5827] Workqueue: hci1 hci_rx_work [ 247.347856][ T5827] Call Trace: [ 247.347864][ T5827] [ 247.347872][ T5827] dump_stack_lvl+0x189/0x250 [ 247.347909][ T5827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.347934][ T5827] ? __pfx__printk+0x10/0x10 [ 247.347970][ T5827] ? kernfs_path_from_node+0x250/0x290 [ 247.347996][ T5827] ? kernfs_path_from_node+0x2f/0x290 [ 247.348025][ T5827] sysfs_create_dir_ns+0x259/0x280 [ 247.348056][ T5827] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 247.348086][ T5827] ? do_raw_spin_unlock+0x122/0x240 [ 247.348115][ T5827] kobject_add_internal+0x59f/0xb70 [ 247.348142][ T5827] kobject_add+0x155/0x220 [ 247.348164][ T5827] ? __pfx_kobject_add+0x10/0x10 [ 247.348186][ T5827] ? _raw_spin_unlock+0x28/0x50 [ 247.348216][ T5827] ? get_device_parent+0x366/0x3a0 [ 247.348246][ T5827] device_add+0x408/0xb80 [ 247.348278][ T5827] hci_conn_add_sysfs+0xd5/0x210 [ 247.348301][ T5827] le_conn_complete_evt+0xf26/0x14d0 [ 247.348342][ T5827] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 247.348370][ T5827] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 247.348388][ T5827] ? __asan_memcpy+0x40/0x70 [ 247.348417][ T5827] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 247.348436][ T5827] ? skb_pull_data+0xfb/0x200 [ 247.348462][ T5827] hci_le_conn_complete_evt+0x187/0x480 [ 247.348495][ T5827] hci_event_packet+0x78f/0x1260 [ 247.348521][ T5827] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 247.348550][ T5827] ? __pfx_hci_event_packet+0x10/0x10 [ 247.348577][ T5827] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.348599][ T5827] ? hci_send_to_monitor+0xe2/0x590 [ 247.348631][ T5827] hci_rx_work+0x45d/0xfc0 [ 247.348666][ T5827] ? process_one_work+0x868/0x15e0 [ 247.348686][ T5827] process_one_work+0x93a/0x15e0 [ 247.348705][ T5827] ? __lock_acquire+0xab9/0xd20 [ 247.348747][ T5827] ? __pfx_process_one_work+0x10/0x10 [ 247.348776][ T5827] ? assign_work+0x3a1/0x410 [ 247.348799][ T5827] worker_thread+0x9b0/0xee0 [ 247.348846][ T5827] kthread+0x711/0x8a0 [ 247.348875][ T5827] ? __pfx_worker_thread+0x10/0x10 [ 247.348896][ T5827] ? __pfx_kthread+0x10/0x10 [ 247.348924][ T5827] ? _raw_spin_unlock_irq+0x23/0x50 [ 247.348957][ T5827] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.348974][ T5827] ? __pfx_kthread+0x10/0x10 [ 247.349001][ T5827] ret_from_fork+0x599/0xb30 [ 247.349024][ T5827] ? __pfx_ret_from_fork+0x10/0x10 [ 247.349055][ T5827] ? __switch_to_asm+0x39/0x70 [ 247.349088][ T5827] ? __switch_to_asm+0x33/0x70 [ 247.349113][ T5827] ? __pfx_kthread+0x10/0x10 [ 247.349141][ T5827] ret_from_fork_asm+0x1a/0x30 [ 247.349187][ T5827] [ 247.663284][ T5827] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 247.677978][ T5827] Bluetooth: hci1: failed to register connection device [ 247.692405][ T9817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.693357][ T9815] lo speed is unknown, defaulting to 1000 [ 247.702793][ T9817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.485892][ T9843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.495659][ T9843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.049532][ T5887] usb 9-1: USB disconnect, device number 4 [ 249.192894][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1002'. [ 249.337464][ T9884] vivid-000: ================= START STATUS ================= [ 249.349248][ T9884] vivid-000: Enable Output Cropping: true [ 249.355220][ T9884] vivid-000: Enable Output Composing: true [ 249.364545][ T9884] vivid-000: Enable Output Scaler: true [ 249.375512][ T9884] vivid-000: Tx RGB Quantization Range: Automatic [ 249.382250][ T9884] vivid-000: Transmit Mode: HDMI [ 249.387347][ T9884] vivid-000: Hotplug Present: 0x00000001 [ 249.393410][ T9884] vivid-000: RxSense Present: 0x00000001 [ 249.401668][ T9884] vivid-000: EDID Present: 0x00000001 [ 249.407091][ T9884] vivid-000: ================== END STATUS ================== [ 249.424641][ T9885] pim6reg: entered allmulticast mode [ 249.442355][ T9884] pim6reg: left allmulticast mode [ 249.488916][ T9888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.503608][ T9888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.531142][ T9888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.542850][ T9888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.580128][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x6 [ 249.818661][ T9623] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 249.976667][ T9623] usb 9-1: config 0 has an invalid interface number: 74 but max is 0 [ 249.985005][ T9623] usb 9-1: config 0 has no interface number 0 [ 250.010223][ T9623] usb 9-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice= 9.99 [ 250.019442][ T9623] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.027537][ T9623] usb 9-1: Product: syz [ 250.032257][ T9623] usb 9-1: Manufacturer: syz [ 250.036873][ T9623] usb 9-1: SerialNumber: syz [ 250.052786][ T9623] usb 9-1: config 0 descriptor?? [ 250.321222][ T9912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.332984][ T9913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.334292][ T9912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.355444][ T9913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.365231][ T9912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.374147][ T9912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.384422][ T9912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.393722][ T9912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.401983][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1007'. [ 250.424665][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1007'. [ 251.221909][ T9923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.232826][ T9923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.366961][ T9928] : Can't lookup blockdev [ 252.079687][ T9930] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 252.086216][ T9930] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 252.094275][ T9930] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 252.100860][ T9930] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 252.107323][ T9930] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 252.114893][ T9930] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 252.121531][ T9930] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 252.131633][ T9930] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 252.138259][ T9930] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 252.145129][ T9930] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 252.151861][ T9930] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 252.158305][ T9930] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 252.165178][ T9930] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 252.171852][ T9930] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 252.179631][ T9930] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 252.334519][ T9885] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 252.374351][ T5887] usb 9-1: USB disconnect, device number 5 [ 252.385974][ T5887] f81534a_ctrl 9-1:0.74: failed to set register 0x116: -19 [ 252.407269][ T5887] f81534a_ctrl 9-1:0.74: failed to enable ports: -19 [ 252.470797][ T9937] netlink: 'syz.7.1014': attribute type 27 has an invalid length. [ 252.474643][ T9938] netlink: 3 bytes leftover after parsing attributes in process `syz.8.1013'. [ 252.478759][ T9937] netlink: 'syz.7.1014': attribute type 1 has an invalid length. [ 252.478874][ T9937] bridge0: port 1(bridge_slave_0) entered learning state [ 252.480561][ T9937] netlink: 'syz.7.1014': attribute type 27 has an invalid length. [ 252.511646][ T9937] netlink: 'syz.7.1014': attribute type 1 has an invalid length. [ 252.530663][ T9937] bridge0: port 1(bridge_slave_0) entered learning state [ 252.968267][ T9955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.977079][ T9955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.530751][ T9957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.545684][ T9957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.567592][ T9959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.577939][ T9959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.617488][ T9964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.627232][ T9964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.878783][ T9625] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 254.030095][ T9625] usb 9-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 254.041819][ T9625] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 109, changing to 4 [ 254.053088][ T9625] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 43500, setting to 1023 [ 254.066385][ T9625] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice=e7.00 [ 254.076146][ T9625] usb 9-1: New USB device strings: Mfr=99, Product=91, SerialNumber=200 [ 254.084611][ T9625] usb 9-1: Product: syz [ 254.088921][ T9625] usb 9-1: Manufacturer: syz [ 254.093509][ T9625] usb 9-1: SerialNumber: syz [ 254.105214][ T9625] aiptek 9-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 254.170935][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 254.266644][ T9969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.276467][ T9969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.287663][ T9969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.298086][ T9969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.841434][ T9971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.850188][ T9971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.475182][ T9979] batadv_slave_1: entered promiscuous mode [ 255.777753][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.785424][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.242515][ T9977] batadv_slave_1: left promiscuous mode [ 256.432938][ T30] audit: type=1326 audit(1762918683.748:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.3.1037" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d2618f6c9 code=0x0 [ 256.592638][ T794] usb 9-1: USB disconnect, device number 6 [ 256.969000][ T794] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 257.141163][ T794] usb 9-1: not running at top speed; connect to a high speed hub [ 257.150361][ T794] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 257.159527][ T794] usb 9-1: config 1 has no interface number 1 [ 257.165644][ T794] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 257.180716][ T794] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 257.190062][ T794] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.198063][ T794] usb 9-1: Product: syz [ 257.202408][ T794] usb 9-1: Manufacturer: syz [ 257.207032][ T794] usb 9-1: SerialNumber: syz [ 257.388732][T10014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.398524][T10014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.428022][ T794] usb 9-1: failed to enable PITCH for EP 0x82 [ 257.453109][ T794] usb 9-1: USB disconnect, device number 7 [ 257.483698][ T6066] udevd[6066]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.039905][T10021] loop0: detected capacity change from 0 to 8 [ 258.056768][ T5958] Dev loop0: unable to read RDB block 8 [ 258.063120][ T5958] loop0: unable to read partition table [ 258.069181][ T5958] loop0: partition table beyond EOD, truncated [ 258.083065][T10021] Dev loop0: unable to read RDB block 8 [ 258.089849][T10021] loop0: unable to read partition table [ 258.095780][T10021] loop0: partition table beyond EOD, truncated [ 258.105700][T10021] loop_reread_partitions: partition scan of loop0 (被x ) failed (rc=-5) [ 258.219163][ T9626] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 258.231684][T10025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.240646][T10025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.371086][ T9626] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 258.381958][ T9626] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 258.393556][ T9626] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 64 [ 258.404491][ T9626] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 258.414500][ T9626] usb 9-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 258.429585][ T9626] usb 9-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 258.438692][ T9626] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.446666][ T9626] usb 9-1: Product: syz [ 258.450921][ T9626] usb 9-1: Manufacturer: syz [ 258.455517][ T9626] usb 9-1: SerialNumber: syz [ 258.462278][ T9626] usb 9-1: config 0 descriptor?? [ 258.467951][T10019] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 258.479465][ T9626] iuu_phoenix 9-1:0.0: iuu_phoenix converter detected [ 258.489219][ T9626] usb 9-1: iuu_phoenix converter now attached to ttyUSB0 [ 258.739692][T10026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.748453][T10026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.799409][ T9626] usb 9-1: USB disconnect, device number 8 [ 258.817790][ T9626] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 258.831648][ T9626] iuu_phoenix 9-1:0.0: device disconnected [ 258.955239][T10033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.964228][T10033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.075176][ T5827] Bluetooth: hci3: unexpected event for opcode 0x0013 [ 259.443862][T10049] netlink: 'syz.0.1052': attribute type 8 has an invalid length. [ 259.838679][ T794] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 259.928311][T10058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.938747][T10058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.939255][T10059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.956213][T10059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.998651][ T794] usb 9-1: Using ep0 maxpacket: 16 [ 260.005313][ T794] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.017318][ T794] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.027134][ T794] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 260.040726][ T794] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 260.050722][ T794] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.061910][ T794] usb 9-1: config 0 descriptor?? [ 260.473871][ T794] microsoft 0003:045E:07DA.0014: item fetching failed at offset 31/34 [ 260.483104][ T794] microsoft 0003:045E:07DA.0014: parse failed [ 260.489478][ T794] microsoft 0003:045E:07DA.0014: probe with driver microsoft failed with error -22 [ 260.570027][T10063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.579081][T10063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.675995][ T5908] usb 9-1: USB disconnect, device number 9 [ 261.120014][T10074] i2c i2c-0: Invalid block write size 254 [ 261.127243][T10074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.137193][T10074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.469743][ T9626] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 261.562274][T10080] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1065'. [ 261.620990][ T9626] usb 9-1: config 0 has no interfaces? [ 261.626586][ T9626] usb 9-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 261.636083][ T9626] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.647365][ T9626] usb 9-1: config 0 descriptor?? [ 261.931286][ T9626] usb 9-1: USB disconnect, device number 10 [ 262.074193][T10090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.084439][T10090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.246598][T10095] IPv6: NLM_F_CREATE should be specified when creating new route [ 262.254660][T10095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 262.262356][T10095] IPv6: NLM_F_CREATE should be set when creating new route [ 262.699761][ T9623] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 262.781290][T10111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.790806][T10111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.850760][ T9623] usb 9-1: config 0 has an invalid interface number: 255 but max is 0 [ 262.859036][ T9623] usb 9-1: config 0 has no interface number 0 [ 262.866751][ T9623] usb 9-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=da.32 [ 262.877442][ T9623] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.885515][ T9623] usb 9-1: Product: syz [ 262.889851][ T9623] usb 9-1: Manufacturer: syz [ 262.894468][ T9623] usb 9-1: SerialNumber: syz [ 262.901305][ T9623] usb 9-1: config 0 descriptor?? [ 262.910442][ T9623] usb_ehset_test 9-1:0.255: probe with driver usb_ehset_test failed with error -32 [ 263.002115][T10113] IPVS: Unknown mcast interface: netdevsim0 [ 263.122994][T10107] bfs: Unknown parameter 'norecovery1LT4L*BҭjA#ʦ*^[dA"qnY@hKNAY@*9Sӝ9&/00000000000000000000' [ 268.532639][T10253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.541823][T10253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.559578][ T5887] microsoft 0003:045E:07DA.0015: ignoring exceeding usage max [ 268.568322][ T5887] microsoft 0003:045E:07DA.0015: item fetching failed at offset 31/34 [ 268.579824][ T5887] microsoft 0003:045E:07DA.0015: parse failed [ 268.586041][ T5887] microsoft 0003:045E:07DA.0015: probe with driver microsoft failed with error -22 [ 268.670605][T10255] tmpfs: Bad value for 'nr_blocks' [ 268.706632][T10257] overlayfs: failed to resolve './file1/file0': -13 [ 268.758213][T10244] Failed to get privilege flags for destination (handle=0x2:0x3) [ 268.767783][ T5887] usb 9-1: USB disconnect, device number 14 [ 269.642090][T10273] : renamed from bridge_slave_1 (while UP) [ 269.687916][T10277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.699303][T10277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.725802][T10279] /dev/nullb0: Can't lookup blockdev [ 270.247294][T10282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.270649][T10282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.135687][T10306] lo speed is unknown, defaulting to 1000 [ 271.716505][T10320] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1144'. [ 271.834273][T10328] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1147'. [ 271.844186][T10328] 0: renamed from hsr_slave_1 (while UP) [ 271.851994][T10328] 0: entered allmulticast mode [ 271.857216][T10328] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 271.966854][T10335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.975941][T10335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.462452][T10345] overlay: Unknown parameter 'func' [ 272.570971][T10352] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1157'. [ 272.720535][T10361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.729784][T10361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.769474][ T9625] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 272.898737][ T9625] usb 9-1: device descriptor read/64, error -71 [ 273.141855][ T9625] usb 9-1: new low-speed USB device number 16 using dummy_hcd [ 273.278732][ T9625] usb 9-1: device descriptor read/64, error -71 [ 273.341415][T10365] ieee802154 phy0 wpan0: encryption failed: -22 [ 273.391069][ T9625] usb usb9-port1: attempt power cycle [ 273.420120][T10373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.429577][T10373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.599072][T10375] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1166'. [ 273.729551][ T9625] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 273.761781][ T9625] usb 9-1: device descriptor read/8, error -71 [ 274.008803][ T9625] usb 9-1: new low-speed USB device number 18 using dummy_hcd [ 274.029272][ T9625] usb 9-1: device descriptor read/8, error -71 [ 274.050835][T10388] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 274.060628][T10388] kvm: requested 137447 ns i8254 timer period limited to 200000 ns [ 274.069192][T10388] kvm: requested 105600 ns i8254 timer period limited to 200000 ns [ 274.078265][T10388] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 274.086623][T10388] kvm: requested 122361 ns i8254 timer period limited to 200000 ns [ 274.095903][T10388] kvm: requested 119009 ns i8254 timer period limited to 200000 ns [ 274.104192][T10388] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 274.112777][T10388] kvm: requested 61180 ns i8254 timer period limited to 200000 ns [ 274.121438][T10388] kvm: requested 117333 ns i8254 timer period limited to 200000 ns [ 274.130686][T10388] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 274.139610][ T9625] usb usb9-port1: unable to enumerate USB device [ 274.397370][T10403] 9p: Bad value for 'rfdno' [ 274.541320][T10412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.552353][T10412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.554998][T10415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.573159][T10415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.585472][T10412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.601149][T10412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.613272][T10412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.623960][T10412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.636133][T10412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.648322][T10412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.661508][T10412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.670392][T10412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.251491][T10425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.260830][T10425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.625889][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1182'. [ 275.943532][ T794] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 276.091070][T10444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.098640][ T794] usb 9-1: Using ep0 maxpacket: 32 [ 276.099911][T10444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.111177][ T794] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 276.131940][ T794] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 276.144164][ T794] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 276.156237][ T794] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 276.180962][ T794] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 276.191381][ T794] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.199467][ T794] usb 9-1: Product: syz [ 276.203632][ T794] usb 9-1: Manufacturer: syz [ 276.208244][ T794] usb 9-1: SerialNumber: syz [ 276.233937][ C1] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 276.255110][ T794] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input34 [ 276.468681][ T794] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 276.479056][ T794] (id 0x00) [ 276.538716][ T794] rc_core: IR keymap rc-imon-pad not found [ 276.544604][ T794] Registered IR keymap rc-empty [ 276.549742][ T794] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 276.560037][ T794] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 276.573410][ T794] imon:send_packet: packet tx failed (-71) [ 276.600557][ T794] imon 9-1:155.0: remote input dev register failed [ 276.609903][ T794] imon 9-1:155.0: imon_init_intf0: rc device setup failed [ 276.646034][ T794] imon 9-1:155.0: unable to initialize intf0, err 0 [ 276.653563][ T794] imon:imon_probe: failed to initialize context! [ 276.661395][ T794] imon 9-1:155.0: unable to register, err -19 [ 276.678300][ T794] usb 9-1: USB disconnect, device number 19 [ 276.804723][T10471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.814659][T10471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.028698][ T794] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 277.183070][ T794] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 277.194616][ T794] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.205127][ T794] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 277.217030][ T794] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.230207][ T794] usb 9-1: config 0 descriptor?? [ 277.373440][T10485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1198'. [ 277.645241][T10458] netlink: 348 bytes leftover after parsing attributes in process `syz.8.1190'. [ 277.856897][ T794] usbhid 9-1:0.0: can't add hid device: -71 [ 277.864356][ T794] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 277.877854][T10493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.890962][ T794] usb 9-1: USB disconnect, device number 20 [ 277.892288][T10493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.968044][T10498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.976824][T10498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.177374][T10504] overlayfs: missing 'lowerdir' [ 278.185276][T10504] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 278.197048][T10505] overlayfs: missing 'lowerdir' [ 278.538402][T10539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.548076][T10539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.557644][T10539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.567548][T10539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.573781][T10535] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1213'. [ 278.578839][T10539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.593655][T10539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.360949][T10547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.372270][T10547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.728761][ T9625] usb 9-1: new low-speed USB device number 21 using dummy_hcd [ 279.881819][ T9625] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.893426][ T9625] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8D is Bulk; changing to Interrupt [ 279.904623][ T9625] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 279.914951][ T9625] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 279.928467][ T9625] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 279.937714][ T9625] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.948499][ T9625] usb 9-1: config 0 descriptor?? [ 280.065937][T10567] netlink: 'syz.3.1226': attribute type 4 has an invalid length. [ 280.178458][ T9623] usb 9-1: USB disconnect, device number 21 [ 280.207846][ T30] audit: type=1107 audit(1762918707.518:156): pid=10572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 280.284263][T10582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.399752][T10582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.446636][ T9625] IPVS: starting estimator thread 0... [ 280.522843][T10599] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1236'. [ 280.538721][T10592] IPVS: using max 30 ests per chain, 72000 per kthread [ 280.957619][T10603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.967118][T10603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.048787][ T9625] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 281.232708][ T9625] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 281.244938][ T9625] usb 9-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 281.256919][ T9625] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 281.268200][ T9625] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 281.284429][ T9625] usb 9-1: config 0 interface 0 has no altsetting 0 [ 281.294312][ T9625] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 281.304416][ T9625] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.313041][ T9625] usb 9-1: Product: syz [ 281.317334][ T9625] usb 9-1: Manufacturer: syz [ 281.321976][ T9625] usb 9-1: SerialNumber: syz [ 281.328526][ T9625] usb 9-1: config 0 descriptor?? [ 281.520694][T10618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.530574][T10618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.542018][T10618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.551194][T10618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.554750][ T9625] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input36 [ 281.571132][ T5179] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 281.582789][ T5179] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 281.591770][ T5179] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 281.601159][ T5179] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 281.632281][ T5972] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 281.641192][ T5179] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 281.657434][ T5179] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 281.666573][ T5179] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 281.754707][ T9623] usb 9-1: USB disconnect, device number 22 [ 281.826275][ T30] audit: type=1800 audit(1762918709.138:157): pid=10622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1241" name="bus" dev="tmpfs" ino=2900 res=0 errno=0 [ 282.116695][T10624] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input37 [ 282.583306][T10641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.592466][T10641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.600767][ T9623] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 282.761694][ T9623] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 282.773016][ T9623] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.784120][ T9623] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.793899][ T9623] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 282.807889][ T9623] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 282.817003][ T9623] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 282.825112][ T9623] usb 9-1: Manufacturer: syz [ 282.831835][ T9623] usb 9-1: config 0 descriptor?? [ 282.939868][T10644] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1249'. [ 282.954416][T10644] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1249'. [ 282.967302][T10644] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1249'. [ 282.979751][T10644] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1249'. [ 282.991590][T10644] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1249'. [ 283.001890][T10644] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1249'. [ 283.011951][T10644] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1249'. [ 283.022484][T10644] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1249'. [ 283.032361][T10644] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1249'. [ 283.042278][T10644] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1249'. [ 283.178774][T10654] netlink: 'syz.0.1252': attribute type 83 has an invalid length. [ 283.261125][ T9623] appleir 0003:05AC:8243.0016: unknown main item tag 0x0 [ 283.276426][ T9623] appleir 0003:05AC:8243.0016: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 283.611787][ T9625] usb 9-1: USB disconnect, device number 23 [ 284.223578][T10684] fuse: Unknown parameter '000000000000000000000030x0000000000000004' [ 284.527860][T10706] pimreg: entered allmulticast mode [ 284.559220][ T9625] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 284.718616][ T9625] usb 9-1: Using ep0 maxpacket: 8 [ 284.725613][ T9625] usb 9-1: unable to get BOS descriptor or descriptor too short [ 284.735225][ T9625] usb 9-1: config 7 has an invalid interface number: 169 but max is 0 [ 284.743444][ T9625] usb 9-1: config 7 has no interface number 0 [ 284.751644][ T9625] usb 9-1: New USB device found, idVendor=04c5, idProduct=1330, bcdDevice=79.99 [ 284.760736][ T9625] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.768946][ T9625] usb 9-1: Product: syz [ 284.773120][ T9625] usb 9-1: Manufacturer: syz [ 284.777690][ T9625] usb 9-1: SerialNumber: syz [ 285.000801][ T9625] usb 9-1: USB disconnect, device number 24 [ 285.127223][T10711] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 286.112462][T10744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.121661][ T5887] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 286.129837][T10744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.156470][T10744] : entered promiscuous mode [ 286.278917][ T5887] usb 9-1: device descriptor read/64, error -71 [ 286.518719][ T5887] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 286.648885][ T5887] usb 9-1: device descriptor read/64, error -71 [ 286.762044][ T5887] usb usb9-port1: attempt power cycle [ 287.129673][ T5887] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 287.159102][ T5887] usb 9-1: device descriptor read/8, error -71 [ 287.282063][T10782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.291062][T10782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.303338][T10782] random: crng reseeded on system resumption [ 287.398657][ T5887] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 287.432226][ T5887] usb 9-1: device descriptor read/8, error -71 [ 287.541376][ T5887] usb usb9-port1: unable to enumerate USB device [ 287.972766][T10796] __nla_validate_parse: 52 callbacks suppressed [ 287.972782][T10796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1288'. [ 288.847833][T10812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.856662][T10812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.298650][ T5887] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 289.425238][T10824] netlink: 'syz.0.1300': attribute type 2 has an invalid length. [ 289.451069][ T5887] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.465773][ T5887] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 289.480982][ T5887] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 289.498358][ T5887] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 289.508050][ T5887] usb 9-1: SerialNumber: syz [ 289.514618][T10829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.528174][T10829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.544680][T10829] deleting an unspecified loop device is not supported. [ 289.559017][T10829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.570756][T10829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.583165][T10829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.593560][T10829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.733825][ T5887] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 289.747981][ T5887] usb 9-1: USB disconnect, device number 29 [ 290.350307][T10849] batadv_slave_0: entered promiscuous mode [ 290.359820][T10848] batadv_slave_0: left promiscuous mode [ 290.518048][T10855] netlink: 'syz.0.1312': attribute type 21 has an invalid length. [ 290.530981][T10855] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1312'. [ 290.880542][T10860] netlink: 212352 bytes leftover after parsing attributes in process `syz.3.1314'. [ 290.896040][T10860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.905849][T10860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.915939][T10860] xt_NFQUEUE: number of total queues is 0 [ 290.922044][ T5887] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 290.930260][T10860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.939617][T10860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.081000][ T5887] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.092316][ T5887] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.104632][ T5887] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 291.114044][ T5887] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 291.122857][ T5887] usb 9-1: Manufacturer: syz [ 291.130723][ T5887] usb 9-1: config 0 descriptor?? [ 291.584070][T10866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.593411][T10866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.610418][ T5887] usbhid 9-1:0.0: can't add hid device: -32 [ 291.613513][T10858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.616516][ T5887] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 291.627522][T10858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.669492][T10858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.680333][T10858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.761682][ T9623] usb 9-1: USB disconnect, device number 30 [ 292.150706][T10872] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 292.189724][T10874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.198490][T10874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.569062][ T5908] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 292.729869][ T5908] usb 9-1: Using ep0 maxpacket: 16 [ 292.737264][ T5908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.749016][ T5908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.772711][ T5908] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 292.796855][ T5908] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 292.816048][ T5908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.827537][ T5908] usb 9-1: config 0 descriptor?? [ 293.244637][T10879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.262122][T10879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.279108][T10879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.293769][T10894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.303009][T10879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.324747][ T5908] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 293.333264][T10894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.345253][ T5908] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 293.353071][ T5908] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 293.361456][ T5908] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 293.369913][ T5908] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 293.377243][ T5908] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 293.384922][ T5908] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 293.393939][ T5908] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 293.401583][ T5908] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 293.409226][ T5908] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 293.459151][ T5908] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0017/input/input39 [ 293.694017][ T5908] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 293.714400][ T5908] usb 9-1: USB disconnect, device number 31 [ 293.936292][T10911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.947375][T10911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.957860][T10912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.966845][T10912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.418728][ T9626] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 294.586077][ T9626] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.596576][ T9626] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 294.606997][ T9626] usb 9-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 294.617041][ T9626] usb 9-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 294.626787][ T9626] usb 9-1: Product: syz [ 294.635986][ T9626] usb 9-1: config 0 descriptor?? [ 294.707589][T10935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.717655][T10935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.727137][T10935] openvswitch: netlink: Actions may not be safe on all matching packets [ 294.738814][T10935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.747523][T10935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.224613][ T9626] usb 9-1: USB disconnect, device number 32 [ 295.399826][T10945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.417817][T10945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.432708][T10945] netlink: 4416 bytes leftover after parsing attributes in process `syz.3.1344'. [ 295.728714][ T5887] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 295.882088][ T5887] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.893147][ T5887] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 295.905848][ T5887] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.915055][ T5887] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.923136][ T5887] usb 9-1: Product: syz [ 295.927324][ T5887] usb 9-1: Manufacturer: syz [ 295.932023][ T5887] usb 9-1: SerialNumber: syz [ 295.942725][ T5887] cdc_mbim 9-1:1.0: skipping garbage [ 296.052697][T10956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.061553][T10956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.077098][T10956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.086298][T10956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.104622][T10956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.113428][T10956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.156264][T10954] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 296.274426][T10954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.305673][T10954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.446349][T10974] overlay: ./file1 is not a directory [ 298.209431][ T5887] cdc_mbim 9-1:1.0: bind() failure [ 298.220263][ T5887] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 298.227112][ T5887] cdc_ncm 9-1:1.1: bind() failure [ 298.253642][ T5887] usb 9-1: USB disconnect, device number 33 [ 298.472940][T10991] input: syz1 as /devices/virtual/input/input40 [ 298.679819][T10997] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1361'. [ 298.709098][T10997] netlink: 'syz.0.1361': attribute type 6 has an invalid length. [ 298.718816][T10997] netlink: 'syz.0.1361': attribute type 5 has an invalid length. [ 298.733660][T10997] netlink: 'syz.0.1361': attribute type 4 has an invalid length. [ 298.811900][T10997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1361'. [ 299.189255][T11017] 9p: Bad value for 'rfdno' [ 299.252986][T11019] raw_sendmsg: syz.0.1366 forgot to set AF_INET. Fix it! [ 299.313448][T11021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.412883][T11029] trusted_key: encrypted_key: key user:syz not found [ 299.446850][T11021] netlink: 'syz.0.1367': attribute type 10 has an invalid length. [ 299.678632][ T9626] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 299.831638][ T9626] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 299.841399][ T9626] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.849441][ T9626] usb 9-1: Product: syz [ 299.853599][ T9626] usb 9-1: Manufacturer: syz [ 299.858173][ T9626] usb 9-1: SerialNumber: syz [ 299.865109][ T9626] usb 9-1: config 0 descriptor?? [ 300.026065][T11037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.052563][T11037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.072074][ T9626] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 300.106540][ T9626] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 300.156975][ T9626] usb 9-1: USB disconnect, device number 34 [ 300.588706][ T9626] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 300.689800][T11057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.699472][T11057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.748610][ T9626] usb 9-1: Using ep0 maxpacket: 16 [ 300.755132][ T9626] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.766287][ T9626] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.780827][ T9626] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 300.790003][ T9626] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 300.797970][ T9626] usb 9-1: Manufacturer: syz [ 300.804702][ T9626] usb 9-1: config 0 descriptor?? [ 301.290496][T11066] ------------[ cut here ]------------ [ 301.295996][T11066] WARNING: ./include/linux/ns_common.h:288 at nsproxy_ns_active_get+0x88f/0xcb0, CPU#1: syz.3.1379/11066 [ 301.307590][T11066] Modules linked in: [ 301.311744][T11066] CPU: 1 UID: 0 PID: 11066 Comm: syz.3.1379 Not tainted syzkaller #0 PREEMPT(full) [ 301.321431][T11066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 301.331596][T11066] RIP: 0010:nsproxy_ns_active_get+0x88f/0xcb0 [ 301.337681][T11066] Code: 00 e8 75 3f 77 ff eb 0c e8 6e 3f 77 ff eb 05 e8 67 3f 77 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 52 3f 77 ff 90 <0f> 0b 90 e9 ee f7 ff ff e8 44 3f 77 ff 90 0f 0b 90 e9 12 f8 ff ff [ 301.357421][T11066] RSP: 0018:ffffc900031c7d40 EFLAGS: 00010287 [ 301.363743][T11066] RAX: ffffffff824a202e RBX: ffff888075de6208 RCX: 0000000000080000 [ 301.372036][T11066] RDX: ffffc9000c55a000 RSI: 0000000000000202 RDI: 0000000000000203 [ 301.380248][T11066] RBP: ffffc900031c7e01 R08: ffff88807e0d6cbb R09: 1ffff1100fc1ad97 [ 301.388423][T11066] R10: dffffc0000000000 R11: ffffed100fc1ad98 R12: dffffc0000000000 [ 301.396470][T11066] R13: dffffc0000000000 R14: ffff88807e0d6cb8 R15: ffff88807e0d6c00 [ 301.404480][T11066] FS: 00007f3d26fc66c0(0000) GS:ffff888125b82000(0000) knlGS:0000000000000000 [ 301.413716][T11066] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.420458][T11066] CR2: 00007f3d261729e0 CR3: 0000000064bac000 CR4: 00000000003526f0 [ 301.428442][T11066] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000002000 [ 301.436482][T11066] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 301.444498][T11066] Call Trace: [ 301.447775][T11066] [ 301.450993][T11066] switch_task_namespaces+0x3e/0x110 [ 301.456291][T11066] __se_sys_setns+0x784/0x17d0 [ 301.461081][T11066] ? __se_sys_setns+0x565/0x17d0 [ 301.466028][T11066] ? __pfx___se_sys_setns+0x10/0x10 [ 301.471289][T11066] ? __se_sys_pidfd_open+0x1d1/0x250 [ 301.476590][T11066] ? __secure_computing+0xe2/0x2a0 [ 301.481931][T11066] do_syscall_64+0xfa/0xfa0 [ 301.486454][T11066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.492736][T11066] ? clear_bhb_loop+0x60/0xb0 [ 301.497454][T11066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.503396][T11066] RIP: 0033:0x7f3d2618f6c9 [ 301.507828][T11066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.527509][T11066] RSP: 002b:00007f3d26fc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 301.536014][T11066] RAX: ffffffffffffffda RBX: 00007f3d263e5fa0 RCX: 00007f3d2618f6c9 [ 301.544060][T11066] RDX: 0000000000000000 RSI: 0000000024020000 RDI: 0000000000000009 [ 301.552065][T11066] RBP: 00007f3d26211f91 R08: 0000000000000000 R09: 0000000000000000 [ 301.560112][T11066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.568090][T11066] R13: 00007f3d263e6038 R14: 00007f3d263e5fa0 R15: 00007ffc0f13f748 [ 301.576144][T11066] [ 301.579231][T11066] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 301.586521][T11066] CPU: 1 UID: 0 PID: 11066 Comm: syz.3.1379 Not tainted syzkaller #0 PREEMPT(full) [ 301.595898][T11066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 301.605968][T11066] Call Trace: [ 301.609255][T11066] [ 301.612177][T11066] dump_stack_lvl+0x99/0x250 [ 301.616772][T11066] ? __asan_memcpy+0x40/0x70 [ 301.621358][T11066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.626555][T11066] ? __pfx__printk+0x10/0x10 [ 301.631148][T11066] vpanic+0x237/0x6d0 [ 301.635123][T11066] ? __pfx_vpanic+0x10/0x10 [ 301.639614][T11066] ? is_bpf_text_address+0x292/0x2b0 [ 301.644897][T11066] ? is_bpf_text_address+0x26/0x2b0 [ 301.650103][T11066] panic+0xb9/0xc0 [ 301.653811][T11066] ? __pfx_panic+0x10/0x10 [ 301.658225][T11066] __warn+0x318/0x4d0 [ 301.662194][T11066] ? nsproxy_ns_active_get+0x88f/0xcb0 [ 301.667647][T11066] ? nsproxy_ns_active_get+0x88f/0xcb0 [ 301.673098][T11066] report_bug+0x2be/0x4f0 [ 301.677430][T11066] ? nsproxy_ns_active_get+0x88f/0xcb0 [ 301.682877][T11066] ? nsproxy_ns_active_get+0x88f/0xcb0 [ 301.688333][T11066] ? nsproxy_ns_active_get+0x891/0xcb0 [ 301.693789][T11066] handle_bug+0x84/0x160 [ 301.698030][T11066] exc_invalid_op+0x1a/0x50 [ 301.702527][T11066] asm_exc_invalid_op+0x1a/0x20 [ 301.707386][T11066] RIP: 0010:nsproxy_ns_active_get+0x88f/0xcb0 [ 301.713473][T11066] Code: 00 e8 75 3f 77 ff eb 0c e8 6e 3f 77 ff eb 05 e8 67 3f 77 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 52 3f 77 ff 90 <0f> 0b 90 e9 ee f7 ff ff e8 44 3f 77 ff 90 0f 0b 90 e9 12 f8 ff ff [ 301.733080][T11066] RSP: 0018:ffffc900031c7d40 EFLAGS: 00010287 [ 301.739150][T11066] RAX: ffffffff824a202e RBX: ffff888075de6208 RCX: 0000000000080000 [ 301.747119][T11066] RDX: ffffc9000c55a000 RSI: 0000000000000202 RDI: 0000000000000203 [ 301.755080][T11066] RBP: ffffc900031c7e01 R08: ffff88807e0d6cbb R09: 1ffff1100fc1ad97 [ 301.763044][T11066] R10: dffffc0000000000 R11: ffffed100fc1ad98 R12: dffffc0000000000 [ 301.771009][T11066] R13: dffffc0000000000 R14: ffff88807e0d6cb8 R15: ffff88807e0d6c00 [ 301.778981][T11066] ? nsproxy_ns_active_get+0x88e/0xcb0 [ 301.784449][T11066] switch_task_namespaces+0x3e/0x110 [ 301.789727][T11066] __se_sys_setns+0x784/0x17d0 [ 301.794485][T11066] ? __se_sys_setns+0x565/0x17d0 [ 301.799419][T11066] ? __pfx___se_sys_setns+0x10/0x10 [ 301.804605][T11066] ? __se_sys_pidfd_open+0x1d1/0x250 [ 301.809900][T11066] ? __secure_computing+0xe2/0x2a0 [ 301.815025][T11066] do_syscall_64+0xfa/0xfa0 [ 301.819524][T11066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.825588][T11066] ? clear_bhb_loop+0x60/0xb0 [ 301.830264][T11066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.836157][T11066] RIP: 0033:0x7f3d2618f6c9 [ 301.840570][T11066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.860172][T11066] RSP: 002b:00007f3d26fc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 301.868581][T11066] RAX: ffffffffffffffda RBX: 00007f3d263e5fa0 RCX: 00007f3d2618f6c9 [ 301.876547][T11066] RDX: 0000000000000000 RSI: 0000000024020000 RDI: 0000000000000009 [ 301.884505][T11066] RBP: 00007f3d26211f91 R08: 0000000000000000 R09: 0000000000000000 [ 301.892473][T11066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.900436][T11066] R13: 00007f3d263e6038 R14: 00007f3d263e5fa0 R15: 00007ffc0f13f748 [ 301.908412][T11066] [ 301.911700][T11066] Kernel Offset: disabled [ 301.916008][T11066] Rebooting in 86400 seconds..