last executing test programs: 6m39.812528803s ago: executing program 32 (id=21): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000033c0)={'wlan0\x00', &(0x7f0000003380)=@ethtool_regs={0x4, 0x7}}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x54}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x54}}, 0x800) 5m55.434005463s ago: executing program 3 (id=237): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000040)=0x10000) mmap(&(0x7f00006f2000/0x2000)=nil, 0x2000, 0x1000002, 0x20010, r1, 0x2c93a000) madvise(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x9) 5m55.372388139s ago: executing program 3 (id=238): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x10000009, 0x5, 0xe, 0xfdff, 0x0, "4ae23ae17df2e18c69ba36c4095c911abad88f", 0x5a6}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) (async) r3 = epoll_create1(0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3) (async) close_range(r2, r4, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x84) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) 5m55.14267945s ago: executing program 3 (id=239): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r0, 0x20000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000000000000000000510000c0003", 0x21}], 0x1}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0x1278, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050027bd7000030002004400000008000300", @ANYRES32=r5, @ANYBLOB="0c002380acfa573142b5b9e1d65b1ad38e06833d0d0600"], 0x28}, 0x1, 0x0, 0x0, 0x4005}, 0x20000000) socket$vsock_stream(0x28, 0x1, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x64, r7, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x64}, 0x1, 0x2, 0x0, 0x1bb5818a0d17d3a}, 0xc890) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe, 0x1c}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x48080}, 0x20) 5m55.123021373s ago: executing program 3 (id=240): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r3, &(0x7f0000001480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) getresgid(&(0x7f00000034c0), &(0x7f0000003500)=0x0, &(0x7f0000003540)) (async, rerun: 64) r6 = getegid() (rerun: 64) setgroups(0xa, &(0x7f0000003580)=[r4, r4, r4, r4, r4, r5, r4, r4, r6, r4]) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)="3f8a42dc421cc24099737574cf146ea5fedaba60e0b7909f330b0f5d93cd23fd7130d9c7756a12e71ff527955ff6e8d94b5cb3d68de127092cb4fd709773c6b3560e34b9bd5c290b35297076d2ed993615816a6a34972ca434c32d7106f0c1b992520c274ee413b313ee65467ddc81ad5b7f51cc0a99e6b151de40f539a94b06dfa1a1fcc77d0ea5fff7be5e2f9d170c74b4fc208be483d0a03f0875486ee11a8639b53bdb6c6ca946d3da8bcb6f2ddfdf8698c83091de41fcb82e8a08a1336f4b49219d84d2dbb0511feda68670e7add10d2904e15c6acb2b7eb3dace0a8f02aa86105c3cad6d1f1993528b7788e00da2c9c4", 0xf3}, {&(0x7f00000002c0)="fb76d4cf90f62047f1a9bbab62c8f07c67fb1d98ddf23d3931c60b8b317f4d296bc7818140040efac35b94d69c227b8b81f93f5c5fba05233fc1bdfc68d6770a7411fc44c611ad8b2b7baac7d0793dcd937eb4d3272bf02383489a3110a4250f57ae145f410d61b2c91adc560e347cc89e0ca7c9a6227939922421e88e851fd601f62c5b2e46d7ddd2a4a4976bb4de4181beec", 0x93}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="a1f6cc53da14384671cfc04557b58be71b4bf49e5cc8cab2441b69a71f3cf57c600575e331442390ad89b44a389a2e0060bb824ecb929c3e369750bbe90a303a68fd5330ffbc80bf6622907e24760dfdbebe0c595416b798dfd7683e39cebfa8fb1d92578ba19acda4bb8da239466a2fd96ac2430a6eec1f38cdbd7e12f73066b72f42dc644750a0efc2d600fcb3f3b06ee22067af83aa2d1e40369f23c4a029d9e802ba6b15a36cf88083b86a00adf892e9bb056f1bc01acc7dc340cb742b40d420939b90dabaf682eb68e73da0a567b6c19fa18f20ef366f5d3a2fa0b24d", 0xdf}], 0x4, 0x400, 0x4, 0x10) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5m55.074358383s ago: executing program 3 (id=241): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) setpgid(0x0, r0) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "0004"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "7f08"}, @global=@item_4={0x3, 0x1, 0x0, "0200"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "e4004000"}]}}, 0x0}, 0x0) 5m54.320402726s ago: executing program 3 (id=246): r0 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) read$hidraw(r0, &(0x7f0000000080)=""/201, 0xc9) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000e1476040d61000220200000003010902"], 0x0) 5m39.167331861s ago: executing program 33 (id=246): r0 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) read$hidraw(r0, &(0x7f0000000080)=""/201, 0xc9) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000e1476040d61000220200000003010902"], 0x0) 5m32.704533357s ago: executing program 0 (id=336): syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='ac,,']) read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0xffffffffffffffda, r1, {0x7, 0x2b, 0xb, 0x9014020, 0x7, 0x7, 0x5, 0x7f, 0x0, 0x0, 0x10, 0x40}}, 0x50) 5m32.599867797s ago: executing program 0 (id=337): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) setresuid(0xee01, 0x0, 0x0) keyctl$session_to_parent(0x12) write$cgroup_int(r0, &(0x7f0000000040)=0x1c8, 0x12) 5m32.367200057s ago: executing program 0 (id=339): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22082, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="0f01c8b805000000b9009800000f01c1b9800000c00f3235002000000f300f2082c4210d71e40026460fc73342d821660f107b000f01c50f01df", 0x3a}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000002e000100000016000000000008000085", @ANYRES32, @ANYBLOB="0b000280976b6408686030000500"], 0x2c}], 0x1}, 0xcc000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x144, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x3, 0x8, 0x9, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff5}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}, @tfcpad={0x8, 0x29, 0x4}]}, 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x982}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5m31.870905524s ago: executing program 0 (id=342): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) chdir(&(0x7f0000000100)='./file0/file0\x00') move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x3) syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0xf3, 0xae, 0x8, 0x8, 0x17cc, 0x1010, 0x9dd8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x96, 0x1, 0xc0, 0xf8, [{{0x9, 0x4, 0x39, 0x91, 0x1, 0x1e, 0x9, 0xf, 0x6, [], [{{0x9, 0x5, 0xb, 0x0, 0x400, 0x7f, 0x2, 0x10}}]}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 5m30.338220413s ago: executing program 0 (id=346): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x0, 0xc, 0x19, {0x19, 0x21, "a26a612146df1b90d42c934e2b3cccdefe6652da8648bc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002070102202505a8a440000102030909022400a768c0b1041a040081020000000909050102ff0303ff010905820200044c0604"], &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xda, 0x8, 0x0, 0xff, 0x6}, 0xb6, &(0x7f0000000100)={0x5, 0xf, 0xb6, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x0, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x2, 0x48, 0x30, 0x9, 0x4, 0xa}, @generic={0x8b, 0x10, 0x1, "d31f4cd3e3d9b30752e99dc67afd369bf89bbdb78ca453f8a8109fefc85e0d20459df9f21172d15b6cb19892fe196a882caa5bff5f552c4c812beae30ba85d6b407b8f40e0085cdb32646882bf87c717c1971caa2b8c0a783cf9f9c79fe4d24ac320593cd183de7e85f8c7980cbb7a09ffae6a9f398151634a6961c0e29adfa282108748e3168b8e"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xc, 0x2, 0xfffa}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x40, 0x3, 0x81}]}, 0x4, [{0xeb, &(0x7f0000000240)=@string={0xeb, 0x3, "1a25fb45d52b9b6dcdc21600b60d5b6f385df73b67dd6a91851a1edde6c8d157b589281f869fb41650ca545ad60f5b0cda4fa4dac98c3f1a4db5d1b68b6afd12f5181ade3bbf4ef8239456d6a93d96d6d1bd3730d2c9f502c5522b12bf23785171f2bb2180e4fb89e70f9a51fd7199ff61e5c82ee74deb3ceb4dad581dcb9258daed03dad013b4fd4f105dbbc4fdc793560f9f3115eee35736866bf30f560624e890c3a74b7a07534499ef06636e47c88b7c805f44963330083afe5f40779d103ca98298618b444d1df4214cb3d78b278a1ba2120ab7c5518f4a190636a9d204ecb030e4eb7f186bf1"}}, {0x38, &(0x7f0000000080)=@string={0x38, 0x3, "eedf730f41b553b0a673f2ea84a2959d7db51073a91570bcfd3922f6f567d5c0b53111951dfdd0ff4a08ebf0c93c6d5701114ec71ab0"}}, {0xdc, &(0x7f0000000400)=@string={0xdc, 0x3, "ecb11c5bb3882eb28cd89e2d4297e0820145b8e86a689244bdcd8d9292debd55928f0ebfd7cec893028c13d9ca731ed6509367cbc9e12db5c76681e212822fc3799ab1ff14e1a3c95f3d38015d0f7eeb71a29dfb84e4a6fabbca5ef300b19b78e1b65ecac0b7758a817ea862f780690b25619f05cc2e981d136639e9533868d8811eb184a28f08f2c3dc743416a0f48ba7420cf7fc27a90b40ba9cee51bbb147cbc3075369e86c22f80f9bfeaee5e2b72e30299c7fb8f3521b676a23feee3d1c2dd34ed2e11ef840eeaf173c3a5c2778113391d10bf19f0f39af"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x437}}]}) syz_usb_control_io$printer(r1, &(0x7f0000000600)={0x14, &(0x7f0000000500)={0x0, 0x7, 0x7d, {0x7d, 0xe, "e3d890467742c6b9597934895f67f0590b730d996b29153a7936b095e552fa280b9fb7586b741d0f3e56694d470b2d39a76ffed3773fe6cdb35efe7d9d45f4a7eac8138077e38dad278758aef60e8ca412a96881d73d9dee245ebc49efecc14894b88fe6ddb3fb7ee9655888fdc3953b3cf6f7d29340b2d40a6f38"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80c}}}, &(0x7f0000000800)={0x34, &(0x7f0000000640)={0x20, 0x14, 0x4a, "612fbab876ae09c56eefd19e6abb1c2e6b9dd349c343c6075a63b59896b5fb9b7d72b6dd5df56dc1a96d2683cbd59ea6ed3218706071347ac4fce51375cec299e0073f8de4617d7f87a9"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000740)={0x20, 0x0, 0x39, {0x37, "7f73bf88b5647abcaa2298357a39679bb52f400a2a0466a775895680953cad68c932468cf21853838f0425441e036a50d4fc8c3e4025b8"}}, &(0x7f0000000780)={0x20, 0x1, 0x1, 0x10}, &(0x7f00000007c0)={0x20, 0x0, 0x1, 0x7}}) 5m30.101233245s ago: executing program 0 (id=350): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m29.75199342s ago: executing program 34 (id=350): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m11.860730967s ago: executing program 6 (id=419): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r0, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)={0x10b4, r5, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0x59, 0xa8, @random="513a4da667433e714590f34b77c3e0374d342b1819e59b2cd43e0490bbd0f51f651f57dd35163d58098c259e3927d3097e99cf98c8d9b39c3c049b2aee6691a5954c9e8f31c9a94cc18bcc57a466f23a40db354548"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0x1004, 0xa8, @random="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"}]}, 0x10b4}, 0x1, 0x0, 0x0, 0x4}, 0x2004c844) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(r7, 0x0) setreuid(0x0, r7) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x1) 5m11.598294353s ago: executing program 6 (id=421): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x2}}, './file1\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000048601, 0x0) (async) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f00000000c0)={0x1, 0x0, 0x1fb, 0x10001, 0xfffffffffffffffe, 0x0, 0x4, 0x1fc, 0x9, 0x102002c, 0x49200000, 0x3}) (async) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r8, 0x40096101, &(0x7f0000000800)={{}, 0xfd}) bind$ax25(r7, &(0x7f0000000000)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffff00000000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x122) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r9 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r9, &(0x7f0000000040)='./file1\x00', 0x2000, 0x0) (async) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r9, &(0x7f0000000100)='./file1\x00', r9, &(0x7f0000000240)='./file0\x00', 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x7, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0xfffffffc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0xb, 0x3, 0x3, 0x9, 0x0, 0x0, 0x1ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x0, 0xfffffffd, 0x10004, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xfffffffd, 0x7b67], [0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x40000000, 0x0, 0xc0000, 0x0, 0x1a0d, 0x0, 0xaecd, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfff], [0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x101, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x40000010, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x14, 0x1, 0x0, 0x0, 0x4000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x42c, 0x0, 0x1d, 0x400, 0x0, 0xed0, 0x4000002], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0x4080, 0x10000, 0x0, 0x0, 0x4, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0xf8e6, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe]}, 0x45c) (async) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='com.apple.system.Security\x00') (async) bind$ax25(r7, &(0x7f0000000100)={{0x3, @bcast, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000080)='&.{\x00\xa2\xf9\"\xd0xK\xeeun\xc2\xb6\x96v\x9bbyK\x98=\x89\xfe\xb5\xd0LX\x19\xc7\x91\xbbh\x1b)Y\xfad>\xa7o\xb8\x05\xe7\x98<\x8c\x93\x91\x91n\xb0\x84)\xd5\xa3\x80\xdb\x8fm\xd9\x9fv.<\xe2\xce\x0e\xa0\xba\xcf.\x94\xf5\x90c \x9f(\x8f\xc9\x80)b\xc9\x91<\xee8\xd1\xb0\xa1\xfa:Q\x04L\xb7\xe96\x97\a\xdd\xc3\xc0\xf2A\xe8\xcd\x02\xa9\x98\xfe8xe\xcc3\xd2\xb9\xf1\x89\xa7[\xd8;\xe5\rX1vo1\xf5b\xdd\xf6\x84E[m\xc4\x93dSe{\x18\xb5\x11\x1a\xa4I`\x17u\x97\x9f\x97\xc1\xf6\xf3\x8a\xc6\x9e\x0f\xcb\x01\x183\xd0H\xc2\b\xc2\x05\xdc.D/\xc7\xd3\x9d\x8a\xf06\xf2\xee\x12\xe1\x17\x1f\x00\x00\x00\x00') (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="230129bd7000fd0600000000000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4044054}, 0x44044) 5m11.424791944s ago: executing program 6 (id=423): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) close(r0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000440)={0x0, 0x10000, 0x80, 0x6dd, 0xffffffff, 0x1008, 0x20, 0xb36, 0x100, 0x4000000b, 0x4, 0x5, &(0x7f0000001140)=[0x80002], 0x1, 0x0}) syz_open_dev$tty20(0xc, 0x4, 0x0) 5m10.674296758s ago: executing program 6 (id=427): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) chdir(&(0x7f0000000100)='./file0/file0\x00') creat(&(0x7f00000001c0)='./file0/file0\x00', 0xde) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x2200, 0xe0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x3) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f0000000080)=[@vmwrite={0x8, 0x0, 0x11, 0x0, 0x2, 0x0, 0x2, 0x0, 0xff}], 0x346) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m10.544907305s ago: executing program 6 (id=428): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000bc0)={{0x12, 0x1, 0x0, 0xa0, 0x11, 0xaa, 0x10, 0x2001, 0x4002, 0xdfbf, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0xe6, 0xce}}]}}]}}, 0x0) 5m10.178271508s ago: executing program 6 (id=429): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x7, 0x4) r1 = syz_open_dev$video(&(0x7f0000000000), 0x80000, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0xfc145000) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) 5m9.690337843s ago: executing program 35 (id=429): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x7, 0x4) r1 = syz_open_dev$video(&(0x7f0000000000), 0x80000, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0xfc145000) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) 5m4.378867965s ago: executing program 1 (id=450): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x13, "a9e7d79bc89b265ce80944d42c190b1e42ee3e"}, &(0x7f00000000c0)=0x1b) (async) r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_connect$rtl8150(0xad9c0ef4924c822f, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = syz_usb_connect$uac1(0x5, 0xe7, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x3, 0x1, 0x2, 0x80, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xfc}, [@feature_unit={0xd, 0x24, 0x6, 0x1, 0x5, 0x3, [0xa, 0x9, 0x6], 0x5}, @selector_unit={0xa, 0x24, 0x5, 0x2, 0x4, "9fb161ac65"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x201, 0x1, 0x9, 0x1, 0xc, 0xa}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x306, 0x2, 0x4, 0x1}, @extension_unit={0xa, 0x24, 0x8, 0x4, 0x9, 0x8, "fe3797"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x4, 0x6, 0x87, ')', "e207"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x2, 0x9, 0x7, {0x7, 0x25, 0x1, 0x0, 0xf, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x6, 0x8, 0x8, "264fb8da9a6a3413"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xa, 0x1, 0xf0, "ea57278e6fec35c9"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xb, 0x1, 0x5, 0x0, "4d34d3ca"}, @as_header={0x7, 0x24, 0x1, 0xc6, 0x7, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0x0, 0x3, {0x7, 0x25, 0x1, 0x2, 0x0, 0xd}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x0, 0x1, 0x8, 0x2}, 0xc, &(0x7f0000000140)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x4, 0x9, 0x9}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2401}}]}) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x200, 0x0, 0x0}], 0x1}) socket$inet_sctp(0x2, 0x5, 0x84) 5m2.593012446s ago: executing program 1 (id=453): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x6, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0xfffffffa, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000000, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x3, 0x3, 0x107fff, 0x4c74, 0xfbf5, 0x0, 0xb, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0x6, 0x3, 0x4, 0x4, 0x8, 0x0, 0x7f, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x8, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0xfffff000, 0xfffffffe, 0x8, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x801, 0x8, 0x4, 0x0, 0x106, 0x2, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xd, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x80002, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x20005, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x2000008, 0x2], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x100, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x5, 0xffffffff, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x3, 0x80ffff, 0x200003, 0x5, 0x80000000, 0x9602, 0xa, 0x2, 0x4, 0x10, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x3, 0x8, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @pic={0x74, 0x86, 0x79, 0x45, 0x7f, 0x80, 0x1, 0x4, 0x81, 0xa, 0x3, 0x9, 0x7, 0x3, 0x9, 0x9}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000007000004000"]) 5m2.11020347s ago: executing program 1 (id=454): pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x800000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0041, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x39}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x48d4}, 0x5) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, &(0x7f0000000100)=0x8) ioctl$TCSETS(r0, 0x40204706, &(0x7f0000000040)={0x8, 0x5, 0xb1, 0x3f, 0x1a, "3eccd25569e20900"}) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x20000) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000180)={0x0, 0x7, &(0x7f0000000140)="f159f2e49bf46c"}) 5m1.802569749s ago: executing program 1 (id=456): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) pwrite64(r0, &(0x7f00000001c0)="e67ab166972ce298f4681ef5c755f60473b17b7887d68440dd9005bc79f6eeaeec2d13731c56a864fa45a465e645e6855c66e7190ed911b5d36f3db423da49146adf57d943a00c0dd842e2d98e81963fdb3911c91d94a7327708bacf3aeb1d10471980e3132947b42b079a9a09a3c48e452ca2446aa1569b8e1e028e6ebbcdd573302a47511455505e04f75899cb3edd2fd2073319dc1a43074fe7d24e00", 0x71, 0x5) write(r0, &(0x7f00000000c0)="908b1be97a8e8c55142bbccf1bf085349d706a50f33182a1fefa98b104a131d52a15d575627d2ca6606fd8721a89e52cb422133c9b27827b5217eb8280eadb4069b8641cb8f474cf3bd6dd9ea2c6f106e71f1a9da4ef149d2c20daa1d367c5bfddf48d8337a77033c9e7dfc0de31de4ac6cde37c0abf64853df7a6d9e2af5b01e674834633f0d940849a9afae2891a3e09aba5134d98f322f00abbd1121d8c7546a033b27f5fecfba060922bc10057a9693b14be617d4dc41fcdcebeb1014233dc0b6c0ab6ba1c31fca61670", 0xcc) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffffff, 0x0, 0x344) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000080)={0x524227d, 0x7fff, 0x7, 0x7, 0x0, 0x3, "123a16ea1a307c3fbe1f64ad3627ded1", 0x1, 0xe, 0x7, 0x45, 0x5, 0x3, 0xa}) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) pwrite64(r0, &(0x7f00000001c0)="e67ab166972ce298f4681ef5c755f60473b17b7887d68440dd9005bc79f6eeaeec2d13731c56a864fa45a465e645e6855c66e7190ed911b5d36f3db423da49146adf57d943a00c0dd842e2d98e81963fdb3911c91d94a7327708bacf3aeb1d10471980e3132947b42b079a9a09a3c48e452ca2446aa1569b8e1e028e6ebbcdd573302a47511455505e04f75899cb3edd2fd2073319dc1a43074fe7d24e00", 0x71, 0x5) (async) write(r0, &(0x7f00000000c0)="908b1be97a8e8c55142bbccf1bf085349d706a50f33182a1fefa98b104a131d52a15d575627d2ca6606fd8721a89e52cb422133c9b27827b5217eb8280eadb4069b8641cb8f474cf3bd6dd9ea2c6f106e71f1a9da4ef149d2c20daa1d367c5bfddf48d8337a77033c9e7dfc0de31de4ac6cde37c0abf64853df7a6d9e2af5b01e674834633f0d940849a9afae2891a3e09aba5134d98f322f00abbd1121d8c7546a033b27f5fecfba060922bc10057a9693b14be617d4dc41fcdcebeb1014233dc0b6c0ab6ba1c31fca61670", 0xcc) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r1, 0x0, 0xffffffffffffffff, 0x0, 0x344) (async) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000080)={0x524227d, 0x7fff, 0x7, 0x7, 0x0, 0x3, "123a16ea1a307c3fbe1f64ad3627ded1", 0x1, 0xe, 0x7, 0x45, 0x5, 0x3, 0xa}) (async) 5m1.709264805s ago: executing program 1 (id=457): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x54, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xffffffffffffff9b, 0x90}, {0xc, 0x90, 0x2000000}}]}, 0x54}, 0x1, 0x0, 0x0, 0x95}, 0x0) (async) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) (async, rerun: 32) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) (async, rerun: 32) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 5m1.538983556s ago: executing program 1 (id=458): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) (async, rerun: 32) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) (async, rerun: 32) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x0, 0x0}) (async, rerun: 32) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0xfffffffd, @mcast2, 0x9}, 0x1c) (rerun: 32) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x105aa) 4m46.104158603s ago: executing program 36 (id=458): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) (async, rerun: 32) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) (async, rerun: 32) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x0, 0x0}) (async, rerun: 32) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0xfffffffd, @mcast2, 0x9}, 0x1c) (rerun: 32) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x105aa) 3m52.902903614s ago: executing program 5 (id=627): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680), 0x100000000000027f}, 0x4c084) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1c0000001d008103e00f80ecdb4cb9f207", 0x11}], 0x1, 0x0, 0x0, 0x5865}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYBLOB="2c67726f994ef20a643d317376229b93a2385c96edefea8a56be2b72b8c0a6adcba591e4f5d76f65d4113796e510120e736bde43b718a1", @ANYRESDEC=r0]) read$FUSE(r0, &(0x7f00000057c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LK(r0, &(0x7f0000000000)={0x28, 0xfffffffffffffffe, r1, {{0x40007, 0x7fffffffffffffff, 0x2, r2}}}, 0x28) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002dcd35b409907000000000000000109021b00020404400a09040005acf70478030904120700ffffff18"], 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name, &(0x7f0000000140)=0x10, 0x80000) sendmsg$tipc(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)="b9a7fc17d8edbcfa425f985620d271cbd53c495a248fa184bac734b3ea8599ef71fa1f7b949dc67cb6ae9569cc3e9118da7f86a7b4653c4131e7daa3c32d42a25d7e7878e707", 0x46}, {&(0x7f00000002c0)="90e75866ac00af647c8b341538964e074fe1e7780ba2c89c2f030a201581c6222180bf26886c40c4c018ca66bf9f28f7d7f15efed3b7c8f35ada9b5b19789e39a92526d67e1b73eafec1b2a46b813ad3801babdb0bf95c31eab54e70ba6c093aedc4fd1ce4967d8c9657aa42a09aaa04f8ceda253ad9e7cda231626570a80c420aab4614a0f493da465bbce55eb401b022db2b7abf9a7848eeb2fe9b49c3c591f5c49e7d910ce65ade4a08d33c7379a742adaf8853ee9376f8", 0xb9}, {&(0x7f0000000380)="8dba637ab1f9a6c0c77fc47ea7fcde0273552d1b9b2c85f16a4709f2a89cd9a117cf6ce9578822a2e505127cfd8ed79453ac481fead10e0ea38fd7ecdb901bda5ad27dd145517b35c0995283cb3cec5b6fc99f99a654f75f268dd6f27452c574574237f35456cd4a4793abbd2b292ae2d9af99d06091f2bc6a0c758d41fdc05f3ce37abc17adecb57f224ccdf707444205485400e328d92b3138238c6094c665fa46aed62405f19bfbbda27dc13797b9a5f4d73419396cac7a56d468d4bdf9", 0xbf}, {&(0x7f0000000440)="728bcdc146f2a9476c6c5e9e064e5ee39e1e7d2f87a79ce2a2d5e16c22ac537bf55a31389cd84b84b8ba689b001c796897b9155fd71671778ffc95b5682c151542b3411da228d8", 0x47}, {&(0x7f00000004c0)="315aa28bef627cde9ceb219bf03bdf1b9a3d0734922a31228e58b34db6cc30f36a93a3a1ab420ed8a30c5d3579a8c701320bc53e566e937ba2e24182d9fb804d796c2b2501023069c3b62d65d80753f980e214da1769", 0x56}, {&(0x7f0000000180)="fc75cad1f163123bcf765415dbfdfe27074053e43604a6dda6bec8a855664866c95d304d83e6f414e9b1259c7d156197bb", 0x31}], 0x6, &(0x7f0000000600)="7fca456fee4cd06e01e5e73c8e852ce09d9f1894a9fffb484efeb70c7dfc3dc35ad1", 0x22, 0x44080}, 0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0x3d, 0x0, &(0x7f0000000540)={0xc9, 0x5, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) bind(r3, &(0x7f0000001ac0)=@nl=@kern={0x10, 0x0, 0x0, 0x1}, 0x80) r6 = socket$kcm(0x10, 0x400000002, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000001a40)={0x0, @local, @private}, &(0x7f0000001a80)=0xc) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[], 0xfe33) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000680)={r4, 0x3, 0x2, 0x182500}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'veth1_virt_wifi\x00', 0x0}) sendto$packet(r8, &(0x7f00000005c0)="46b83076ca", 0x5, 0x0, &(0x7f0000000200)={0x11, 0x8100, r9, 0x1, 0xe0}, 0x14) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc030000302c0000000000030000000000000000000000ff020000000005000000000000000001020090780000d93f64f3dc000f081120ff020000000000000000000000000001fe800000000000000000000000000013"], 0x66) 3m51.52821558s ago: executing program 5 (id=629): syz_usb_connect(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109022400010000000009040000022ec25d0009050200008de600000905030100"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xde61, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000003180)=@req={0x8000, 0x29623992, 0xa756, 0xfe9}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000010300)={0x24, 0x0, 0x0, &(0x7f0000010280)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x8, "fbf7aa1f"}, @main=@item_4={0x3, 0x0, 0x8, "9adb023f"}]}}, 0x0}, 0x0) syz_usb_ep_read(r0, 0x90, 0x7c, &(0x7f0000000000)=""/124) (async) syz_usb_ep_read(r0, 0x90, 0x7c, &(0x7f0000000000)=""/124) 3m50.102556929s ago: executing program 5 (id=641): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) (async) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0xffffffff}, @my=0x0, 0x0, 0x0, 0x8000000, 0x6, 0x8001, 0x4, 0xfff}) (async) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) r1 = socket(0x2d, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000380)={r6, @in6={{0xa, 0x4e22, 0x4, @empty, 0xc}}, 0x0, 0x2}, &(0x7f0000000340)=0x90) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r3}) (async) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, r3, 0x9}, 0x10) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f00000005c0)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e23, @rand_addr=0x64010101}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1c0, 0x0, 0x0, 0x0, 0x800, &(0x7f00000000c0)='veth0_to_batadv\x00', 0x1, 0x7fffffff, 0x3ff}) (async) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) (async) syz_emit_vhci(&(0x7f0000001600)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01030000000000000000020000000900020073797a32000000000900010073797a30000000000c000340000000000000000214000000110001000000"], 0x60}, 0x1, 0x0, 0x0, 0x800c}, 0x20000000) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote, @in6=@private1, 0x4e24, 0x67e, 0x6, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x6, 0xfffffffffffff506, 0x4, 0x40000008, 0x5, 0xffffffffffffffff, 0xc, 0xffffffffffffffff}, {0x7, 0x0, 0x800000000000001, 0xffffffffffffffff}, 0x0, 0x6e6bb5, 0x2, 0x0, 0x2}, {{@in=@rand_addr=0x64010102, 0xffffffff, 0x62}, 0x2, @in=@multicast2, 0x8003509, 0x3, 0x3, 0x0, 0xffffffee, 0x97a7, 0x80}}, 0xe8) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) (async) ioctl$KVM_SET_IRQCHIP(r10, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x4000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0x3}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0x1, '\x00', 0xf}, {0x7, 0x9, 0x8, '\x00', 0xb4}, {0x0, 0x7, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0x0, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0x9, 0x3, 0x8, '\x00', 0x6}, {0xf, 0x3, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x1}, {0x4, 0xc, 0x5, '\x00', 0xb3}, {0x7, 0x1, 0x0, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7c}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x4, 0x12, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) (async) connect$qrtr(r1, &(0x7f0000000300)={0x2d, 0x1, 0x4001}, 0xc) 3m49.938500836s ago: executing program 5 (id=643): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x80000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1000000, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1812c1, 0x0) fchown(r1, 0xee01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x6, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0xfffffffa, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000000, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x3, 0x3, 0x107fff, 0x4c74, 0xfbf5, 0x0, 0xb, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0x6, 0x3, 0x4, 0x4, 0x8, 0x0, 0x7f, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x8, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0xfffff000, 0xfffffffe, 0x8, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x801, 0x8, 0x4, 0x0, 0x106, 0x2, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xd, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x80002, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x20005, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x2000008, 0x2], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x100, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x5, 0xffffffff, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x3, 0x80ffff, 0x200003, 0x5, 0x80000000, 0x9602, 0xa, 0x2, 0x4, 0x10, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x3, 0x8, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @pic={0x74, 0x86, 0x79, 0x45, 0x7f, 0x80, 0x1, 0x4, 0x81, 0xa, 0x3, 0x9, 0x7, 0x3, 0x9, 0x9}}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) syz_clone(0x8080, &(0x7f0000000080), 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000880)="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") ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000070000040"]) 3m49.808092886s ago: executing program 5 (id=644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x0, @time={0xf5}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time}], 0x70) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480480001800a000100696e6e6572000000380002800800024000000084080003400000000708000440000000360800014000000000140005800c0001007061790700000000040002800900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) (async) write$sndseq(r1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x0, @time={0xf5}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time}], 0x70) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480480001800a000100696e6e6572000000380002800800024000000084080003400000000708000440000000360800014000000000140005800c0001007061790700000000040002800900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) (async) 3m49.410500402s ago: executing program 5 (id=645): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000f39000/0x1000)=nil, 0x1000, 0x10) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000240), &(0x7f0000000280)) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000800, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other}], [{@hash}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@appraise_type}, {@audit}, {@subj_user={'subj_user', 0x3d, '$#]&\''}}, {@obj_type={'obj_type', 0x3d, '}'}}, {@pcr={'pcr', 0x3d, 0x3e}}]}}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="0d171100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m49.131145476s ago: executing program 37 (id=645): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000f39000/0x1000)=nil, 0x1000, 0x10) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000240), &(0x7f0000000280)) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000800, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other}], [{@hash}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@appraise_type}, {@audit}, {@subj_user={'subj_user', 0x3d, '$#]&\''}}, {@obj_type={'obj_type', 0x3d, '}'}}, {@pcr={'pcr', 0x3d, 0x3e}}]}}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="0d171100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 35.48508831s ago: executing program 8 (id=2195): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)={0x1c, 0x2c, 0x107, 0x0, 0x25dfdbfd, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="1716c2e9"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x1000, 0x8}, 0x20) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 35.38656637s ago: executing program 8 (id=2196): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x181503) (async) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x181503) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0x3}, 'port1\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000064000000090a010406000000000000000300000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000002280011"], 0xac}}, 0x4) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000300)={{0x80, 0x70}, 'port1\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000300)={{0x80, 0x70}, 'port1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') (async) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x20010, r0, 0x9f046000) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r4, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1, 0x40000003}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x5b0}, 0x20008001) 35.318178165s ago: executing program 8 (id=2198): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x20) fsetxattr$system_posix_acl(r0, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000010000000000000000800060000000000100007000000000020"], 0x24, 0x0) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'veth1_vlan\x00', @link_local}) 35.239983938s ago: executing program 8 (id=2199): prctl$PR_SET_FP_MODE(0x2d, 0x7) r0 = socket$netlink(0x10, 0x3, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) gettid() ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) socket$netlink(0x10, 0x3, 0x8000000004) (async) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca946e64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c000100070c10000000000000000000", 0x58}], 0x1) connect$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 35.130419161s ago: executing program 8 (id=2200): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, r1, 0xc4fc9e906872338b, 0x70bd26, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}]}]}]}, 0x2c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$video(&(0x7f0000000100), 0x7ffffffffffffffc, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc0d05605, &(0x7f0000000080)={0x8}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa018101}]}, &(0x7f0000000080)=0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r7) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000cc00}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, r8, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffff8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x40}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="cf0400000000000000f71200000008000300", @ANYRES32=r10, @ANYBLOB="0400130006001a0102"], 0x48}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4000004) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r1, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7cd}], @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}]}, @NL80211_ATTR_HIDDEN_SSID={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x3c}}, 0x8000) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=@updsa={0x280, 0x1a, 0x100, 0x70bd2d, 0x9, {{@in6=@empty, @in=@empty, 0x4e21, 0xa, 0x4e24, 0x3, 0x2, 0xa0, 0x0, 0x2b}, {@in=@rand_addr=0x64010101, 0x854c, 0x3c}, @in6=@rand_addr=' \x01\x00', {0xfffffffffffffe01, 0x7, 0x5, 0x4, 0x9, 0x1, 0x8, 0x40}, {0x5, 0x6b, 0x3}, {0x3, 0x7, 0x2340000}, 0x70bd27, 0x3506, 0xa, 0x4, 0x8, 0x88}, [@tmpl={0x144, 0x5, [{{@in=@broadcast, 0x4d4}, 0x2, @in6=@mcast2, 0x3507, 0x1, 0x2, 0x98, 0x5, 0x8, 0xffffffff}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d2, 0x32}, 0xa, @in6=@empty, 0x4, 0x4, 0x3, 0x5, 0x5, 0x7, 0x4}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in6=@remote, 0x3502, 0x1, 0x3, 0xf8, 0x1, 0xfffffffe, 0x3}, {{@in6=@loopback, 0x4d3, 0xff}, 0xa, @in=@multicast2, 0x3503, 0x1, 0x3, 0x8, 0x2, 0x4, 0xfff}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d5, 0x3c}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3505, 0x3, 0x0, 0x8, 0x10, 0xfff, 0x200000}]}, @proto={0x5, 0x19, 0xff}, @lifetime_val={0x24, 0x9, {0x10001, 0x0, 0x4, 0x81}}, @offload={0xc, 0x1c, {0x0, 0x3}}, @replay_thresh={0x8, 0xb, 0x100}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x280}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000001180)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000000)={r11, 0x2}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r11, 0x1}, 0x8) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x1000001) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e22, 0x80000, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 35.051316177s ago: executing program 8 (id=2201): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000880)="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", 0x2fc}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001040)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b825526", 0x4f}], 0x1}}], 0x2, 0x480e0) 34.854326945s ago: executing program 38 (id=2201): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000880)="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", 0x2fc}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001040)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b825526", 0x4f}], 0x1}}], 0x2, 0x480e0) 7.997404275s ago: executing program 7 (id=2291): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000023c0)={0x2020}, 0x2020) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="70000000000901010000000000000000070000010900010073797a310000000008000540000000153c0002002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac14141a0c00028005000100110000000c00048008000140000000040a87db4a783fc9bd"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x1800) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000180)={'team_slave_1\x00', 0x8a}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000000040)={0x1, 0x200, 0x40000000, 0xfffffffd, 0xa45a2b2e, 0x7fff}) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x48, 0x80, 0xd740, 0xfffffffa}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x3}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x58, 0x6, '\x00', 0x20003}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021d00ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x5423) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r10, &(0x7f0000000040)="240000001e005f0214fffffffffffff881ff00001d00000000000000080009000d000000", 0x24) 7.076657884s ago: executing program 9 (id=2297): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x3264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x3, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0x9}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xce, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2001d4"], 0x0}) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000080)='as') 5.350490865s ago: executing program 7 (id=2302): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async, rerun: 32) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r2, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000000480)={0x48, 0x8, r4, 0x0, 0x49, 0xe4, &(0x7f00000002c0)="b7e2e4436f94d86eb708e8de98a8c04c9f2be9b0fd6f18b99f375df93fb21fa1479688d647d8bde18cc81e12921453f340718b35a5721c15c8a17c3b6e62ba5cd53505e810de7ffca52f492ba0fd1de3b262980f27afb1eeef45b3396db0734b1fe4ff4bfaf00ba780fb3f8ed326b0785b77823a4fbe493529b1b305d3a4379020f6306362d3edb0234dab28e49e3c4fca600af08006b3e6a4db63e5e91b3d8dc87d4f7757e1421c2e30056cb8cbabd8e9c1d6ef6d510a42036ec044f78044e6f733a89854225b641bb601ddb5278e8c02ab307a55388ff902250bbed061277b1c0a6ba5", 0x4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='ip6tnl0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r9, 0x3b8a, &(0x7f00000000c0)={0x28, 0x2, 0x0, 0x0, 0x0}) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)={0x258, r6, 0x5, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x1fc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x26, 0x3, "3c187b8ebdde817a7dff2da49972479e45ca7740ea6cf33489e1cb73a4fd6588e31a"}, @NL80211_FTM_RESP_ATTR_LCI={0x51, 0x2, "3b59e044cfbf89f160e3dd5d0ed21462635bc3845a6be377428c44d78beb6190e08a43dc21f2f96b5b23c92bccfaa8b766cddeb49f52b34cdb59bb772f9c59f49aa1f9d788141d275e852d0bc9"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x23, 0x3, "fe94a49df169b7f732f9bfd5ff27b1fb4c78e2a6873b987bff350e0a845f77"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4d, 0x2, "84133d4e3954297f9fad83ae9f2212c741c5aaf3a20e2696814dcde06cc88c3ca8cadcce649276d42959e8b5c8f5a9eb75549a749ffa141381298b809ef69fdc19f2afeb30cb2104d2"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xf8, 0x2, "a03e56ed1df267020edbc298524c29ecbcf67b122a1f98b7128b7c52d77b07259fc304fa2a8259252edc870cf799d45c83950d482fba070cdab09765f5f917a1c8fe3b10022a73e5e519ec1f44e78ba36cfdf8ca35ccb663c091d3adf552e4595d605c25b7f9fe31b50a863662730efdcaf3b169be0b1d103fc408a688913f8ac181cd9aa9a4120a14766f17a9811a3d2378c4a1e1126eb4330e94495cdbad007eb54abecbb9722f9870de71109a3f009ec791871a90b8d98aab4f38fae1299d3a139bdd3b4b2cef996aa883e1d823a77adf622d25b7a142b7fa8db20ddf3d25d66e556d40dfe9718efe0dd1b8b52ba1d8c93b0f"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x258}}, 0x0) 5.190073679s ago: executing program 7 (id=2304): lseek(0xffffffffffffffff, 0x4, 0x4) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2834}}, './file0\x00'}) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000080)) (async) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000100)) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0xd01, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) (async, rerun: 32) r4 = syz_open_dev$vcsn(&(0x7f00000002c0), 0xa, 0x49a800) (rerun: 32) ioctl$SNDCTL_SYNTH_INFO(r4, 0xc08c5102, &(0x7f0000000300)={"97314c9d2f6b786b0428b1ab5ce37d460e9f9b11063ea7be39dee3a3369b", 0x0, 0x0, 0x0, 0x5, 0x9, 0x3, 0x1000, 0x4, [0x7, 0x81, 0x7fff, 0x1, 0x101, 0x8, 0x7ff, 0x2f, 0xffffffff, 0x2, 0x6, 0xe0f0, 0x7, 0xf, 0xd, 0x8, 0x3, 0x8, 0xe]}) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000003c0), &(0x7f0000000400)=0x4) (rerun: 64) futimesat(r2, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={{}, {0x77359400}}) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000004c0)="c18e91568189e39cd313eb961c66371178917f137b73efa616", 0x19, r4}, 0x68) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r4, 0x40045731, &(0x7f0000000580)=0x6ee) setsockopt$packet_buf(r4, 0x107, 0x1, &(0x7f00000005c0)="652df950317a93b2cceec2eae882f3b60718bf8372b616497c0773a9a268049e4bae329ca8ecadaed2db584f42a94d3c0c89b5a6c4c82569432034270b8d3c7b757421e66bfa118745ad1e0c1a3e1292fbd3f582dac865e153c336ef7f00e78c19b0863066930cb1b2ab57bf7810284d43ff8851f8587ba2f63100f3f9bb775fce71bdb36c97e5794f765c778e0ef13ec41f4f65250bbf7ce841ee2f3b40e4522fee5819a1d54946728f01316e4f8eb5e66d4a1bb7ab4f1573882d32abc5a6972c3e22ceec036ce2f253d9894f5d2e5a8d00edbf6e0effa5150b7b67e6", 0xdd) (async, rerun: 64) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) (rerun: 64) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r5, 0x600, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x48045}, 0x14) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r6, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r2, 0x4068aea3, &(0x7f0000000940)={0xdb, 0x0, 0x6}) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x2000)=nil, 0xd000) (async, rerun: 64) ioctl$RTC_UIE_ON(r1, 0x7003) (async, rerun: 64) set_mempolicy_home_node(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x0) (async) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000009c0)={{@my=0x1, 0xfff}, @host, 0x0, 0xe64, 0x4800000000, 0xfffffffffffffffb, 0x5, 0x5, 0x7}) (async) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, r6, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004080) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x60) (async, rerun: 64) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000c00)=0x1000) 4.964546177s ago: executing program 7 (id=2307): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf010004, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x0, '\x00', @string=0x0}}) syz_usb_connect(0x2, 0x3d, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0) syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) (async) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf010004, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x0, '\x00', @string=0x0}}) (async) syz_usb_connect(0x2, 0x3d, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0) (async) 4.443076916s ago: executing program 4 (id=2308): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = dup(r1) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000010e58910ac0564026b28010203010902120001000000000904e30200039b0200db1768edcd9ac9480fd65ed8d314a63c96416a4a68481aa1575cc2000000000000"], 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) r6 = dup(r5) read$FUSE(r6, 0x0, 0x2) (async) write$FUSE_INIT(r6, &(0x7f0000002100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x41912a08, 0xffff, 0x0, 0x1f, 0x1, 0x0, 0x0, 0x515244b379a1e22c, 0x7}}, 0x50) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x17, 0xa, 0x0, 0x3, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_x_sec_ctx={0x1, 0x18, 0x81, 0x9}]}, 0x1b}}, 0x40) r8 = dup3(r4, r3, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1115}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000880)="4a8e464b3d4657499ea54e5c7d563ff8776074ae642a55558dbfd1df9462b1259816b613ea02f9c5a2a4cc3bf701b7f4fa887e4ce6d2045a432a7b060f115097ae0e0e07f3f3704a688c03fccef3e273"}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x3}], 0x0, 0x1000000000000, 0x0}) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) 4.266406768s ago: executing program 4 (id=2309): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x9, 0x2, 0x200, 0x2, 0x9, 0x3}, {0x9, 0x5, 0x80, 0x2, 0x10, 0xd, 0x0, 0xe}, {0x9, 0x5, 0xd, 0x3, 0x10, 0x0, 0x16, 0x3}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x20, 0xd, 0xe8, {0xe8, 0x24, "2579f90aa41fe2fe012a12837d3391d6949f2da2e85408461f698eb28d5b4e474a3a8a3a53d900ef6d5ca8460d591c4a014ecebe6f7e13c16592183354ae08972778d1649176bc9f0f0fffb264ffe2021749106ade547f97b7e8ee72b3f53d3d14a1218fe7193debc5f918c57a12099dc2d1f85646c83365c4e5fa91e54ec4702de5d6bf2a68342552df7867d85343748062192932fdf7c3236d1a0fa88b798d97c48bb5f6d1ae9c060e78198310c3e0c283671d015281f118c66a5c107b308bcc28c511780d237648bc9253e8d418caddfcebaf49a1775512335bbf022c2d17a1fcc253f230"}}, &(0x7f0000000180)=ANY=[@ANYBLOB='J;\x00\x00\x00\x00\x00\x00\x00\x00']}, &(0x7f0000000340)={0x1c, &(0x7f0000000200)={0x0, 0x18, 0xcc, "597e3c97191f6e30d6f57ba0f8839506edcd2971a3cd9a2a8a5fe481cbe08fc5b4ddbf1abc97433d7a5722122ad6d07bec3e5c6f7c5499e4ca36dcb2cd8501f1889365214c3155f8aa37a5976de723ce8839515fe4d95d47774f645d5caace9bffb19bfdcf21c9b0ab0017dd4d9f122f7aa5dd45106d4ab6a803567eaeeaad7214ff54f8e86d73b76aba373009bc35d5b5b6d62ee6bf5e650cf90353e881d3e1cc9057a38f347e987178c1778ef4e8a337ac3de4bec8e45ba0825ea168745a6f8deb8eec417a483748295f6f"}, &(0x7f0000000800)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000300)}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r3, &(0x7f0000000000)={{0x3, @default, 0x4}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) bind$ax25(r3, &(0x7f0000000100)={{0x3, @bcast, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x20000000) r5 = syz_usb_connect$uac1(0x2, 0xb8, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.122958439s ago: executing program 2 (id=2310): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f00000002c0)="0000000000000002ff6900000006", 0xe, r1) r2 = memfd_secret(0x0) set_mempolicy(0x3, &(0x7f00000001c0)=0x4000000000002, 0x200f) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000000)=0x1, 0x4) ftruncate(r2, 0x51a9497) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1e) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 4.010447704s ago: executing program 9 (id=2311): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000005240), 0x400, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000005280)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x4090f72cc7aac8b0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000001b40)) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000002c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x1}) ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000580)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, r6}) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f00000001c0)=0x40000001, 0x4a) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x34, 0x0, r8, 0x0, &(0x7f0000c87000/0x8000)=nil, 0x800000, 0x1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r9, 0x0, 0x10001, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000400)={0x8, 0xc9, 0x2, 0x5, 0x6, 0x0, [{0x7, 0x2, 0x4, '\x00', 0x280a}, {0x6, 0x3ff, 0x9, '\x00', 0x2000}, {0xb49, 0x81, 0x22b2776b, '\x00', 0xe}, {0x9, 0x4, 0x5, '\x00', 0x130a}, {0x821, 0x81, 0x7, '\x00', 0x8}, {0xc, 0x5, 0x200, '\x00', 0x483}]}) r10 = syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_G_OUTPUT(r10, 0x8004562e, &(0x7f0000000240)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r8}) 3.890453532s ago: executing program 2 (id=2312): ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000080)) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2200) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000070000000500000008000300", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0c0006000200000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) r1 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x2c, r1, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x28}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x14) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r4]) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="6e61740000000000000000a500000000000000"], 0x48) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r4]) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xa8, 0x2d, 0x5c, 0x10, 0x7c9, 0x12, 0xbc4d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x22, 0x0, 0x3, 0xac, 0xcd, 0x63, 0x0, [], [{{0x9, 0x5, 0x1, 0x10, 0x10, 0x7f, 0x1, 0x4}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x80, 0x1e, 0x42}}, {{0x9, 0x5, 0xd, 0x8, 0x20, 0x3, 0x3, 0xf}}]}}]}}]}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r6, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xdf8e0563cc7ccb26}, 0x40) 3.783001933s ago: executing program 9 (id=2313): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x80, &(0x7f0000001080)=@qipcrtr={0x2a, 0x4}, 0x80) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000000)={0x10, &(0x7f0000000040)={0x0, 0x2, 0x6, "92afc102df3e"}, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0xfffffffffffffffd, &(0x7f0000000000)={0x0, 0x3, 0x23, @string={0x23, 0x3, "a2e10d238b9e4449fd4a659d437c8767a68b89045356ff4de249ac4edafbbc5cee"}}, &(0x7f0000000400)={0x0, 0x22, 0x19, {[@local=@item_012={0x2, 0x2, 0x1, "1d24"}, @global=@item_4={0x3, 0x1, 0x2, "d06f7662"}, @global=@item_4={0x3, 0x1, 0x0, "8ccff2c6"}, @global=@item_012={0x2, 0x1, 0x7, "709e"}, @main, @main=@item_012={0x2, 0x0, 0xa, "b34c"}, @global=@item_012={0x1, 0x1, 0x0, "dd"}, @main=@item_012={0x2, 0x0, 0xa, "a9d0"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0x79c}}}}, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x20, 0x16, 0xc5, "bca9130ad9e54d2efa87f620a0931eabf9a1a1b0d7d9e0c7b93af8610736fa9e678a48b701e62c85fb074402e4c1e8812aa6d34e8fab486d5945155c604d89085406a659d763f925d2ff03cd36912c80702e07a6202f6cee6da32284f652e8085ed3a56c85c1ba1e1bf01f08f7ae52877826b4ee186a7491dc6c78973af554d866f80523f18cbec5a48adce745241f1fd9b69340ade6e60d60b34c61d9e9bc3194adb6169a299439ee386309a8deffc29d3358b458752b2984e93cfeedea6d5baf8ac15b2a"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000340)={0x20, 0x1, 0x16, "9a4396851de8de07f955a697c50568c64b34b0608cf2"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x3}}) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmmsg$inet(r1, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002480)="ee", 0x1}], 0x1}}], 0x1, 0x8800) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x5, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x9, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r3 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040000000000000000000010902240003000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 2.287818349s ago: executing program 2 (id=2314): syz_init_net_socket$llc(0x1a, 0xa2b3389ba16ee6d3, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0xa2b3389ba16ee6d3, 0x0) socket(0xa, 0x1, 0x0) (async) r1 = socket(0xa, 0x1, 0x0) fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) (async) r2 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x40, 0xc, 0xfffffffc}) r5 = openat$cgroup_ro(r3, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) open_by_handle_at(r5, &(0x7f0000000380)=ANY=[@ANYRES8=r1], 0x40) setsockopt$llc_int(r0, 0x10c, 0x8, 0x0, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, 0x0, &(0x7f0000000380)) add_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="0c0f4476e923a5cd9e8fea9f646edadc40e5c04a7fa8f5ceedb8e15e3461acc6d3eb3c92060716a7334f489228c97aec0d677fb74ad6ac893c6f6ef421c14174a738b073ba8bf125f640b92661faed2d21b3e0c0f0f485a8fa0d9f21475ed5634ffd9024b0c07c2706a29c181767df3f84fc3cc06914150b22b503cbda71c2b0a51943f4db490887d6ae2aae3b6108f60bbc33b80ea866b05c2a463768cc216730c371286bf8818535e9e9105a762fc1ee64c32b5c27fad35a3ae81f1eb7eee02c9db671aee8a57a65527f5a6c4271ec326e91", 0xd3, 0xfffffffffffffffb) (async) add_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="0c0f4476e923a5cd9e8fea9f646edadc40e5c04a7fa8f5ceedb8e15e3461acc6d3eb3c92060716a7334f489228c97aec0d677fb74ad6ac893c6f6ef421c14174a738b073ba8bf125f640b92661faed2d21b3e0c0f0f485a8fa0d9f21475ed5634ffd9024b0c07c2706a29c181767df3f84fc3cc06914150b22b503cbda71c2b0a51943f4db490887d6ae2aae3b6108f60bbc33b80ea866b05c2a463768cc216730c371286bf8818535e9e9105a762fc1ee64c32b5c27fad35a3ae81f1eb7eee02c9db671aee8a57a65527f5a6c4271ec326e91", 0xd3, 0xfffffffffffffffb) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) ioctl$FICLONE(r9, 0x40049409, r6) (async) ioctl$FICLONE(r9, 0x40049409, r6) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000440)={{0x2, 0x0, 0x0, 0x2, 0x5}, 0xffff, 0xfffff2d4, 'id0\x00', 'timer1\x00', 0x0, 0xffffffff, 0xfffffffffffff2fa, 0xfffffffffffffffc, 0x6}) connect$pppoe(r1, &(0x7f0000000280)={0x18, 0x0, {0x4, @broadcast, 'pimreg\x00'}}, 0x1e) (async) connect$pppoe(r1, &(0x7f0000000280)={0x18, 0x0, {0x4, @broadcast, 'pimreg\x00'}}, 0x1e) 2.070655935s ago: executing program 2 (id=2315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000004e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={&(0x7f0000004ec0)={0x58, r1, 0x121, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x10b}, @NL80211_ATTR_PMKID={0x14, 0x55, "e188c54d4f9d2ccc233c5a040b53b300"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "b07ffa3003d4ab58e83b002e22cc9a0a"}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c00000000010104000000000000000002000000240001801400018008000100ac14143208000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000180006800400038006000100"], 0x7c}, 0x1, 0x0, 0x0, 0x24004004}, 0x0) 1.882497155s ago: executing program 2 (id=2316): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x3, 0xa, 0x2}) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0585609, &(0x7f0000000040)={0x0, 0xa, 0x0, 0x0, 0x20}) r3 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3201000092ecc620ac05c2773aeb010203010902240001000020000904c40102fffd01800905020210020200000905820200"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 1.847625666s ago: executing program 7 (id=2317): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x6, 0x0) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000340)={@any, 0x4}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000200)={0x1f, @none, 0x7}, 0xa) bind$bt_rfcomm(r4, &(0x7f0000000000), 0xa) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22082, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x4) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r9 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r9, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") fchdir(r3) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0003800", @ANYRES16=r8, @ANYBLOB="010000100000ffdbdf25030000000800030002000000080003000500000005000500090000000800020006000000080003000400000008000300070000001800018014000400fe8000000000000000000000000000bb04000180"], 0x60}, 0x1, 0x0, 0x0, 0x24840}, 0x4000) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f00000002c0)="3e3e0f01d5f20f1ca2660f38815ba8baa000b0a5ee83a100384bbaf80c66b8984de28166efbafc0c66ed652ed0a10300bad104ed0fc7bf72d2", 0x3a}], 0x1, 0x2c, 0x0, 0xa0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') ioctl$KVM_RUN(r0, 0xae80, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000400)=""/57, 0x39}], 0x1, 0x5, 0x196) r11 = accept4(r10, 0x0, &(0x7f0000000000), 0x800) r12 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201500200000040ac054c024000010203010902240001010410610f55ec487452b47e10ee95075309040007010301028009210f00096443beea78d621e3ad9834a5f12361f2cbcabd9cdf8798609a7d7a524e654cae71a3763feaf549f322a7cb51c3"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r11, 0x800448d2, &(0x7f0000000580)={0x1, &(0x7f00000004c0)=[{@none}]}) 1.350332045s ago: executing program 4 (id=2318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r6, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x1c, r10, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x94, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5b}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x44}, 0x4000) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x47}]}, 0x28}, 0x1, 0x0, 0x0, 0xc048885}, 0x4000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x3, 0x6001}, @val={0x1, 0x0, 0x0, 0xfffd, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @loopback, {[@rr={0x7, 0xf, 0x99, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2d}]}, @end, @timestamp_addr={0x44, 0x1c, 0xb2, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0x2}, {@multicast2, 0x3}, {@multicast2, 0x100}]}, @timestamp={0x44, 0x1c, 0xc0, 0x0, 0x1, [0xfffffffe, 0x0, 0x7fffffff, 0x7, 0xffffffff, 0x1000]}]}}, "2e3778addb008b63"}}}, 0x8e) 945.989396ms ago: executing program 4 (id=2319): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregs(0xe, r2, 0x4, &(0x7f0000002080)=""/4096) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 881.579683ms ago: executing program 4 (id=2320): r0 = socket$netlink(0x10, 0x3, 0x14) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3c, 0x3, 0x0, 0x0, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x30e967cba0869a98, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0, 0xfffffffffffffe9b}}], 0x4a4, 0x24000044) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 790.717252ms ago: executing program 4 (id=2321): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) setitimer(0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syz_tun\x00', 0x1}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864f0", 0x13}, {&(0x7f0000000100)='\x00', 0x1}, {&(0x7f0000000800)="38c8114f", 0x4}], 0x3) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x600, &(0x7f0000000200)=ANY=[@ANYBLOB="0600004eb619483c13b80000cb00004e3b50e1f3832e70b9092c2a63cc656295d2b24733e9126f0b1c6aecf7ea69181cf5b02d3fd0c707e4f963f1fda027dd9de7df03f880f6d6279d6bd6158674644ade9e4d6268f9e2621e1d8e7f7dbe3e3a252e6203fcdd8c8ecfea4e6740d2e2bd0e31636103013849c9b06c0cae1052075d1944f2e3ecff2c0d3ca055d32a9d51500481b8a3e5f1cc0d887d9b47493f084375912babff62d62173d300185abc0ab3c5adc1544c7243f7be71efa85f8d59cc2381a53c01396b934af3983d80b0a99fb597f962d3356dc7a9ad00e900004e51ac481b80a8ec44cffd7eba473c11cddb763af18656bec48eaa5207f8c188f1a9578c49197f33aa2dfee97a97ebc02d961a24e877e98587cd180f8b027d544bc1892e58d7cc037c84e7898d49157eddb77f1be7beb0501535a829da714b2629e14f684baafcafffa73058e6261a7c0c316bb44f00e34cf02606389d233a392818009f78bbe15678dc2ef6091410940d86bb0477a413633cbf986869578d9c1385b376f3759a24d1014668b739c363c74964179dca5ecdad9f9507d3f7573d728aeb65a89c9b0b30e58713aa7ba501f72a0dcdc9c308e31732e44bb33f597346fb054c0f6168965da6000000e200004e73949a27043b1d4f95462f9abcb591781621caf807b3736ffaa8a5c34996038a1a73b33c0642b09bf5f81ff40da88ab67ad4db85fe31ddc75a1b93c0948d128f252fead9ec3d308b811b2566d15e50daab4004db661c22fc0e47d02643e4a8bdb4c0be3ce3a06ec112f4354491ffd4ad0e57e8b5b64b0c84fd80edc36781fd77e25af58c867abc7f45296aa2b44424ba0ab68ab6115f1674cdaa31aa9f7b2cbc52e65f4df1a1e33cf05aae6484e99637223378ddf9701c8eb6bed7fd76accbb4d3554f78052ba2a92720b56becd8e540cca837648aa5e64cf7a0c3dfc383c63272aa0000dd00004eb1d6d4c904f6ff04051247a53139fa22bf3565330b2cc605c0a4c1b33601a6994629b9147d72c36c9795ef3993e0a1483856427a68d9381286bbe29eb4b6779e22a504c4737b6148a83b621113970efb85464af3118724caf4707eac2a4ed5f3dfba3b908c08dde70c06d1094d971f92397a97fdaf02c062670bcae4259ed8415b17c5c1b2a64133fa78516f6661f3a88d8fe98a41bbe079148e7d8ff44b69b5912d86fe0b543eb15112d3046fa3e2e635dd070599c55c15cfb32e9f52f676b84c2b83ffebb730b978b78ab7bfcf3aab0e7bcf3c13bc5e2be96c732481000000b100004e5695788b034c670eec331ed5a5261e7b79595493ee5323d0b4121d30cc66e6254395f65a364cdaecb405cabc6456ace335f6b2764d85e54c78e1340951ba41ce08a97b3adcd81e9003c4590d2a0ac39eb91ff99fac8a1897946ddefea772564369929c6ddf45c6a6e6b21cc2b5960cf4e9280d0aad600f87912e2f4f0d8db8990526931314b7196a3cfdd8bb31eb83c21befe5064af1f59e3a8d7ce9449ee8be23ce56c92c43de9c7d17f983e006ef97e0000000cf00004e86c06a58698bcafd036ce21a9efaeb3e2bdf8360afee229e45f764cfd067e76ef5e01a9f14d33f64a1f9345a7dce"]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x8, 0x0, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r5, 0x890c, &(0x7f0000000140)={@null, 0x3, 'gre0\x00'}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="401530c1e43ee98408c40c00000071aeec20bb0ee4e3de261706cf5d96c6f4ef8dc20cec8530d53c8fd2fdd3dd0000000000000000"], 0x0, 0x0, 0x0, 0x0}) 709.426849ms ago: executing program 9 (id=2322): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) getsockopt$inet_int(r4, 0x0, 0xe, 0x0, &(0x7f00000004c0)) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r5, 0x4048aecb, &(0x7f0000002900)={{0x0, 0x0, 0x80, {0xffffffffffffffff, 0xffff1000, 0x3}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156fb4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d475bd5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95f3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fec000000b6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641f9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33201f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49d2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a34313315836bb7291764b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2dbed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3ad34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33dff5ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e02000000be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c0851800c6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e400000f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5aa9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50d1c6c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) faccessat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x2) mmap(&(0x7f00002c0000/0x4000)=nil, 0x4000, 0x3000003, 0x100010, r0, 0xbdcfb000) 591.524459ms ago: executing program 9 (id=2323): r0 = socket$kcm(0xa, 0x2, 0x73) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x34, 0x1000, 0xd, 0x200, 0x5e, 0xcd, 0x73, 0x1, 0xfb, 0x6, 0x8, 0x4, 0x3ff, 0x9, 0x4, 0x6e, [0x7, 0x1]}}) mount$fuse(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="66642d1ba0d5ffb64d", @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=r1]) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x800) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x4}}, 0x26) sendmsg$inet(r0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000540), &(0x7f0000000a80)=0x8) r5 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000140)="7f9da83b8f1f26525fd60fcc1a1ef578451d42f7a63ee929e085bf11db42", 0x1e}, {&(0x7f0000000200)="323a16dad137fd4bc55b55d689113360aaf394e4f6874b814a4653d7eeeaf8432156315210c69f26248e8e07812e59f66810019ebf8e6a471fff0e76943be52780b9f2b2e0cbc7e9e8c330ab516c6cda165146803ec94be05d88c7e23c45fe9ea6c10120002a818373045857ef86c23aeaff21bf6ed07446867879ddb8dc34a1f790561eb527406a6560a2a6f893dbee8fc0f5bea8c6a264449faa8c6b1b4b42c4647933e221201e5287f03279be3ab214d3ef3ec5672b557d6dc1e0", 0xbc}, {&(0x7f00000002c0)="cc4bbb6fb805e82b6c4196fc1f99a4caaaf6b3b323bacff512bcb7b853ee42ad830b43880934244a3f6c9b4c53b94449a7c937c35151044ab7ceb7e7b61f89aa62f550cf783721c303336042f21e1cb29921ce4d208c4348df87274a1897e924d3c213ec8900761a7f177fe51c02f27472f821704d6e86", 0x77}, {&(0x7f0000000340)="0381d5cd13f5c56337050ef9739c312a1ca46bfe41faa4cd29ae349ac82f7aa7c341a4c450931ca08de5843ae5d35600331ca66a8ea0120eb8bef501dab5c16223ae2a5471b5c3b4e8bdb063675de5ef441c54458928b5c787c11741121ff7b7a1c5c9e2a005589b02905ba74a4aaac3f2326a6dd23a70dd9a19dc44e935063116bfc6e9b1b2acc76d5e501187cfc2f8561ae64019f5c86bdde46b32546e78d20b449112f32c49dfcda6c2f2e45359df27e177e6c8313e0206975076eb0206e7452e0a5f4e8a8b47c908ed5f26c00c1993", 0xd1}, {&(0x7f0000000440)="6540f73988f87e1fe37216b1f55008233a6dec3a2227305f22b317ab4097aedecae7b1226331d961cd3de40ac4485f9c2071111b34b09074c1e61ce39d1e9fcb455913085bdd43f7235322f03bf8e6b142fd2ddee3047f6c9813f4d6fd99cab5f8b03d0f3572dc0c85661e9d530b0a9062d2c169400acfbba001da4ff12b2f59ae681ed4b5877c3ecdaf7c", 0x8b}, {&(0x7f00000005c0)="b18f2ab1a96fb93aa2e208fc07bae84d17364e7b1ca9e182ce24f32ba7328ad46eaf6c70e032deba1907c56ca90a8a6eae4caceb9cace92ccd2086cd553b7133d2c374baed58c2fc999373bfd3d875b23c25eee1bb0ad48c4e88944898f989b44c92310bf5a27c3a7a719709558ed877a7c999019e5f3707ce558a7c3d7adb74cc7a03328bb2a941fe674b50b4adad14e9acede5649fed45e200543570cf639486f18c4ef3f5ab6d66fdac0da980561801a4e5c73b49de860294", 0xba}, {&(0x7f0000000680)="d4ca543e2975a84e63d8d41565bb268783332e160364db1efb2b0390c3b5779b1c201531b4dacc7351fcbe725227057d9e82700dfc05d5cbe2d98d790275d2ddd0c7f8434f74cc55d9c480f0dbffda998969b8f289ce7ed21deed56a1183a3cbfc8c1267c96a1ba98f66bcb3f84a2bdb4e303efd4f7f7f98f1d4bbf3bc87cf6bbc9a58c5795ceb2a82751ad93dabb26a77759e3f94dd2b477dbd9a2f3499d23e0c8a2bf322", 0xa5}, {&(0x7f0000000740)="e88fbb587f63a69d3b6b4e9e61597c46c80cbd871955244c749494c2b4e670cc9e6996157352d5c322c0f13f27ddd836c43245b038c753ae1497b0db7a4e22ca50fa8dfbe352ffb2f4efaf6177502e710f0451cce52955cb9248a652e0a4696ce1d75c56f4f9d8d2d77dd43b515171501640235c63b377cc23dcb3cff3fc9c8beed683d52040900c0f42e6e20d2d6e16f000936a013a3c1f5870fc70933e9c627d27", 0xa2}, {&(0x7f0000000800)="a343fef01691701afbf0b6ac62d69d5a6d7e0659a065c6420a18077a501b6c73421a16e77fe659c1a1cf10e8c0a3c1905cf497d6c1f8e90e71882143550de6d95de4fa50ba540954a30e94993cb0bcbc46a7ba255fc2b675e25848f15f40695427c47a71965f9aa38f8facd5c749d56044d04fa8c5d9fdeb0d4519f2b2398aa79f227a88e5c8678529a15e24606530a8e711a99c98732e6416bf944098be9438cc0feba89d4cfc6dac59186dcd34076c7a5b5441cd67562b1151ccd0", 0xbc}], 0x9, &(0x7f0000000980)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x34}}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0xdd, 0x0, 0x0, [0x0]}, @cipso={0x86, 0x15, 0x2, [{0x1, 0x7, "f323c53a99"}, {0x2, 0x8, "8377cacb8123"}]}, @generic={0x44, 0xe, "b6967b1cd68c59760f8ebf9a"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @broadcast, @rand_addr=0x64010100}}}], 0xc8}, 0x8004) r8 = fcntl$dupfd(r5, 0x0, r5) write$binfmt_script(r8, &(0x7f0000000100), 0xfffffd9d) write$P9_RFLUSH(r8, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0xca80) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 490.623853ms ago: executing program 9 (id=2324): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r4, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000080)=[{0x3, 0x6600, 0x1, &(0x7f00000003c0)='t'}, {0x6, 0x800, 0x68, &(0x7f0000000240)="ad09433c514f77c56c802dc45afb9e6c925f4bf558b5460deabce7bbcf1c2a493aefe5dce82886ce2aedc0339d6807102002cc92cad67b6c856ad93cf4f667ed0110b4ab9381360f25c819b8849d3ea41b7dee96a6468b53dc543a6d9c00c31b2836a354c5cb9b89"}], 0x2}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) r5 = gettid() setpgid(0x0, r5) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10.886889ms ago: executing program 7 (id=2325): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$uac1(0x1, 0xc0, &(0x7f0000000dc0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xae, 0x3, 0x1, 0x40, 0x20, 0x70, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa4}, [@selector_unit={0x9, 0x24, 0x5, 0x5, 0x10, "11c09769"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x204, 0x4, 0x7, 0xb, 0xe7, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0xfd, 0x3}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x73, 0x1, 0xf, 0x9, '{', "bbc74b"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x1, 0x8, 0x2, "14"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xe, 0x1, 0x7, 0xa, "6ae45813"}, @as_header={0x7, 0x24, 0x1, 0xec, 0x8, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb7, 0x9, {0x7, 0x25, 0x1, 0x180, 0x3, 0x1c7f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xfc, 0x3, 0x10, 0x3, 'U', "bd"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x80, 0x3, 0x81, {0x7, 0x25, 0x1, 0x2, 0xf5, 0x5ca}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x201, 0xf7, 0xf, 0x7f, 0x10, 0xb7}, 0x52, &(0x7f0000000640)={0x5, 0xf, 0x52, 0x6, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x1, 0xf, 0x0, [0xff00, 0x3fc0]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0xf, 0x9}, @ssp_cap={0x18, 0x10, 0xa, 0x3f, 0x3, 0x2, 0xff00, 0x5, [0xcf, 0xff00, 0xff3fcf]}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "818cbcd32e21fe62bec874ecd04f131c"}]}, 0x4, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x80a}}, {0x48, &(0x7f00000006c0)=@string={0x48, 0x3, "99ad75e30236283db15256ed52d6f551c6210a7916cb61438a47f408ea42beaa7126fd4031f77c644b283c59bf28b969f935c5f4b0a927b9b7a6cb65ace90e2ccba0ce431672"}}, {0xfc, &(0x7f00000013c0)=@string={0xfc, 0x3, "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"}}]}) syz_usb_control_io$uac1(r1, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x40, 0x31, 0x95, {0x95, 0x30, "09b04ae60908a360fa11a225db61f64b636fd69fd338cacec77c4ec2c2c627a0930aa83aa77d1288c39209c29d670b3937e9df17743378b383886e57d9925571e5279a0b5c2bdb613be899fa5df046708cf95b685af9ecab9947c26c1ae7182b9da94f53db4476ec84fc5ea056d0feb9d6158532dfc53a3f443254466d0fdf90ecbba81e127faac44b0e593aaacc4853061368"}}, &(0x7f0000000a00)=ANY=[@ANYBLOB="00033d0000003d039da17a543ab527f9b1e77fb8b012e989188a99535924fc5bf309a7c7adbe034a827500d45560361e340f3c2971909049211e4f82337f"]}, &(0x7f0000000d40)={0x44, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0009a00000007096dcdf0a01ce8a5c494676b76703d9c70bb08c2e50012c3e07f1136001bd5ba600a84c15b6cf551a7cc826f819b4d4f8b13a78dd8b8da4b6ab16066dcbaba4df3dd8db0353390e7f1c50b06c80f617257c0669f9b3f11342a0a00b7b7d2500ce2116eea9ed671097d409ddf8be36094ed7251c282d8f1eff462fb353ce4bcc47ec8e507a255caf5becc16824b8bee4e6f5b501bd5248708c212d9129b8b393"], &(0x7f0000000b80)={0x0, 0xa, 0x1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x81, 0x1, "c0"}, &(0x7f0000000c40)={0x20, 0x82, 0x2, 'l '}, &(0x7f0000000c80)={0x20, 0x83, 0x1, "fc"}, &(0x7f0000000cc0)={0x20, 0x84, 0x2, '~&'}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "410ef7"}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1477, 0x1006, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0xc, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0xb69}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7f, 0x7, 0x6}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x3, 0x5, 0x7, 0x40}, 0x5, &(0x7f0000000600)={0x5, 0xf, 0x5}, 0x6, [{0x88, &(0x7f00000002c0)=@string={0x88, 0x3, "4698b118696d01b7a40f86c437a181c24e64b0090caee4299b50485c6d480b49a06ca960ff7737fb9d27677b80eec5c928f874242ecfaa2bcabdf109b63af9f5d1f6f6d48fef08873e8af5d76f01e17dafdb07f12c462648cf4b8b7339576ffb4fbec23cb545062fab776e7d544af28ff6cd8de2fdf0c124a96d8618e20549c76c7bd7de8db8"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x80a}}, {0x19, &(0x7f0000000280)=@string={0x19, 0x3, "384285a38de0d8c3e4e6676091d111b2bade098b0e89f3"}}, {0xe0, &(0x7f0000000400)=@string={0xe0, 0x3, "efcdd479f0f160f77af67f0bf1b70a4c619356a3d0bcf26fed98db468dbe2f5bc782f8b32f4efd072f75ea37202a8e0c3c0f3b574a3a7d42737456b17d2fe3db936116e4923ce458e6053a7cd9476f72c37937e5395a855b3ea50a89b1ab457ee29017a0f10049057af83ab59dedcfb72a6883b77f0b25641d96b5dae7d5b7a0ddbd0a1ef24d971845013a30c193523732438dc00276fe7bc51c36612d5b030eb8d17f042440bc8baef01bc239740f80812dbdd2db6fa857a71c769893738a9bbd95d95db4ade12da4c2786d4f8c3b601cabae183d834c2e9671334726a3"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x441}}, {0x35, &(0x7f0000000540)=@string={0x35, 0x3, "fc23f2a058907330f191156e17cbc6732e97a493cecd1527e7f4e3685d1057274a663b0d9afd801e54d9debc989ec3146f9097"}}]}) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x23, 0x10, {0x10, 0x11, "86ee8fdf709a7a0167756816fd0a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000012c35b400304106098c6000000010902120001000000000904"], 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000e80)={0xb, 0x1, {0x4380, @usage=0x42, 0x0, 0xa, 0x40, 0xb, 0x3, 0xfffffffffffffffe, 0x461, @usage=0x101, 0x6, 0x2, [0x3, 0x2, 0x7, 0x0, 0x4, 0x2]}, {0xc47f, @usage=0x101, 0x0, 0x6e66, 0x1ff, 0x9, 0x6, 0x4, 0x42, @struct={0xb8000000, 0x6}, 0x3, 0x1, [0x7, 0xfffffffffffffffc, 0x800, 0x6da5, 0x7, 0x7]}, {0x1000, @struct={0x1, 0x9}, 0x0, 0x1, 0x662d, 0x2, 0x54, 0x92ba, 0x6, @usage=0x8, 0x1, 0x5, [0x8, 0xc7e, 0x0, 0x9, 0x5, 0xc]}, {0x2, 0x5, 0x2}}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r6, 0x603, 0x70bd24, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xfe}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xba}]}, 0x30}}, 0x10) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000380)={r5, 0x176, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x185a02) syz_usb_connect$cdc_ecm(0x2, 0x5d, &(0x7f0000001280)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x1, 0x1, 0x3, 0x30, 0x2, [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x1000, 0x9, 0xb9}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x81, 0x0, 0x80}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0xf2, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xc, 0xfd, 0x9}}}}}]}}]}}, &(0x7f0000001380)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x300, 0x6b, 0xf6, 0xff, 0x20, 0xff}, 0x5, &(0x7f0000001300)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x436}}]}) ioctl$I2C_RDWR(r9, 0x707, &(0x7f00000001c0)={&(0x7f0000001280)}) 0s ago: executing program 2 (id=2326): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000340)={0x1, 0x1, {0x0, 0x1a, 0x11, 0x19, 0x5, 0x4f5c, 0x1, 0x5e}}) r1 = dup(0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c701ef915d564d90c200", 0x2a) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r3 = gettid() r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x5, &(0x7f0000000140)={0x8, 0xfffffffb, 0x4}) rt_tgsigqueueinfo(r4, r4, 0x13, &(0x7f00000003c0)={0xc, 0x0, 0x7}) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0x7]}, 0x0, 0x8) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4008800) getsockopt$inet_mptcp_buf(r6, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000000)=0x1000000010) syz_usb_ep_read(0xffffffffffffffff, 0x9, 0x0, 0x0) r7 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000240)=ANY=[@ANYRES64=r2], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x408}}, {0xffffffffffffff1c, &(0x7f0000000440)=@string={0x30, 0x3, "9b3c5a92c8d42162d6fd7b7771cd1ad8900a15fe31a726d15843e9ca06d021f328c18f1dad23a45fb950853df63c"}}]}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x3defda02, 0x773280) ioctl$DRM_IOCTL_GEM_OPEN(r8, 0xc010640b, &(0x7f0000000080)) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x2d}, 0x18) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) kernel console output (not intermixed with test programs): =0x7f805b18efc9 code=0x7ffc0000 [ 395.523816][ T30] audit: type=1326 audit(1761505854.903:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11674 comm="syz.9.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f805b18efc9 code=0x7ffc0000 [ 395.563457][ T30] audit: type=1326 audit(1761505854.903:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11674 comm="syz.9.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805b18efc9 code=0x7ffc0000 [ 395.586488][ T30] audit: type=1326 audit(1761505854.903:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11674 comm="syz.9.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805b18efc9 code=0x7ffc0000 [ 395.615847][ T30] audit: type=1326 audit(1761505854.903:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11674 comm="syz.9.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f805b18efc9 code=0x7ffc0000 [ 395.672398][ T30] audit: type=1326 audit(1761505854.903:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11674 comm="syz.9.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805b18efc9 code=0x7ffc0000 [ 395.715294][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1654'. [ 396.004354][T11697] 9pnet_fd: Insufficient options for proto=fd [ 396.780634][T11705] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1662'. [ 396.791193][T11705] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1662'. [ 397.175025][T11725] lo speed is unknown, defaulting to 1000 [ 397.189699][T11725] lo speed is unknown, defaulting to 1000 [ 397.197163][T11725] lo speed is unknown, defaulting to 1000 [ 397.438905][ T9] lo speed is unknown, defaulting to 1000 [ 397.445151][T11725] infiniband syz2: set active [ 397.451563][T11725] infiniband syz2: added lo [ 397.477795][ T5149] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 397.602263][T11725] RDS/IB: syz2: added [ 397.611246][T11725] smc: adding ib device syz2 with port count 1 [ 397.619790][T11725] smc: ib device syz2 port 1 has no pnetid [ 397.633825][ T9] lo speed is unknown, defaulting to 1000 [ 397.653357][T11725] lo speed is unknown, defaulting to 1000 [ 398.042953][T11725] lo speed is unknown, defaulting to 1000 [ 398.659597][T11725] lo speed is unknown, defaulting to 1000 [ 398.987170][T11725] lo speed is unknown, defaulting to 1000 [ 399.004989][T11773] program syz.4.1693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.207764][ T9] syzkaller0: tun_net_xmit 76 [ 400.212982][ T9] syzkaller0: tun_net_xmit 76 [ 400.280119][T11793] syzkaller0: delete flow: hash 360534220 index 1 [ 400.422872][T11811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1710'. [ 401.418395][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 401.418412][ T30] audit: type=1326 audit(1761505860.933:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11840 comm="syz.9.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805b18efc9 code=0x7ffc0000 [ 401.524231][ T30] audit: type=1326 audit(1761505860.963:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11840 comm="syz.9.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f805b18efc9 code=0x7ffc0000 [ 401.606823][ T30] audit: type=1326 audit(1761505860.973:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11840 comm="syz.9.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805b18efc9 code=0x7ffc0000 [ 401.688352][ T30] audit: type=1326 audit(1761505860.973:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11840 comm="syz.9.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805b18efc9 code=0x7ffc0000 [ 401.768510][ T30] audit: type=1326 audit(1761505860.983:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.4.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32b58efc9 code=0x7ffc0000 [ 401.811997][ T30] audit: type=1326 audit(1761505860.983:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.4.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32b58efc9 code=0x7ffc0000 [ 401.859053][ T30] audit: type=1326 audit(1761505860.983:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.4.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fb32b58efc9 code=0x7ffc0000 [ 401.917397][ T30] audit: type=1326 audit(1761505860.983:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.4.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32b58efc9 code=0x7ffc0000 [ 401.972300][ T30] audit: type=1326 audit(1761505860.983:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.4.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32b58efc9 code=0x7ffc0000 [ 402.035235][ T30] audit: type=1326 audit(1761505861.263:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11854 comm="syz.4.1730" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb32b58efc9 code=0x0 [ 404.269775][T11915] netlink: 'syz.9.1758': attribute type 17 has an invalid length. [ 404.661664][T11915] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 405.368838][T11958] syz.4.1777 (11958): attempted to duplicate a private mapping with mremap. This is not supported. [ 405.382280][T11958] netlink: 'syz.4.1777': attribute type 11 has an invalid length. [ 405.390242][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1777'. [ 406.084823][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1792'. [ 406.094424][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1792'. [ 406.272044][T12002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1795'. [ 407.551625][ T1007] Bluetooth: hci3: Frame reassembly failed (-90) [ 407.560627][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 407.560644][ T30] audit: type=1326 audit(1761505867.063:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12059 comm="syz.7.1822" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcb9138efc9 code=0x0 [ 408.064861][T12079] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1831'. [ 408.140525][ T30] audit: type=1326 audit(1761505867.653:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12084 comm="syz.4.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32b58efc9 code=0x7ffc0000 [ 408.166636][ T30] audit: type=1326 audit(1761505867.653:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12084 comm="syz.4.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32b58efc9 code=0x7ffc0000 [ 408.211436][ T30] audit: type=1326 audit(1761505867.653:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12084 comm="syz.4.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32b58efc9 code=0x7ffc0000 [ 408.246559][ T30] audit: type=1326 audit(1761505867.653:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12084 comm="syz.4.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32b58efc9 code=0x7ffc0000 [ 408.292783][T12087] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1834'. [ 408.303743][ T30] audit: type=1326 audit(1761505867.673:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12084 comm="syz.4.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fb32b58efc9 code=0x7ffc0000 [ 408.326759][ T30] audit: type=1326 audit(1761505867.673:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12084 comm="syz.4.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32b58efc9 code=0x7ffc0000 [ 408.404305][ T30] audit: type=1326 audit(1761505867.673:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12084 comm="syz.4.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32b58efc9 code=0x7ffc0000 [ 408.432166][ T30] audit: type=1326 audit(1761505867.673:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12084 comm="syz.4.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb32b58efc9 code=0x7ffc0000 [ 408.455258][ T30] audit: type=1326 audit(1761505867.673:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12084 comm="syz.4.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb32b58efc9 code=0x7ffc0000 [ 409.190111][T12134] loop9: detected capacity change from 0 to 7 [ 409.197209][T12134] Buffer I/O error on dev loop9, logical block 0, async page read [ 409.215015][T12134] Buffer I/O error on dev loop9, logical block 0, async page read [ 409.223931][T12134] Buffer I/O error on dev loop9, logical block 0, async page read [ 409.226220][T12136] tmpfs: Bad value for 'mpol' [ 409.233134][T12134] Buffer I/O error on dev loop9, logical block 0, async page read [ 409.267648][T12134] Buffer I/O error on dev loop9, logical block 0, async page read [ 409.275635][T12134] Buffer I/O error on dev loop9, logical block 0, async page read [ 409.287146][T12134] Buffer I/O error on dev loop9, logical block 0, async page read [ 409.296080][T12134] ldm_validate_partition_table(): Disk read failed. [ 409.303426][T12134] Buffer I/O error on dev loop9, logical block 0, async page read [ 409.325354][T12134] Buffer I/O error on dev loop9, logical block 0, async page read [ 409.354944][T12134] Buffer I/O error on dev loop9, logical block 0, async page read [ 409.363486][T12134] Dev loop9: unable to read RDB block 0 [ 409.369713][T12134] loop9: unable to read partition table [ 409.375559][T12134] loop9: partition table beyond EOD, truncated [ 409.390623][T12134] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 409.390623][T12134] ) failed (rc=-5) [ 409.557579][ T52] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 409.692671][T12157] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1867'. [ 409.715852][T12157] unsupported nlmsg_type 40 [ 409.722848][T12159] tipc: Started in network mode [ 409.727967][T12159] tipc: Node identity 86c9f313ddef, cluster identity 4711 [ 409.735734][T12159] tipc: Enabled bearer , priority 0 [ 409.757005][T12154] tipc: Resetting bearer [ 410.467069][ C1] sd 0:0:1:0: [sda] tag#4187 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 410.477468][ C1] sd 0:0:1:0: [sda] tag#4187 CDB: Write(6) 0a 00 72 47 43 76 [ 410.636957][ T36] Bluetooth: hci3: Frame reassembly failed (-90) [ 410.648206][T12178] Bluetooth: hci3: Frame reassembly failed (-84) [ 410.744771][ T798] tipc: Node number set to 1529279251 [ 412.517115][T12154] tipc: Disabling bearer [ 412.592908][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1886'. [ 412.672816][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 412.672832][ T30] audit: type=1326 audit(1761505872.183:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12202 comm="syz.8.1888" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7960f8efc9 code=0x0 [ 412.706189][ T52] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 412.712812][ T5149] Bluetooth: hci3: command 0x1003 tx timeout [ 413.054289][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1897'. [ 413.063522][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1896'. [ 413.072703][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1897'. [ 413.244809][ T12] Bluetooth: hci3: Frame reassembly failed (-84) [ 413.279533][T12230] usb usb7: usbfs: process 12230 (syz.9.1900) did not claim interface 0 before use [ 413.767964][T12236] program syz.7.1903 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 414.041643][ T30] audit: type=1326 audit(1761505873.553:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12250 comm="syz.8.1910" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7960f8efc9 code=0x0 [ 414.649235][T12280] netlink: 112 bytes leftover after parsing attributes in process `syz.9.1922'. [ 415.303124][ T30] audit: type=1326 audit(1761505874.813:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12299 comm="syz.7.1932" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcb9138efc9 code=0x0 [ 415.325067][ T52] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 415.876514][T12314] netlink: 'syz.9.1938': attribute type 2 has an invalid length. [ 415.886764][T12314] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1938'. [ 417.083991][T12338] x_tables: duplicate underflow at hook 2 [ 417.185368][ T30] audit: type=1326 audit(1761505876.693:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12340 comm="syz.7.1950" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcb9138efc9 code=0x0 [ 418.597407][ T52] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 418.597686][ T5149] Bluetooth: hci3: command 0x1003 tx timeout [ 419.063343][ T30] audit: type=1326 audit(1761505878.563:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12383 comm="syz.4.1968" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb32b58efc9 code=0x0 [ 419.364711][ T44] Bluetooth: hci3: Frame reassembly failed (-84) [ 419.455983][T12391] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1971'. [ 419.465519][T12391] IPVS: Unknown mcast interface: ve [ 419.964969][T12400] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1975'. [ 420.305216][ T30] audit: type=1326 audit(1761505879.813:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12413 comm="syz.4.1982" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb32b58efc9 code=0x0 [ 420.411925][ T30] audit: type=1326 audit(1761505879.923:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12420 comm="syz.7.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9138efc9 code=0x7ffc0000 [ 420.445226][ T30] audit: type=1326 audit(1761505879.923:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12420 comm="syz.7.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9138efc9 code=0x7ffc0000 [ 420.473013][ T30] audit: type=1326 audit(1761505879.963:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12420 comm="syz.7.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb9138efc9 code=0x7ffc0000 [ 420.496693][ T30] audit: type=1326 audit(1761505879.963:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12420 comm="syz.7.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9138efc9 code=0x7ffc0000 [ 420.519771][ T30] audit: type=1326 audit(1761505879.963:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12420 comm="syz.7.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9138efc9 code=0x7ffc0000 [ 420.552091][ T30] audit: type=1326 audit(1761505879.983:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12420 comm="syz.7.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcb9138efc9 code=0x7ffc0000 [ 420.575473][ T30] audit: type=1326 audit(1761505879.983:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12420 comm="syz.7.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9138efc9 code=0x7ffc0000 [ 420.614245][ T30] audit: type=1326 audit(1761505879.983:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12420 comm="syz.7.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9138efc9 code=0x7ffc0000 [ 421.019353][T12434] program syz.8.1990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 421.221390][T12439] lo speed is unknown, defaulting to 1000 [ 421.357506][T12446] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1995'. [ 421.367015][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1996'. [ 421.383245][T12446] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1995'. [ 421.397477][ T52] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 421.397494][ T5149] Bluetooth: hci3: command 0x1003 tx timeout [ 422.174861][T12474] program syz.7.2007 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 422.318537][T12476] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2008'. [ 422.344638][T12476] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2008'. [ 423.035043][T12510] FAULT_INJECTION: forcing a failure. [ 423.035043][T12510] name failslab, interval 1, probability 0, space 0, times 1 [ 423.047831][T12510] CPU: 1 UID: 0 PID: 12510 Comm: syz.8.2024 Not tainted syzkaller #0 PREEMPT(full) [ 423.047847][T12510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 423.047856][T12510] Call Trace: [ 423.047861][T12510] [ 423.047865][T12510] dump_stack_lvl+0x189/0x250 [ 423.047887][T12510] ? __pfx____ratelimit+0x10/0x10 [ 423.047902][T12510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.047913][T12510] ? __pfx__printk+0x10/0x10 [ 423.047926][T12510] ? __pfx___might_resched+0x10/0x10 [ 423.047936][T12510] ? fs_reclaim_acquire+0x7d/0x100 [ 423.047953][T12510] should_fail_ex+0x414/0x560 [ 423.047968][T12510] should_failslab+0xa8/0x100 [ 423.047978][T12510] kmem_cache_alloc_node_noprof+0x8c/0x710 [ 423.047998][T12510] ? __alloc_skb+0x112/0x2d0 [ 423.048007][T12510] ? rcu_is_watching+0x15/0xb0 [ 423.048020][T12510] __alloc_skb+0x112/0x2d0 [ 423.048031][T12510] audit_log_start+0x1ad/0xa20 [ 423.048046][T12510] ? __pfx_audit_log_start+0x10/0x10 [ 423.048071][T12510] ? __pfx___cant_migrate+0x10/0x10 [ 423.048089][T12510] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 423.048108][T12510] audit_seccomp+0x64/0x190 [ 423.048127][T12510] ? rcu_is_watching+0x15/0xb0 [ 423.048142][T12510] __seccomp_filter+0xce4/0x1e10 [ 423.048160][T12510] ? __pfx___seccomp_filter+0x10/0x10 [ 423.048185][T12510] ? __fget_files+0x3a0/0x420 [ 423.048196][T12510] ? __fget_files+0x2a/0x420 [ 423.048209][T12510] ? __secure_computing+0xe2/0x2a0 [ 423.048221][T12510] syscall_trace_enter+0xaa/0x160 [ 423.048236][T12510] do_syscall_64+0xd3/0xfa0 [ 423.048244][T12510] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.048257][T12510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.048267][T12510] ? clear_bhb_loop+0x60/0xb0 [ 423.048279][T12510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.048292][T12510] RIP: 0033:0x7f7960f8d9dc [ 423.048305][T12510] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 423.048318][T12510] RSP: 002b:00007f7961dd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 423.048336][T12510] RAX: ffffffffffffffda RBX: 00007f79611e5fa0 RCX: 00007f7960f8d9dc [ 423.048349][T12510] RDX: 000000000000000f RSI: 00007f7961dd50a0 RDI: 0000000000000006 [ 423.048358][T12510] RBP: 00007f7961dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 423.048368][T12510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 423.048379][T12510] R13: 00007f79611e6038 R14: 00007f79611e5fa0 R15: 00007ffc3142c158 [ 423.048405][T12510] [ 423.447437][ T5918] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 423.617441][ T5918] usb 8-1: Using ep0 maxpacket: 8 [ 423.623166][ T5918] usb 8-1: no configurations [ 423.628816][ T5918] usb 8-1: can't read configurations, error -22 [ 423.737412][ T5881] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 423.761181][ T5918] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 423.887408][ T5881] usb 9-1: Using ep0 maxpacket: 16 [ 423.894290][ T5881] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 423.905590][ T5881] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.918620][ T5881] usb 9-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 423.927965][ T5881] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.938818][ T5881] usb 9-1: config 0 descriptor?? [ 423.947407][ T5918] usb 8-1: Using ep0 maxpacket: 8 [ 423.953007][ T5918] usb 8-1: no configurations [ 423.957820][ T5918] usb 8-1: can't read configurations, error -22 [ 423.964398][ T5918] usb usb8-port1: attempt power cycle [ 424.027372][ T5895] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 424.151059][T12518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.159550][ T5895] usb 5-1: device descriptor read/64, error -71 [ 424.164354][T12518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.197632][ T52] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 424.203116][ T5149] Bluetooth: hci3: command 0x1003 tx timeout [ 424.317468][ T5918] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 424.338274][ T5918] usb 8-1: Using ep0 maxpacket: 8 [ 424.344123][ T5918] usb 8-1: no configurations [ 424.349312][ T5918] usb 8-1: can't read configurations, error -22 [ 424.390395][ T5881] lg-g15 0003:046D:C222.0033: hidraw0: USB HID v0.0e Device [HID 046d:c222] on usb-dummy_hcd.8-1/input0 [ 424.407706][ T5895] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 424.477457][ T5918] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 424.498186][ T5918] usb 8-1: Using ep0 maxpacket: 8 [ 424.503812][ T5918] usb 8-1: no configurations [ 424.508626][ T5918] usb 8-1: can't read configurations, error -22 [ 424.516306][ T5918] usb usb8-port1: unable to enumerate USB device [ 424.527677][ T5881] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 424.557390][ T5895] usb 5-1: device descriptor read/64, error -71 [ 424.641452][ T798] usb 9-1: USB disconnect, device number 35 [ 424.667756][ T5895] usb usb5-port1: attempt power cycle [ 424.677417][ T5881] usb 10-1: Using ep0 maxpacket: 16 [ 424.684923][ T5881] usb 10-1: unable to get BOS descriptor or descriptor too short [ 424.694618][ T5881] usb 10-1: config 136 has an invalid interface number: 223 but max is 10 [ 424.704425][ T5881] usb 10-1: config 136 has an invalid interface number: 253 but max is 10 [ 424.713052][ T5881] usb 10-1: config 136 has an invalid interface number: 138 but max is 10 [ 424.721610][ T5881] usb 10-1: config 136 has 3 interfaces, different from the descriptor's value: 11 [ 424.730963][ T5881] usb 10-1: config 136 has no interface number 0 [ 424.737408][ T5881] usb 10-1: config 136 has no interface number 1 [ 424.743749][ T5881] usb 10-1: config 136 has no interface number 2 [ 424.750192][ T5881] usb 10-1: config 136 interface 223 has no altsetting 0 [ 424.757227][ T5881] usb 10-1: config 136 interface 253 has no altsetting 0 [ 424.766309][ T5881] usb 10-1: config 136 interface 138 has no altsetting 0 [ 424.776563][ T5881] usb 10-1: New USB device found, idVendor=2040, idProduct=7501, bcdDevice=3f.ac [ 424.785772][ T5881] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.793993][ T5881] usb 10-1: Product: syz [ 424.798286][ T5881] usb 10-1: Manufacturer: syz [ 424.802965][ T5881] usb 10-1: SerialNumber: syz [ 425.007403][ T5895] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 425.022134][ T5881] pvrusb2: Hardware description: WinTV HVR-1950 Model 751xx [ 425.030169][ T5881] usb 10-1: selecting invalid altsetting 0 [ 425.039478][ T2346] usb 10-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 425.039636][ T5895] usb 5-1: device descriptor read/8, error -71 [ 425.052904][ T5881] pvrusb2: Hardware description: WinTV HVR-1950 Model 751xx [ 425.055870][ T2346] usb 10-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 425.063541][ T5881] usb 10-1: selecting invalid altsetting 0 [ 425.084322][ T5881] pvrusb2: Hardware description: WinTV HVR-1950 Model 751xx [ 425.093359][ T5881] usb 10-1: selecting invalid altsetting 0 [ 425.103482][ T5881] usb 10-1: USB disconnect, device number 20 [ 425.287601][ T5895] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 425.310060][ T5895] usb 5-1: device descriptor read/8, error -71 [ 425.436658][ T5895] usb usb5-port1: unable to enumerate USB device [ 425.533968][ T30] kauditd_printk_skb: 313 callbacks suppressed [ 425.533985][ T30] audit: type=1326 audit(1761505885.043:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.8.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7960f8efc9 code=0x7ffc0000 [ 425.563410][ T30] audit: type=1326 audit(1761505885.043:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.8.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7960f8efc9 code=0x7ffc0000 [ 425.588752][ T30] audit: type=1326 audit(1761505885.043:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.8.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7960f8efc9 code=0x7ffc0000 [ 425.611614][ T30] audit: type=1326 audit(1761505885.043:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.8.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7960f8efc9 code=0x7ffc0000 [ 425.635012][ T30] audit: type=1326 audit(1761505885.043:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.8.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7960f8efc9 code=0x7ffc0000 [ 425.666844][T12537] FAULT_INJECTION: forcing a failure. [ 425.666844][T12537] name failslab, interval 1, probability 0, space 0, times 0 [ 425.677933][ T30] audit: type=1326 audit(1761505885.043:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.8.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7960f8efc9 code=0x7ffc0000 [ 425.702484][T12537] CPU: 1 UID: 0 PID: 12537 Comm: syz.8.2035 Not tainted syzkaller #0 PREEMPT(full) [ 425.702507][T12537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 425.702516][T12537] Call Trace: [ 425.702524][T12537] [ 425.702532][T12537] dump_stack_lvl+0x189/0x250 [ 425.702556][T12537] ? __pfx____ratelimit+0x10/0x10 [ 425.702581][T12537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.702601][T12537] ? __pfx__printk+0x10/0x10 [ 425.702617][T12537] ? vsnprintf+0x386/0xf00 [ 425.702639][T12537] ? __pfx_snprintf+0x10/0x10 [ 425.702664][T12537] should_fail_ex+0x414/0x560 [ 425.702697][T12537] should_failslab+0xa8/0x100 [ 425.702716][T12537] __kmalloc_noprof+0xdf/0x800 [ 425.702739][T12537] ? aa_label_asxprint+0x70/0x130 [ 425.702769][T12537] aa_label_asxprint+0x70/0x130 [ 425.702796][T12537] apparmor_lsmprop_to_secctx+0x9d/0x170 [ 425.702820][T12537] audit_log_subj_ctx+0xfa/0x510 [ 425.702844][T12537] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 425.702873][T12537] ? apparmor_current_getlsmprop_subj+0xdd/0x190 [ 425.702894][T12537] audit_log_task_context+0x8c/0xd0 [ 425.702913][T12537] ? __pfx_audit_log_task_context+0x10/0x10 [ 425.702933][T12537] ? audit_log_start+0x7f4/0xa20 [ 425.702958][T12537] audit_log_task+0x190/0x3c0 [ 425.702980][T12537] ? __pfx_audit_log_task+0x10/0x10 [ 425.703002][T12537] ? __pfx___cant_migrate+0x10/0x10 [ 425.703020][T12537] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 425.703040][T12537] audit_seccomp+0x86/0x190 [ 425.703064][T12537] __seccomp_filter+0xce4/0x1e10 [ 425.703093][T12537] ? __pfx___seccomp_filter+0x10/0x10 [ 425.703138][T12537] ? __fget_files+0x3a0/0x420 [ 425.703158][T12537] ? __fget_files+0x2a/0x420 [ 425.703179][T12537] ? __secure_computing+0xe2/0x2a0 [ 425.703201][T12537] syscall_trace_enter+0xaa/0x160 [ 425.703228][T12537] do_syscall_64+0xd3/0xfa0 [ 425.703242][T12537] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.703266][T12537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.703283][T12537] ? clear_bhb_loop+0x60/0xb0 [ 425.703303][T12537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.703319][T12537] RIP: 0033:0x7f7960f8d9dc [ 425.703335][T12537] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 425.703349][T12537] RSP: 002b:00007f7961dd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 425.703369][T12537] RAX: ffffffffffffffda RBX: 00007f79611e5fa0 RCX: 00007f7960f8d9dc [ 425.703381][T12537] RDX: 000000000000000f RSI: 00007f7961dd50a0 RDI: 0000000000000006 [ 425.703391][T12537] RBP: 00007f7961dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 425.703402][T12537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 425.703413][T12537] R13: 00007f79611e6038 R14: 00007f79611e5fa0 R15: 00007ffc3142c158 [ 425.703441][T12537] [ 425.703450][T12537] audit: error in audit_log_subj_ctx [ 425.712622][ T30] audit: type=1326 audit(1761505885.043:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.8.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7960f8efc9 code=0x7ffc0000 [ 426.009009][ T30] audit: type=1326 audit(1761505885.043:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.8.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7960f8efc9 code=0x7ffc0000 [ 426.032120][ T30] audit: type=1326 audit(1761505885.043:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.8.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7960f8efc9 code=0x7ffc0000 [ 426.070660][T12541] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2036'. [ 426.091660][T12541] netlink: 17 bytes leftover after parsing attributes in process `syz.9.2036'. [ 426.299287][T12552] netlink: 'syz.8.2040': attribute type 10 has an invalid length. [ 426.308067][T12552] bond0: (slave wlan1): Opening slave failed [ 426.377372][ T798] usb 8-1: new full-speed USB device number 46 using dummy_hcd [ 426.517447][ T798] usb 8-1: device descriptor read/64, error -71 [ 426.577366][ T5918] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 426.697048][T12555] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2041'. [ 426.710651][T12555] gfs2: path_lookup on c::: returned error -2 [ 426.727544][ T5918] usb 9-1: Using ep0 maxpacket: 16 [ 426.734854][ T5918] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.746919][ T5918] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.756871][ T5918] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 426.770450][ T5918] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 426.779635][ T5918] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.779722][ T798] usb 8-1: new full-speed USB device number 47 using dummy_hcd [ 426.798059][ T5918] usb 9-1: config 0 descriptor?? [ 426.845403][T12557] tracefs: Unknown parameter '' [ 426.937533][ T798] usb 8-1: device descriptor read/64, error -71 [ 427.011591][ T5918] usbhid 9-1:0.0: can't add hid device: -71 [ 427.018411][ T5918] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 427.035149][ T5918] usb 9-1: USB disconnect, device number 36 [ 427.048123][ T798] usb usb8-port1: attempt power cycle [ 427.197477][ T5895] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 427.347699][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 427.355370][ T5895] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 427.363686][ T5895] usb 5-1: config 0 has no interface number 0 [ 427.370020][ T5895] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 427.380342][ T5895] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 427.390501][ T5895] usb 5-1: config 0 interface 126 has no altsetting 0 [ 427.401236][ T5895] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 427.410535][ T798] usb 8-1: new full-speed USB device number 48 using dummy_hcd [ 427.418243][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.426849][ T5895] usb 5-1: Product: syz [ 427.431222][ T5895] usb 5-1: Manufacturer: syz [ 427.435971][ T5895] usb 5-1: SerialNumber: syz [ 427.442886][ T5895] usb 5-1: config 0 descriptor?? [ 427.449099][ T798] usb 8-1: device descriptor read/8, error -71 [ 427.449208][T12563] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 427.462998][T12563] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 427.675092][ T5895] ir_usb 5-1:0.126: IR Dongle converter detected [ 427.682804][ T5895] usb 5-1: IRDA class descriptor not found, device not bound [ 427.690323][ T798] usb 8-1: new full-speed USB device number 49 using dummy_hcd [ 427.718442][ T798] usb 8-1: device descriptor read/8, error -71 [ 427.812551][T12572] FAULT_INJECTION: forcing a failure. [ 427.812551][T12572] name failslab, interval 1, probability 0, space 0, times 0 [ 427.825337][T12572] CPU: 1 UID: 0 PID: 12572 Comm: syz.8.2046 Not tainted syzkaller #0 PREEMPT(full) [ 427.825355][T12572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 427.825362][T12572] Call Trace: [ 427.825371][T12572] [ 427.825377][T12572] dump_stack_lvl+0x189/0x250 [ 427.825393][T12572] ? __pfx____ratelimit+0x10/0x10 [ 427.825407][T12572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 427.825418][T12572] ? __pfx__printk+0x10/0x10 [ 427.825457][T12572] ? vsnprintf+0x386/0xf00 [ 427.825469][T12572] ? __pfx_snprintf+0x10/0x10 [ 427.825483][T12572] should_fail_ex+0x414/0x560 [ 427.825498][T12572] should_failslab+0xa8/0x100 [ 427.825510][T12572] __kmalloc_noprof+0xdf/0x800 [ 427.825523][T12572] ? aa_label_asxprint+0x70/0x130 [ 427.825540][T12572] aa_label_asxprint+0x70/0x130 [ 427.825555][T12572] apparmor_lsmprop_to_secctx+0x9d/0x170 [ 427.825568][T12572] audit_log_subj_ctx+0xfa/0x510 [ 427.825583][T12572] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 427.825599][T12572] ? apparmor_current_getlsmprop_subj+0xdd/0x190 [ 427.825611][T12572] audit_log_task_context+0x8c/0xd0 [ 427.825623][T12572] ? __pfx_audit_log_task_context+0x10/0x10 [ 427.825635][T12572] ? audit_log_start+0x7f4/0xa20 [ 427.825650][T12572] audit_log_task+0x190/0x3c0 [ 427.825662][T12572] ? __pfx_audit_log_task+0x10/0x10 [ 427.825680][T12572] ? __pfx___cant_migrate+0x10/0x10 [ 427.825691][T12572] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 427.825703][T12572] audit_seccomp+0x86/0x190 [ 427.825716][T12572] __seccomp_filter+0xce4/0x1e10 [ 427.825733][T12572] ? __pfx___seccomp_filter+0x10/0x10 [ 427.825758][T12572] ? __fget_files+0x3a0/0x420 [ 427.825770][T12572] ? __fget_files+0x2a/0x420 [ 427.825783][T12572] ? __secure_computing+0xe2/0x2a0 [ 427.825794][T12572] syscall_trace_enter+0xaa/0x160 [ 427.825810][T12572] do_syscall_64+0xd3/0xfa0 [ 427.825819][T12572] ? lockdep_hardirqs_on+0x9c/0x150 [ 427.825833][T12572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.825842][T12572] ? clear_bhb_loop+0x60/0xb0 [ 427.825854][T12572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.825864][T12572] RIP: 0033:0x7f7960f8d9dc [ 427.825875][T12572] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 427.825884][T12572] RSP: 002b:00007f7961dd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 427.825895][T12572] RAX: ffffffffffffffda RBX: 00007f79611e5fa0 RCX: 00007f7960f8d9dc [ 427.825903][T12572] RDX: 000000000000000f RSI: 00007f7961dd50a0 RDI: 0000000000000006 [ 427.825909][T12572] RBP: 00007f7961dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 427.825915][T12572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 427.825920][T12572] R13: 00007f79611e6038 R14: 00007f79611e5fa0 R15: 00007ffc3142c158 [ 427.825936][T12572] [ 427.828720][ T798] usb usb8-port1: unable to enumerate USB device [ 428.112720][ T5918] usb 5-1: USB disconnect, device number 106 [ 428.477428][ T5918] usb 9-1: new low-speed USB device number 37 using dummy_hcd [ 428.629337][ T5918] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 428.638727][ T5918] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.649615][ T5918] usb 9-1: config 0 descriptor?? [ 428.861261][T12578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.870849][T12578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.890140][ T5918] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 428.904060][ T5918] asix 9-1:0.0: probe with driver asix failed with error -71 [ 428.915213][ T5918] usb 9-1: USB disconnect, device number 37 [ 429.006730][T12589] netlink: 'syz.8.2051': attribute type 4 has an invalid length. [ 429.321060][ T13] syzkaller0: tun_net_xmit 76 [ 429.326360][ T13] syzkaller0: tun_net_xmit 48 [ 429.352690][ T43] syzkaller0: tun_net_xmit 76 [ 429.822011][ T798] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 430.050575][ T798] usb 8-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 430.069035][ T798] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.077839][ T798] usb 8-1: Product: syz [ 430.082067][ T798] usb 8-1: Manufacturer: syz [ 430.096006][ T798] usb 8-1: SerialNumber: syz [ 430.112600][ T798] usb 8-1: config 0 descriptor?? [ 431.058170][ T798] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 431.069805][ T798] asix 8-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 431.090120][ T798] asix 8-1:0.0: probe with driver asix failed with error -71 [ 431.106749][ T798] usb 8-1: USB disconnect, device number 50 [ 431.519781][ T798] usb 8-1: new full-speed USB device number 51 using dummy_hcd [ 431.690168][ T798] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.700228][ T798] usb 8-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 431.709790][ T798] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.728090][ T798] usb 8-1: config 0 descriptor?? [ 432.123823][T12623] overlayfs: missing 'lowerdir' [ 432.182724][ T798] nintendo 0003:057E:200E.0034: unknown main item tag 0x0 [ 432.210438][ T798] nintendo 0003:057E:200E.0034: unknown main item tag 0x0 [ 432.222580][T12626] netlink: 'syz.8.2062': attribute type 10 has an invalid length. [ 432.234664][T12626] team0: Device geneve1 is up. Set it down before adding it as a team port [ 432.236335][ T798] nintendo 0003:057E:200E.0034: unbalanced collection at end of report description [ 432.256517][ T798] nintendo 0003:057E:200E.0034: HID parse failed [ 432.264928][ T798] nintendo 0003:057E:200E.0034: probe - fail = -22 [ 432.271675][ T798] nintendo 0003:057E:200E.0034: probe with driver nintendo failed with error -22 [ 432.353227][ T43] usb 8-1: USB disconnect, device number 51 [ 432.497427][ T798] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 432.647559][ T798] usb 5-1: Using ep0 maxpacket: 32 [ 432.655019][ T798] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 432.663329][ T798] usb 5-1: config 0 has no interface number 0 [ 432.669501][ T798] usb 5-1: config 0 interface 230 has no altsetting 0 [ 432.678986][ T798] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 432.688273][ T798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.696321][ T798] usb 5-1: Product: syz [ 432.700599][ T798] usb 5-1: Manufacturer: syz [ 432.705207][ T798] usb 5-1: SerialNumber: syz [ 432.711947][ T798] usb 5-1: config 0 descriptor?? [ 432.719372][ T798] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 432.729170][ T798] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 432.853637][ T30] kauditd_printk_skb: 520 callbacks suppressed [ 432.853655][ T30] audit: type=1326 audit(1761505892.363:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.9.2065" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f805b18efc9 code=0x0 [ 432.924787][ T30] audit: type=1326 audit(1761505892.433:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.8.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7960f8efc9 code=0x7ffc0000 [ 432.965278][ T30] audit: type=1326 audit(1761505892.463:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.8.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7960f8efc9 code=0x7ffc0000 [ 432.988498][ T30] audit: type=1326 audit(1761505892.463:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.8.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7960f8efc9 code=0x7ffc0000 [ 433.011831][ T30] audit: type=1326 audit(1761505892.463:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.8.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7960f8efc9 code=0x7ffc0000 [ 433.038416][ T30] audit: type=1326 audit(1761505892.433:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.8.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7960f8efc9 code=0x7ffc0000 [ 433.061118][ T30] audit: type=1326 audit(1761505892.463:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.8.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7960f8efc9 code=0x7ffc0000 [ 433.084587][ T30] audit: type=1326 audit(1761505892.463:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.8.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7960f8efc9 code=0x7ffc0000 [ 433.108954][ T30] audit: type=1326 audit(1761505892.463:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.8.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7960f8efc9 code=0x7ffc0000 [ 433.137413][ T30] audit: type=1326 audit(1761505892.463:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.8.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7960f8efc9 code=0x7ffc0000 [ 433.267407][ T43] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 433.426845][T12655] fuse: Bad value for 'fd' [ 433.432279][ T43] usb 8-1: Using ep0 maxpacket: 16 [ 433.440247][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.452391][ T43] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 433.463495][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.488770][ T43] usb 8-1: config 0 descriptor?? [ 433.710055][ T43] mcp2221 0003:04D8:00DD.0035: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 433.727473][ T5918] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 433.897435][ T5918] usb 9-1: Using ep0 maxpacket: 16 [ 433.904400][ T5918] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 433.915887][ T5918] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 433.925119][ T5918] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.938219][ T5918] usb 9-1: config 0 descriptor?? [ 434.372739][ T5918] mcp2221 0003:04D8:00DD.0036: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 434.561138][T12669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.570060][T12669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.771365][ T5895] usb 9-1: USB disconnect, device number 38 [ 434.806157][T12671] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 434.832564][T12671] CIFS mount error: No usable UNC path provided in device string! [ 434.832564][T12671] [ 434.843650][T12671] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 435.172249][T12680] afs: Unknown parameter 'audit' [ 435.980476][ T43] usb 8-1: USB disconnect, device number 52 [ 436.292766][ T798] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5 [ 436.315185][ T798] usb 5-1: USB disconnect, device number 107 [ 436.336005][T12693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.363484][T12693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.447522][ T43] usb 8-1: new full-speed USB device number 53 using dummy_hcd [ 436.517491][ T5895] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 436.600254][ T43] usb 8-1: config 0 has an invalid interface number: 150 but max is 0 [ 436.608561][ T43] usb 8-1: config 0 has an invalid interface number: 112 but max is 0 [ 436.616825][ T43] usb 8-1: config 0 has an invalid interface number: 3 but max is 0 [ 436.624934][ T43] usb 8-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 436.634107][ T43] usb 8-1: config 0 has no interface number 0 [ 436.640305][ T43] usb 8-1: config 0 has no interface number 1 [ 436.646389][ T43] usb 8-1: config 0 has no interface number 2 [ 436.652613][ T43] usb 8-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 436.665671][ T43] usb 8-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 436.676992][ T43] usb 8-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 436.678945][ T5895] usb 9-1: Using ep0 maxpacket: 16 [ 436.690360][ T43] usb 8-1: config 0 interface 150 has no altsetting 0 [ 436.690385][ T43] usb 8-1: config 0 interface 112 has no altsetting 0 [ 436.690429][ T43] usb 8-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 436.690448][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.705556][ T43] usb 8-1: config 0 descriptor?? [ 436.732234][ T5895] usb 9-1: config 150 has an invalid interface number: 81 but max is 0 [ 436.742575][ T5895] usb 9-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 436.753997][ T5895] usb 9-1: config 150 has no interface number 0 [ 436.762266][ T5895] usb 9-1: New USB device found, idVendor=041e, idProduct=4038, bcdDevice=59.f6 [ 436.771506][ T798] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 436.779371][ T5895] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.788727][ T5895] usb 9-1: Product: syz [ 436.792938][ T5895] usb 9-1: Manufacturer: syz [ 436.797859][ T5895] usb 9-1: SerialNumber: syz [ 436.939711][ T798] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 436.950305][ T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.962346][ T798] usb 5-1: config 0 descriptor?? [ 437.018632][ T5895] gspca_main: sq930x-2.14.0 probing 041e:4038 [ 437.025273][ T5895] gspca_sq930x: reg_r 001f failed -71 [ 437.031389][ T5895] sq930x 9-1:150.81: probe with driver sq930x failed with error -71 [ 437.044025][ T5895] usb 9-1: USB disconnect, device number 39 [ 437.373933][ T43] usb 8-1: USB disconnect, device number 53 [ 437.787423][ T43] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 437.905771][ T30] kauditd_printk_skb: 95 callbacks suppressed [ 437.905789][ T30] audit: type=1326 audit(1761505897.413:4102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12700 comm="syz.7.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9138efc9 code=0x7ffc0000 [ 437.938711][ T30] audit: type=1326 audit(1761505897.413:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12700 comm="syz.7.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9138efc9 code=0x7ffc0000 [ 437.963383][ T30] audit: type=1326 audit(1761505897.413:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12700 comm="syz.7.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9138efc9 code=0x7ffc0000 [ 437.986843][ T30] audit: type=1326 audit(1761505897.413:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12700 comm="syz.7.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcb9138efc9 code=0x7ffc0000 [ 438.011116][ T30] audit: type=1326 audit(1761505897.413:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12700 comm="syz.7.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9138efc9 code=0x7ffc0000 [ 438.011232][ T43] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 438.043484][ T30] audit: type=1326 audit(1761505897.413:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12700 comm="syz.7.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9138efc9 code=0x7ffc0000 [ 438.066237][ T30] audit: type=1326 audit(1761505897.413:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12700 comm="syz.7.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9138efc9 code=0x7ffc0000 [ 438.090011][ T43] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 438.103791][ T43] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 438.106944][ T30] audit: type=1326 audit(1761505897.413:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12700 comm="syz.7.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9138efc9 code=0x7ffc0000 [ 438.113068][ T43] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 438.138966][ T30] audit: type=1326 audit(1761505897.413:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12700 comm="syz.7.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb9138efc9 code=0x7ffc0000 [ 438.148628][ T43] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 438.172640][ T30] audit: type=1326 audit(1761505897.413:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12700 comm="syz.7.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9138efc9 code=0x7ffc0000 [ 438.211057][ T43] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 438.220437][ T43] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 438.228563][ T43] usb 9-1: Product: syz [ 438.232831][ T43] usb 9-1: Manufacturer: syz [ 438.256160][ T43] cdc_wdm 9-1:1.0: skipping garbage [ 438.292237][ T43] cdc_wdm 9-1:1.0: skipping garbage [ 438.310076][ T43] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 438.316015][ T43] cdc_wdm 9-1:1.0: Unknown control protocol [ 438.547439][ T9] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 438.707408][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 438.714169][ T9] usb 8-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 438.718828][T12709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.727215][ T9] usb 8-1: config 1 interface 0 has no altsetting 0 [ 438.738597][T12709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.748439][ T9] usb 8-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 438.760447][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.761024][T12709] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 438.768595][ T9] usb 8-1: Product: syz [ 438.782075][ T9] usb 8-1: Manufacturer: syz [ 438.786725][ T9] usb 8-1: SerialNumber: syz [ 438.847889][ T43] usb 9-1: USB disconnect, device number 40 [ 439.023128][ T9] usbhid 8-1:1.0: can't add hid device: -71 [ 439.029420][ T9] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 439.051795][ T9] usb 8-1: USB disconnect, device number 54 [ 439.210724][ T798] pegasus 5-1:0.0: setup Pegasus II specific registers [ 439.211715][T12697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.240444][T12697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.389605][T12724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.402894][T12724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.637951][ T5951] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 439.808954][ T5951] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 439.818332][ T5951] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.829001][ T5951] usb 9-1: config 0 descriptor?? [ 439.838710][ T5951] cp210x 9-1:0.0: cp210x converter detected [ 440.037758][ T5951] cp210x 9-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 440.046772][ T5951] cp210x 9-1:0.0: querying part number failed [ 440.057158][ T5951] usb 9-1: cp210x converter now attached to ttyUSB0 [ 440.072032][ T5951] usb 9-1: USB disconnect, device number 41 [ 440.103318][ T5951] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 440.126929][ T5951] cp210x 9-1:0.0: device disconnected [ 440.140583][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.140645][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.875892][ T798] pegasus 5-1:0.0: can't locate MII phy, using default [ 440.906700][ T798] pegasus 5-1:0.0: eth25, ELECOM USB Ethernet LD-USB20, 7e:cb:61:71:58:1a [ 440.920594][ T798] usb 5-1: USB disconnect, device number 108 [ 441.181396][ T9219] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 441.357350][ T9219] usb 8-1: Using ep0 maxpacket: 32 [ 441.372129][ T9219] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.383458][ T9219] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.395691][ T9219] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 441.424196][ T9219] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 441.443236][ T9219] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.466048][ T9219] usb 8-1: config 0 descriptor?? [ 441.747773][T12809] comedi comedi1: board detection failed [ 442.085719][T12772] netlink: 'syz.7.2106': attribute type 2 has an invalid length. [ 442.114672][ T9219] usbhid 8-1:0.0: can't add hid device: -71 [ 442.133851][ T9219] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 442.154556][ T9219] usb 8-1: USB disconnect, device number 55 [ 442.447467][ T798] usb 9-1: new full-speed USB device number 42 using dummy_hcd [ 442.598693][ T9219] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 442.602798][ T798] usb 9-1: config 0 has an invalid interface number: 255 but max is 0 [ 442.615066][ T798] usb 9-1: config 0 has no interface number 0 [ 442.621246][ T798] usb 9-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 442.635754][ T798] usb 9-1: config 0 interface 255 has no altsetting 0 [ 442.647211][ T798] usb 9-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 442.656441][ T798] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.666078][ T798] usb 9-1: Product: syz [ 442.670530][ T798] usb 9-1: Manufacturer: syz [ 442.675150][ T798] usb 9-1: SerialNumber: syz [ 442.689102][ T798] usb 9-1: config 0 descriptor?? [ 442.705613][ T798] as10x_usb: device has been detected [ 442.712289][ T798] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 442.725513][ T798] usb 9-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 442.739475][ T798] as10x_usb: error during firmware upload part1 [ 442.746118][ T798] Registered device Sky IT Digital Key (green led) [ 442.763315][ T9219] usb 5-1: Using ep0 maxpacket: 16 [ 442.782176][ T9219] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 442.791841][ T9219] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.799987][ T9219] usb 5-1: Product: syz [ 442.804177][ T9219] usb 5-1: Manufacturer: syz [ 442.809426][ T9219] usb 5-1: SerialNumber: syz [ 442.815962][ T9219] usb 5-1: config 0 descriptor?? [ 442.823968][ T9219] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 442.902685][ T24] usb 9-1: USB disconnect, device number 42 [ 442.921098][ T24] Unregistered device Sky IT Digital Key (green led) [ 442.922334][ T24] as10x_usb: device has been disconnected [ 442.937703][ T43] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 443.050719][ T9219] usb 5-1: clie_3_5_startup: get interface number failed: -71 [ 443.062581][ T9219] visor 5-1:0.0: probe with driver visor failed with error -71 [ 443.079446][ T9219] usb 5-1: USB disconnect, device number 109 [ 443.097613][ T43] usb 8-1: Using ep0 maxpacket: 8 [ 443.114572][ T30] kauditd_printk_skb: 159 callbacks suppressed [ 443.114591][ T30] audit: type=1326 audit(1761505902.623:4271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12836 comm="syz.4.2118" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb32b58efc9 code=0x0 [ 443.114761][ T43] usb 8-1: config 0 has an invalid interface number: 148 but max is 0 [ 443.152982][ T43] usb 8-1: config 0 has no interface number 0 [ 443.162515][ T43] usb 8-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 443.171736][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.181047][ T43] usb 8-1: Product: syz [ 443.185919][ T43] usb 8-1: Manufacturer: syz [ 443.191920][ T43] usb 8-1: SerialNumber: syz [ 443.199003][ T43] usb 8-1: config 0 descriptor?? [ 443.206842][ T43] kobil_sct 8-1:0.148: KOBIL USB smart card terminal converter detected [ 443.217699][ T43] usb 8-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 443.417466][ T5951] usb 8-1: USB disconnect, device number 56 [ 443.434259][ T5951] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 443.448445][ T5951] kobil_sct 8-1:0.148: device disconnected [ 443.737553][ T9219] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 443.897450][ T9219] usb 9-1: Using ep0 maxpacket: 8 [ 443.904182][ T9219] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.915249][ T9219] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.925113][ T9219] usb 9-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 443.934474][ T9219] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.973803][ T9219] usb 9-1: config 0 descriptor?? [ 444.205157][ T9219] usbhid 9-1:0.0: can't add hid device: -71 [ 444.212368][ T9219] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 444.232100][ T9219] usb 9-1: USB disconnect, device number 43 [ 444.522920][T12859] overlayfs: failed to resolve './file3': -2 [ 444.612370][T12861] netlink: 'syz.7.2126': attribute type 83 has an invalid length. [ 444.777754][ T5951] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 444.833535][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2129'. [ 444.920195][ T30] audit: type=1326 audit(1761505904.433:4272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.4.2130" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb32b58efc9 code=0x0 [ 444.950547][ T5951] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.976641][ T5951] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 444.996408][ T5951] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 445.011487][ T5951] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 445.032546][ T5951] usb 9-1: SerialNumber: syz [ 446.027378][ T9219] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 446.077429][ T43] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 446.177424][ T9219] usb 5-1: Using ep0 maxpacket: 32 [ 446.184448][ T9219] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.195043][ T9219] usb 5-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 446.210638][ T9219] usb 5-1: config 0 interface 0 has no altsetting 0 [ 446.217646][ T9219] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 446.226790][ T9219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.238044][ T9219] usb 5-1: config 0 descriptor?? [ 446.244797][ T43] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 446.253710][ T43] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 446.264084][ T43] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 446.276947][ T9219] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 446.284414][ T43] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 446.297921][ T43] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 446.310864][ T43] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 446.320831][ T43] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 446.329081][ T43] usb 8-1: Product: syz [ 446.333342][ T43] usb 8-1: Manufacturer: syz [ 446.347685][ T43] cdc_wdm 8-1:1.0: skipping garbage [ 446.352984][ T43] cdc_wdm 8-1:1.0: skipping garbage [ 446.359883][ T43] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 446.365893][ T43] cdc_wdm 8-1:1.0: Unknown control protocol [ 446.808114][T12911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.816891][T12911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.827127][T12912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.838354][T12912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.859507][T12911] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 446.911128][ T798] usb 8-1: USB disconnect, device number 57 [ 447.337665][ T798] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 447.348648][ T5951] usb 9-1: 0:2 : does not exist [ 447.370291][ T5951] usb 9-1: USB disconnect, device number 44 [ 447.414415][ T9639] udevd[9639]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.547401][ T798] usb 8-1: Using ep0 maxpacket: 8 [ 447.560735][ T798] usb 8-1: config 0 has an invalid interface number: 96 but max is 0 [ 447.573214][ T798] usb 8-1: config 0 has no interface number 0 [ 447.580660][ T798] usb 8-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 447.585100][T12922] veth0_to_team: entered promiscuous mode [ 447.591987][ T798] usb 8-1: config 0 interface 96 has no altsetting 0 [ 447.595404][ T798] usb 8-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 447.614223][ T798] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.614502][T12921] veth0_to_team: left promiscuous mode [ 447.623527][ T798] usb 8-1: Product: syz [ 447.632524][ T798] usb 8-1: Manufacturer: syz [ 447.637134][ T798] usb 8-1: SerialNumber: syz [ 447.644707][ T798] usb 8-1: config 0 descriptor?? [ 447.689794][T12924] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2144'. [ 447.858805][T12915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.868767][T12915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.902430][ T798] usb 8-1: USB disconnect, device number 58 [ 447.974403][ T30] audit: type=1326 audit(1761505907.483:4273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12928 comm="syz.8.2146" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7960f8efc9 code=0x0 [ 448.657696][ T798] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 448.792101][ T5951] usb 5-1: USB disconnect, device number 110 [ 448.819068][ T798] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.842146][ T798] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.863538][ T798] usb 8-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 448.888726][ T798] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.899655][ T798] usb 8-1: config 0 descriptor?? [ 449.168660][ T5951] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 449.347349][ T5951] usb 9-1: Using ep0 maxpacket: 32 [ 449.354477][ T5951] usb 9-1: config 0 has an invalid interface number: 201 but max is 0 [ 449.363104][ T5951] usb 9-1: config 0 has no interface number 0 [ 449.371098][ T5951] usb 9-1: config 0 interface 201 has no altsetting 0 [ 449.381580][ T5951] usb 9-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 449.391141][ T5951] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.400519][ T5951] usb 9-1: Product: syz [ 449.404917][ T5951] usb 9-1: Manufacturer: syz [ 449.410710][ T5951] usb 9-1: SerialNumber: syz [ 449.419508][ T5951] usb 9-1: config 0 descriptor?? [ 449.435225][ T5951] go7007 9-1:0.201: probe with driver go7007 failed with error -12 [ 449.520564][ T798] usbhid 8-1:0.0: can't add hid device: -71 [ 449.533271][ T798] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 449.552642][ T798] usb 8-1: USB disconnect, device number 59 [ 449.636703][ T5951] usb 9-1: USB disconnect, device number 45 [ 449.747462][ T9] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 449.897447][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 449.904629][ T9] usb 5-1: config index 0 descriptor too short (expected 65532, got 18) [ 449.913072][ T9] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 449.921607][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 449.932508][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 449.941697][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.950585][ T9] usb 5-1: Product: syz [ 449.954767][ T9] usb 5-1: Manufacturer: syz [ 449.962508][ T9] usb 5-1: SerialNumber: syz [ 449.973679][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 449.980005][ T9] r8152-cfgselector 5-1: config 0 descriptor?? [ 450.402687][ T9] r8152-cfgselector 5-1: USB disconnect, device number 111 [ 451.099207][ T30] audit: type=1326 audit(1761505910.613:4274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12970 comm="syz.7.2159" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcb9138efc9 code=0x0 [ 451.123494][T12972] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:21 [ 451.380130][T12979] MINIX-fs: unable to read superblock [ 451.441264][T12984] ALSA: seq fatal error: cannot create timer (-22) [ 451.754832][T12990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.766352][T12990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.779346][T12990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.791978][T12990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.962084][T12993] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2164'. [ 452.269051][ T43] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 452.327411][ T9219] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 452.407847][ T43] usb 5-1: device descriptor read/64, error -71 [ 452.477430][ T9219] usb 8-1: Using ep0 maxpacket: 16 [ 452.484239][ T9219] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.495914][ T9219] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 452.508916][ T9219] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 452.519073][ T9219] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.527121][ T9219] usb 8-1: Product: syz [ 452.531553][ T9219] usb 8-1: Manufacturer: syz [ 452.536170][ T9219] usb 8-1: SerialNumber: syz [ 452.647410][ T43] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 452.787541][ T43] usb 5-1: device descriptor read/64, error -71 [ 452.817111][ T9219] usb 8-1: 0:2 : does not exist [ 452.825771][ T9219] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 452.827421][ T798] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 452.842161][ T9219] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 452.854940][ T9219] usb 8-1: 5:0: cannot get min/max values for control 4 (id 5) [ 452.869348][ T9219] usb 8-1: 5:0: cannot get min/max values for control 8 (id 5) [ 452.885362][ T9219] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 452.898766][ T9219] usb 8-1: USB disconnect, device number 60 [ 452.914466][ T43] usb usb5-port1: attempt power cycle [ 452.967755][ T798] usb 9-1: device descriptor read/64, error -71 [ 453.217425][ T798] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 453.257538][ T43] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 453.278015][ T43] usb 5-1: device descriptor read/8, error -71 [ 453.347387][ T798] usb 9-1: device descriptor read/64, error -71 [ 453.457675][ T798] usb usb9-port1: attempt power cycle [ 453.517410][ T43] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 453.538512][ T43] usb 5-1: device descriptor read/8, error -71 [ 453.607506][ T9219] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 453.648250][ T43] usb usb5-port1: unable to enumerate USB device [ 453.757433][ T9219] usb 8-1: Using ep0 maxpacket: 16 [ 453.764679][ T9219] usb 8-1: config 1 has an invalid interface number: 105 but max is 0 [ 453.773166][ T9219] usb 8-1: config 1 has no interface number 0 [ 453.779415][ T9219] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 453.789480][ T9219] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 453.799582][ T9219] usb 8-1: config 1 interface 105 has no altsetting 0 [ 453.808833][ T9219] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 453.809223][ T798] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 453.818173][ T9219] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.833741][ T9219] usb 8-1: Product: syz [ 453.838702][ T9219] usb 8-1: Manufacturer: syz [ 453.843301][ T9219] usb 8-1: SerialNumber: syz [ 453.848372][ T798] usb 9-1: device descriptor read/8, error -71 [ 453.856448][T13010] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 453.864145][T13010] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 454.075197][T13011] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 454.082603][T13011] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 454.090126][ T798] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 454.120898][ T798] usb 9-1: device descriptor read/8, error -71 [ 454.228000][ T798] usb usb9-port1: unable to enumerate USB device [ 454.292135][ T9219] aqc111 8-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 454.303425][ T9219] aqc111 8-1:1.105: probe with driver aqc111 failed with error -32 [ 454.743187][ T44] Bluetooth: hci3: Frame reassembly failed (-84) [ 455.007547][ T5951] usb 8-1: USB disconnect, device number 61 [ 455.095341][ T30] audit: type=1326 audit(1761506170.594:4275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13021 comm="syz.4.2173" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb32b58efc9 code=0x0 [ 455.633953][T13028] input: syz1 as /devices/virtual/input/input44 [ 455.795449][T13035] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2176'. [ 455.962088][T13037] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2177'. [ 455.997549][ T5951] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 456.037493][ T24] usb 9-1: new low-speed USB device number 50 using dummy_hcd [ 456.157540][ T5951] usb 8-1: Using ep0 maxpacket: 16 [ 456.164410][ T5951] usb 8-1: config 0 has an invalid interface number: 140 but max is 0 [ 456.173167][ T5951] usb 8-1: config 0 has no interface number 0 [ 456.179617][ T5951] usb 8-1: New USB device found, idVendor=1235, idProduct=001f, bcdDevice=7e.fc [ 456.189837][ T5951] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.208091][ T5951] usb 8-1: config 0 descriptor?? [ 456.210327][ T24] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 456.231400][ T24] usb 9-1: config 0 has no interface number 0 [ 456.238021][ T24] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 456.249906][ T24] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 456.262843][ T24] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 456.272279][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.284425][ T24] usb 9-1: config 0 descriptor?? [ 456.290534][T13035] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 456.421922][ T5951] usb 8-1: USB disconnect, device number 62 [ 456.617441][ T798] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 456.720430][T13035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.730000][T13035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.741871][ T24] corsair 0003:1B1C:1B3E.0037: unknown main item tag 0x0 [ 456.749889][ T24] corsair 0003:1B1C:1B3E.0037: unknown main item tag 0x0 [ 456.756971][ T24] corsair 0003:1B1C:1B3E.0037: unknown main item tag 0x0 [ 456.764304][ T52] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 456.767564][ T5149] Bluetooth: hci3: command 0x1003 tx timeout [ 456.771451][ T24] corsair 0003:1B1C:1B3E.0037: unknown main item tag 0x0 [ 456.780304][ T798] usb 5-1: Using ep0 maxpacket: 32 [ 456.784918][ T24] corsair 0003:1B1C:1B3E.0037: unknown main item tag 0x0 [ 456.802472][ T798] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 456.808301][ T24] corsair 0003:1B1C:1B3E.0037: hidraw0: USB HID v0.05 Device [HID 1b1c:1b3e] on usb-dummy_hcd.8-1/input8 [ 456.813287][ T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.847898][ T798] usb 5-1: config 0 descriptor?? [ 456.861987][ T798] gspca_main: sq930x-2.14.0 probing 041e:403c [ 456.945031][ T5951] usb 9-1: USB disconnect, device number 50 [ 457.056944][T13050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.066066][T13050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.075181][ T798] gspca_sq930x: reg_r 001f failed -32 [ 457.081412][ T798] sq930x 5-1:0.0: probe with driver sq930x failed with error -32 [ 457.714426][ T30] audit: type=1326 audit(1761506173.214:4276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13068 comm="syz.8.2185" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7960f8efc9 code=0x0 [ 458.471351][T13095] fuse: Unknown parameter 'allow_ot' [ 458.669393][T13105] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2196'. [ 458.715793][T13108] netlink: 'syz.7.2197': attribute type 29 has an invalid length. [ 458.732160][T13108] netlink: 'syz.7.2197': attribute type 29 has an invalid length. [ 458.756636][T13108] netlink: 500 bytes leftover after parsing attributes in process `syz.7.2197'. [ 459.004953][ T36] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.109256][ T36] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.190962][ T36] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.255114][ T36] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.338462][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 459.348660][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 459.356969][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 459.369217][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 459.385134][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 459.411971][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 459.435956][ T9] usb 5-1: USB disconnect, device number 116 [ 459.438851][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 459.443668][ T36] bridge_slave_1: left allmulticast mode [ 459.453861][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 459.456804][ T36] bridge_slave_1: left promiscuous mode [ 459.466957][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 459.475906][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 459.488323][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.497858][ T798] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 459.528311][ T36] bridge_slave_0: left allmulticast mode [ 459.533996][ T36] bridge_slave_0: left promiscuous mode [ 459.548694][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.655028][ T798] usb 8-1: device descriptor read/64, error -71 [ 459.881658][ T9] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 459.900031][ T798] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 460.027581][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.038538][ T798] usb 8-1: device descriptor read/64, error -71 [ 460.045322][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.055449][ T36] bond0 (unregistering): Released all slaves [ 460.057796][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 460.077854][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 460.104936][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 460.106967][T13120] lo speed is unknown, defaulting to 1000 [ 460.125267][ T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 460.148690][ T36] : left promiscuous mode [ 460.157366][ T9] usb 5-1: Product: syz [ 460.161954][ T798] usb usb8-port1: attempt power cycle [ 460.169275][ T9] usb 5-1: Manufacturer: syz [ 460.173895][ T9] usb 5-1: SerialNumber: syz [ 460.192810][ T9] usb 5-1: config 0 descriptor?? [ 460.206413][T13123] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 460.225638][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 460.232436][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 460.517554][ T798] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 460.550146][ T9219] usb 5-1: USB disconnect, device number 117 [ 460.550631][ T798] usb 8-1: device descriptor read/8, error -71 [ 460.807402][ T798] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 460.839036][ T798] usb 8-1: device descriptor read/8, error -71 [ 460.949654][ T798] usb usb8-port1: unable to enumerate USB device [ 461.018456][T13141] netlink: 6032 bytes leftover after parsing attributes in process `syz.9.2205'. [ 461.033741][T13142] netlink: 6032 bytes leftover after parsing attributes in process `syz.9.2205'. [ 461.048897][ T36] hsr_slave_0: left promiscuous mode [ 461.054941][ T36] hsr_slave_1: left promiscuous mode [ 461.061050][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.068686][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.076500][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.084241][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.103104][ T36] veth1_macvtap: left promiscuous mode [ 461.108670][ T36] veth0_macvtap: left promiscuous mode [ 461.114269][ T36] veth1_vlan: left promiscuous mode [ 461.119966][ T36] veth0_vlan: left promiscuous mode [ 461.267857][ T9219] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 461.438871][ T9219] usb 5-1: Using ep0 maxpacket: 32 [ 461.468885][ T9219] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 461.486245][ T9219] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 461.496955][ T9219] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.505216][ T9219] usb 5-1: Product: syz [ 461.509561][ T9219] usb 5-1: Manufacturer: syz [ 461.514182][ T9219] usb 5-1: SerialNumber: syz [ 461.535220][ T9219] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input45 [ 461.557629][ T5840] Bluetooth: hci2: command tx timeout [ 461.711490][ T36] team0 (unregistering): Port device team_slave_1 removed [ 461.733860][T13144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.745478][T13144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.790580][ T36] team0 (unregistering): Port device team_slave_0 removed [ 461.873971][T13144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.884712][T13144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.542759][ T5184] bcm5974 5-1:1.0: could not read from device [ 462.577045][T13120] chnl_net:caif_netlink_parms(): no params data found [ 462.589422][ T9219] usb 5-1: USB disconnect, device number 118 [ 462.595714][ T5184] bcm5974 5-1:1.0: could not read from device [ 462.712881][ T43] usb 8-1: new low-speed USB device number 67 using dummy_hcd [ 462.880345][ T43] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 462.889722][ T43] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 462.904368][T13120] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.912119][T13120] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.919956][ T43] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 462.929424][T13120] bridge_slave_0: entered allmulticast mode [ 462.937848][ T43] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 462.949175][T13120] bridge_slave_0: entered promiscuous mode [ 462.956122][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 462.969336][T13120] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.976524][T13120] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.983653][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 462.994391][T13120] bridge_slave_1: entered allmulticast mode [ 463.000704][ T43] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 463.015916][T13120] bridge_slave_1: entered promiscuous mode [ 463.031993][ T43] usb 8-1: string descriptor 0 read error: -22 [ 463.047451][ T43] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 463.059063][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.077499][ T43] usb 8-1: config 0 descriptor?? [ 463.085511][ T43] hub 8-1:0.0: bad descriptor, ignoring hub [ 463.099852][ T43] hub 8-1:0.0: probe with driver hub failed with error -5 [ 463.138849][T13120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.176616][T13120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.230137][T13120] team0: Port device team_slave_0 added [ 463.240826][T13120] team0: Port device team_slave_1 added [ 463.275296][T13120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.282393][T13120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.308815][T13120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.314582][T13156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.323507][T13120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.336182][T13156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.344788][T13120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.372596][T13120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.407868][ T9] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 463.435909][T13120] hsr_slave_0: entered promiscuous mode [ 463.443071][T13120] hsr_slave_1: entered promiscuous mode [ 463.450478][T13120] debugfs: 'hsr0' already exists in 'hsr' [ 463.456473][T13120] Cannot create hsr debugfs directory [ 463.561608][ T9] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 463.582246][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.611909][ T9] usb 5-1: config 0 descriptor?? [ 463.638339][ T5840] Bluetooth: hci2: command tx timeout [ 463.903437][ T9] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 463.949214][ T9] usb 5-1: USB disconnect, device number 119 [ 464.160319][T13198] lo speed is unknown, defaulting to 1000 [ 464.320109][ T9] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 464.428205][T13120] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 464.458561][T13120] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 464.483392][T13120] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 464.495109][ T9] usb 5-1: config 0 has an invalid interface number: 53 but max is 0 [ 464.512362][ T9] usb 5-1: config 0 has no interface number 0 [ 464.531170][T13120] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 464.551670][ T9] usb 5-1: New USB device found, idVendor=10d2, idProduct=7186, bcdDevice=23.a0 [ 464.569610][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.580614][ T9] usb 5-1: Product: syz [ 464.584901][ T9] usb 5-1: Manufacturer: syz [ 464.589975][ T9] usb 5-1: SerialNumber: syz [ 464.603776][ T9] usb 5-1: config 0 descriptor?? [ 464.788660][T13120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.893124][T13120] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.905463][T13196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2210'. [ 464.915030][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.922271][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.949673][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.956864][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.051910][T13224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.071675][T13120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 465.112410][T13224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.321792][ T9] usblcd 5-1:0.53: USBLCD model not supported. [ 465.362452][ T9] usb 5-1: USB disconnect, device number 120 [ 465.534288][T13120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.667066][T13120] veth0_vlan: entered promiscuous mode [ 465.677691][ T24] usb 8-1: USB disconnect, device number 67 [ 465.700714][T13120] veth1_vlan: entered promiscuous mode [ 465.732793][ T5840] Bluetooth: hci2: command tx timeout [ 465.764739][T13120] veth0_macvtap: entered promiscuous mode [ 465.786190][T13120] veth1_macvtap: entered promiscuous mode [ 465.815458][T13120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.840832][T13120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.878857][ T44] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.913621][ T44] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.930236][ T44] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.944599][ T44] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.958389][T13246] overlayfs: missing 'lowerdir' [ 465.965017][T13246] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2214'. [ 466.081959][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.096833][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.140208][ T9825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.149755][ T9825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.277419][ T43] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 466.321487][T13258] netlink: 'syz.7.2216': attribute type 3 has an invalid length. [ 466.448846][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 466.461439][ T43] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 466.471917][ T43] usb 5-1: config 179 has no interface number 0 [ 466.478818][ T43] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 466.501177][ T43] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 466.523311][T13264] syzkaller1: entered promiscuous mode [ 466.529428][T13264] syzkaller1: entered allmulticast mode [ 466.531409][ T43] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 466.551558][ T43] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 466.564707][ T43] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 466.570503][ T9] usb 8-1: new full-speed USB device number 68 using dummy_hcd [ 466.580080][ T43] usb 5-1: config 179 interface 65 has no altsetting 0 [ 466.593190][ T43] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 466.605080][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.645736][ T43] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input46 [ 466.766212][ T9] usb 8-1: config 0 has an invalid interface number: 15 but max is 0 [ 466.775768][ T9] usb 8-1: config 0 has no interface number 0 [ 466.809958][ T9] usb 8-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=47.a2 [ 466.820538][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.829351][ T9] usb 8-1: Product: syz [ 466.833956][ T9] usb 8-1: Manufacturer: syz [ 466.841375][ T9] usb 8-1: SerialNumber: syz [ 466.849534][ T43] usb 5-1: USB disconnect, device number 121 [ 466.858112][ T9] usb 8-1: config 0 descriptor?? [ 467.082256][ T9219] usb 8-1: USB disconnect, device number 68 [ 467.777498][ T24] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 467.797540][ T5840] Bluetooth: hci2: command tx timeout [ 467.967347][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 467.979317][ T24] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 467.997462][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 468.017793][ T5895] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 468.031006][ T24] usb 5-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 468.051261][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.070312][ T24] usb 5-1: config 0 descriptor?? [ 468.087397][ T9219] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 468.188487][ T5895] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.207605][ T5895] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 468.233980][ T5895] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 468.247679][ T9219] usb 3-1: Using ep0 maxpacket: 8 [ 468.258090][ T5895] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 468.266124][ T5895] usb 8-1: SerialNumber: syz [ 468.271979][ T9219] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 468.292212][ T9219] usb 3-1: config 0 has no interface number 0 [ 468.302997][ T9219] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 468.322685][ T9219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.341366][ T9219] usb 3-1: Product: syz [ 468.347426][ T9219] usb 3-1: Manufacturer: syz [ 468.355952][ T9219] usb 3-1: SerialNumber: syz [ 468.375085][ T9219] usb 3-1: config 0 descriptor?? [ 468.494573][T13300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.512051][ T5895] usb 8-1: 0:2 : does not exist [ 468.517063][T13300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.542585][ T24] usb 5-1: string descriptor 0 read error: -71 [ 468.565845][ T5895] usb 8-1: USB disconnect, device number 69 [ 468.576146][ T24] usb 5-1: USB disconnect, device number 122 [ 468.595386][T13314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2221'. [ 468.605226][T13314] tmpfs: Bad value for 'nr_inodes' [ 468.624749][ T9219] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 468.639787][ T9219] uvcvideo 3-1:0.31: No valid video chain found. [ 468.678661][ T9219] usb 3-1: USB disconnect, device number 6 [ 468.709053][ T9639] udevd[9639]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 469.093509][T13344] lo speed is unknown, defaulting to 1000 [ 469.592239][T13365] loop6: detected capacity change from 0 to 32768 [ 469.967375][ T24] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 470.139130][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 470.165796][ T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 470.248642][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 470.301087][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 470.356595][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 470.393035][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.405983][T13401] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2232'. [ 470.430308][ T24] usb 5-1: config 0 descriptor?? [ 470.920925][T13369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.935963][T13369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.307396][ T5895] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 471.468412][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 471.488183][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.509831][ T5895] usb 3-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 471.525067][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 471.531953][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.543140][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 471.560426][ T5895] usb 3-1: config 0 descriptor?? [ 471.580784][ T24] usb 5-1: USB disconnect, device number 123 [ 471.899537][T13453] bond0: entered promiscuous mode [ 471.904771][T13453] bond_slave_0: entered promiscuous mode [ 471.914461][T13453] bond_slave_1: entered promiscuous mode [ 471.969154][T13456] xt_l2tp: wrong L2TP version: 0 [ 472.002966][ T5895] apple 0003:05AC:027D.0038: hidraw0: USB HID v0.89 Device [HID 05ac:027d] on usb-dummy_hcd.2-1/input0 [ 472.036154][T13458] xt_l2tp: wrong L2TP version: 0 [ 472.497930][ T9219] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 472.670126][ T9219] usb 8-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.682861][ T9219] usb 8-1: config 0 interface 0 has no altsetting 0 [ 472.690019][ T9219] usb 8-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 472.709332][ T9219] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.723877][ T9219] usb 8-1: config 0 descriptor?? [ 472.958158][T13472] binder: 13471:13472 ioctl 40046205 0 returned -22 [ 472.978118][T13472] dvmrp0: entered allmulticast mode [ 472.988100][T13472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.998627][T13472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.214206][ T9219] microsoft 0003:045E:00F9.0039: unknown main item tag 0x0 [ 473.221752][ T9219] microsoft 0003:045E:00F9.0039: unknown main item tag 0x0 [ 473.229213][ T9219] microsoft 0003:045E:00F9.0039: unknown main item tag 0x0 [ 473.236478][ T9219] microsoft 0003:045E:00F9.0039: unknown main item tag 0x0 [ 473.244712][ T9219] microsoft 0003:045E:00F9.0039: unknown main item tag 0x0 [ 473.252045][ T9219] microsoft 0003:045E:00F9.0039: unknown main item tag 0x0 [ 473.259427][ T9219] microsoft 0003:045E:00F9.0039: unknown main item tag 0x0 [ 473.269214][ T9219] microsoft 0003:045E:00F9.0039: hidraw1: USB HID v0.00 Device [HID 045e:00f9] on usb-dummy_hcd.7-1/input0 [ 473.280855][ T9219] microsoft 0003:045E:00F9.0039: no inputs found [ 473.288264][ T9219] microsoft 0003:045E:00F9.0039: could not initialize ff, continuing anyway [ 473.348253][ T5949] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 473.415838][ T5895] usb 8-1: USB disconnect, device number 70 [ 473.497439][ T5949] usb 5-1: Using ep0 maxpacket: 32 [ 473.505437][ T5949] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 473.520047][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 473.531141][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 473.541001][ T5949] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 473.553298][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 473.566720][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 473.580311][ T5949] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 473.589824][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.597946][ T5949] usb 5-1: Product: syz [ 473.602128][ T5949] usb 5-1: Manufacturer: syz [ 473.606733][ T5949] usb 5-1: SerialNumber: syz [ 473.615124][ T5949] usb 5-1: config 0 descriptor?? [ 473.837721][ T9219] usb 5-1: USB disconnect, device number 124 [ 474.097605][ T5949] usb 3-1: USB disconnect, device number 7 [ 474.284086][T13534] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2250'. [ 474.727554][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 474.897382][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 474.905875][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.917542][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 474.937575][ T24] usb 3-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 474.957094][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.980832][ T24] usb 3-1: config 0 descriptor?? [ 475.177491][ T5895] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 475.347948][T13552] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2255'. [ 475.362376][ T5895] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 475.377371][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.387347][ T5895] usb 5-1: Product: syz [ 475.395670][ T5895] usb 5-1: Manufacturer: syz [ 475.401632][ T24] elecom 0003:056E:00FD.003A: item fetching failed at offset 0/1 [ 475.405836][ T5895] usb 5-1: SerialNumber: syz [ 475.415232][ T24] elecom 0003:056E:00FD.003A: probe with driver elecom failed with error -22 [ 475.452523][ T5895] usb 5-1: config 0 descriptor?? [ 475.676854][ T5895] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 475.756085][ T24] usb 3-1: USB disconnect, device number 8 [ 476.888873][T13570] sctp: [Deprecated]: syz.9.2258 (pid 13570) Use of struct sctp_assoc_value in delayed_ack socket option. [ 476.888873][T13570] Use struct sctp_sack_info instead [ 477.397506][ T5840] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 477.961384][ T5895] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 478.077901][ T5895] usb 5-1: USB disconnect, device number 125 [ 478.207386][ T5949] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 478.415814][ T5949] usb 3-1: unable to get BOS descriptor or descriptor too short [ 478.426670][ T5949] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 478.441086][ T5949] usb 3-1: config 1 has no interface number 1 [ 478.447910][ T5949] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 478.473580][ T5949] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 478.485459][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.494075][ T5949] usb 3-1: Product: syz [ 478.506523][ T5949] usb 3-1: Manufacturer: syz [ 478.511631][ T5949] usb 3-1: SerialNumber: syz [ 478.793948][ T5949] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 478.801949][ T5949] usb 3-1: found format II with max.bitrate = 26774, frame size=2 [ 478.810822][ T5949] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 478.819459][ T5949] usb 3-1: found format II with max.bitrate = 26774, frame size=2 [ 478.924621][ T5895] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 478.953415][ T5949] usb 3-1: USB disconnect, device number 9 [ 479.025038][ T8579] udevd[8579]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 479.116111][ T5895] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 479.130806][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.160774][ T5895] usb 5-1: config 0 descriptor?? [ 479.171489][ T5895] cp210x 5-1:0.0: cp210x converter detected [ 479.398446][ T5895] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 479.411146][ T5895] cp210x 5-1:0.0: querying part number failed [ 479.433046][ T5895] usb 5-1: cp210x converter now attached to ttyUSB0 [ 479.603941][T13612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.609077][T13631] netlink: 'syz.7.2264': attribute type 4 has an invalid length. [ 479.616462][T13612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.639107][ T5895] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 479.656242][T13631] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2264'. [ 479.810579][ T5895] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 479.818286][ T5895] usb 3-1: can't read configurations, error -61 [ 479.959538][ T5895] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 480.127522][ T5895] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 480.135831][ T5895] usb 3-1: can't read configurations, error -61 [ 480.144049][ T5895] usb usb3-port1: attempt power cycle [ 480.497713][ T5895] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 480.523724][ T5895] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 480.531577][ T5895] usb 3-1: can't read configurations, error -61 [ 480.667484][ T5895] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 480.691637][ T5895] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 480.700081][ T5895] usb 3-1: can't read configurations, error -61 [ 480.706850][ T5895] usb usb3-port1: unable to enumerate USB device [ 481.688687][ T24] usb 5-1: USB disconnect, device number 126 [ 481.701359][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 481.726745][ T24] cp210x 5-1:0.0: device disconnected [ 482.381696][T13643] comedi comedi1: s526: I/O port conflict (0x4,64) [ 482.917474][ T9218] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 483.087493][ T9218] usb 8-1: Using ep0 maxpacket: 32 [ 483.107967][ T9218] usb 8-1: config 0 has an invalid interface number: 202 but max is 0 [ 483.136149][ T9218] usb 8-1: config 0 has no interface number 0 [ 483.167796][ T9218] usb 8-1: config 0 interface 202 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 483.214958][ T9218] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 483.234895][ T9218] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.252776][ T9218] usb 8-1: Product: syz [ 483.257155][ T9218] usb 8-1: Manufacturer: syz [ 483.267524][ T9218] usb 8-1: SerialNumber: syz [ 483.288530][ T9218] usb 8-1: config 0 descriptor?? [ 483.367695][ T24] libceph: connect (1)[c::]:6789 error -101 [ 483.373835][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 483.386025][ T9218] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 483.598713][T13687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.644309][ T9218] libceph: connect (1)[c::]:6789 error -101 [ 483.651678][ T9218] libceph: mon0 (1)[c::]:6789 connect error [ 483.799190][T13687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.911647][ T798] usb 8-1: USB disconnect, device number 71 [ 483.918053][ T60] usb 8-1: Failed to submit usb control message: -71 [ 483.926652][ T60] usb 8-1: unable to send the bmi data to the device: -71 [ 483.944170][ T60] usb 8-1: unable to get target info from device [ 483.954319][ T60] usb 8-1: could not get target info (-71) [ 483.970046][ T60] usb 8-1: could not probe fw (-71) [ 484.039808][T13677] ceph: No mds server is up or the cluster is laggy [ 484.410142][T13709] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 484.541484][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 484.677705][ T9] usb 3-1: device descriptor read/64, error -71 [ 484.917524][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 485.064955][ T9] usb 3-1: device descriptor read/64, error -71 [ 485.151942][T13722] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2289'. [ 485.182013][ T9] usb usb3-port1: attempt power cycle [ 485.222298][T13722] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2289'. [ 485.315438][T13722] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2289'. [ 485.387625][T13722] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2289'. [ 485.504194][T13722] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2289'. [ 485.546013][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 485.578437][ T9] usb 3-1: device descriptor read/8, error -71 [ 485.625150][T13722] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2289'. [ 485.827387][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 485.848272][ T9] usb 3-1: device descriptor read/8, error -71 [ 485.967736][ T9] usb usb3-port1: unable to enumerate USB device [ 486.205158][ T2346] pvrusb2: request_firmware fatal error with code=-110 [ 486.247294][ T2346] pvrusb2: Failure uploading firmware1 [ 486.266551][ T2346] pvrusb2: Device initialization was not successful. [ 486.282794][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 486.303573][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 486.323073][ T2346] usb 10-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 486.332259][ T5881] pvrusb2: Device being rendered inoperable [ 486.347726][ T2346] usb 10-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 486.437612][ T5840] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 486.444264][ T52] Bluetooth: hci3: command 0x1003 tx timeout [ 486.512863][T13519] syz.7.2248 (13519) used greatest stack depth: 16008 bytes left [ 486.625664][T13773] netlink: 'syz.7.2291': attribute type 1 has an invalid length. [ 486.763344][T13773] netlink: 'syz.7.2291': attribute type 2 has an invalid length. [ 486.911108][ T9218] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 486.977360][ T5917] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 487.076319][ T9218] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.097352][ T9218] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 487.108812][ T9218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.131476][ T9218] usb 5-1: config 0 descriptor?? [ 487.158619][ T5917] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 487.171745][ T5917] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 487.188324][ T5917] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 487.198359][ T5917] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 487.212047][ T5917] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 487.222775][ T5917] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.258035][ T5917] usb 8-1: config 0 descriptor?? [ 487.500789][T13789] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2298'. [ 487.526966][T13790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.535980][T13790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.549788][ T9218] keytouch 0003:0926:3333.003B: fixing up Keytouch IEC report descriptor [ 487.564625][ T9218] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.003B/input/input47 [ 487.655679][ T9218] keytouch 0003:0926:3333.003B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 487.696750][ T5917] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 487.706317][ T5917] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 487.714652][ T5917] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 487.724170][ T5917] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 487.732169][ T5917] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 487.740053][ T5917] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 487.747892][ T5917] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 487.758258][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 487.776748][ T5917] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 487.785030][ T5917] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 487.795006][ T5917] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 487.840102][ T5917] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 487.921398][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 487.941033][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.953411][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.963998][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 487.976825][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.006641][T13771] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 488.016628][ T24] usb 3-1: config 0 descriptor?? [ 488.024613][T13771] netlink: 'syz.7.2291': attribute type 29 has an invalid length. [ 488.036764][T13771] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.2291'. [ 488.053749][T13771] ieee802154 phy0 wpan0: encryption failed: -22 [ 488.107497][T13797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.120213][T13797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.134149][ T9] usb 8-1: USB disconnect, device number 72 [ 488.164838][ T5917] usb 5-1: USB disconnect, device number 127 [ 488.300476][T13801] trusted_key: syz.4.2299 sent an empty control message without MSG_MORE. [ 488.467780][ T24] savu 0003:1E7D:2D5A.003D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 488.710927][T13819] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 488.744293][T13819] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 488.762541][T13819] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 488.779697][T13824] netlink: 'syz.4.2303': attribute type 2 has an invalid length. [ 488.811999][T13824] netlink: 'syz.4.2303': attribute type 2 has an invalid length. Stopping sshd: stopped /usr/sbin/sshd (pid 5593) OK [ 489.144235][T13846] kvm: emulating exchange as write Stopping crond: [ 489.256399][ T9] usb 3-1: USB disconnect, device number 18 stopped /usr/sbin/crond (pid 5572) OK [ 489.397651][ T5917] usb 8-1: new full-speed USB device number 73 using dummy_hcd Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5493) [ 489.528653][ T5917] usb 8-1: device descriptor read/64, error -71 Stopping network: [ 489.771222][ T5917] usb 8-1: new full-speed USB device number 74 using dummy_hcd [ 489.928988][ T5917] usb 8-1: device descriptor read/64, error -71 [ 490.038677][ T5917] usb usb8-port1: attempt power cycle [ 490.127409][ T9218] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 490.329936][ T9218] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 490.349899][ T9218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.385031][ T9218] usb 5-1: Product: syz [ 490.396374][ T9218] usb 5-1: Manufacturer: syz [ 490.407367][ T9218] usb 5-1: SerialNumber: syz [ 490.418116][ T5917] usb 8-1: new full-speed USB device number 75 using dummy_hcd [ 490.432758][ T9218] usb 5-1: config 0 descriptor?? [ 490.451218][ T5917] usb 8-1: device descriptor read/8, error -71 OK [ 490.501958][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd Stopping iptables: OK [ 490.664939][ T9218] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 490.675970][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 490.693611][ T24] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 Stopping system message bus: [ 490.710290][ T5917] usb 8-1: new full-speed USB device number 76 using dummy_hcd [ 490.718028][ T24] usb 3-1: config 0 has no interface number 0 [ 490.739701][ T5917] usb 8-1: device descriptor read/8, error -71 [ 490.749067][ T24] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=bc.4d [ 490.777552][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.794669][ T24] usb 3-1: Product: syz [ 490.807342][ T24] usb 3-1: Manufacturer: syz [ 490.812080][ T24] usb 3-1: SerialNumber: syz [ 490.842929][ T24] usb 3-1: config 0 descriptor?? [ 490.852251][ T5917] usb usb8-port1: unable to enumerate USB device [ 491.083122][ T5949] usb 3-1: USB disconnect, device number 19 done [ 491.872252][T13874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.937879][T13874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.041250][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2309'. [ 492.098388][T13930] netlink: 'syz.2.2315': attribute type 1 has an invalid length. [ 492.122638][ T9218] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 492.172826][ T9218] usb 5-1: USB disconnect, device number 2 Stopping klogd: OK [ 492.507598][ T5949] usb 3-1: new high-speed USB device number 20 using dummy_hcd Stopping acpid: [ 492.600610][ T9218] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 492.663700][ T5949] usb 3-1: Using ep0 maxpacket: 32 [ 492.679695][ T5949] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 492.697963][ T5949] usb 3-1: config 0 has no interface number 0 [ 492.717398][ T5949] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 492.747636][ T5949] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 492.761331][ T5949] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 492.772509][ T5949] usb 3-1: config 0 interface 196 has no altsetting 0 [ 492.779945][ T9218] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 492.779973][ T9218] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 492.779993][ T9218] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 492.780036][ T9218] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 492.780060][ T9218] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 492.781503][ T9218] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 492.803736][ T5949] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 492.815337][ T9218] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 492.830405][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.830433][ T5949] usb 3-1: Product: syz [ 492.830448][ T5949] usb 3-1: Manufacturer: syz [ 492.830463][ T5949] usb 3-1: SerialNumber: syz [ 492.834484][ T5949] usb 3-1: config 0 descriptor?? [ 492.896728][ T9218] usb 8-1: Product: syz [ 492.901046][ T9218] usb 8-1: Manufacturer: syz [ 492.928638][ T9218] cdc_wdm 8-1:1.0: skipping garbage [ 492.933898][ T9218] cdc_wdm 8-1:1.0: skipping garbage [ 492.956538][ T9218] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 492.964130][ T9218] cdc_wdm 8-1:1.0: Unknown control protocol [ 493.295158][ T5949] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 493.304446][ T5949] ipheth 3-1:0.196: probe with driver ipheth failed with error -22 [ 493.365684][T13937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.377409][T13937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.395302][ T5951] usb 8-1: USB disconnect, device number 77 [ 493.467388][ T5949] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 493.505825][ T9218] usb 3-1: USB disconnect, device number 20 [ 493.622476][ T5949] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 493.631714][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 493.642777][ T5949] usb 5-1: Product: syz [ 493.646937][ T5949] usb 5-1: Manufacturer: syz [ 493.651782][ T5949] usb 5-1: SerialNumber: syz [ 493.663148][ T5949] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. OK Stopping syslogd: stopped /sbin/syslogd (pid 5181) OK [ 493.865363][T13963] syz.4.2321 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 493.939005][T13978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.957808][T13978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.186118][ T5949] vp7045: USB control message 'in' went wrong. [ 494.193542][ T5949] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 494.204143][ T5949] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 494.216012][ T5949] usb 5-1: USB disconnect, device number 3 umount: can't remount debugfs read-only umount: tmpfs busy - remounted read-only [ 494.329411][ T24] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 494.346721][ T9218] usb 3-1: new high-speed USB device number 21 using dummy_hcd umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! [ 494.410096][ T5199] udevd[5199]: could not touch /run/udev/queue: Read-only file system Sent SIGTERM to all processes Connection to 10.128.1.54 closed by remote host. [ 494.527437][ T9218] usb 3-1: device descriptor read/64, error -71 [ 494.566483][T13981] rtc_cmos 00:00: Alarms can be up to one day in the future [ 494.711497][ T24] usb 8-1: device not accepting address 78, error -71 [ 495.363607][ T60] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.410872][ T5918] rtc_cmos 00:00: Alarms can be up to one day in the future [ 495.419347][ T5918] rtc_cmos 00:00: Alarms can be up to one day in the future [ 495.426865][ T5918] rtc_cmos 00:00: Alarms can be up to one day in the future [ 495.468020][ T5918] rtc_cmos 00:00: Alarms can be up to one day in the future [ 495.475331][ T5918] rtc rtc0: __rtc_set_alarm: err=-22 Sent SIGKILL to all processes Requesting system poweroff [ 495.580686][ T60] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.699566][ T60] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.786195][ T60] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.905699][ T60] bridge_slave_1: left allmulticast mode [ 495.911889][ T60] bridge_slave_1: left promiscuous mode [ 495.918200][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.926868][ T60] bridge_slave_0: left allmulticast mode [ 495.932930][ T60] bridge_slave_0: left promiscuous mode [ 495.938663][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.130675][ T60] dvmrp5 (unregistering): left allmulticast mode [ 496.151799][ T60] team0: Port device geneve1 removed [ 496.373698][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.382675][ T60] bond_slave_0: left promiscuous mode [ 496.390917][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.399929][ T60] bond_slave_1: left promiscuous mode [ 496.406272][ T60] bond0 (unregistering): Released all slaves [ 496.485444][ T60] tipc: Left network mode [ 496.691307][ T60] hsr_slave_0: left promiscuous mode [ 496.698384][ T60] hsr_slave_1: left promiscuous mode [ 496.704719][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.712338][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.720652][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.728449][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.748919][ T60] veth1_macvtap: left promiscuous mode [ 496.754597][ T60] veth0_macvtap: left promiscuous mode [ 496.761933][ T60] veth1_vlan: left promiscuous mode [ 496.767456][ T60] veth0_vlan: left promiscuous mode [ 497.283434][ T60] team0 (unregistering): Port device team_slave_1 removed [ 497.335654][ T60] team0 (unregistering): Port device team_slave_0 removed [ 497.648427][T13985] smc: removing ib device syz2 [ 497.648579][ T2346] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 497.654382][T13985] smc: removing smcd device lo [ 497.677848][ T2346] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 497.687698][ T2346] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-73xxx-01.fw [ 497.701623][ T2346] pvrusb2: Failure uploading firmware1 [ 497.707115][ T2346] pvrusb2: Device initialization was not successful. [ 497.714028][ T2346] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 497.726537][ T5881] pvrusb2: Device being rendered inoperable [ 497.747528][ T2346] usb 10-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 497.756787][ T2346] usb 10-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 497.766698][ T2346] ------------[ cut here ]------------ [ 497.772433][ T2346] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x746/0x9b0, CPU#1: pvrusb2-context/2346 [ 497.785278][ T2346] Modules linked in: [ 497.789627][ T2346] CPU: 1 UID: 0 PID: 2346 Comm: pvrusb2-context Not tainted syzkaller #0 PREEMPT(full) [ 497.799522][ T2346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 497.809692][ T2346] RIP: 0010:firmware_fallback_sysfs+0x746/0x9b0 [ 497.815954][ T2346] Code: e9 fb e9 5d fc ff ff e8 48 61 e9 fb c6 05 13 fc b1 09 01 48 c7 c7 c0 e9 e8 8b e8 55 76 50 fb e9 85 fc ff ff e8 2b 61 e9 fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 a0 ea e8 8b 4c 89 e2 e8 55 23 55 fb e9 [ 497.835767][ T2346] RSP: 0018:ffffc900054675b0 EFLAGS: 00010293 [ 497.841915][ T2346] RAX: ffffffff85d71885 RBX: dffffc0000000000 RCX: ffff88802a3c1e40 [ 497.850020][ T2346] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 497.858026][ T2346] RBP: 0000000000000001 R08: ffffffff8f9eff77 R09: 1ffffffff1f3dfee [ 497.866338][ T2346] R10: dffffc0000000000 R11: fffffbfff1f3dfef R12: ffffffff8c40b6a0 [ 497.874649][ T2346] R13: 0000000000001770 R14: ffff88805c1570b0 R15: 00000000fffffff5 [ 497.882743][ T2346] FS: 0000000000000000(0000) GS:ffff888125ddc000(0000) knlGS:0000000000000000 [ 497.891736][ T2346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 497.898354][ T2346] CR2: 000055557112f5c8 CR3: 000000003265c000 CR4: 00000000003526f0 [ 497.906338][ T2346] Call Trace: [ 497.909656][ T2346] [ 497.912582][ T2346] ? kmem_cache_free+0x19b/0x690 [ 497.917532][ T2346] ? _request_firmware+0x6be/0x15b0 [ 497.922718][ T2346] _request_firmware+0xf83/0x15b0 [ 497.927786][ T2346] ? __lock_acquire+0xab9/0xd20 [ 497.932661][ T2346] ? __pfx__request_firmware+0x10/0x10 [ 497.938141][ T2346] ? rcu_is_watching+0x15/0xb0 [ 497.942894][ T2346] ? trace_contention_end+0x39/0x120 [ 497.948206][ T2346] ? __mutex_lock+0x335/0x1350 [ 497.952958][ T2346] request_firmware+0x36/0x50 [ 497.957776][ T2346] pvr2_locate_firmware+0xb3/0x500 [ 497.963137][ T2346] pvr2_upload_firmware1+0x1b4/0x900 [ 497.968860][ T2346] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 497.974857][ T2346] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 497.980710][ T2346] pvr2_hdw_initialize+0x3df/0x3ac0 [ 497.985900][ T2346] ? __lock_acquire+0xab9/0xd20 [ 497.990776][ T2346] ? __mutex_trylock_common+0x153/0x260 [ 497.996315][ T2346] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 498.002007][ T2346] ? rcu_is_watching+0x15/0xb0 [ 498.006761][ T2346] ? trace_contention_end+0x39/0x120 [ 498.012073][ T2346] ? pvr2_context_thread_func+0x263/0xaf0 [ 498.017848][ T2346] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 498.023496][ T2346] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 498.029501][ T2346] ? schedule+0x91/0x360 [ 498.033738][ T2346] ? schedule+0x16f/0x360 [ 498.038135][ T2346] pvr2_context_thread_func+0x487/0xaf0 [ 498.043674][ T2346] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 498.049763][ T2346] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 498.055649][ T2346] ? __pfx_autoremove_wake_function+0x10/0x10 [ 498.061749][ T2346] ? __kthread_parkme+0x7b/0x200 [ 498.066922][ T2346] ? __kthread_parkme+0x1a1/0x200 [ 498.072277][ T2346] kthread+0x711/0x8a0 [ 498.076364][ T2346] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 498.082482][ T2346] ? __pfx_kthread+0x10/0x10 [ 498.087066][ T2346] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.092314][ T2346] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.097557][ T2346] ? __pfx_kthread+0x10/0x10 [ 498.102137][ T2346] ret_from_fork+0x4bc/0x870 [ 498.106714][ T2346] ? __pfx_ret_from_fork+0x10/0x10 [ 498.111845][ T2346] ? __switch_to_asm+0x39/0x70 [ 498.116592][ T2346] ? __switch_to_asm+0x33/0x70 [ 498.121380][ T2346] ? __pfx_kthread+0x10/0x10 [ 498.125954][ T2346] ret_from_fork_asm+0x1a/0x30 [ 498.130738][ T2346] [ 498.133783][ T2346] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 498.141051][ T2346] CPU: 1 UID: 0 PID: 2346 Comm: pvrusb2-context Not tainted syzkaller #0 PREEMPT(full) [ 498.150774][ T2346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 498.160816][ T2346] Call Trace: [ 498.164087][ T2346] [ 498.167009][ T2346] dump_stack_lvl+0x99/0x250 [ 498.171596][ T2346] ? __asan_memcpy+0x40/0x70 [ 498.176182][ T2346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.181372][ T2346] ? __pfx__printk+0x10/0x10 [ 498.186046][ T2346] vpanic+0x237/0x6d0 [ 498.190020][ T2346] ? __pfx_vpanic+0x10/0x10 [ 498.194516][ T2346] ? is_bpf_text_address+0x26/0x2b0 [ 498.199710][ T2346] panic+0xb9/0xc0 [ 498.203423][ T2346] ? __pfx_panic+0x10/0x10 [ 498.207841][ T2346] __warn+0x334/0x4c0 [ 498.211811][ T2346] ? firmware_fallback_sysfs+0x746/0x9b0 [ 498.217447][ T2346] ? firmware_fallback_sysfs+0x746/0x9b0 [ 498.223154][ T2346] report_bug+0x2be/0x4f0 [ 498.227485][ T2346] ? firmware_fallback_sysfs+0x746/0x9b0 [ 498.233110][ T2346] ? firmware_fallback_sysfs+0x746/0x9b0 [ 498.238747][ T2346] ? firmware_fallback_sysfs+0x748/0x9b0 [ 498.244377][ T2346] handle_bug+0x84/0x160 [ 498.248611][ T2346] exc_invalid_op+0x1a/0x50 [ 498.253131][ T2346] asm_exc_invalid_op+0x1a/0x20 [ 498.257969][ T2346] RIP: 0010:firmware_fallback_sysfs+0x746/0x9b0 [ 498.264205][ T2346] Code: e9 fb e9 5d fc ff ff e8 48 61 e9 fb c6 05 13 fc b1 09 01 48 c7 c7 c0 e9 e8 8b e8 55 76 50 fb e9 85 fc ff ff e8 2b 61 e9 fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 a0 ea e8 8b 4c 89 e2 e8 55 23 55 fb e9 [ 498.283815][ T2346] RSP: 0018:ffffc900054675b0 EFLAGS: 00010293 [ 498.289878][ T2346] RAX: ffffffff85d71885 RBX: dffffc0000000000 RCX: ffff88802a3c1e40 [ 498.297844][ T2346] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 498.305808][ T2346] RBP: 0000000000000001 R08: ffffffff8f9eff77 R09: 1ffffffff1f3dfee [ 498.313780][ T2346] R10: dffffc0000000000 R11: fffffbfff1f3dfef R12: ffffffff8c40b6a0 [ 498.321740][ T2346] R13: 0000000000001770 R14: ffff88805c1570b0 R15: 00000000fffffff5 [ 498.329706][ T2346] ? firmware_fallback_sysfs+0x745/0x9b0 [ 498.335341][ T2346] ? kmem_cache_free+0x19b/0x690 [ 498.340275][ T2346] ? _request_firmware+0x6be/0x15b0 [ 498.345476][ T2346] _request_firmware+0xf83/0x15b0 [ 498.350490][ T2346] ? __lock_acquire+0xab9/0xd20 [ 498.355346][ T2346] ? __pfx__request_firmware+0x10/0x10 [ 498.360793][ T2346] ? rcu_is_watching+0x15/0xb0 [ 498.365544][ T2346] ? trace_contention_end+0x39/0x120 [ 498.370817][ T2346] ? __mutex_lock+0x335/0x1350 [ 498.375572][ T2346] request_firmware+0x36/0x50 [ 498.380241][ T2346] pvr2_locate_firmware+0xb3/0x500 [ 498.385350][ T2346] pvr2_upload_firmware1+0x1b4/0x900 [ 498.390717][ T2346] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 498.396689][ T2346] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 498.402498][ T2346] pvr2_hdw_initialize+0x3df/0x3ac0 [ 498.407681][ T2346] ? __lock_acquire+0xab9/0xd20 [ 498.412528][ T2346] ? __mutex_trylock_common+0x153/0x260 [ 498.418088][ T2346] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 498.423727][ T2346] ? rcu_is_watching+0x15/0xb0 [ 498.428502][ T2346] ? trace_contention_end+0x39/0x120 [ 498.433813][ T2346] ? pvr2_context_thread_func+0x263/0xaf0 [ 498.439526][ T2346] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 498.445152][ T2346] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 498.451122][ T2346] ? schedule+0x91/0x360 [ 498.455366][ T2346] ? schedule+0x16f/0x360 [ 498.459699][ T2346] pvr2_context_thread_func+0x487/0xaf0 [ 498.465330][ T2346] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 498.471385][ T2346] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 498.477272][ T2346] ? __pfx_autoremove_wake_function+0x10/0x10 [ 498.483361][ T2346] ? __kthread_parkme+0x7b/0x200 [ 498.488311][ T2346] ? __kthread_parkme+0x1a1/0x200 [ 498.493349][ T2346] kthread+0x711/0x8a0 [ 498.497417][ T2346] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 498.503473][ T2346] ? __pfx_kthread+0x10/0x10 [ 498.508053][ T2346] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.513253][ T2346] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.518479][ T2346] ? __pfx_kthread+0x10/0x10 [ 498.523070][ T2346] ret_from_fork+0x4bc/0x870 [ 498.527657][ T2346] ? __pfx_ret_from_fork+0x10/0x10 [ 498.532772][ T2346] ? __switch_to_asm+0x39/0x70 [ 498.537526][ T2346] ? __switch_to_asm+0x33/0x70 [ 498.542283][ T2346] ? __pfx_kthread+0x10/0x10 [ 498.546870][ T2346] ret_from_fork_asm+0x1a/0x30 [ 498.551637][ T2346] [ 498.554916][ T2346] Kernel Offset: disabled [ 498.559236][ T2346] Rebooting in 86400 seconds..