last executing test programs: 9m40.858633847s ago: executing program 2 (id=373): r0 = getpid() (async) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) (async) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) (async) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) ioprio_set$pid(0x0, r0, 0x2007) (async) fanotify_mark(r5, 0x105, 0x10000839, r4, 0x0) r6 = fanotify_init(0x1a, 0x800) (async) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r6, 0x441, 0x8000020, r7, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000001c0)='sysfs\x00', 0x10, 0x0) 9m40.385508037s ago: executing program 2 (id=376): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x400}) ioctl$UFFDIO_CONTINUE(r0, 0xc028aa05, &(0x7f0000000140)={{&(0x7f0000032000/0x4000)=nil, 0x4000}, 0x1000000}) (async) ioctl$UFFDIO_CONTINUE(r0, 0xc028aa05, &(0x7f0000000140)={{&(0x7f0000032000/0x4000)=nil, 0x4000}, 0x1000000}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000c113a3202a11010011d80102030109022400010000c0080904530002058d9d0009050f"], 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4, 0x0, 0x1800}, {0x2}], 0x2) (async) semop(0x0, &(0x7f00000000c0)=[{0x4, 0x0, 0x1800}, {0x2}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0)) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x63, 0xff, 0xa6, 0x8, 0x5ac, 0x30b, 0xa694, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0xc2, 0x3, 0x40, 0x9, "", [{{0x9, 0x4, 0x9f, 0x9, 0x0, 0x3, 0x6b, 0x2, 0x2}}, {{0x9, 0x4, 0xa1, 0x1, 0x0, 0x77, 0xce, 0x70, 0xf}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x63, 0xff, 0xa6, 0x8, 0x5ac, 0x30b, 0xa694, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0xc2, 0x3, 0x40, 0x9, "", [{{0x9, 0x4, 0x9f, 0x9, 0x0, 0x3, 0x6b, 0x2, 0x2}}, {{0x9, 0x4, 0xa1, 0x1, 0x0, 0x77, 0xce, 0x70, 0xf}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) getpid() (async) r1 = getpid() r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000ffdbdf2501000000050007000200000006000800a0aa0000060008000000000006000a"], 0x34}, 0x1, 0x0, 0x0, 0x811}, 0x4000) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r4 = inotify_init() sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(r4, &(0x7f0000000340)='.\x00', 0xa50003d1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) 9m39.592141753s ago: executing program 2 (id=381): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @multicast1}, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x2}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/81, 0x51}, {0x0}], 0x2}, 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000240)) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f00000000c0)=[{r1, 0xb}, {r1, 0x20}, {r6, 0x248b}, {r1, 0xbc88}], 0x4, 0x9) ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x408000, 0x0) sendto$x25(r7, &(0x7f0000000100)="7ef1c228b56dd55882076806f3503b187a40be8caea730f6b25c19f324f9923fbec4154fbe97cf7c621cd6f396884e6c60cef2ce068bc6b1f74efb37f86b7955113d74ab6043", 0x46, 0x40, &(0x7f0000000180)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x34) chdir(&(0x7f0000000040)='./file0\x00') r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x185) lseek(r8, 0xfffffffffffffc01, 0x0) ioctl$SIOCX25SFACILITIES(r7, 0x89e3, &(0x7f00000001c0)={0x59, 0x9, 0x5, 0x4, 0x20000100}) 9m37.220234156s ago: executing program 2 (id=389): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_NAME={0x9, 0x1, 'DNAT\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 9m36.389105919s ago: executing program 2 (id=391): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r2 = syz_usb_connect(0x4, 0x2d, &(0x7f00000006c0)=ANY=[@ANYRES16, @ANYRESDEC=0x0, @ANYBLOB="00daa89d99b8a4154ff2df3e7f5b52058421e799c351f0c70025deda3ed4d0a967b0700c7386c79a2eeac811f83900ff022ddd74fc673d997afa2393d39082a09390080d32d8f8af242d90b7fc102fa0b6bd3f305dda0c3cc7158623519686ea2f5e3815a830be92458456081457d85c1d8814fcb65f4a2769aece2268d7c1cbe1372dc6816399e469c323ada71ca140da740c381c45eee3b4e034ea3ce9b23b99920a6ddf64e3c0486006e7f8a83baa818cd4cf6af28ba9ec4f07c96be17beaafae60c20d6a35dba7b6a4fbae8dfd04c33f21689a3eca3a661f37005e9f", @ANYRESHEX, @ANYRES16, @ANYRESDEC, @ANYRESOCT, @ANYRES8, @ANYRES16], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 9m32.056936247s ago: executing program 2 (id=404): landlock_restrict_self(0xffffffffffffffff, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m31.796944007s ago: executing program 32 (id=404): landlock_restrict_self(0xffffffffffffffff, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m18.46296748s ago: executing program 1 (id=682): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000040)=""/117, 0x1108000, 0x1000, 0xbb28}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000200000000050037000000000008000200", @ANYRES32=r6, @ANYBLOB="06000600fe000000060004"], 0x50}, 0x4, 0x700000000000000, 0x0, 0x4}, 0x4040084) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0xd0d4}, 0x40000) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r7, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x4084) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c40), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x14, r8, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x408d}, 0x20000000) 8m18.249154678s ago: executing program 1 (id=684): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) socket$inet(0x2, 0x80005, 0x7) (async) r1 = socket$inet(0x2, 0x80005, 0x7) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="fcd3caf89453713ec02860411456e2443c684bd7f29c83e65946fba7cd3892b97978532d477ddcb1685aca290195e1505b6ab7f0700e811d6ac7af4273d9fefaab74925b1a6b8837f3105fcad0fd5996c79b480839541622e8131d83d0e9446d5a2bfea14af1cc830599c67cc22a20b0946791c146c92a0ebcd4a79a0e50e28ad5166ee9aa5bbaaecaab98cb2abfd597722777fc748c2e87a0396f24d06e2f5075e84d3b06b86416b3547bd880363343e685e1e38b67f998c7c353ca3cee3daaffbf4248c2f6228bf15cf62e1f93df6b1e9487ceb0ec1a577ea1742718d8d1066db303be560f", 0xe6) (async) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="fcd3caf89453713ec02860411456e2443c684bd7f29c83e65946fba7cd3892b97978532d477ddcb1685aca290195e1505b6ab7f0700e811d6ac7af4273d9fefaab74925b1a6b8837f3105fcad0fd5996c79b480839541622e8131d83d0e9446d5a2bfea14af1cc830599c67cc22a20b0946791c146c92a0ebcd4a79a0e50e28ad5166ee9aa5bbaaecaab98cb2abfd597722777fc748c2e87a0396f24d06e2f5075e84d3b06b86416b3547bd880363343e685e1e38b67f998c7c353ca3cee3daaffbf4248c2f6228bf15cf62e1f93df6b1e9487ceb0ec1a577ea1742718d8d1066db303be560f", 0xe6) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0xa, 0x0, 0x2d52c0], [0x7, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x0, 0xf, 0x1, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0x3c63, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x2, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x0, 0x1f}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x9262, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1000, 0x401c, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x20000002, 0x0, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1a0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x6, 0x6], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0xfffffff9, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) syz_io_uring_setup(0x31c5, &(0x7f0000000340)={0x0, 0xd73c, 0x2}, &(0x7f00000001c0), &(0x7f00000003c0), &(0x7f0000000000)) 8m18.056531379s ago: executing program 1 (id=685): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000e, 0x10, r0, 0x10000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000580), 0x4) syz_io_uring_setup(0x47a8, &(0x7f00000000c0)={0x0, 0x4692, 0x4000, 0xffffffff, 0x333}, 0x0, 0x0, 0x0) 8m17.045895471s ago: executing program 1 (id=688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000f80)='G', 0x1, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x47) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000080)) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180), 0xb}], 0x1}, 0x48000007}, {{0x0, 0x0, 0x0, 0xf, &(0x7f0000000300)=""/134, 0x86}, 0xdcc4009}], 0x2, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000040900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640fffffb000800034000000018"], 0xe4}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r10, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x100) recvmsg$unix(r9, 0x0, 0x20) sendmmsg(r9, 0x0, 0x0, 0x9200000000000000) socket$inet6_udp(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x600000000000000) sendto$packet(r7, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0d03001f000000000000130000001c000980070002"], 0x30}}, 0x0) 8m15.774583331s ago: executing program 1 (id=697): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x7, 0x0, 0x98, &(0x7f0000000100)={0x800000, 0x8000, 0x1}}) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:10 0', 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)) io_setup(0x0, &(0x7f0000000300)) io_setup(0x9, &(0x7f0000000080)) io_setup(0x42, &(0x7f0000000100)) io_setup(0x7fff, &(0x7f00000002c0)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000001c0)="66b80500000066b9004000000f01d9f20f20c5b83b000f00d00fd92b0f083e3e0f381eaa5e000f3066b9800000c00f326635000400000f300f210567802b0d", 0x3f}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x4, 0x62}) ioctl$KVM_RUN(r3, 0xae80, 0x0) unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(r4, 0x3, 0xfffffffffffffffd, 0x7) r5 = userfaultfd(0x80000) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24040084) r7 = getpid() capget(&(0x7f0000000200)={0x19980330, r7}, &(0x7f0000000240)={0x10000, 0x0, 0x2, 0x8e, 0x6, 0x930}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) 8m13.631240951s ago: executing program 1 (id=705): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1150000, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c616e616d653d4055d544509550a33883e36edde700bac0616e733d66642c2c00d878ac8a89968ac824c6e69448ef7c5f8fea03c5cb20e019320a2dcc9b2e814466ed8b29996bb1941f859c6bf2f982e8546074f8852927637b4885ffc0f8abab4da3fe582abecbb01ec59a672e7cfdfbd16d5a771541a2cca4b69529fcfad0e5081e60ad2a1ac7d9a75f86dcf0689cef547a0d"]) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0xfffffffffffffffc) syz_open_procfs$userns(r5, &(0x7f0000000000)) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) 7m57.77844147s ago: executing program 33 (id=705): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1150000, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c616e616d653d4055d544509550a33883e36edde700bac0616e733d66642c2c00d878ac8a89968ac824c6e69448ef7c5f8fea03c5cb20e019320a2dcc9b2e814466ed8b29996bb1941f859c6bf2f982e8546074f8852927637b4885ffc0f8abab4da3fe582abecbb01ec59a672e7cfdfbd16d5a771541a2cca4b69529fcfad0e5081e60ad2a1ac7d9a75f86dcf0689cef547a0d"]) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0xfffffffffffffffc) syz_open_procfs$userns(r5, &(0x7f0000000000)) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) 4m52.353624233s ago: executing program 5 (id=1535): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000002500)="94", 0x1, 0x1000000007}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000000440)='/', 0x1, 0xa}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r1, 0x0, &(0x7f0000000300)="d1", 0x1, 0x4d8000000000}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f0000000100)='\x00', 0x1, 0xbe5}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000240)={0x18, r1, 0x7, 0x280000000}) 4m52.263181774s ago: executing program 5 (id=1536): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r2]) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200003, 0x0, 0x10001, 0x5}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0xfffffffe, 0x1000, 0x6, 0x3ffffe, 0x7ff, 0x6, 0x3, 0x3ff, 0x31, 0x40005, 0x2, 0x1, 0x3, 0x80, 0xfffffffc, 0x401, 0x37e9, 0x80000004, 0x1, 0xea, 0x424f, 0x3}}) 4m50.547638769s ago: executing program 5 (id=1544): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000002500)="94", 0x1, 0x1000000007}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000000440)='/', 0x1, 0xa}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r1, 0x0, &(0x7f0000000300)="d1", 0x1, 0x4d8000000000}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f0000000100)='\x00', 0x1, 0xbe5}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000240)={0x18, r1, 0x7, 0x280000000}) 4m50.499019043s ago: executing program 5 (id=1545): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000000e14010026bd7000fcdbdf2508003c0002000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'bridge0\x00'}) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x5, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc405}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000002400010026bd7000fedbdf256926ffff060004000000000006000400008afd"], 0x54}, 0x1, 0x0, 0x0, 0x24008800}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) ioctl$DVB_DEMUX_DMX_GET_STC(r2, 0xc0106f32, &(0x7f0000000300)={0x1ff}) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) ioctl$NBD_PRINT_DEBUG(0xffffffffffffffff, 0xab06) 4m50.329338736s ago: executing program 5 (id=1546): r0 = syz_clone(0x60002000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgid(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x1) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000002c0)={0xfd, 0x0, 0x4, r4, 0xa}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x4, r4, 0xf}) ioctl$KVM_TDX_INIT_MEM_REGION(r3, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x60000, 0x5}}) r5 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r5, 0x21, 0x0, 0x4) 4m49.296724674s ago: executing program 5 (id=1549): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) kexec_load(0x3, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4m48.815190746s ago: executing program 34 (id=1549): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) kexec_load(0x3, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m45.275384188s ago: executing program 0 (id=2043): openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a1401"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4c22, @empty}, 0x3, &(0x7f0000000180)=[{&(0x7f0000000140)="0800101d89b5eb00", 0x2a}], 0x1, &(0x7f0000000080)=[@ip_tos_u8={{0xfffffffffffffe9b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010101}}}], 0x38}, 0x2400c880) r2 = syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r2, 0xe, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x36c0}, 0x8) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac14142100000000000000000000000020010000000000000000000000000000000000000000000000000a"], 0xec}}, 0x0) 2m45.163563561s ago: executing program 0 (id=2045): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f00000001c0)=0x1, 0x4) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x1f) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000008e80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6c0}, 0x1c, &(0x7f0000003480)=[{&(0x7f0000000040)='5\r', 0x2}], 0x1}}, {{&(0x7f0000003580)={0xa, 0x4e23, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f00000045c0)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x931766f6319aed44) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x3b, "8e587ce405e8d5c163a207aad2b1b5588d6980b81232b76dd830d6210e0320ec26b59b7595e7be1c9948d1e8acbdea2f9b68484812175744ae1391"}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000100)={r4, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000), 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x5b) keyctl$revoke(0x3, r1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x3f00000000000000) r6 = socket(0x2b, 0x2, 0x0) keyctl$update(0x2, r1, &(0x7f0000000100)="787737eac895411acfbf90b30978f842bea7a20de901f69839f248ef917bd98962687c90f733d9540c808be02af16fc1b7af824880fce35a304610ee62753a913882f1fafc8c675b291b61f23634", 0x4e) r7 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r7, r6, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, &(0x7f0000000000)={{0x1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x2, 'lc\x00', 0x10, 0xff, 0x4f}, {@private=0xa010101, 0x4e21, 0x4, 0x9, 0x0, 0xd}}, 0x44) 2m44.972446307s ago: executing program 0 (id=2046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lsetxattr$security_evm(&(0x7f0000000140)='./file1\x00', &(0x7f0000000200), &(0x7f0000000480)=@v2={0x5, 0x1, 0x3, 0x31d}, 0x9, 0x1) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 2m44.905230377s ago: executing program 0 (id=2047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc140000001100010000000000000000000100000aa0706d3899d5d5b0e5aa1c3ea8843972136a11848436cd13f1b2124c801520ee4d75bd58a11ca77d987e9c455d5c891b227923995c35a78e730a1320f7d9aaa8ea017fbff1ae8040d2175587f502b759f37b83f81657753bb37526a07cdaa76f2e00a396dfa5a7abed332c7839"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010000000000140000001100010000000000000000000100000abf978a279654f8b46a7eb9c7ae9a6c7cd0c4145eef67166380705564a00bca769468afacdf095c00cd016b424d049b21d7eb9630affff35cf94036fb0ccb439fcea77452fc357d9373516eff0b93f804e4501f1c0076c75cbdf744ae8af3ad90f2176824fa0370a472a1a4153ad43172ba60be2942dc0cbc0d6693c3e25baeaac2054aebe2779758c86de29d19647580c1e91d488c8af1cced9971496fb6b7740b0212a267721095b9af8b883442b75aa2c161db0570b55ebd"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_LAPIC(r5, 0x8400ae8e, &(0x7f00000004c0)) (async) ioctl$KVM_GET_LAPIC(r5, 0x8400ae8e, &(0x7f00000004c0)) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fddbdf254400000008000300", @ANYRES32=r9, @ANYBLOB="04000801180070000500020001000000050006000100545906ef04000a0018"], 0x48}, 0x1, 0x0, 0x0, 0x4008880}, 0x40080) (async) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fddbdf254400000008000300", @ANYRES32=r9, @ANYBLOB="04000801180070000500020001000000050006000100545906ef04000a0018"], 0x48}, 0x1, 0x0, 0x0, 0x4008880}, 0x40080) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) (async) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) fcntl$setownex(r11, 0xf, 0x0) (async) fcntl$setownex(r11, 0xf, 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f0000000080)={0x8}) (async) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f0000000080)={0x8}) socket$netlink(0x10, 0x3, 0xc) (async) r12 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000140)=0x3) 2m44.464831763s ago: executing program 0 (id=2049): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x105042, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002cc0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0xffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, 0x1c, 0x0}}], 0x1, 0x20040944) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x35, 0x2, 0x2, 0xffffffff}, {0x6, 0x2, 0x9, 0xfffffff7}, {0x4, 0x9, 0xff, 0x3}, {0x6, 0x2, 0x4, 0x4}]}, 0x10) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x2000000000000014}) mount$afs(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="44796e6c00a56aaf587b1c5868e97afe32e1a50679e02782a123daa94807c0dfa9cc026266fdf52833f92ed2d6149456d8d5da7dfbddc5682138e8f97ef2c3c2a6f4d14e0b9d12510a1bae9c6f104b4388840fb25eeedcf2621fe91f74029381cec23c5250835af19c77aaa0eb638711e456aebccfd65eb4798325612c5cdaaeedf6a53a82"]) 2m41.381103748s ago: executing program 0 (id=2061): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) setitimer(0x2, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) setitimer(0x2, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x20000000) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000004c0)=""/51, 0x33) ioctl$OCFS2_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000240)={0x2, 0x1, 0xb43, 0x4455, 0x3ef, 0xffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x74845d640488a54b, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) write$P9_RFSYNC(r2, &(0x7f00000002c0)={0x7, 0x33, 0x2}, 0x7) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0x0, 0x7fff7ffb}]}) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000ffdbdf25010000000000000001410000001800170000001d0000000069623a67656e65766530000087922234165171b8c2b7f3c3dcdad029f03723f6d88175499a31489aa2991060773b443f58c24404ca08ee5bfe9a0dea89036ee27eeed0eef9866a3af41e8242b727d4c96aadf8055d23dbbbc19e8d19194aeeb87400e3d647fe3c6c43f7bef70cee63a9a500897a5801a7744798bfb86c7c611193c21549386b9e982e4313788d4e9f30bb7b3fb2d68757dac3f203fbd34234aee524a9b5d9e7a582e505bc21bfd3a812a4f47634092c5727505a5f954c0751b74d6b22312470"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) fcntl$dupfd(r0, 0x406, r2) close_range(r4, 0xffffffffffffffff, 0x0) landlock_create_ruleset(&(0x7f0000000480)={0x800, 0x1, 0x1}, 0x18, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) (async) setitimer(0x2, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) (async) setitimer(0x2, 0x0, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) fcntl$dupfd(r1, 0x406, r1) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x20000000) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) read$char_usb(r2, &(0x7f00000004c0)=""/51, 0x33) (async) ioctl$OCFS2_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000240)={0x2, 0x1, 0xb43, 0x4455, 0x3ef, 0xffff}) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x74845d640488a54b, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) write$P9_RFSYNC(r2, &(0x7f00000002c0)={0x7, 0x33, 0x2}, 0x7) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0x0, 0x7fff7ffb}]}) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000ffdbdf25010000000000000001410000001800170000001d0000000069623a67656e65766530000087922234165171b8c2b7f3c3dcdad029f03723f6d88175499a31489aa2991060773b443f58c24404ca08ee5bfe9a0dea89036ee27eeed0eef9866a3af41e8242b727d4c96aadf8055d23dbbbc19e8d19194aeeb87400e3d647fe3c6c43f7bef70cee63a9a500897a5801a7744798bfb86c7c611193c21549386b9e982e4313788d4e9f30bb7b3fb2d68757dac3f203fbd34234aee524a9b5d9e7a582e505bc21bfd3a812a4f47634092c5727505a5f954c0751b74d6b22312470"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) fcntl$dupfd(r0, 0x406, r2) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) landlock_create_ruleset(&(0x7f0000000480)={0x800, 0x1, 0x1}, 0x18, 0x2) (async) 2m41.160755397s ago: executing program 35 (id=2061): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) setitimer(0x2, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) setitimer(0x2, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x20000000) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000004c0)=""/51, 0x33) ioctl$OCFS2_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000240)={0x2, 0x1, 0xb43, 0x4455, 0x3ef, 0xffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x74845d640488a54b, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) write$P9_RFSYNC(r2, &(0x7f00000002c0)={0x7, 0x33, 0x2}, 0x7) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0x0, 0x7fff7ffb}]}) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000ffdbdf25010000000000000001410000001800170000001d0000000069623a67656e65766530000087922234165171b8c2b7f3c3dcdad029f03723f6d88175499a31489aa2991060773b443f58c24404ca08ee5bfe9a0dea89036ee27eeed0eef9866a3af41e8242b727d4c96aadf8055d23dbbbc19e8d19194aeeb87400e3d647fe3c6c43f7bef70cee63a9a500897a5801a7744798bfb86c7c611193c21549386b9e982e4313788d4e9f30bb7b3fb2d68757dac3f203fbd34234aee524a9b5d9e7a582e505bc21bfd3a812a4f47634092c5727505a5f954c0751b74d6b22312470"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) fcntl$dupfd(r0, 0x406, r2) close_range(r4, 0xffffffffffffffff, 0x0) landlock_create_ruleset(&(0x7f0000000480)={0x800, 0x1, 0x1}, 0x18, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) (async) setitimer(0x2, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) (async) setitimer(0x2, 0x0, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) fcntl$dupfd(r1, 0x406, r1) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x20000000) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) read$char_usb(r2, &(0x7f00000004c0)=""/51, 0x33) (async) ioctl$OCFS2_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000240)={0x2, 0x1, 0xb43, 0x4455, 0x3ef, 0xffff}) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x74845d640488a54b, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) write$P9_RFSYNC(r2, &(0x7f00000002c0)={0x7, 0x33, 0x2}, 0x7) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0x0, 0x7fff7ffb}]}) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000ffdbdf25010000000000000001410000001800170000001d0000000069623a67656e65766530000087922234165171b8c2b7f3c3dcdad029f03723f6d88175499a31489aa2991060773b443f58c24404ca08ee5bfe9a0dea89036ee27eeed0eef9866a3af41e8242b727d4c96aadf8055d23dbbbc19e8d19194aeeb87400e3d647fe3c6c43f7bef70cee63a9a500897a5801a7744798bfb86c7c611193c21549386b9e982e4313788d4e9f30bb7b3fb2d68757dac3f203fbd34234aee524a9b5d9e7a582e505bc21bfd3a812a4f47634092c5727505a5f954c0751b74d6b22312470"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) fcntl$dupfd(r0, 0x406, r2) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) landlock_create_ruleset(&(0x7f0000000480)={0x800, 0x1, 0x1}, 0x18, 0x2) (async) 1m20.240551419s ago: executing program 4 (id=2323): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) process_madvise(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="d4277f7e246178ea9878509a8c28f222be7cc69915eb3a78ae05798d21c9b5967cbec167b3f1718ac15d2f9507eee8a2abf0c9df1618ff77fbc51b1d39e4991fac2c5d2e3f576a9d7f9afd", 0x4b}], 0x1, 0xa, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r3, 0x5452, &(0x7f0000001840)=0x5d4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x0, &(0x7f0000000100)="8083d1bdbffcd2e1f715114af17300806f7f788585c57a0201ff37a51572dd9d7f9636705918cb75d0e764baccb710fc4c6fcf2a9e4be63c6326e3df2f2abc4131616982151987761156e61f8bf549e3594f3394c8c0a84116ad1d55bb0208646adca00bedf4ded80240c3831cae", 0x6e) write$UHID_INPUT2(r3, &(0x7f0000000080)={0xc, {0x2c}}, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x16, {0x2, 0x4e22, @private}, 'syz_tun\x00'}) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)=r0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getpid() (async) syz_pidfd_open(r0, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) process_madvise(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="d4277f7e246178ea9878509a8c28f222be7cc69915eb3a78ae05798d21c9b5967cbec167b3f1718ac15d2f9507eee8a2abf0c9df1618ff77fbc51b1d39e4991fac2c5d2e3f576a9d7f9afd", 0x4b}], 0x1, 0xa, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000001840)=0x5d4) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_opts(r4, 0x0, 0x0, &(0x7f0000000100)="8083d1bdbffcd2e1f715114af17300806f7f788585c57a0201ff37a51572dd9d7f9636705918cb75d0e764baccb710fc4c6fcf2a9e4be63c6326e3df2f2abc4131616982151987761156e61f8bf549e3594f3394c8c0a84116ad1d55bb0208646adca00bedf4ded80240c3831cae", 0x6e) (async) write$UHID_INPUT2(r3, &(0x7f0000000080)={0xc, {0x2c}}, 0x6) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) (async) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x16, {0x2, 0x4e22, @private}, 'syz_tun\x00'}) (async) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)=r0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) 1m18.207918289s ago: executing program 4 (id=2327): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = dup(r0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x37) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x1, 0x34565348, 0x0, 0x5, [{}, {}, {0x8}]}}) r3 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYBLOB='\a'], 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r4) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04090000000d205006f1"], 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYRES32=r5], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x400d0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x9}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x24044010) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32=r5], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r4, 0x81, 0xff08, &(0x7f0000000c40)="2318e78a8110b1c89f478f51e1a8dc6a90c8e40855f1484f523e935f5b4f4a225183bfd4ca317400"/49) read$char_usb(r6, 0x0, 0x0) mknodat(r1, &(0x7f00000001c0)='./file0\x00', 0x8000, 0xfff) 1m16.167221079s ago: executing program 4 (id=2330): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000200)={0x0, 0x81, 0x0, [0x0, 0x4, 0x5, 0xa8, 0xde], [0x0, 0x8, 0xb, 0xf11b, 0xd626ede, 0x5, 0x10000, 0x5, 0x5, 0x3, 0x200, 0x7, 0x5, 0x0, 0xcd4d, 0x1, 0x1ff, 0x5, 0x7ffff7ffffffffff, 0x2, 0x2, 0x80, 0x6, 0x4, 0x2, 0x3e, 0x6, 0x3, 0x10000000, 0x2, 0x7fff, 0xd, 0x101, 0x0, 0x4, 0x8000, 0x80000001, 0x2, 0x6, 0xfcaf, 0x6, 0x0, 0x2, 0x5, 0x8e, 0x2, 0x8b, 0x9, 0x4bd6, 0x200, 0x5, 0x7, 0x3, 0x101, 0xf, 0x9, 0x1f, 0x200, 0x8000000000000000, 0x100000001, 0x100000000, 0x7, 0xff, 0x7, 0xc2d2, 0x5, 0x2, 0x12, 0x0, 0x5, 0x400, 0x6, 0x7ff, 0xf330, 0x7, 0x7, 0x7fffffffffffffff, 0x6, 0x4edd, 0xfffffffffffffa43, 0xfffffffffffffff7, 0x40, 0xcec, 0x7, 0x7fffffffffffffff, 0x2, 0x76c7, 0x7fffffffffffffff, 0x8, 0x4, 0x6, 0x2, 0x5, 0x2, 0x28000, 0x1, 0x10, 0x401, 0x5, 0x2b1, 0xc795, 0x638c, 0x2, 0x7, 0x1, 0x1, 0x7c9, 0x7, 0xfffffffffffff3a3, 0x8, 0x100, 0x4, 0x7, 0x100000001, 0x8, 0x1, 0x1ff, 0x10000, 0x2, 0x9e, 0x8]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000640)={r1, "56294a4706c867c485777a4c3690812e"}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x9) (async) getdents(r0, &(0x7f0000000000)=""/127, 0x7f) 1m16.093664804s ago: executing program 4 (id=2331): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4a61, 0x2, @loopback, 0xaa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "8aee8aad3300", "000000dfffffff00", '\x00\t\x00', "2300ff0400"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x2, 0x12) 1m16.093225169s ago: executing program 4 (id=2332): socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000000), 0x4) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x8000, 0x8000, 'none\x00', 0x10, 0x2}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000280)='./file1\x00') syz_usb_connect(0x1, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f0700000000000905830300"], 0x0) 1m14.700934325s ago: executing program 4 (id=2338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}}, 0x200008c0) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000000)=0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=@getsa={0x1098, 0x12, 0x20, 0x70bd2b, 0x25dfdbff, {@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d4, 0xa, 0x5f}, [@address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in=@empty, 0xa, 0xd, 0x8}}, @algo_comp={0x1048, 0x3, {{'deflate\x00'}, 0x8000, "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"}}]}, 0x1098}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) 59.052728614s ago: executing program 36 (id=2338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}}, 0x200008c0) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000000)=0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=@getsa={0x1098, 0x12, 0x20, 0x70bd2b, 0x25dfdbff, {@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d4, 0xa, 0x5f}, [@address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in=@empty, 0xa, 0xd, 0x8}}, @algo_comp={0x1048, 0x3, {{'deflate\x00'}, 0x8000, "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"}}]}, 0x1098}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) 6.597335609s ago: executing program 8 (id=2629): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3001}}, 0x0, 0x0, 0x0}, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x20, 0x7, 0x7e, "68c24d9f60c65f377d553627312bbafff8c405924c132d1c3414b698dc06312dd6bf4fd50af917ce8d45f963adb0d75f4d2061e4b487596a3b489ac2d2f47f4ac7532a0b18a646eb8c9f429c205a0be70761d8f2c2854da42e84d16ccaf99277b166a8c8c50552ed9630ad2cff52bb93cc1dd133aa9a8ced459013f63184"}, 0x0, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x81}, 0x0, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x5}}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x60b02, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)="db2d", 0x2}], 0x1}}], 0x1, 0x24040015) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="38010000100001002bbd700000000000fc010000000000000000000000000000ff0100000000000000000000000000010000ecdf000002000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000003200000064010100000000000000000000000000feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000080000000000000000084000000000bcb7034d67000000000000000000000400000000000000000000000000000000000000000000073500000a0004002c0000000000000048000200636263286165732900"/245], 0x138}, 0x1, 0x0, 0x0, 0x40010}, 0x4050) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 5.792973245s ago: executing program 3 (id=2636): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000240)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x9, 0x4, 0x100, 0x4, 0x2, 0x80000001, 'syz0\x00'}) userfaultfd(0x801) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x40c100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f7", 0xb}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x4001) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000000980)={0x0, &(0x7f00000007c0)=[{}, {}], 0x0, 0x0, '\x00', 0x0, 0x2}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @empty, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x18, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0xcc840) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000009060102000000d01c6cd73cf57a24ab64d56ac2495d000000000000000000"], 0x9}, 0x1, 0x0, 0x0, 0x100000c7}, 0x4000004) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x8040) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_usb_control_io(r2, 0x0, 0x0) 4.324961985s ago: executing program 7 (id=2642): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x100) r1 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x8201) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$can_raw(r1, &(0x7f0000000080), 0x10) r3 = userfaultfd(0x80000) r4 = openat$cgroup_subtree(r1, &(0x7f00000000c0), 0x2, 0x0) ioctl$NILFS_IOCTL_SYNC(r4, 0x80086e8a, &(0x7f0000000100)) read$FUSE(r1, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000502, r5, &(0x7f0000002180)) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002600)={0x0, &(0x7f00000021c0)=[@nested_amd_clgi={0x17f, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0xfec00000, 0xa7cb}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest16=0x808, 0x2, 0x1, 0x800}}, @code={0xa, 0x55, {"66baf80cb800782c8eef66bafc0cec41d9ec0fc7a80040000066470f73f502c4e389497d8efbb91f0001c00f32f30f09420ff7eeb805000000b9005000000f01d926f2ab"}}, @cpuid={0x64, 0x18, {0x6, 0x4}}, @set_irq_handler={0xc8, 0x20, {0x5b, 0x2}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x3, 0x1}}, @nested_amd_clgi={0x17f, 0x10}, @wr_drn={0x68, 0x20, {0x1, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x49b, 0x3, 0x747ac636, 0x2}}, @uexit={0x0, 0x18, 0x7}, @nested_load_syzos={0x136, 0xd0, {0x1, 0x81, [@uexit={0x0, 0x18, 0x1}, @out_dx={0x6a, 0x28, {0xd3fa, 0x1, 0x400}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x493, 0x2a, 0x4, 0x81}}, @in_dx={0x69, 0x20, {0x21a7, 0x4}}]}}, @nested_amd_invlpga={0x17d, 0x20, {0xf000, 0xa760}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0xd000, 0x3d43}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @code={0xa, 0x4d, {"66baa000b839000000ef670fc7af59e428e80f013166ba4300ed66420f38825d9f26450f07f30fc7b300080000b9010200000f32dbc7f30fc774160c"}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x9, 0x7}}, @nested_load_code={0x12e, 0x5d, {0x3, "b9f70200000f32c423256edaa6c4a1ff709fcbe90000a40fc776720f238566b897000f00d866460f383bbc4878af0000420f01cac4a2f920629fc443b5698c18ce06ffff00"}}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0x1559, 0x7, 0x10}}], 0x42f}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r6, &(0x7f0000002640)={0x80000000}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000002680)={r1}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) vmsplice(r2, &(0x7f00000048c0)=[{&(0x7f00000026c0)="d0175c33d9a74305fee7bc2d8290bd288cfce78cdd2ec670177725afa137eaaaf4590f3896053bd68d9654975151ff4ef277b7480a444edd94e6d0cf0f48fc6ba8422357466c78b1406c193b2cc03400028944842ad0a157fce75a9400834c5d46f9eba34e6012d2dc310db124524433f77f43fdf15f222760016fcbc68ad2a17ed0417488672e6e7cd8c1f4c2108be2e81137377ab9984a394a252ad0c3c8db54b821997136cf4c4892b3a41a057aaf409915ff5cf37ab5eff908f4e19ddaa14354800f3bfdd7d1bd0584411b915fc318cb8c", 0xd3}, {&(0x7f00000027c0)="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", 0x1000}, {&(0x7f00000037c0)="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", 0x1000}, {&(0x7f00000047c0)="6292baf194200fbf4fed4814545353736295bd", 0x13}, {&(0x7f0000004800)="0a49f9c9353035e6cbbe00b0de81cff728c329d45686b61f49f4029ca1abda54da24d0f8b044d9987146b7e4143290e60be05702ad408dd3920c0e0ac3042184b871c4407d7f48ae53095db4cf7d7c63171117c36a5daa6d9ac974f1c6ab0fecbbe9e7d0044a34c9107ddfa255753087e4b7bc58ba4b5a28d844e548885bdd950ba3743ac30b2ab960098173aaa91bd8abb9a149c2d12df7d51da44c8305", 0x9e}], 0x5, 0x4) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f0000004940)=""/153, &(0x7f0000004a00)=0x99) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000004a40)={0x8, 0x120, 0xfa00, {0x3, {0x1, 0x0, "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", 0x3, 0x6, 0x10, 0x1, 0x2, 0x4, 0x4}}}, 0x128) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000004bc0)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000004b80)="79caa571193428bf9fd2f2a31fa918834ee61fc01854603e4ddec54b7b2cca36821fff34d4146e29b6f91c79df5408afd0731dfabb03", 0x36, 0x4000000, &(0x7f0000004c00)={0x11, 0x15, r7, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) rmdir(&(0x7f0000004c40)='./file0\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000004cc0)={&(0x7f0000004c80)=""/25, 0x19}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000004d00)={'NETMAP\x00'}, &(0x7f0000004d40)=0x1e) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000004e80)={r3, &(0x7f0000004d80)='NETMAP\x00', 0x8000, &(0x7f0000004dc0)={@_ha_fsid={[0x0, 0x2]}, {0x3, 0xfff8, 0x3, 0x7}}, 0xff, &(0x7f0000004e00), &(0x7f0000004e40)=0x5}) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r8, 0x40086e81, &(0x7f0000004ec0)=0x79b9) r9 = syz_open_pts(r1, 0x2484c0) ioctl$VT_GETSTATE(r9, 0x5603, &(0x7f0000004f00)={0xffff, 0x92d, 0x4}) sendmsg$kcm(r8, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000005280)=[{&(0x7f0000004f40)="90fc08d48f08e2ffb16b62c9c8e2e8c8a3988694b0c4e57e751374efe7d00cb70af114c22d8fcbc81da7c44954ae64ee025ae7c1bdd7191eb9241c5c164f9121d6269421858a69fa2db71d7ad13625e9b717499e19a3635b8a76156bb1c2ea2cff7b056c5a878c3865a91af28cd7b0319d00130f3de0f2a77cf1a8b27be455f4c007843506b4627b1b08d9de3b599020b3590a127c631b48c19c03c301262f4a829e5f250f4e69c87cea5f31c66b5de99ed736f93bab6fe8c856715ed0ad9de915f9ff17cf022ba3be2ccedc861a15c972de157cb5a87279d3a3c87ee8911cae6a6c15fa7ddcf1", 0xe7}, {&(0x7f0000005040)="d2432d0d8d24d2439322f63f22c08948f492ac52451d6f531b884d5d906209a961e93a3db525c80202f471433ad93ce4166771035cd3167541d5b66565e9ceac8c3f9458e941dfca91e6b4d0ae74e1a0f6aa6814c6b94f41a8c687095346e8f0a63c5b4b24a68f00dd8e3dfe6abd03dd87", 0x71}, {&(0x7f00000050c0)="f1294fcf6f9e5614909ec951630f090024ee121c4ca9b91e8315970a55ebf38d99c3a2d288cb6bdd44f53f0b5e6e97d16c42c4422691dcb223dd46879ea4ed060ea567eeeb23d1279c2a0397485e737d3910916cf3ead8c890360996389ea2dd5a8c659a68b586ec45cd1f71a09fbea52f5ff9149afbe394e32e99997cca5a0dd26a8d59be4f92069684a69e99a00c69a9ae3130cd7f4cd4bb0970e2316535040c8049da981a256f0b3df1422c073f8ab2d1ebcbda1c554fb59dbb4b617e03f9150e2908aba29d46a7c46037", 0xcc}, {&(0x7f00000051c0)="60b392371ea5c020ca423200cbbb3d2357f40545d465aa3ac7a6c81a6aed6ae4bab88926ba6342dbb29297f0", 0x2c}, {&(0x7f0000005200)="ecf032b4a298d56c9620fd1b2965a65073809495c1d6641f633c9206b13d404bdf15b82ee026df793984e7a1bd5b53a999577c9b1d899345a385fcfe195c6875be28f243685963ab1c45ac5095630170db12f0c5bcb18c05c734", 0x5a}], 0x5, &(0x7f0000005300)=[{0x1010, 0x116, 0x7, "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"}, {0x80, 0x1, 0xc5, "a861097a1da7f0202a8415dc4aeffe30a01a38fafbc2bff9947d9c9fcbdf9c6c631b1e384641ffd6bb5be0c794728659364b78afcc636e0cd9d905371121139016f55c156182674f58bc04e39c3593095b39d38250f18a29a5f1ee4a5fa489113b90dcb524937eb22783840f5a9d"}, {0x40, 0x10b, 0x9, "6cdf4e51580e537281974971a1bbf06f976be651c6253f99919b8cae409391b082c5c3e9b0715e714a4f3298ff"}, {0x68, 0x29, 0x297, "035937ae46b40712e03097b97926f8d2b55553cbff172c8eefce5e78fc174c73f1d7cdd3c65db8b5dc798d088d6019cfaef8d92a7c8fb243fdd30bdb7784b017804355884873d7605cff8100a45018ec7254"}, {0x40, 0x116, 0x2, "64aafb46c602ffa9c13ce19b0583505daa40fb0c5960ef768d95d268d2324ae38fd8b278bc9935bc100d1b9cf1"}, {0xc8, 0x116, 0x3, "6e0e0bdfa7591096c541c01db09c62969ee96f6b22cc0f64ec1df870be239cf54b6fd343bedaf3ae3295dae53539789d6f732a7d2318a89b9f201d78586890a37faf2b478046e3fcc63ff2264ac4482021a49f5162cbc15779ffa713105859bf7723f39c69c038ad7d1ed3e7e4233f49e1f928aaaf806909ce8f53bb6b8ddaac0c0123135577dabd7f833f653b96e7e00b209a703ea61a1acf5f6e9c803092c962a3612d3ef4264cfa84b95712a3fe4fb7270439"}, {0x20, 0xba6fc04be0b33bca, 0x1, "b13a2d4d7fe7af9bab0b9de495ce1c"}, {0xf8, 0x1e, 0x2e, "fb92d9fa79e29dc4ca61a498aa88e8d3808a08bdc2acbd7c8045b541a84233f2fe26979ac2e3b2e06151400ba144b1bd4e777b2839243c3e5b1ab833e921272ab90a86bf13f381ff17fe621dbe13a9b81e5fb4440450e05ea6d34b9ef9f5036d80ba9d462e855eebac1a22f95669f10834f3118b89044db75704105755e7825f26cb8871fc5b554567f7ea835be0e793a94b49a0c8e48bb31fdd368f5963c39947d2c79420ac2fbeda077028a93186a5bac3e2396e0262a6cfe911f205d7aeac38a2d07ab70656906d3f5969f10a282f71255b122527f128a598aa6cce0989aba3b181864c"}], 0x1358}, 0x800) getsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f00000066c0), &(0x7f0000006700)=0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r10, &(0x7f0000006800)={&(0x7f0000006740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000067c0)={&(0x7f0000006780)={0x3c, 0x0, 0x600, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}, @handle=@pci={{0x8}, {0x11}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048845}, 0x20000840) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000006840), &(0x7f0000006880)=0x6) 4.272423074s ago: executing program 7 (id=2644): mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='system.advise\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect(r2, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}, 0x1, 0x2, 0x4, 0x3}}, 0x80) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000000003e7"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x40) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000100)='tracefs\x00', 0x10003, &(0x7f00000000c0)='norecovery') 4.089654838s ago: executing program 3 (id=2646): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000400)={0x1, 0x102, 0x1, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) 4.089067919s ago: executing program 7 (id=2647): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001300010028bd7000f8dbdf2508003300", @ANYRES32=r1, @ANYBLOB="24004a802000368014001b00fe8000000000000000000000000000aa080019"], 0x3c}], 0x1, 0x0, 0x0, 0x20048041}, 0x8880) 4.049236476s ago: executing program 3 (id=2648): getpgid(0x0) (async) getpgid(0x0) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x80001, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x8, "32cfb9df33057feadfe2c98a7acc5afb07e3a3eb82fead16e6698e7d8adacb1d"}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x3fc}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9}) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r3 = syz_open_dev$video(&(0x7f0000000240), 0x10001, 0x80) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @string=0x0}}) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f020}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f020}) add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e17fb55ae6f1221bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d1", 0xb1, 0xfffffffffffffffe) (async) add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e17fb55ae6f1221bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d1", 0xb1, 0xfffffffffffffffe) r4 = socket(0x15, 0x5, 0x0) socket(0x2d, 0x2, 0x0) (async) r5 = socket(0x2d, 0x2, 0x0) connect$qrtr(r5, &(0x7f00000000c0)={0x2d, 0x0, 0x4000}, 0xc) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$SHM_LOCK(0x0, 0xb) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = getpgid(0x0) fcntl$setownex(r7, 0xf, &(0x7f0000000140)={0x0, r8}) (async) fcntl$setownex(r7, 0xf, &(0x7f0000000140)={0x0, r8}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x7f, 0x6, 0x4958, 0x8, 0x3, r8}) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x7f, 0x6, 0x4958, 0x8, 0x3, r8}) write$FUSE_INIT(r6, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2d, 0xfffffffd, 0x8000000, 0x1, 0x2, 0x101, 0x3, 0x0, 0x0, 0x10, 0x5}}, 0x50) (async) write$FUSE_INIT(r6, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2d, 0xfffffffd, 0x8000000, 0x1, 0x2, 0x101, 0x3, 0x0, 0x0, 0x10, 0x5}}, 0x50) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x34, r9, 0x300, 0x5, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x87b1, 0x7c}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x65}}]}, 0x34}}, 0x40000) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x34, r9, 0x300, 0x5, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x87b1, 0x7c}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x65}}]}, 0x34}}, 0x40000) syz_usb_connect(0x0, 0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed010203010902220001000000000904", @ANYRESOCT, @ANYRES16, @ANYRESHEX], 0x0) 3.986132121s ago: executing program 7 (id=2649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x20c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_RRK={0xd4, 0xfc, "4c6aeecc187ab2193506cd3addf7d73458f6cd25815a6dbff66673a5d669e7a8061d39e23868107e89515fd26f75f54d3d90642ab33cd2283299f0e699a76721f8df6f2440cf0fd63a8b319ecac94310fab19389665ff0f54ec3df07b0011d49c143a67d139860a619bb5c43bf8cca402e9128a92f95d618a47b0123ffa98acabb97f6ff78a0dc4dd1e3c67b85afe2cf4d1ead0eb689f2a488527ce24d98c9226f9ed088fca035e401be67e709b4a77e0b1fc32963c7adea52842ab75f12f037a65fb82cffc9b318e87ae14ec2bff144"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x80}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "ead9c30d6982b1991c4909"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "d51f41142c1ee5"}, @NL80211_ATTR_FILS_ERP_REALM={0x4}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_FILS_ERP_REALM={0x89, 0xfa, "300e5dfd051a04e9c0f43a9c30c97a7bfabc0c0cdd0742ca46ce3ec991217b016a1063959caa8cb03f6b4163868f5a244c95071854fee83d822a57dc898c4daf735f84d81a8cd9cc97754e76ac2f26be059146b6657b6be7424a6b0790243133eb10a974be2ddcd68b122fad6dd9416a670cc356e0128d2227f2d97106af4a61eeacc3e3a7"}, @NL80211_ATTR_FILS_ERP_REALM={0x4e, 0xfa, "126af6f2a4ba759fbbb191be1ae36fdc9da22a6de3d821fde480425a0c225ccc1621f119fa66ecd89a7502a775e4f8fbd106f3d7b87a87354c2f43e022b841751436cf4e84256dc1e931"}, @NL80211_ATTR_FILS_ERP_RRK={0x7, 0xfc, "e98714"}]]}, 0x20c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x5ac07864ac005b73) memfd_create(&(0x7f0000000740)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x1aX\x87\xf5\x1aP\x06\x9a\xa9\xa0\x98 )\xe3\xa1\xa2\xb1D\xe0\x15S\x89/m\xb71%\x80\x04Q\x1dN\xb0\x19\x81\x16@\xc0\xc4\"g\xd7Z\xb3\x17\xd1\xe7\x1b\xbd\xdck\x95\x16\x17\x95\xce\xa6\x92_\xe4\x9a\xaeA-\x02\x161\x8c\xe7\xa6.)\xadpM\x19\x1c\xcd\xf6S\x9a(:\x90\xb1\x8ft\xeb#\x82\x17\x8d\x00\xcaY\xe9\xf7\xee\x91\bx\x80\xa4\xa0\x16\b\x8b,\xdb\x88\x1e\xc1m\x91\xf0S\xc4\xc9\xefEBT\x8e\xff6\xff\xbb\xd4\xbe&\xf5St\v\xe1\x98;q\\\x1c\xe9\xcc\xfeV\xc3M5\xa9\xec\xc9\x8a\xee7\xbb\xa4\x1f\xc8\xfb\xaar15\xdf\\\xf4d\xc0\xc7\xf3\x88\x13\x94^01\xfc_\x91B\xacp\x8f\xfdx\xa5\xa9_t\x86\xe3%\xf1q\x00\x89c\x05H\x92\xa6\x93je\xfa\xd148\xd0N7', 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r1, &(0x7f0000001180)={0x2020}, 0x2020) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000000003d4b326aa2179a2726c64e00000ae4000000060a0108000000000000000002000006d00004805c0001800b000100736f0002400000001508000140000000000800030000000051080003000000006308000300000000a508000240000000090800024000000016080002400000001308000140000000031800018008000100666962000c000280080001400000000810000180090001007866726d00000000380001800e000100627974656f72646572000000240002800800044000000032080001400000000a080005400000004e0800034000258e2a820001800a0001007265646972000000140000001100010000000000000000000000000a00"/279], 0x10c}}, 0x10) 3.81721881s ago: executing program 7 (id=2650): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000002000000e0", @ANYRESDEC=r0], 0x190) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x29, 0x80000, 0x5) r3 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r3, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000c40)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r3, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000c40)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0afb593b40698c42dd12c583ff"], 0x2c}], 0x1}, 0x0) close_range(r0, r2, 0x0) 3.524396264s ago: executing program 8 (id=2652): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x3b, 0x6, 0x5, 0x78, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7800, 0x20, 0x8001, 0x1ff}}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$vhost_msg(r2, &(0x7f0000000440)={0x1, {&(0x7f00000003c0)=""/31, 0x1f, &(0x7f0000000400)=""/28, 0x3, 0x4}}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', r1, 0x8, 0x2, 0xd, 0x1, 0x20, @private0, @empty, 0x7800, 0x8, 0xa, 0x6}}) recvmsg$kcm(r0, &(0x7f0000000600)={&(0x7f00000004c0)=@generic, 0x80, &(0x7f0000000580)=[{0xffffffffffffffff}, {&(0x7f0000000540)=""/47, 0x2f}], 0x2, &(0x7f00000005c0)=""/31, 0x1f}, 0x2000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="d8000000180081064e81f782db4cb9040220081c0bc14b0a26f7aad3724745f5267cfd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000040012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f90000", 0xd8}], 0x1}, 0x884) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1) 3.328996232s ago: executing program 8 (id=2653): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000440)={0x0, 0x0, 0x3, 0x400, 0x0, 0x3}) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x241, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000000)={0x0, 0x6}) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000001c0)=0xfffffff8) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000540)=0x8) 3.273800185s ago: executing program 8 (id=2654): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[@nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x5cd, 0x9, 0x0, 0x6}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x4ab, 0x4, 0x6, 0x17}}, @wr_drn={0x68, 0x20, {0x3, 0x8}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x49f, 0x1ff, 0xe62, 0x1}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @in_dx={0x69, 0x20, {0xc973, 0x7}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x8000, 0x3ff}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x447, 0x80000000, 0xfffffffffffffffa, 0x3}}], 0x180}) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000240)=@riscv64_timer={0x8030000004000000, &(0x7f0000000200)=0x3ff}) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r1, 0x1, 0x170bd29, 0x0, {0x1, 0x0, 0x6000}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0xff07, 0x0, 0x10044840}, 0x2000000) 2.785262473s ago: executing program 3 (id=2656): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x72, 0x118fa, 0x0, 0x8000008, 0x1000003, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000400)={0x1, 0x102, 0x1, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) 2.777723146s ago: executing program 3 (id=2657): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x81) r1 = signalfd4(r0, &(0x7f0000000000)={[0x7]}, 0x8, 0x0) fsetxattr$security_evm(r1, &(0x7f00000000c0), 0x0, 0x0, 0x3) syz_usb_connect$midi(0x0, 0x32, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xa92, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x2, 0x80, 0xf9, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x3, [], [{{0x9, 0x5, 0xe, 0x2, 0x8, 0x7, 0x6, 0x3, {0x5, 0x25, 0x1, 0x1, 'g'}}}]}}}}}]}}, 0x0) 2.390198635s ago: executing program 6 (id=2658): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000080)=@arm64_sys={0x603000000013e518, &(0x7f0000000000)=0x2fc5}) (async) setitimer(0x0, 0x0, 0x0) (async) syz_usb_disconnect(r0) (async) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="bb921df4d75e946a94a26e132368f633f2f63127e2b17c22676597e1df09d5bd56f5c76fea8b5042739f7cefced63091fb7e22c2434772ca1a439c734f53a5bce935b6461e8e492a688afd146165c63b17837aa151a4cf3a27ffead6424f24c7083339d525adca26f6208bd27c0e8c957ba75137f10245a87fcceeec54fb697bc2da71c1dfa22b451d37f19455967b27787834d626559a9b77ba7dc43dc132ce", @ANYRES64=r0], 0x0) (async) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f00000000c0)=0x18) 2.229726694s ago: executing program 6 (id=2659): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000}) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r4, 0x1, {0x2, 0x0, 0x4}, 0xfd}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) connect$l2tp6(r2, &(0x7f00000002c0)={0xa, 0x0, 0xae91af44, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x20) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e06400e08"], 0x9) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r6) 1.579227869s ago: executing program 3 (id=2660): r0 = syz_usb_connect(0x3, 0x8c6, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="4006630000006331bc6b3dcdd95a9fae4a3281a59d9559825b194cac1916b26f819c99eae7b7b0c22f9b84d9bf3e3ee5703ab9b67967ddcbc13e4fb526f74b21b21bfacac2c1a0cc3701d3a065c34a22704a4c7edfda6117e3635ff455ec0a3f49ceacddaa2b467859aae591adeb59c3309e91baa3154a12b310b51562e5b6edef17b13cbd10291b875ad8ad074158bea99083595b1a537c9694aabfd46fa9de20512ca2da82558295b1f7fe89ee126f41c42403466a6fd3295ca6f5b7bce024381e46413303000000000000004ba7c6b40163a6abf9c98665cc44260e43a520b370319f03db"], &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc32}}, &(0x7f0000000240)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0xfffffffffffffe54, 0x10, 0x2, 0x6, 0x1, 0x3, 0x6}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf2, 0x60, 0x9, 0x0, "ad488835", "0a0449a3"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x8, 0x8, 0x40, 0x4, 0x7, 0x4}}}, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x40, 0x15, 0x12, "4111c539a63c90910e428c4653f89696bb36"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x17}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x0, 0x8, [0xf0f]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000500)={0x40, 0xb, 0x2, "9c73"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000580)={0x40, 0x13, 0x6, @remote}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, &(0x7f0000000600)={0x40, 0x19, 0x2, "68fe"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x1}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) ioctl$TIOCSSOFTCAR(r3, 0x5412, &(0x7f0000000040)=0x11) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000280), 0x1a9140, 0x0) r5 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_usb_connect(0x4, 0x63, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x88, 0xc, 0x32, 0x10, 0x506, 0x11f8, 0x6a57, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x1, 0x5, 0x0, 0x4, "", [{{0x9, 0x4, 0x54, 0x4, 0x1, 0xd4, 0x5f, 0x3b, 0x1, [], [{{0x9, 0x5, 0x4, 0x0, 0x8, 0x1, 0x9, 0xff}}]}}, {{0x9, 0x4, 0x3f, 0x8, 0x0, 0xf6, 0x6e, 0x96, 0xff, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0xfd, 0xc, 0x2}, @as_header={0x7, 0x24, 0x1, 0xc6, 0x7, 0x1}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xfc, 0x1, 0x73, 0x24, "e4f271"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x29, 0x2, 0x2, 0x7, "5cb3d6"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0xf, 0x2, 0x8, 0x8}]}]}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x201, 0x1, 0x1, 0xec, 0x40, 0x9}, 0x5, &(0x7f0000000940)={0x5, 0xf, 0x5}, 0x1, [{0xb2, &(0x7f0000000980)=@string={0xb2, 0x3, "017976fa3ba3aa7def6d9cf0cabf3e1f3d4ac160d999c16e1a5fb143b918500e88a59c630c396cec274b1891dc78b549ad1ed254dd991130da026ecdca62aabfc04cd9a090a582223731cdc9b9aa99753007eaa76164eb9e3b107ef8912349e2780c18bd0a3c7c191f853a77c1e47053c6a7fd651d6495912958f305b9045c343a4b77a2a057d90fe2ad931374b526b94506586d05b52ee37fc6d7b569545c68eedfad87f17d41966748baf2277d6890"}}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r5) close_range(r2, 0xffffffffffffffff, 0x0) fstat(r1, 0x0) fchmodat(r1, &(0x7f0000000000)='./file0\x00', 0xa0) 1.379059215s ago: executing program 6 (id=2661): select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x154c0, 0x1}, 0xffffffffffffff68, 0x0) landlock_restrict_self(r0, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000023c0)={0x0, 'wlan0\x00', {0x1}, 0x109}) 765.459818ms ago: executing program 7 (id=2662): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000c40)=[{&(0x7f00000001c0)=""/130, 0x82}], 0x1, 0x0, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setresgid(0xffffffffffffffff, r4, r4) socket$kcm(0x29, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x119, 0x487, 0x0, &(0x7f0000000480)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x800, 0x0, 0x3, 0x1, 0xfbe}, 0x20) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b40)=ANY=[@ANYBLOB="1400000000000000040003800000000000000000"], 0x14}], 0x1}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000000040)={0x0, 0x3136564e, 0x1, @discrete={0xff, 0x1}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x80000000, 0x0, 0x45, 0xfffffffffffffffd, 0x8000000000bdb], 0xd5dd0000, 0x1c6017}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 416.941923ms ago: executing program 6 (id=2663): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x107) openat(0xffffffffffffff9c, 0x0, 0x145842, 0x0) ptrace$setregs(0xd, 0x0, 0x2, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x2, 0x5c, 0x8}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x48010) 204.356473ms ago: executing program 8 (id=2664): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000040)={0x4, 0xfffffffffffffff7, 0x1, 0x2, 0x1, [0x7, 0x52b6ce1a, 0x92a, 0x9]}) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x4, 0x0, {0x6, 0x3, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) sendfile(r0, r0, &(0x7f00000000c0)=0x9, 0xb8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000100)=[@rdmsr={0x66, 0x18, {0xdc0}}, @nested_amd_clgi={0x17f, 0x10}, @uexit={0x0, 0x18, 0xaf}, @nested_amd_invlpga={0x17d, 0x20, {0x6000, 0xb631}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_invlpga={0x17d, 0x20, {0xfec58000, 0x6b64}}, @wrmsr={0x65, 0x20, {0x9e7, 0x80000000}}, @wrmsr={0x65, 0x20, {0x26e, 0x9}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x86, 0x21, 0x7, 0x1}}, @set_irq_handler={0xc8, 0x20, {0xb4, 0x2}}, @nested_amd_clgi={0x17f, 0x10}, @wrmsr={0x65, 0x20, {0x1af, 0xb01d}}], 0x160}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x9, 0x6f, 0x1, 0x480, 0x2, 0x7ff, 0x4, 0xc33, 0x10, 0x9, 0x2, 0x2, 0x1, 0x2, 0x5, 0x5], 0x40000, 0x8000}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000400)={0x2, 0x200, 0x31d0, 0x2800000, 0x12, "bec22bede24eecf3bdfaa3faf6a9d167aeddda"}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r5, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xeb6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x15d}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x4) recvmsg$inet_nvme(r4, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000580)}, {&(0x7f00000005c0)=""/148, 0x94}, {&(0x7f0000000680)=""/104, 0x68}, {&(0x7f0000000700)=""/120, 0x78}, {&(0x7f0000000780)=""/152, 0x98}, {&(0x7f0000000840)=""/234, 0xea}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x7, &(0x7f00000019c0)=""/70, 0x46}, 0x10000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000001a80), 0x48000) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000001ac0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x2, 0x2}}, 0x30) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r4) r8 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x50, r7, 0x100, 0x10001, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x59}, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1c}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x53}}, @NL80211_ATTR_PID={0x8, 0x52, r8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) openat$fuse(0xffffffffffffff9c, &(0x7f0000001c80), 0x2, 0x0) ioctl$TIOCNOTTY(r4, 0x5422) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001cc0), 0x40, 0x0) ioctl$RTC_PIE_ON(r9, 0x7005) newfstatat(0xffffffffffffff9c, &(0x7f0000001d80)='.\x00', &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001e40)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000001f40)=0xe8) mount$9p_fd(0x0, &(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40), 0x1002000, &(0x7f0000001f80)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}, {@cache_mmap}, {@noxattr}, {@cache_none}], [{@smackfsdef={'smackfsdef', 0x3d, '[-'}}, {@hash}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@uid_lt={'uid<', r10}}, {@fowner_gt={'fowner>', 0xee00}}, {@appraise}, {@euid_eq={'euid', 0x3d, r11}}]}}) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002080), 0x608102, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f00000020c0)={{r12}, "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"}) syz_pidfd_open(r8, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f00000030c0)={0x9, 0x4}) 85.253536ms ago: executing program 6 (id=2665): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x72, 0x118fa, 0x0, 0x8000008, 0x1000003, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000400)={0x1, 0x102, 0x1, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) 51.486196ms ago: executing program 6 (id=2666): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4040045) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0x4, 0x202, 0x100, 0x7e, r4}, 0x10) listen(r1, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 0s ago: executing program 8 (id=2667): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x200, 0x0, 0x0, 0xa, 0x0, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32f1cc26f7061a74df2cfc06c89fd3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a00", "0b000000000000002e43ac000100000000009b4100", [0x9, 0xa]}}) writev(r1, &(0x7f0000000540)=[{&(0x7f00000001c0)="1c1b55", 0x3}], 0x1) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$uac2(r3, 0x0, 0x0) (async) syz_usb_control_io$uac1(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, &(0x7f00000011c0)={0x1c, &(0x7f0000000440)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b36, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"}) kernel console output (not intermixed with test programs): ader converter detected [ 605.858001][ T5351] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 605.993652][ T5351] usb 4-1: USB disconnect, device number 72 [ 606.016927][ T5351] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 606.017762][ T5351] cyberjack 4-1:0.69: device disconnected [ 606.394502][T13139] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2040'. [ 606.473907][T13141] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2040'. [ 606.474004][T13141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2040'. [ 606.881889][T13149] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2043'. [ 606.942149][T13149] sctp: [Deprecated]: syz.0.2043 (pid 13149) Use of struct sctp_assoc_value in delayed_ack socket option. [ 606.942149][T13149] Use struct sctp_sack_info instead [ 607.035615][ T824] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 607.179217][T13157] overlayfs: failed to clone upperpath [ 607.195602][ T824] usb 4-1: Using ep0 maxpacket: 16 [ 607.198069][ T824] usb 4-1: unable to get BOS descriptor or descriptor too short [ 607.199222][ T824] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 607.202087][ T824] usb 4-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 607.202103][ T824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.202114][ T824] usb 4-1: Product: syz [ 607.202121][ T824] usb 4-1: Manufacturer: syz [ 607.202128][ T824] usb 4-1: SerialNumber: syz [ 607.265677][T10644] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 607.372248][T13162] binder: 13158:13162 ioctl c0306201 200000000480 returned -22 [ 607.398098][T13161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2047'. [ 607.398169][T13160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2047'. [ 607.398181][T13161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2047'. [ 607.398291][T13160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2047'. [ 607.420023][T10644] usb 5-1: too many configurations: 70, using maximum allowed: 8 [ 607.422196][T10644] usb 5-1: config index 0 descriptor too short (expected 65505, got 72) [ 607.424109][T10644] usb 5-1: config index 1 descriptor too short (expected 65505, got 72) [ 607.430778][T10644] usb 5-1: config index 2 descriptor too short (expected 65505, got 72) [ 607.432667][T10644] usb 5-1: config index 3 descriptor too short (expected 65505, got 72) [ 607.439909][T10644] usb 5-1: config index 4 descriptor too short (expected 65505, got 72) [ 607.441783][T10644] usb 5-1: config index 5 descriptor too short (expected 65505, got 72) [ 607.446280][T10644] usb 5-1: config index 6 descriptor too short (expected 65505, got 72) [ 607.453762][T10644] usb 5-1: config index 7 descriptor too short (expected 65505, got 72) [ 607.467077][T10644] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 607.467105][T10644] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.467124][T10644] usb 5-1: Product: syz [ 607.467137][T10644] usb 5-1: Manufacturer: syz [ 607.467150][T10644] usb 5-1: SerialNumber: syz [ 607.510707][T10644] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 607.562834][ T823] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 607.802376][T13144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.824846][T13144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.283425][ T5351] usb 5-1: USB disconnect, device number 52 [ 608.796807][T13180] overlayfs: missing 'lowerdir' [ 608.865757][ T823] usb 5-1: Service connection timeout for: 256 [ 608.865780][ T823] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 608.994303][ T823] ath9k_htc: Failed to initialize the device [ 608.994778][ T5351] usb 5-1: ath9k_htc: USB layer deinitialized [ 609.891014][ T824] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 609.891066][ T824] usb 4-1: MIDIStreaming interface descriptor not found [ 609.940631][T13198] netlink: zone id is out of range [ 609.940664][T13198] netlink: del zone limit has 8 unknown bytes [ 609.945242][T13198] netlink: zone id is out of range [ 609.945273][T13198] netlink: del zone limit has 8 unknown bytes [ 610.087879][ T824] usb 4-1: USB disconnect, device number 73 [ 610.185065][ T1022] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.313648][T13210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.314178][T13210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.384140][T13210] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 610.384157][T13210] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 610.384239][T13210] vhci_hcd vhci_hcd.0: Device attached [ 610.405923][T13213] vhci_hcd: cannot find the pending unlink 512 [ 610.406009][T13213] vhci_hcd: cannot find the pending unlink 512 [ 610.487949][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 610.625669][ T823] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 610.709682][T13213] vhci_hcd: connection reset by peer [ 610.711691][ T13] vhci_hcd vhci_hcd.6: stop threads [ 610.711716][ T13] vhci_hcd vhci_hcd.6: release socket [ 610.712958][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 611.256508][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 611.393295][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 611.432429][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 611.445000][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 611.449818][ T5628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 611.781509][ T1022] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.868577][T13223] syzkaller1: entered promiscuous mode [ 611.868706][T13223] syzkaller1: entered allmulticast mode [ 611.975680][T10644] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 612.128271][T10644] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 612.128340][T10644] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 612.128362][T10644] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.131537][T10644] usb 4-1: config 0 descriptor?? [ 612.148046][T13238] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 612.280616][T13244] netlink: 'syz.4.2067': attribute type 11 has an invalid length. [ 612.306805][T13242] bond0: (slave erspan0): Opening slave failed [ 612.517469][ T1022] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.607223][T13247] bond0: (slave bond_slave_1): Releasing backup interface [ 612.729508][T10644] usbhid 4-1:0.0: can't add hid device: -71 [ 612.729621][T10644] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 612.737320][T10644] usb 4-1: USB disconnect, device number 74 [ 613.301805][ T1022] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.613484][T13281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.636364][T13281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.715640][T10644] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 613.737467][ T5628] Bluetooth: hci3: command tx timeout [ 613.895635][T10644] usb 5-1: Using ep0 maxpacket: 32 [ 613.899067][T10644] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 613.899094][T10644] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 613.899114][T10644] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 613.899155][T10644] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 613.899177][T10644] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 613.899198][T10644] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 613.899234][T10644] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 613.899255][T10644] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.904385][T10644] usb 5-1: config 0 descriptor?? [ 614.214511][T13276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.232477][T13276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.323611][T10644] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 614.380215][T10644] usb 5-1: USB disconnect, device number 54 [ 614.394615][T13288] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2078'. [ 614.398995][T13289] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2079'. [ 614.446784][T10644] usblp0: removed [ 614.465906][T13290] CIFS mount error: No usable UNC path provided in device string! [ 614.465906][T13290] [ 614.465928][T13290] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 614.474033][T13291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.507290][T13291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.659423][T13291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.659861][T13291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.716883][T13288] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2078'. [ 614.837757][T10644] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 614.990844][T10644] usb 5-1: Using ep0 maxpacket: 16 [ 614.995092][T10644] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 157 [ 615.004842][T10644] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 615.004871][T10644] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.004888][T10644] usb 5-1: Product: syz [ 615.004900][T10644] usb 5-1: Manufacturer: syz [ 615.004912][T10644] usb 5-1: SerialNumber: syz [ 615.075179][T10644] usb 5-1: config 0 descriptor?? [ 615.203258][ C1] port100 5-1:0.0: NFC: Urb failure (status -71) [ 615.302467][ C1] port100 5-1:0.0: NFC: Urb failure (status -71) [ 615.319440][T10644] port100 5-1:0.0: NFC: Could not get supported command types [ 615.386449][T10644] usb 5-1: USB disconnect, device number 55 [ 615.398963][ T824] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 615.589572][ T824] usb 4-1: Using ep0 maxpacket: 16 [ 615.597647][ T824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.597695][ T824] usb 4-1: New USB device found, idVendor=01ac, idProduct=0000, bcdDevice= 1.00 [ 615.597714][ T824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.642993][ T824] usb 4-1: config 0 descriptor?? [ 615.807890][ T823] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 615.815664][ T5628] Bluetooth: hci3: command tx timeout [ 616.020129][ T824] usbhid 4-1:0.0: can't add hid device: -71 [ 616.020248][ T824] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 616.055906][ T824] usb 4-1: USB disconnect, device number 75 [ 616.160747][T13323] binder: 13322:13323 ioctl 400c620e 0 returned -14 [ 616.188027][ T1022] bridge_slave_1: left allmulticast mode [ 616.188058][ T1022] bridge_slave_1: left promiscuous mode [ 616.188317][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.289449][ T5628] Bluetooth: hci2: unexpected event for opcode 0x0803 [ 616.448523][ T1022] bridge_slave_0: left allmulticast mode [ 616.448558][ T1022] bridge_slave_0: left promiscuous mode [ 616.448845][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.895818][ T5628] Bluetooth: hci3: command tx timeout [ 618.058304][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.116611][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.150523][ T1022] bond0 (unregistering): Released all slaves [ 618.191346][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9 [ 618.602431][T13353] ntfs3(nullb0): Primary boot signature is not NTFS. [ 618.613728][T13353] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 618.777647][ T1022] tipc: Disabling bearer [ 618.778382][ T1022] tipc: Left network mode [ 619.677251][T13391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.691800][T13391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.823325][T13396] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2098'. [ 619.975708][ T5628] Bluetooth: hci3: command tx timeout [ 620.290676][ T5280] 8021q: adding VLAN 0 to HW filter on device eth10 [ 620.292306][T13225] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.292669][T13225] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.292986][T13225] bridge_slave_0: entered allmulticast mode [ 620.302236][T13225] bridge_slave_0: entered promiscuous mode [ 620.347126][T13225] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.347374][T13225] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.347585][T13225] bridge_slave_1: entered allmulticast mode [ 620.368406][T13225] bridge_slave_1: entered promiscuous mode [ 620.556200][T10644] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 620.707824][T10644] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 620.707842][T10644] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 620.707852][T10644] usb 5-1: config 0 has no interface number 0 [ 620.721397][T10644] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 620.721425][T10644] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.721442][T10644] usb 5-1: Product: syz [ 620.721455][T10644] usb 5-1: Manufacturer: syz [ 620.721468][T10644] usb 5-1: SerialNumber: syz [ 620.748674][T10644] usb 5-1: config 0 descriptor?? [ 620.813309][T13426] comedi: No check for data length of config insn id 16777248 is implemented [ 620.813321][T13426] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 620.813328][T13426] comedi: Assuming n=15 is correct [ 620.865675][ T5351] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 620.982867][T10644] uvcvideo 5-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 620.982900][T10644] uvcvideo 5-1:0.64: No valid video chain found. [ 620.987151][T10644] usb 5-1: USB disconnect, device number 57 [ 621.025710][ T5351] usb 4-1: Using ep0 maxpacket: 32 [ 621.043740][ T5351] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 195, changing to 7 [ 621.043782][ T5351] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 90, changing to 7 [ 621.081533][ T5351] usb 4-1: New USB device found, idVendor=0499, idProduct=1042, bcdDevice= 0.40 [ 621.081561][ T5351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.081578][ T5351] usb 4-1: Product: syz [ 621.081591][ T5351] usb 4-1: Manufacturer: syz [ 621.081604][ T5351] usb 4-1: SerialNumber: syz [ 621.348827][T13225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.356847][T13225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.377398][ T5351] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 621.377910][ T5351] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 621.408510][ T5351] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 621.408935][ T5351] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 621.413744][ T5351] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 621.499442][T13225] team0: Port device team_slave_0 added [ 621.549328][T13421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.560707][T13225] team0: Port device team_slave_1 added [ 621.569150][T13421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.659971][ T5351] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 621.701371][ T5351] usb 4-1: USB disconnect, device number 76 [ 621.815085][ T6149] udevd[6149]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 622.171975][T13225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.171992][T13225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.172012][T13225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.311391][T13225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.311406][T13225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.311433][T13225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.568897][ T5280] 8021q: adding VLAN 0 to HW filter on device eth11 [ 622.637171][ T5609] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 622.766344][ T1022] hsr_slave_0: left promiscuous mode [ 622.787575][ T5609] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 622.787610][ T5609] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 622.787649][ T5609] usb 4-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 622.787666][ T5609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.791566][ T5609] usb 4-1: config 0 descriptor?? [ 622.792802][T13452] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 622.807295][ T1022] hsr_slave_1: left promiscuous mode [ 622.808318][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.808340][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.906188][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.906214][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.012062][ T5609] usbhid 4-1:0.0: can't add hid device: -71 [ 623.012183][ T5609] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 623.036014][ T5609] usb 4-1: USB disconnect, device number 77 [ 623.117514][ T1022] veth1_macvtap: left promiscuous mode [ 623.117574][ T1022] veth0_macvtap: left promiscuous mode [ 623.117736][ T1022] veth1_vlan: left promiscuous mode [ 623.117839][ T1022] veth0_vlan: left promiscuous mode [ 623.486104][ T1022] pim6reg (unregistering): left allmulticast mode [ 623.561085][ T5351] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 623.735768][ T5351] usb 5-1: Using ep0 maxpacket: 8 [ 623.738486][ T5351] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 623.738512][ T5351] usb 5-1: config 179 has no interface number 0 [ 623.738556][ T5351] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 623.738582][ T5351] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 623.738607][ T5351] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 623.738630][ T5351] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 623.738654][ T5351] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 623.738692][ T5351] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 623.738712][ T5351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.855363][T13465] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 624.307567][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 624.307631][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 624.307684][ T5351] usb 5-1: USB disconnect, device number 58 [ 624.396103][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 624.456553][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 624.707260][T13225] hsr_slave_0: entered promiscuous mode [ 624.709437][T13225] hsr_slave_1: entered promiscuous mode [ 624.716060][T13225] debugfs: 'hsr0' already exists in 'hsr' [ 624.716088][T13225] Cannot create hsr debugfs directory [ 624.763600][ T5351] hid_parser_main: 461 callbacks suppressed [ 624.763620][ T5351] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 624.788252][ T5351] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 625.039024][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.266446][T13484] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 625.338606][T13487] binder: 13483:13487 ioctl 3b83 200000000200 returned -22 [ 626.336025][T13487] binder: 13483:13487 ioctl 5417 200000000280 returned -22 [ 627.180044][ T5280] 8021q: adding VLAN 0 to HW filter on device eth12 [ 627.604903][T13539] netlink: 45 bytes leftover after parsing attributes in process `syz.6.2127'. [ 628.675231][T13225] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 628.877495][T13225] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 628.924429][T13568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.924877][T13568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.092134][T13225] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 629.513237][T13225] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 629.529157][T13225] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 629.604946][T13574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.614547][T13574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.619637][T13572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.620163][T13572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.649341][T13225] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 629.650775][T13225] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 629.675080][T13225] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 629.867443][ T5351] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 630.163250][T13225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.256123][T13225] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.328340][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.328572][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.349548][T13594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2139'. [ 630.363253][ T5856] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 630.378856][T13594] tmpfs: Bad value for 'mpol' [ 630.413652][ T1022] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.413824][ T1022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.495705][ T5856] usb 5-1: device descriptor read/64, error -71 [ 630.735592][ T5856] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 630.847951][T13604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.853060][T13604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.876917][ T5856] usb 5-1: device descriptor read/64, error -71 [ 630.988833][ T5856] usb usb5-port1: attempt power cycle [ 631.002129][ T37] audit: type=1326 audit(1779636216.454:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13603 comm="syz.6.2141" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82369cce59 code=0x0 [ 631.132874][T13225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.167822][ T5351] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 631.331556][ T5351] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.331582][ T5351] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 631.331600][ T5351] usb 4-1: config 1 has no interface number 0 [ 631.331642][ T5351] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 631.335654][ T5856] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 631.354239][ T5351] usb 4-1: New USB device found, idVendor=0525, idProduct=779d, bcdDevice= 0.40 [ 631.354267][ T5351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.354285][ T5351] usb 4-1: Product: syz [ 631.354298][ T5351] usb 4-1: Manufacturer: syz [ 631.354310][ T5351] usb 4-1: SerialNumber: syz [ 631.375017][ T5351] cdc_ncm 4-1:1.1: NCM or ECM functional descriptors missing [ 631.375062][ T5351] cdc_ncm 4-1:1.1: bind() failure [ 631.379926][ T5856] usb 5-1: device descriptor read/8, error -71 [ 631.529450][T13225] veth0_vlan: entered promiscuous mode [ 631.560415][T13225] veth1_vlan: entered promiscuous mode [ 631.568819][T13607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.569429][T13607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.588753][ T823] usb 4-1: USB disconnect, device number 79 [ 631.655609][ T5856] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 631.677960][ T5856] usb 5-1: device descriptor read/8, error -71 [ 631.700752][T13225] veth0_macvtap: entered promiscuous mode [ 631.710605][T13225] veth1_macvtap: entered promiscuous mode [ 631.744775][T13225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.786756][ T5856] usb usb5-port1: unable to enumerate USB device [ 631.791611][T13225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.820026][ T1022] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.821116][ T1022] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.852080][ T1022] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.853956][ T1022] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.490476][ T5856] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 632.689183][ T5856] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 632.689214][ T5856] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 632.689240][ T5856] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 632.743481][ T5856] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 632.743512][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.743531][ T5856] usb 4-1: Product: syz [ 632.743545][ T5856] usb 4-1: Manufacturer: syz [ 632.743559][ T5856] usb 4-1: SerialNumber: syz [ 632.803207][ T5856] usb 4-1: config 0 descriptor?? [ 632.807735][T13621] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 632.807846][T13621] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 632.830743][ T5856] usb 4-1: ucan: probing device on interface #0 [ 633.026424][ T5856] usb 4-1: ucan: could not read protocol version, ret=0 [ 633.026448][ T5856] usb 4-1: ucan: probe failed; try to update the device firmware [ 633.349171][ T10] usb 4-1: USB disconnect, device number 80 [ 633.490501][ T9435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.490521][ T9435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.728171][ T9435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.728191][ T9435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.218894][T13659] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2150'. [ 634.315978][T13662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.341802][T13662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.504951][T13676] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 634.704385][T13688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2156'. [ 636.099276][T13711] openvswitch: netlink: Actions may not be safe on all matching packets [ 636.421476][T13731] program syz.3.2167 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 636.756362][T13738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.758073][T13738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.760206][T13739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.764945][T13739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.836044][T13745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.836601][T13745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.841849][T13745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.842555][T13745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.997646][ T10] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 637.168590][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 637.168640][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 637.168654][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 637.168677][ T10] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 637.168689][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.172402][ T10] usb 4-1: config 0 descriptor?? [ 637.174653][T13741] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 637.240593][ T823] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 637.391226][ T823] usb 5-1: unable to get BOS descriptor or descriptor too short [ 637.394055][ T823] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 637.419626][ T823] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 637.419647][ T823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.419658][ T823] usb 5-1: Product: syz [ 637.419665][ T823] usb 5-1: Manufacturer: syz [ 637.419672][ T823] usb 5-1: SerialNumber: syz [ 637.566371][T13751] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2174'. [ 637.602371][ T10] hid-multitouch 0003:1FD2:6007.003E: ignoring exceeding usage max [ 637.603494][ T10] hid-multitouch 0003:1FD2:6007.003E: unknown main item tag 0x0 [ 637.603527][ T10] hid-multitouch 0003:1FD2:6007.003E: unknown main item tag 0x0 [ 637.603553][ T10] hid-multitouch 0003:1FD2:6007.003E: unknown main item tag 0x0 [ 637.603578][ T10] hid-multitouch 0003:1FD2:6007.003E: unknown main item tag 0x0 [ 637.603603][ T10] hid-multitouch 0003:1FD2:6007.003E: unknown main item tag 0x0 [ 637.603627][ T10] hid-multitouch 0003:1FD2:6007.003E: unknown main item tag 0x0 [ 637.603651][ T10] hid-multitouch 0003:1FD2:6007.003E: unknown main item tag 0x0 [ 637.603675][ T10] hid-multitouch 0003:1FD2:6007.003E: unknown main item tag 0x0 [ 637.603700][ T10] hid-multitouch 0003:1FD2:6007.003E: unknown main item tag 0x0 [ 637.603723][ T10] hid-multitouch 0003:1FD2:6007.003E: unknown main item tag 0x0 [ 637.642823][ T10] hid-multitouch 0003:1FD2:6007.003E: hidraw0: USB HID v0.05 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 637.721653][ T823] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 637.757363][ T823] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 637.896331][ T823] usb 5-1: USB disconnect, device number 63 [ 638.223959][T13756] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 638.333906][ T6149] udevd[6149]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 638.691535][T13773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.692126][T13773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.791485][T13777] tmpfs: Bad value for 'mpol' [ 638.988224][T13788] binder: 13787:13788 ioctl c00c620f 200000000100 returned -22 [ 639.001725][T13792] futex_wake_op: syz.7.2182 tries to shift op by -1; fix this program [ 639.356082][ T5856] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 639.505564][ T5856] usb 5-1: Using ep0 maxpacket: 32 [ 639.508770][ T5856] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 639.508802][ T5856] usb 5-1: config 0 interface 0 has no altsetting 0 [ 639.508832][ T5856] usb 5-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.00 [ 639.508852][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.533558][ T5856] usb 5-1: config 0 descriptor?? [ 639.566614][T13797] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 639.611603][T13806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.612154][T13806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.048572][ T5856] hid (null): unknown global tag 0xe [ 640.120009][T10644] usb 4-1: USB disconnect, device number 81 [ 640.166287][ T5856] evision 0003:320F:5041.003F: unknown global tag 0xe [ 640.166311][ T5856] evision 0003:320F:5041.003F: item 0 1 1 14 parsing failed [ 640.168396][ T5856] evision 0003:320F:5041.003F: probe with driver evision failed with error -22 [ 642.093913][ T823] usb 5-1: USB disconnect, device number 64 [ 661.789035][T13874] kAFS: No cell specified [ 661.794531][T13879] input: Ô as /devices/virtual/input/input74 [ 661.926925][T13884] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2193'. [ 661.966319][ T5731] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 662.106859][ T5731] usb 5-1: device descriptor read/64, error -71 [ 662.142230][T13891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.144859][T13891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.385768][ T5731] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 662.515609][ T5731] usb 5-1: device descriptor read/64, error -71 [ 662.525234][T13895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.529471][T13895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.627168][ T5731] usb usb5-port1: attempt power cycle [ 662.985766][ T5731] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 663.008249][ T5731] usb 5-1: device descriptor read/8, error -71 [ 663.259201][ T5731] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 663.276465][ T5731] usb 5-1: device descriptor read/8, error -71 [ 663.385907][ T5731] usb usb5-port1: unable to enumerate USB device [ 663.446254][T13913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.447425][T13913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.095700][ T6175] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 665.155609][ T5351] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 665.265591][ T6175] usb 5-1: Using ep0 maxpacket: 32 [ 665.277294][T13936] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.2207'. [ 665.280359][ T6175] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 665.280385][ T6175] usb 5-1: config 0 has no interface number 0 [ 665.289223][ T6175] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 665.289251][ T6175] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.289270][ T6175] usb 5-1: Product: syz [ 665.289283][ T6175] usb 5-1: Manufacturer: syz [ 665.289295][ T6175] usb 5-1: SerialNumber: syz [ 665.313755][ T6175] usb 5-1: config 0 descriptor?? [ 665.334217][ T6175] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 665.367303][ T5351] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 665.367321][ T5351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.408850][ T5351] usb 4-1: config 0 descriptor?? [ 665.441676][ T5351] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 665.545348][ T6175] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 665.557390][ T6175] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 665.656743][ T5351] gp8psk: usb in 128 operation failed. [ 665.664216][T13931] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 4294967287 out of range (51000000..2150000000) [ 665.770878][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 665.774527][ T6175] usb 5-1: USB disconnect, device number 69 [ 665.790416][ T6175] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 665.910796][ T6175] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 665.915948][ T6175] quatech2 5-1:0.51: device disconnected [ 666.255568][ T6175] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 666.395624][ T6175] usb 5-1: device descriptor read/64, error -71 [ 666.667681][ T6175] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 666.828183][ T6175] usb 5-1: device descriptor read/64, error -71 [ 666.936228][ T6175] usb usb5-port1: attempt power cycle [ 667.004249][T13958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.004824][T13958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.295926][ T6175] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 667.317799][ T6175] usb 5-1: device descriptor read/8, error -71 [ 667.581369][ T6175] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 667.599204][ T6175] usb 5-1: device descriptor read/8, error -71 [ 667.716666][ T6175] usb usb5-port1: unable to enumerate USB device [ 667.839353][ T5351] gp8psk: usb in 146 operation failed. [ 667.839372][ T5351] gp8psk: failed to get FW version [ 667.839831][ T5351] gp8psk: usb in 149 operation failed. [ 667.839845][ T5351] gp8psk: failed to get FPGA version [ 667.844029][ T5351] gp8psk: usb in 138 operation failed. [ 667.844050][ T5351] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 667.844096][ T5351] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 667.938306][ T5351] usb 4-1: USB disconnect, device number 82 [ 667.946297][T13969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2217'. [ 668.059388][T13973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2218'. [ 668.525148][T13993] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2226'. [ 668.862750][ T32] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 669.005803][ T32] usb 4-1: Using ep0 maxpacket: 8 [ 669.008634][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 669.009921][ T32] usb 4-1: config 9 has an invalid interface number: 5 but max is 1 [ 669.009952][ T32] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 669.009969][ T32] usb 4-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 669.009989][ T32] usb 4-1: config 9 has no interface number 0 [ 669.010032][ T32] usb 4-1: config 9 interface 5 altsetting 9 endpoint 0x9 has invalid wMaxPacketSize 0 [ 669.010050][ T32] usb 4-1: config 9 interface 5 has no altsetting 0 [ 669.013515][ T32] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 669.013542][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.013564][ T32] usb 4-1: Product: syz [ 669.013578][ T32] usb 4-1: Manufacturer: syz [ 669.013591][ T32] usb 4-1: SerialNumber: syz [ 669.490018][T14019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.490497][T14019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.584944][ T32] usb 4-1: USB disconnect, device number 83 [ 669.946012][T14002] Bluetooth: hci3: unexpected event for opcode 0x007f [ 670.051777][T14028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.052477][T14028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.054043][T14028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.082175][T14028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.642449][T14065] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 671.701986][T14065] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 671.713200][T14065] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 671.733829][T14065] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 671.740680][T14065] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 673.027335][T14002] Bluetooth: hci3: command 0x2016 tx timeout [ 673.072764][T14089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.073369][T14089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.110727][T14089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.113366][T14089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.657141][T14062] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.657482][T14062] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.657842][T14062] bridge_slave_0: entered allmulticast mode [ 673.660263][T14062] bridge_slave_0: entered promiscuous mode [ 673.667533][T14062] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.667866][T14062] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.668124][T14062] bridge_slave_1: entered allmulticast mode [ 673.670792][T14062] bridge_slave_1: entered promiscuous mode [ 673.770787][T14062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.810956][T14062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.904053][ T5628] Bluetooth: hci5: command tx timeout [ 674.209221][T14062] team0: Port device team_slave_0 added [ 674.209298][T14120] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2261'. [ 674.215155][T14062] team0: Port device team_slave_1 added [ 674.312062][T14062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.312077][T14062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.312103][T14062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.393914][T14062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.393930][T14062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.393956][T14062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.558949][T14062] hsr_slave_0: entered promiscuous mode [ 674.562086][T14062] hsr_slave_1: entered promiscuous mode [ 674.563109][T14062] debugfs: 'hsr0' already exists in 'hsr' [ 674.563136][T14062] Cannot create hsr debugfs directory [ 674.709375][ T5631] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 674.857319][ T5631] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 674.857349][ T5631] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.902787][ T5631] usb 5-1: config 0 descriptor?? [ 674.907811][ T5631] cp210x 5-1:0.0: cp210x converter detected [ 675.302375][T14147] binder: 14143:14147 ioctl c0306201 0 returned -14 [ 675.450727][ T5631] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 675.450756][ T5631] cp210x 5-1:0.0: querying part number failed [ 675.496759][T14145] lo speed is unknown, defaulting to 1000 [ 675.508628][ T5631] usb 5-1: cp210x converter now attached to ttyUSB0 [ 675.583333][T14145] lo speed is unknown, defaulting to 1000 [ 675.636981][ T5631] usb 5-1: USB disconnect, device number 74 [ 675.682148][ T5631] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 675.682576][ T5631] cp210x 5-1:0.0: device disconnected [ 675.825133][T14145] lo speed is unknown, defaulting to 1000 [ 675.841064][T14145] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 675.841087][T14145] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 675.841108][T14145] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 675.942065][T14145] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 675.973582][T14156] binder: 14155:14156 ioctl 400c620e 0 returned -14 [ 675.976301][ T5628] Bluetooth: hci5: command tx timeout [ 676.072523][T14158] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2271'. [ 676.109564][ T5628] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 676.109584][ T5628] CPU: 0 UID: 0 PID: 5628 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 676.109600][ T5628] Tainted: [L]=SOFTLOCKUP [ 676.109604][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 676.109612][ T5628] Workqueue: hci2 hci_rx_work [ 676.109631][ T5628] Call Trace: [ 676.109636][ T5628] [ 676.109642][ T5628] dump_stack_lvl+0xe8/0x150 [ 676.109659][ T5628] sysfs_create_dir_ns+0x271/0x2a0 [ 676.109671][ T5628] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 676.109684][ T5628] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 676.109700][ T5628] ? rt_spin_unlock+0x160/0x200 [ 676.109722][ T5628] kobject_add_internal+0x631/0xd10 [ 676.109739][ T5628] kobject_add+0x163/0x240 [ 676.109751][ T5628] ? __pfx_kobject_add+0x10/0x10 [ 676.109766][ T5628] ? get_device_parent+0x370/0x3a0 [ 676.109780][ T5628] device_add+0x408/0xb90 [ 676.109792][ T5628] hci_conn_add_sysfs+0xd5/0x210 [ 676.109806][ T5628] le_conn_complete_evt+0x10e6/0x16b0 [ 676.109827][ T5628] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 676.109841][ T5628] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 676.109856][ T5628] ? lockdep_hardirqs_on+0x7a/0x110 [ 676.109873][ T5628] ? skb_pull_data+0xfb/0x200 [ 676.109886][ T5628] hci_le_conn_complete_evt+0x187/0x470 [ 676.109914][ T5628] hci_event_packet+0x659/0xef0 [ 676.109940][ T5628] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 676.109954][ T5628] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 676.109967][ T5628] ? __pfx_hci_event_packet+0x10/0x10 [ 676.109978][ T5628] ? rt_spin_unlock+0x14f/0x200 [ 676.109994][ T5628] ? hci_send_to_monitor+0xe2/0x590 [ 676.110011][ T5628] hci_rx_work+0x3ee/0x1040 [ 676.110028][ T5628] ? process_one_work+0x8be/0x1630 [ 676.110042][ T5628] process_one_work+0x98b/0x1630 [ 676.110066][ T5628] ? __pfx_process_one_work+0x10/0x10 [ 676.110079][ T5628] ? do_raw_spin_lock+0x12b/0x2f0 [ 676.110102][ T5628] worker_thread+0xb49/0x1140 [ 676.110121][ T5628] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 676.110142][ T5628] kthread+0x388/0x470 [ 676.110153][ T5628] ? __pfx_worker_thread+0x10/0x10 [ 676.110167][ T5628] ? __pfx_kthread+0x10/0x10 [ 676.110179][ T5628] ret_from_fork+0x514/0xb70 [ 676.110193][ T5628] ? __pfx_ret_from_fork+0x10/0x10 [ 676.110204][ T5628] ? __switch_to+0xc79/0x1410 [ 676.110216][ T5628] ? __pfx_kthread+0x10/0x10 [ 676.110227][ T5628] ret_from_fork_asm+0x1a/0x30 [ 676.110249][ T5628] [ 676.110287][ T5628] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 676.110310][ T5628] Bluetooth: hci2: failed to register connection device [ 676.471529][T14145] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 676.671741][T14162] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2272'. [ 677.094371][T14062] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.158614][T14145] lo speed is unknown, defaulting to 1000 [ 677.161026][T14145] lo speed is unknown, defaulting to 1000 [ 677.163038][T14145] lo speed is unknown, defaulting to 1000 [ 677.164815][T14145] lo speed is unknown, defaulting to 1000 [ 677.183408][T14145] lo speed is unknown, defaulting to 1000 [ 677.207474][T14145] lo speed is unknown, defaulting to 1000 [ 677.481283][T14178] netlink: 'syz.6.2278': attribute type 4 has an invalid length. [ 677.845692][ T5856] usb 5-1: new low-speed USB device number 75 using dummy_hcd [ 677.965851][T14062] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.017804][ T5856] usb 5-1: No LPM exit latency info found, disabling LPM. [ 678.019107][ T5856] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 678.019136][ T5856] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 678.019161][ T5856] usb 5-1: config 1 interface 0 has no altsetting 0 [ 678.022296][ T5856] usb 5-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.40 [ 678.022323][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.022342][ T5856] usb 5-1: Product: 襠碚㋛䶿륻ꤡⒽ銰䯆â¯é™¿ëŒƒá¶Ÿä‹œæº¼ì©·ìŽ‡í‰½é›¼ï…ƒáƒ‚èŠèªŸå˜‚匿駊삎ᚮå©ë™Œä·ºê«³îŠˆåˆ¡á±Ÿä•°ä¼™ë«·é²ã“”ãŒá›¢ì¨§îŸ¢ê»žåµ‹ë¬»á™šå¹®æ¯¿ã„©é¿†å²£â‹²æ‹¼Äšã´¸â€—á‹‹á¢ºë©Šê„†ï‘¬ï©¤âžæ›™é½åŸˆê¼ŽêŠƒë¿³àº¡ï—Šî±´êŸæŽ»ïžšã³¥è¢žê®¶å³æ’£ä®’膧î…﬿簦㫕禵墯鉴枎㽜頲ê‰èš‡æ–ºé–¼æ±åž¬ä·‹è«¨ì˜ŠÙ—è¥žêŒ»éµ [ 678.022370][ T5856] usb 5-1: Manufacturer: à°» [ 678.022383][ T5856] usb 5-1: SerialNumber: Ѓ [ 678.052520][T14187] cgroup: Need name or subsystem set [ 678.055638][ T5628] Bluetooth: hci5: command tx timeout [ 678.179910][T14180] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 678.180026][T14180] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 678.239846][T14191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.256786][T14191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.551779][T14062] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.602234][ T5856] usbhid 5-1:1.0: can't add hid device: -71 [ 678.602317][ T5856] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 678.620267][ T5856] usb 5-1: USB disconnect, device number 75 [ 678.913795][T14193] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2283'. [ 678.944753][T14062] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.277633][T14207] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2286'. [ 679.297295][T14207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.297873][T14207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.378617][T14209] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2286'. [ 679.646003][ T1325] bridge_slave_1: left allmulticast mode [ 679.646037][ T1325] bridge_slave_1: left promiscuous mode [ 679.646336][ T1325] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.826749][ T1325] bridge_slave_0: left allmulticast mode [ 679.826775][ T1325] bridge_slave_0: left promiscuous mode [ 679.826969][ T1325] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.965719][ T5856] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 680.154191][ T5628] Bluetooth: hci5: command tx timeout [ 680.187081][ T5856] usb 5-1: Using ep0 maxpacket: 32 [ 680.190594][ T5856] usb 5-1: unable to get BOS descriptor or descriptor too short [ 680.191752][ T5856] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 680.191776][ T5856] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 680.191793][ T5856] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 680.193802][ T5856] usb 5-1: config 128 has no interface number 0 [ 680.193848][ T5856] usb 5-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 680.193875][ T5856] usb 5-1: config 128 interface 127 has no altsetting 0 [ 680.285020][T14217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.288874][ T5856] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 680.288904][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.288922][ T5856] usb 5-1: Product: ဇ [ 680.288935][ T5856] usb 5-1: Manufacturer: Ј [ 680.288948][ T5856] usb 5-1: SerialNumber: ⥓í·ç•’â¿ê…´î³ì¡Ÿì¢•ážšï¸ë¯¯á‚â⑼㊷㟮㉚땫雵悟䬄ᗌ涶é°ëªãƒ²é¤©â—饛êŒî™î»‡ç¨«]㲭祅㟒âœê¬–젇㔌㒇쀧R풙踕謈躖âœâ€§áª ï¿°èŒ»ç¡”竆ᦂ䚸붿챒鮊æ•虔熎༦듔ä²é¯ºà½€ç¨Žã«ºëœ£âª’êŠ©á‹½ï¬æƒ·â€î½í•¯ç¯²Î¶é€‰ê“©à¨¢ì­Œï«è³¯áŒ¾â­”㞮䌴xå±å³’ֆ퇟ㅀ桧虩誾꒟ [ 680.296186][T14217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.711945][ T5856] usb 5-1: USB disconnect, device number 76 [ 680.782907][T13868] udevd[13868]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 680.848925][T14229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.849440][T14229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.075997][T14231] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2294'. [ 681.096847][ T1325] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 681.127979][ T5628] Bluetooth: hci2: unexpected event for opcode 0x007f [ 681.376575][ T1325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 681.457828][ T1325] bond0 (unregistering): (slave batadv_slave_1): Releasing backup interface [ 681.510181][ T1325] bond0 (unregistering): Released all slaves [ 681.833800][T14234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.834292][T14234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.864226][T14242] 9p: Bad value for 'rfdno' [ 681.921211][T14240] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2296'. [ 682.205168][ T1325] IPVS: stopping master sync thread 8088 ... [ 682.362556][T14244] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2297'. [ 682.585603][ T32] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 682.741567][ T32] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 682.741670][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.741691][ T32] usb 5-1: Product: syz [ 682.741703][ T32] usb 5-1: Manufacturer: syz [ 682.741715][ T32] usb 5-1: SerialNumber: syz [ 683.227809][ T32] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 683.227861][ T32] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 683.339081][T14062] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 683.538232][T14062] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 683.670583][T14062] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 683.785245][T14062] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 684.210820][T14062] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 684.299202][T14062] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 684.425982][T14062] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 684.479037][ T32] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 684.531663][T14062] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 684.833781][T14062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.964115][T14273] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.2305'. [ 685.131760][T14062] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.170389][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.170661][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.258868][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.259077][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.410991][ T32] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -EPROTO [ 685.411444][ T32] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 685.411495][ T32] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 685.412344][ T32] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 685.447676][ T32] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 685.461668][ T32] usb 5-1: USB disconnect, device number 77 [ 685.545244][ T1325] hsr_slave_0: left promiscuous mode [ 685.576232][ T1325] hsr_slave_1: left promiscuous mode [ 685.577570][ T1325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 685.577604][ T1325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 685.640538][ T1325] veth1_macvtap: left promiscuous mode [ 685.640602][ T1325] veth0_macvtap: left promiscuous mode [ 685.641196][ T1325] veth1_vlan: left allmulticast mode [ 685.641487][ T1325] veth1_vlan: left promiscuous mode [ 685.642276][ T1325] veth0_vlan: left promiscuous mode [ 686.008933][T14281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.009527][T14281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.472076][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.486572][ T1325] team0 (unregistering): Port device macvlan1 removed [ 686.756378][ T1325] team0 (unregistering): Port device team_slave_1 removed [ 686.823004][ T1325] team0 (unregistering): Port device team_slave_0 removed [ 687.034756][T14288] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2310'. [ 687.203703][T14293] block nbd4: NBD_DISCONNECT [ 687.516506][T14300] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2312'. [ 687.780301][T14310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.783295][T14307] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2314'. [ 687.804266][T14310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.947148][ T5628] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 689.162420][T14062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.426649][ T1325] IPVS: stop unused estimator thread 0... [ 689.536395][T14062] veth0_vlan: entered promiscuous mode [ 689.654331][T14062] veth1_vlan: entered promiscuous mode [ 689.868229][T14062] veth0_macvtap: entered promiscuous mode [ 689.892221][T14062] veth1_macvtap: entered promiscuous mode [ 690.001773][T14062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 690.115221][T14062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 690.213584][ T3824] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.213904][ T3824] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.214121][ T3824] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.244247][ T3824] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.253339][T14336] overlayfs: missing 'lowerdir' [ 690.501967][T14337] XFS (nbd6): SB validate failed with error -5. [ 690.889262][T14345] CIFS: iocharset name too long [ 691.516408][T14350] cgroup2: Unknown parameter 'obj_type' [ 692.498027][ T1022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.498047][ T1022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.525563][ T32] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 692.696289][ T32] usb 5-1: Using ep0 maxpacket: 32 [ 692.698095][ T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.698118][ T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.698140][ T32] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 692.698152][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.701677][ T32] usb 5-1: config 0 descriptor?? [ 692.723582][ T32] hub 5-1:0.0: USB hub found [ 692.785069][T14359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.800096][T14359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.905067][ T32] hub 5-1:0.0: 1 port detected [ 693.055625][ T1028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.055645][ T1028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.523969][ T32] hub 5-1:0.0: activate --> -90 [ 693.555551][ T824] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 693.641675][T14367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.642653][T14367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.685621][ T824] usb 4-1: device descriptor read/64, error -71 [ 693.860240][T14369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.860554][ T32] hub 5-1:0.0: hub_ext_port_status failed (err = 0) [ 693.860925][T14369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.955527][ T824] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 694.100800][ T824] usb 4-1: device descriptor read/64, error -71 [ 694.205985][ T824] usb usb4-port1: attempt power cycle [ 694.300676][ T5730] usb 5-1: reset high-speed USB device number 78 using dummy_hcd [ 694.301441][ T5730] usb 5-1: device reset changed ep0 maxpacket size! [ 694.329329][ T5730] usb 5-1: USB disconnect, device number 78 [ 694.546087][ T824] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 694.566293][ T824] usb 4-1: device descriptor read/8, error -71 [ 694.672851][ T5730] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 694.825617][ T824] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 694.825763][ T5730] usb 5-1: Using ep0 maxpacket: 16 [ 694.830502][ T5730] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 694.830526][ T5730] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 694.833693][ T5730] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 694.833722][ T5730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.833741][ T5730] usb 5-1: Product: syz [ 694.833755][ T5730] usb 5-1: Manufacturer: syz [ 694.833786][ T5730] usb 5-1: SerialNumber: syz [ 694.860856][ T824] usb 4-1: device descriptor read/8, error -71 [ 694.920849][ T5730] usb 5-1: 0:2 : does not exist [ 694.968601][ T824] usb usb4-port1: unable to enumerate USB device [ 694.996833][T14375] Invalid source name [ 694.996851][T14375] UBIFS error (pid: 14375): cannot open "/dev/sg0", error -22 [ 694.996956][T14376] Invalid source name [ 694.996968][T14376] UBIFS error (pid: 14376): cannot open "/dev/sg0", error -22 [ 694.997510][T14375] netlink: 'syz.7.2328': attribute type 21 has an invalid length. [ 694.997597][T14375] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2328'. [ 695.114079][T14373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.114829][T14373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.394412][ T5628] Bluetooth: hci2: unexpected event 0x09 length: 4 > 3 [ 695.407698][T14373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.408609][T14373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.420291][ T5730] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 695.496838][ T5730] usb 5-1: USB disconnect, device number 79 [ 695.532496][T13868] udevd[13868]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 696.332860][T14391] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2333'. [ 696.337845][ T5730] usb 5-1: new low-speed USB device number 80 using dummy_hcd [ 696.446931][T14391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.506427][T14391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.528636][ T5730] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 696.528653][ T5730] usb 5-1: config 179 has no interface number 0 [ 696.528679][ T5730] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 696.528696][ T5730] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 696.528707][ T5730] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 696.528720][ T5730] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 696.528731][ T5730] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 696.528754][ T5730] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 696.528765][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.533314][T14391] bond0 (unregistering): Released all slaves [ 696.571795][ T5730] xpad 5-1:179.65: probe with driver xpad failed with error -5 [ 696.849307][ T824] usb 5-1: USB disconnect, device number 80 [ 697.218515][T14400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.219180][T14400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.875602][ T5856] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 697.934129][T14420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.934655][T14420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.070767][ T5856] usb 4-1: unable to get BOS descriptor or descriptor too short [ 698.071387][ T5856] usb 4-1: not running at top speed; connect to a high speed hub [ 698.072450][ T5856] usb 4-1: config 1 has an invalid interface number: 127 but max is 2 [ 698.072474][ T5856] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 698.072491][ T5856] usb 4-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 698.072516][ T5856] usb 4-1: config 1 has no interface number 3 [ 698.072599][ T5856] usb 4-1: config 1 interface 1 has no altsetting 0 [ 698.074996][ T5856] usb 4-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 698.075023][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.075041][ T5856] usb 4-1: Product: syz [ 698.075054][ T5856] usb 4-1: Manufacturer: syz [ 698.075067][ T5856] usb 4-1: SerialNumber: syz [ 698.380660][ T5856] usb 4-1: selecting invalid altsetting 0 [ 698.380676][ T5856] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 698.380685][ T5856] usb 4-1: selecting invalid altsetting 0 [ 698.381041][ T5856] usb 4-1: unit 5 not found! [ 698.434409][ T5856] usb 4-1: USB disconnect, device number 88 [ 698.487821][T13868] udevd[13868]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 699.799309][ T5730] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 699.952331][T14448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.952879][T14448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.065609][ T5730] usb 4-1: Using ep0 maxpacket: 16 [ 700.074364][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.074396][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.074416][ T5730] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 700.074453][ T5730] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 700.074473][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.134983][ T5730] usb 4-1: config 0 descriptor?? [ 700.663918][ T5730] microsoft 0003:045E:07DA.0040: item 0 4 0 11 parsing failed [ 700.664592][ T5730] microsoft 0003:045E:07DA.0040: parse failed [ 700.664670][ T5730] microsoft 0003:045E:07DA.0040: probe with driver microsoft failed with error -22 [ 700.726032][ T5730] usb 4-1: USB disconnect, device number 89 [ 700.912891][T14465] netlink: 'syz.3.2350': attribute type 27 has an invalid length. [ 701.925286][T14483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.934637][T14483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.939125][T14483] netlink: 'syz.6.2357': attribute type 11 has an invalid length. [ 701.943600][T14483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.944135][T14483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.944788][T14485] netlink: 'syz.6.2357': attribute type 11 has an invalid length. [ 702.285810][ T5856] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 702.437574][ T5856] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.437625][ T5856] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.437639][ T5856] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.437650][ T5856] usb 4-1: config 0 interface 0 has no altsetting 0 [ 702.437669][ T5856] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 702.437680][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.441785][ T5856] usb 4-1: config 0 descriptor?? [ 702.861549][ T5856] kye 0003:0458:5015.0041: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 702.862077][ T5856] hid_parser_main: 455 callbacks suppressed [ 702.862096][ T5856] kye 0003:0458:5015.0041: unknown main item tag 0x0 [ 702.862123][ T5856] kye 0003:0458:5015.0041: unknown main item tag 0x0 [ 702.862147][ T5856] kye 0003:0458:5015.0041: unknown main item tag 0x0 [ 702.862171][ T5856] kye 0003:0458:5015.0041: unknown main item tag 0x0 [ 702.862194][ T5856] kye 0003:0458:5015.0041: unknown main item tag 0x0 [ 702.862218][ T5856] kye 0003:0458:5015.0041: unknown main item tag 0x0 [ 702.862241][ T5856] kye 0003:0458:5015.0041: unknown main item tag 0x0 [ 702.866292][ T5856] kye 0003:0458:5015.0041: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.3-1/input0 [ 702.866324][ T5856] kye 0003:0458:5015.0041: tablet-enabling feature report not found [ 702.866338][ T5856] kye 0003:0458:5015.0041: tablet enabling failed [ 703.077716][T14488] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2358'. [ 703.077728][T14505] dns_resolver: Unsupported server list version (17) [ 703.081243][T14505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.081777][T14505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.145780][T14505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.146273][T14505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.175602][T14505] dns_resolver: Unsupported server list version (17) [ 703.188351][T14509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.188838][T14509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.368531][T14514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.369474][T14514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.945751][T14518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.946292][T14518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.495817][T14520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.496514][T14520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.502054][T14520] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2366'. [ 704.502248][T14521] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2366'. [ 704.503525][T14520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.504075][T14520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.068889][ T32] usb 4-1: USB disconnect, device number 90 [ 705.112347][T14532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.113253][T14532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.761801][T14550] bpf: Bad value for 'uid' [ 706.045641][ T32] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 706.180990][T14554] devpts: Bad value for 'max' [ 706.196170][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 706.204013][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 706.218407][ T32] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 706.218432][ T32] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 706.218497][ T32] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 706.220964][ T32] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 706.220992][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.221010][ T32] usb 4-1: Product: syz [ 706.221024][ T32] usb 4-1: Manufacturer: syz [ 706.221036][ T32] usb 4-1: SerialNumber: syz [ 708.193622][T14572] binder: 14571:14572 ioctl c0306201 200000000000 returned -14 [ 708.496790][T14579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.497666][T14579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.519068][T14578] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2384'. [ 708.920600][ T32] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 708.920629][ T32] cdc_ncm 4-1:1.0: bind() failure [ 708.929375][ T32] usb 4-1: USB disconnect, device number 91 [ 709.140429][T14584] netlink: 'syz.6.2386': attribute type 1 has an invalid length. [ 709.140442][T14584] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.2386'. [ 709.365596][ T32] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 709.497097][ T32] usb 4-1: device descriptor read/64, error -71 [ 709.712025][T14588] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 709.712042][T14588] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 709.714110][T14588] vhci_hcd vhci_hcd.0: Device attached [ 709.719477][T14589] vhci_hcd: cannot find a urb of seqnum 511 max seqnum 1 [ 709.738427][ T32] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 709.756212][ T13] vhci_hcd vhci_hcd.6: stop threads [ 709.756236][ T13] vhci_hcd vhci_hcd.6: release socket [ 709.756273][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 709.875655][ T32] usb 4-1: device descriptor read/64, error -71 [ 709.988015][ T32] usb usb4-port1: attempt power cycle [ 710.325643][ T32] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 710.346498][ T32] usb 4-1: device descriptor read/8, error -71 [ 710.379221][T14594] binder: 14592:14594 ioctl c0306201 200000000640 returned -22 [ 710.384509][T14594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.385044][T14594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.585576][ T32] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 710.608889][ T32] usb 4-1: device descriptor read/8, error -71 [ 710.718600][ T32] usb usb4-port1: unable to enumerate USB device [ 713.940639][T14002] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 713.961851][T14002] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 714.021400][T14002] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 714.022490][T14002] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 714.025228][T14002] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 714.347807][ T37] audit: type=1326 audit(1779636299.804:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14612 comm="syz.7.2394" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde5216ce59 code=0x0 [ 716.142937][ T10] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 716.345584][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 716.349877][ T10] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 716.349911][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.349930][ T10] usb 4-1: Product: syz [ 716.349942][ T10] usb 4-1: Manufacturer: syz [ 716.349955][ T10] usb 4-1: SerialNumber: syz [ 716.353046][ T10] usb 4-1: config 0 descriptor?? [ 716.377059][ T5628] Bluetooth: hci0: command tx timeout [ 716.486093][T14605] lo speed is unknown, defaulting to 1000 [ 716.837128][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 716.902018][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 716.902945][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 716.903009][ T10] usb 4-1: media controller created [ 716.934034][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 717.030209][ T1325] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.277631][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 717.277686][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 717.277698][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 717.310049][ T10] usb 4-1: USB disconnect, device number 96 [ 717.505173][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 717.975360][ T1325] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.186876][T14675] usb usb9: usbfs: process 14675 (syz.6.2415) did not claim interface 0 before use [ 718.456947][ T5628] Bluetooth: hci0: command tx timeout [ 718.651746][ T1325] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.818422][T14605] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.818789][T14605] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.819075][T14605] bridge_slave_0: entered allmulticast mode [ 718.822945][T14605] bridge_slave_0: entered promiscuous mode [ 718.845650][ T32] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 718.867597][T14605] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.867962][T14605] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.868270][T14605] bridge_slave_1: entered allmulticast mode [ 718.871538][T14605] bridge_slave_1: entered promiscuous mode [ 718.999796][ T32] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 718.999828][ T32] usb 4-1: config 1 has no interface number 0 [ 718.999875][ T32] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0xE has invalid maxpacket 8297, setting to 1024 [ 718.999902][ T32] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 718.999927][ T32] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 718.999950][ T32] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 719.007481][ T32] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 719.007511][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.007529][ T32] usb 4-1: Product: syz [ 719.007542][ T32] usb 4-1: Manufacturer: syz [ 719.007555][ T32] usb 4-1: SerialNumber: syz [ 719.023660][T14681] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 719.024422][T14681] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 719.028169][ T32] usb 4-1: Error in usbnet_get_endpoints (-22) [ 719.123045][T14686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.124754][T14686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.270233][T14681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2409'. [ 719.271502][T14681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.272036][T14681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.274591][T14681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.275133][T14681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.277505][T14681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.278798][T14681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.342849][ T824] usb 4-1: USB disconnect, device number 97 [ 719.418482][ T1325] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.574094][T14605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.604786][T14605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.787314][T14694] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2414'. [ 719.802776][T14605] team0: Port device team_slave_0 added [ 719.814096][T14695] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2414'. [ 719.842262][T14605] team0: Port device team_slave_1 added [ 719.979530][T14703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2418'. [ 719.979563][T14703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2418'. [ 720.122286][T14605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.122302][T14605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.122321][T14605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.125320][T14605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.125336][T14605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.125360][T14605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.293541][T14708] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2420'. [ 720.293765][T14709] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2420'. [ 720.315797][T14605] hsr_slave_0: entered promiscuous mode [ 720.319606][T14605] hsr_slave_1: entered promiscuous mode [ 720.540990][ T5628] Bluetooth: hci0: command tx timeout [ 720.961531][T14723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.962544][T14723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.965611][ T5856] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 721.116149][ T5856] usb 4-1: Using ep0 maxpacket: 16 [ 721.132021][ T5856] usb 4-1: config 5 has an invalid interface number: 43 but max is 0 [ 721.132046][ T5856] usb 4-1: config 5 has no interface number 0 [ 721.132072][ T5856] usb 4-1: config 5 interface 43 has no altsetting 0 [ 721.170019][ T5856] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a4.98 [ 721.170049][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.170075][ T5856] usb 4-1: Product: syz [ 721.170088][ T5856] usb 4-1: Manufacturer: syz [ 721.170101][ T5856] usb 4-1: SerialNumber: syz [ 721.402606][T14721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.403092][T14721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.588038][ T5856] usb 4-1: USB disconnect, device number 98 [ 721.715713][T14725] overlayfs: failed to resolve './file1': -2 [ 721.865764][T14731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.866406][T14731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.898841][T14731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2426'. [ 721.939379][ T1325] bridge_slave_1: left allmulticast mode [ 721.939416][ T1325] bridge_slave_1: left promiscuous mode [ 721.939698][ T1325] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.258093][ T1325] bridge_slave_0: left allmulticast mode [ 722.258115][ T1325] bridge_slave_0: left promiscuous mode [ 722.258303][ T1325] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.615683][ T5628] Bluetooth: hci0: command tx timeout [ 723.262677][T14762] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2431'. [ 723.631691][ T37] audit: type=1326 audit(1779636309.084:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14755 comm="syz.6.2429" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82369cce59 code=0x7fc00000 [ 723.631973][ T37] audit: type=1326 audit(1779636309.084:4172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14755 comm="syz.6.2429" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f82369cce59 code=0x7fc00000 [ 723.632343][ T37] audit: type=1326 audit(1779636309.084:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14755 comm="syz.6.2429" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82369cce59 code=0x7fc00000 [ 723.632597][ T37] audit: type=1326 audit(1779636309.084:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14755 comm="syz.6.2429" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82369cce59 code=0x7fc00000 [ 723.633645][ T37] audit: type=1326 audit(1779636309.084:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14755 comm="syz.6.2429" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82369cce59 code=0x7fc00000 [ 723.633882][ T37] audit: type=1326 audit(1779636309.084:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14755 comm="syz.6.2429" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82369cce59 code=0x7fc00000 [ 723.634143][ T37] audit: type=1326 audit(1779636309.084:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14755 comm="syz.6.2429" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82369cce59 code=0x7fc00000 [ 723.634365][ T37] audit: type=1326 audit(1779636309.084:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14755 comm="syz.6.2429" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82369cce59 code=0x7fc00000 [ 723.634617][ T37] audit: type=1326 audit(1779636309.084:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14755 comm="syz.6.2429" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82369cce59 code=0x7fc00000 [ 723.634829][ T37] audit: type=1326 audit(1779636309.084:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14755 comm="syz.6.2429" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82369cce59 code=0x7fc00000 [ 724.001154][ T1325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.076682][ T1325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.118225][ T1325] bond0 (unregistering): Released all slaves [ 724.162938][ T5280] 8021q: adding VLAN 0 to HW filter on device eth13 [ 724.879855][T14791] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2440'. [ 724.901818][T14797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.902335][T14797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.674998][T14815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.676096][T14815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.679437][ T5280] 8021q: adding VLAN 0 to HW filter on device eth14 [ 725.713732][T14815] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2444'. [ 725.747094][T14816] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2444'. [ 726.611835][ T5280] 8021q: adding VLAN 0 to HW filter on device eth15 [ 726.751869][T14605] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 726.805585][ T5856] usb 4-1: new low-speed USB device number 99 using dummy_hcd [ 726.812427][T14605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 726.965795][ T5856] usb 4-1: Invalid ep0 maxpacket: 32 [ 727.095567][ T5856] usb 4-1: new low-speed USB device number 100 using dummy_hcd [ 727.206956][T14605] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 727.245573][ T5856] usb 4-1: Invalid ep0 maxpacket: 32 [ 727.245937][ T5856] usb usb4-port1: attempt power cycle [ 727.315252][T14605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 727.407130][ T5280] 8021q: adding VLAN 0 to HW filter on device eth16 [ 727.407629][T14605] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 727.500550][T14605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 727.533012][T14605] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 727.579747][T14605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 727.605587][ T5856] usb 4-1: new low-speed USB device number 101 using dummy_hcd [ 727.626604][ T5856] usb 4-1: Invalid ep0 maxpacket: 32 [ 727.685484][T14872] 8021q: VLANs not supported on lo [ 727.737655][ T5628] Bluetooth: hci5: command 0x0406 tx timeout [ 727.761537][ T5856] usb 4-1: new low-speed USB device number 102 using dummy_hcd [ 727.783159][ T5856] usb 4-1: Invalid ep0 maxpacket: 32 [ 727.801234][ T5856] usb usb4-port1: unable to enumerate USB device [ 728.454462][T14605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.648528][T14888] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 2 out of range (51000000..2150000000) [ 728.965535][ T1325] hsr_slave_0: left promiscuous mode [ 729.048664][ T1325] hsr_slave_1: left promiscuous mode [ 729.058903][ T1325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.058930][ T1325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.111433][ T1325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.111460][ T1325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.303334][ T1325] veth1_macvtap: left promiscuous mode [ 729.303437][ T1325] veth0_macvtap: left promiscuous mode [ 729.322688][ T1325] veth1_vlan: left promiscuous mode [ 729.323002][ T1325] veth0_vlan: left promiscuous mode [ 729.937644][T14907] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2458'. [ 729.937675][T14907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2458'. [ 730.287953][ T32] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 730.316537][ T1325] team0 (unregistering): Port device team_slave_1 removed [ 730.377923][ T1325] team0 (unregistering): Port device team_slave_0 removed [ 730.417058][ T32] usb 4-1: device descriptor read/64, error -71 [ 730.560392][T14605] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.647131][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.647296][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.676655][ T32] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 730.701808][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.701979][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.808185][ T32] usb 4-1: device descriptor read/64, error -71 [ 730.918545][ T32] usb usb4-port1: attempt power cycle [ 731.032552][T14918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.033154][T14918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.368607][ T32] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 731.391729][ T32] usb 4-1: device descriptor read/8, error -71 [ 731.643869][ T32] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 731.671136][ T32] usb 4-1: device descriptor read/8, error -71 [ 731.777165][ T32] usb usb4-port1: unable to enumerate USB device [ 731.803893][T14605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.034230][T14932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.046275][T14932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.046479][T14933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.047044][T14933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.264706][T14940] binder: 14938:14940 ioctl c018620c 2000000000c0 returned -1 [ 732.659109][T14946] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input77 [ 732.782009][T14605] veth0_vlan: entered promiscuous mode [ 732.803320][T14605] veth1_vlan: entered promiscuous mode [ 732.969079][T14605] veth0_macvtap: entered promiscuous mode [ 733.025233][T14605] veth1_macvtap: entered promiscuous mode [ 733.163961][T14605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 733.227678][T14605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 733.481753][ T1022] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.512623][ T1022] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.517779][ T1022] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.540350][ T1022] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.569260][T14962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.569884][T14962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.897154][ T32] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 734.124302][ T32] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 734.124330][ T32] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 734.125641][ T32] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 734.125681][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 734.125718][ T32] usb 4-1: SerialNumber: syz [ 734.630642][T14002] Bluetooth: hci3: command 0x2016 tx timeout [ 734.934296][T14968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.934838][T14968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.999552][T14960] syzkaller1: entered promiscuous mode [ 734.999589][T14960] syzkaller1: entered allmulticast mode [ 735.056574][ T32] usb 4-1: 0:2 : does not exist [ 735.149199][ T32] usb 4-1: USB disconnect, device number 107 [ 735.268988][T13868] udevd[13868]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 735.758305][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.758330][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.836340][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.836359][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.489547][T14988] binfmt_misc: register: failed to install interpreter file ./file0 [ 736.609536][ T5609] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 736.689914][T14995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.690421][T14995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.694418][T14995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.698033][T14995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.735654][ T5609] usb 9-1: device descriptor read/64, error -71 [ 736.745680][ T5730] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 736.905572][ T5730] usb 4-1: Using ep0 maxpacket: 16 [ 736.907655][ T5730] usb 4-1: config 0 has an invalid interface number: 30 but max is 0 [ 736.907683][ T5730] usb 4-1: config 0 has no interface number 0 [ 736.907712][ T5730] usb 4-1: too many endpoints for config 0 interface 30 altsetting 161: 74, using maximum allowed: 30 [ 736.907756][ T5730] usb 4-1: config 0 interface 30 altsetting 161 has 0 endpoint descriptors, different from the interface descriptor's value: 74 [ 736.907771][ T5730] usb 4-1: config 0 interface 30 has no altsetting 0 [ 736.910229][ T5730] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 736.910259][ T5730] usb 4-1: New USB device strings: Mfr=249, Product=1, SerialNumber=3 [ 736.910279][ T5730] usb 4-1: Product: syz [ 736.910293][ T5730] usb 4-1: Manufacturer: syz [ 736.910307][ T5730] usb 4-1: SerialNumber: syz [ 736.919875][ T5730] usb 4-1: config 0 descriptor?? [ 736.999628][ T5609] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 737.155520][ T5609] usb 9-1: device descriptor read/64, error -71 [ 737.266158][ T5609] usb usb9-port1: attempt power cycle [ 737.304319][ T5730] speedtch 4-1:0.30: speedtch_bind: data interface not found! [ 737.304344][ T5730] speedtch 4-1:0.30: usbatm_usb_probe: bind failed: -19! [ 737.311395][ T5730] usb 4-1: USB disconnect, device number 108 [ 737.605726][ T5609] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 737.627189][ T5609] usb 9-1: device descriptor read/8, error -71 [ 737.865719][ T5609] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 737.890020][ T5609] usb 9-1: device descriptor read/8, error -71 [ 737.933967][T15012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.934780][T15012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.975687][ T5628] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 737.997296][ T5609] usb usb9-port1: unable to enumerate USB device [ 738.103047][T15020] netlink: 'syz.6.2483': attribute type 10 has an invalid length. [ 738.335558][ T5609] usb 4-1: new low-speed USB device number 109 using dummy_hcd [ 738.488004][ T5609] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 738.488031][ T5609] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 738.488076][ T5609] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 738.488094][ T5609] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 738.488119][ T5609] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 738.488130][ T5609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.493891][T15021] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 738.571683][ T5609] hub 4-1:1.0: bad descriptor, ignoring hub [ 738.571716][ T5609] hub 4-1:1.0: probe with driver hub failed with error -5 [ 738.584085][ T5609] cdc_wdm 4-1:1.0: skipping garbage [ 738.584106][ T5609] cdc_wdm 4-1:1.0: skipping garbage [ 738.584199][ T5609] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 738.698584][T15021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.700268][T15021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.685591][ T55] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 739.841198][ T55] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 739.841234][ T55] usb 9-1: can't read configurations, error -71 [ 741.611022][ T55] usb 4-1: USB disconnect, device number 109 [ 741.915630][ T55] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 742.065570][ T55] usb 4-1: Using ep0 maxpacket: 8 [ 742.076043][ T55] usb 4-1: unable to get BOS descriptor or descriptor too short [ 742.077173][ T55] usb 4-1: config 117 has an invalid interface number: 163 but max is 0 [ 742.077197][ T55] usb 4-1: config 117 has no interface number 0 [ 742.077226][ T55] usb 4-1: config 117 interface 163 has no altsetting 0 [ 742.079911][ T55] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 742.079938][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.079956][ T55] usb 4-1: Product: syz [ 742.079969][ T55] usb 4-1: Manufacturer: syz [ 742.079982][ T55] usb 4-1: SerialNumber: syz [ 742.344499][ T55] f81534a_ctrl 4-1:117.163: probe with driver f81534a_ctrl failed with error -71 [ 742.358685][ T55] usb 4-1: USB disconnect, device number 110 [ 743.195612][ T10] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 743.385541][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 743.404554][ T10] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 743.404584][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 743.404601][ T10] usb 4-1: Product: syz [ 743.404614][ T10] usb 4-1: Manufacturer: syz [ 743.404627][ T10] usb 4-1: SerialNumber: syz [ 743.440980][ T10] usb 4-1: config 0 descriptor?? [ 743.453006][ T10] gspca_main: sq905-2.14.0 probing 2770:9120 [ 744.025587][ T55] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 744.176707][ T55] usb 9-1: device descriptor read/64, error -71 [ 744.415840][ T55] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 744.565899][ T55] usb 9-1: device descriptor read/64, error -71 [ 744.586871][ T10] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 744.586968][ T10] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 744.609916][ T10] usb 4-1: USB disconnect, device number 111 [ 744.672104][T15141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.672426][T15141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.677229][ T55] usb usb9-port1: attempt power cycle [ 744.714180][T15141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.717648][T15141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.729048][T15141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.729601][T15141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.016319][ T55] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 745.036095][ T55] usb 9-1: device descriptor read/8, error -71 [ 745.277316][ T55] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 745.299292][ T55] usb 9-1: device descriptor read/8, error -71 [ 745.405823][ T55] usb usb9-port1: unable to enumerate USB device [ 745.601235][T15155] x_tables: ip_tables: DNAT.0 target: invalid size 24 (kernel) != (user) 32 [ 745.879508][T15163] netlink: 'syz.6.2512': attribute type 10 has an invalid length. [ 745.931987][T15164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.950674][T15164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.003060][T15163] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 746.005160][T15163] team0: Port device netdevsim1 added [ 746.034074][T15165] binder: 15150:15165 ioctl c0306201 2000000004c0 returned -22 [ 746.259640][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 746.259659][ T37] audit: type=1326 audit(1779636587.720:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15171 comm="syz.7.2515" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde5216ce59 code=0x0 [ 746.437759][T15151] lo speed is unknown, defaulting to 1000 [ 747.031719][T15188] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2518'. [ 747.900419][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.911347][ T10] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 748.075559][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 748.077366][ T10] usb 9-1: config 0 has an invalid interface number: 33 but max is 1 [ 748.077383][ T10] usb 9-1: config 0 has no interface number 1 [ 748.077414][ T10] usb 9-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 748.077435][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 65527, setting to 1024 [ 748.077449][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 748.079547][ T10] usb 9-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 748.079573][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.079592][ T10] usb 9-1: Product: syz [ 748.079604][ T10] usb 9-1: Manufacturer: syz [ 748.079615][ T10] usb 9-1: SerialNumber: syz [ 748.169900][ T10] usb 9-1: config 0 descriptor?? [ 748.184520][ T10] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 748.553693][T15210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.554148][T15210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.585720][ T6175] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 748.626120][ T10] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 748.666661][ T10] usb 9-1: USB disconnect, device number 12 [ 748.672321][ T2378] pvrusb2: Invalid read control endpoint [ 748.691187][ T2378] usb 9-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 748.691215][ T2378] usb 9-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 748.746315][ T6175] usb 4-1: Using ep0 maxpacket: 32 [ 748.747975][ T6175] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.747998][ T6175] usb 4-1: config 0 has no interfaces? [ 748.748028][ T6175] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 748.748048][ T6175] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.751354][ T6175] usb 4-1: config 0 descriptor?? [ 749.247402][ T55] usb 4-1: USB disconnect, device number 112 [ 749.315044][T15219] input: syz0 as /devices/virtual/input/input78 [ 750.459197][T15252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.459754][T15252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.059811][T15261] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 752.571800][T15302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.572140][T15302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.582490][T15302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.586652][T15302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.318409][T15316] netlink: 'syz.6.2558': attribute type 21 has an invalid length. [ 753.318431][T15316] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2558'. [ 753.318526][T15316] netlink: 'syz.6.2558': attribute type 5 has an invalid length. [ 753.318539][T15316] netlink: 'syz.6.2558': attribute type 6 has an invalid length. [ 753.318550][T15316] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2558'. [ 753.323264][T15315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.326198][T15315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.448941][ T823] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 753.601897][ T823] usb 4-1: unable to get BOS descriptor or descriptor too short [ 753.602976][ T823] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 753.602998][ T823] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 753.603035][ T823] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 753.603056][ T823] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 753.603084][ T823] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 753.603098][ T823] usb 4-1: config 1 interface 1 has no altsetting 0 [ 753.639846][ T823] usb 4-1: string descriptor 0 read error: -22 [ 753.639980][ T823] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 753.640086][ T823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.128703][T15310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.156204][T15310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.477473][T15334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.478037][T15334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.517896][T15334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.518509][T15334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.014722][T15340] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 755.014749][T15340] netdevsim netdevsim7: Falling back to sysfs fallback for: ./file0 [ 755.208768][T15345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.209257][T15345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.657355][ T823] usb 4-1: 2:0: failed to get current value for ch 1 (-71) [ 755.902918][ T823] usb 4-1: USB disconnect, device number 113 [ 756.101011][T15364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.101622][T15364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.181272][T15369] netlink: 'syz.7.2574': attribute type 1 has an invalid length. [ 756.295669][ T823] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 756.445613][ T823] usb 4-1: Using ep0 maxpacket: 16 [ 756.449359][ T823] usb 4-1: unable to get BOS descriptor or descriptor too short [ 756.450593][ T823] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 756.453167][ T823] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 756.453199][ T823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.453227][ T823] usb 4-1: Product: syz [ 756.453240][ T823] usb 4-1: Manufacturer: syz [ 756.453253][ T823] usb 4-1: SerialNumber: syz [ 756.903103][ T823] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 756.903541][ T823] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 757.195338][ T823] usb 4-1: USB disconnect, device number 114 [ 757.367782][T15396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.368331][T15396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.370164][T15395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.370710][T15395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.453155][T13858] udevd[13858]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 757.905541][ T6175] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 757.949425][T15403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.950626][T15403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.999197][T15403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.999621][T15403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.075646][ T6175] usb 4-1: Using ep0 maxpacket: 32 [ 758.079142][ T6175] usb 4-1: unable to get BOS descriptor or descriptor too short [ 758.080221][ T6175] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 758.080242][ T6175] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 758.080348][ T6175] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 758.082700][ T6175] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 758.082725][ T6175] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.082735][ T6175] usb 4-1: Product: syz [ 758.082742][ T6175] usb 4-1: Manufacturer: syz [ 758.082749][ T6175] usb 4-1: SerialNumber: syz [ 758.386585][T15410] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2587'. [ 758.413566][T15401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.415011][T15401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.437569][ T6175] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 758.437611][ T6175] cdc_ncm 4-1:1.0: bind() failure [ 758.462093][ T6175] usb 4-1: USB disconnect, device number 115 [ 758.974617][ T5609] IPVS: starting estimator thread 0... [ 758.978333][T15418] overlayfs: missing 'lowerdir' [ 759.001012][T15417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.001582][T15417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.028444][T15418] netlink: 'syz.7.2590': attribute type 4 has an invalid length. [ 759.028458][T15418] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2590'. [ 759.085601][T15419] IPVS: using max 9 ests per chain, 21600 per kthread [ 759.108129][T15418] .`: renamed from bond0 (while UP) [ 759.932285][T15445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.935828][T15445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.694861][T15455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.698839][T15455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.785193][T15460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.785914][T15460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.788619][T15463] netlink: 'syz.3.2602': attribute type 21 has an invalid length. [ 760.788637][T15463] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2602'. [ 760.788715][T15463] netlink: 'syz.3.2602': attribute type 4 has an invalid length. [ 760.788741][T15463] netlink: 'syz.3.2602': attribute type 3 has an invalid length. [ 760.798159][T15460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.805079][T15460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.025663][ T5609] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 761.535082][T15476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.536226][T15476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.558825][T15476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.559367][T15476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.615545][ T5609] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 761.677703][T15483] netlink: 'syz.6.2608': attribute type 2 has an invalid length. [ 761.767488][ T5609] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 761.767516][ T5609] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 761.769926][ T5609] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 761.769951][ T5609] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.769962][ T5609] usb 4-1: Product: syz [ 761.769970][ T5609] usb 4-1: Manufacturer: syz [ 761.769977][ T5609] usb 4-1: SerialNumber: syz [ 761.791831][ T5609] usb 4-1: 0:2 : does not exist [ 761.791924][ T5609] usb 4-1: unit 9 not found! [ 761.978851][ T6175] usb 4-1: USB disconnect, device number 117 [ 762.301686][T15498] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2612'. [ 762.975751][ T32] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 762.999674][ T37] audit: type=1326 audit(1779636604.460:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15528 comm="syz.6.2618" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82369cce59 code=0x7fc00000 [ 763.127039][ T32] usb 4-1: no configurations [ 763.127059][ T32] usb 4-1: can't read configurations, error -22 [ 763.263328][ T32] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 763.418062][ T32] usb 4-1: no configurations [ 763.418074][ T32] usb 4-1: can't read configurations, error -22 [ 763.418450][ T32] usb usb4-port1: attempt power cycle [ 763.728604][ T37] audit: type=1326 audit(1779636605.190:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15528 comm="syz.6.2618" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f82369cce59 code=0x7fc00000 [ 763.755714][ T32] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 763.777977][ T32] usb 4-1: no configurations [ 763.777989][ T32] usb 4-1: can't read configurations, error -22 [ 763.905658][ T32] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 763.927011][ T32] usb 4-1: no configurations [ 763.927028][ T32] usb 4-1: can't read configurations, error -22 [ 763.927347][ T32] usb usb4-port1: unable to enumerate USB device [ 764.095181][T15537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.097621][T15537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.125166][T15539] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2621'. [ 764.270542][T14354] libceph: connect (1)[c::]:6789 error -101 [ 764.270680][T14354] libceph: mon0 (1)[c::]:6789 connect error [ 764.281008][T15544] ceph: No mds server is up or the cluster is laggy [ 764.290366][T14354] libceph: connect (1)[c::]:6789 error -101 [ 764.290574][T14354] libceph: mon0 (1)[c::]:6789 connect error [ 766.645600][T14354] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 766.805542][T14354] usb 4-1: Using ep0 maxpacket: 16 [ 766.808287][T14354] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 766.808318][T14354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 766.812053][T14354] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 766.812079][T14354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.812097][T14354] usb 4-1: Product: syz [ 766.812119][T14354] usb 4-1: Manufacturer: syz [ 766.812132][T14354] usb 4-1: SerialNumber: syz [ 766.822050][T14354] usb 4-1: config 0 descriptor?? [ 766.832389][T14354] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 766.832420][T14354] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 767.269588][T15598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.270125][T15598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.538529][T14354] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 767.540151][T14354] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 767.540564][T14354] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 767.540581][T14354] em28xx 4-1:0.0: No AC97 audio processor [ 767.553717][T14354] usb 4-1: USB disconnect, device number 122 [ 767.559640][T14354] em28xx 4-1:0.0: Disconnecting em28xx [ 767.587673][T14354] em28xx 4-1:0.0: Freeing device [ 767.852127][T15603] sg_write: data in/out 458723/16 bytes for SCSI command 0x0-- guessing data in; [ 767.852127][T15603] program syz.6.2643 not setting count and/or reply_len properly [ 767.930540][T15609] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2644'. [ 767.930719][T15608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.931290][T15608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.940016][T15608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.940571][T15608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.089446][T15613] netlink: 'syz.7.2647': attribute type 27 has an invalid length. [ 768.090245][T15613] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2647'. [ 768.091078][T15613] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 768.395587][ T32] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 768.484489][T15624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.485019][T15624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.509044][T15624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.509586][T15624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.538978][T15624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.540396][T15624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.554482][ T32] usb 4-1: Using ep0 maxpacket: 8 [ 768.569522][ T32] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 768.569548][ T32] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 768.569562][ T32] usb 4-1: config 0 has no interface number 0 [ 768.569580][ T32] usb 4-1: too many endpoints for config 0 interface 48 altsetting 49: 55, using maximum allowed: 30 [ 768.569601][ T32] usb 4-1: config 0 interface 48 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 55 [ 768.569614][ T32] usb 4-1: config 0 interface 48 has no altsetting 0 [ 768.571716][ T32] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 768.571744][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.571761][ T32] usb 4-1: Product: syz [ 768.571771][ T32] usb 4-1: Manufacturer: syz [ 768.571784][ T32] usb 4-1: SerialNumber: syz [ 768.574751][ T32] usb 4-1: config 0 descriptor?? [ 768.673412][T15626] netlink: 188 bytes leftover after parsing attributes in process `syz.8.2652'. [ 768.811940][ T32] usb 4-1: USB disconnect, device number 123 [ 769.635686][T14354] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 769.795627][T14354] usb 4-1: Using ep0 maxpacket: 8 [ 769.800787][T14354] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 769.804471][T14354] usb 4-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 769.804501][T14354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.804519][T14354] usb 4-1: Product: syz [ 769.804533][T14354] usb 4-1: Manufacturer: syz [ 769.804546][T14354] usb 4-1: SerialNumber: syz [ 769.814200][T15638] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 770.046639][T14354] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 770.048138][T14354] usb 4-1: MIDIStreaming interface descriptor not found [ 770.129989][T14354] usb 4-1: USB disconnect, device number 124 [ 770.178500][T13869] udevd[13869]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 770.825627][ T823] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 770.985512][ T823] usb 4-1: Using ep0 maxpacket: 32 [ 770.989803][ T823] usb 4-1: unable to get BOS descriptor or descriptor too short [ 770.991176][ T823] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 770.991201][ T823] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 770.991219][ T823] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 770.991270][ T823] usb 4-1: config 128 has no interface number 0 [ 770.991306][ T823] usb 4-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 770.991320][ T823] usb 4-1: config 128 interface 127 has no altsetting 0 [ 770.993976][ T823] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 770.993998][ T823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.994009][ T823] usb 4-1: Product: syz [ 770.994016][ T823] usb 4-1: Manufacturer: syz [ 770.994024][ T823] usb 4-1: SerialNumber: syz [ 771.672748][T15649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.673346][T15649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.096807][ T823] usb 4-1: USB disconnect, device number 125 [ 772.200120][T13858] udevd[13858]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 772.312934][T15669] loop5: detected capacity change from 0 to 1 [ 772.440899][ T1325] [ 772.440914][ T1325] ====================================================== [ 772.440925][ T1325] WARNING: possible circular locking dependency detected [ 772.440947][ T1325] syzkaller #0 Tainted: G L [ 772.440965][ T1325] ------------------------------------------------------ [ 772.440972][ T1325] kworker/u8:14/1325 is trying to acquire lock: [ 772.440982][ T1325] ffff88803f3004f0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 772.441030][ T1325] [ 772.441030][ T1325] but task is already holding lock: [ 772.441036][ T1325] ffffc900065d7c40 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 772.441073][ T1325] [ 772.441073][ T1325] which lock already depends on the new lock. [ 772.441073][ T1325] [ 772.441079][ T1325] [ 772.441079][ T1325] the existing dependency chain (in reverse order) is: [ 772.441085][ T1325] [ 772.441085][ T1325] -> #5 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}: [ 772.441105][ T1325] process_one_work+0x8d7/0x1630 [ 772.441123][ T1325] worker_thread+0xb49/0x1140 [ 772.441140][ T1325] kthread+0x388/0x470 [ 772.441157][ T1325] ret_from_fork+0x514/0xb70 [ 772.441172][ T1325] ret_from_fork_asm+0x1a/0x30 [ 772.441190][ T1325] [ 772.441190][ T1325] -> #4 ((wq_completion)loop8){+.+.}-{0:0}: [ 772.441211][ T1325] touch_wq_lockdep_map+0xcb/0x180 [ 772.441225][ T1325] __flush_workqueue+0x14b/0x14f0 [ 772.441239][ T1325] drain_workqueue+0xd3/0x390 [ 772.441251][ T1325] lo_release+0x287/0x8f0 [ 772.441267][ T1325] bdev_release+0x541/0x660 [ 772.441287][ T1325] blkdev_release+0x15/0x20 [ 772.441307][ T1325] __fput+0x461/0xa70 [ 772.441320][ T1325] fput_close_sync+0x11f/0x240 [ 772.441334][ T1325] __x64_sys_close+0x7e/0x110 [ 772.441348][ T1325] do_syscall_64+0x15f/0x560 [ 772.441368][ T1325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.441384][ T1325] [ 772.441384][ T1325] -> #3 (&disk->open_mutex){+.+.}-{4:4}: [ 772.441406][ T1325] mutex_lock_nested+0x5a/0x1d0 [ 772.441422][ T1325] bdev_open+0xe0/0xcc0 [ 772.441440][ T1325] bdev_file_open_by_dev+0x1be/0x240 [ 772.441459][ T1325] swsusp_check+0x56/0x490 [ 772.441476][ T1325] software_resume+0x51/0x4c0 [ 772.441497][ T1325] resume_store+0x333/0x4f0 [ 772.441510][ T1325] kernfs_fop_write_iter+0x3b0/0x540 [ 772.441529][ T1325] vfs_write+0x629/0xba0 [ 772.441544][ T1325] ksys_write+0x156/0x270 [ 772.441559][ T1325] do_syscall_64+0x15f/0x560 [ 772.441578][ T1325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.441593][ T1325] [ 772.441593][ T1325] -> #2 (system_transition_mutex){+.+.}-{4:4}: [ 772.441616][ T1325] mutex_lock_nested+0x5a/0x1d0 [ 772.441631][ T1325] lock_system_sleep+0x49/0x70 [ 772.441646][ T1325] disk_store+0xa7/0x500 [ 772.441658][ T1325] kernfs_fop_write_iter+0x3b0/0x540 [ 772.441677][ T1325] vfs_write+0x629/0xba0 [ 772.441693][ T1325] ksys_write+0x156/0x270 [ 772.441708][ T1325] do_syscall_64+0x15f/0x560 [ 772.441726][ T1325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.441742][ T1325] [ 772.441742][ T1325] -> #1 (&of->mutex){+.+.}-{4:4}: [ 772.441765][ T1325] mutex_lock_nested+0x5a/0x1d0 [ 772.441781][ T1325] kernfs_seq_start+0x5c/0x420 [ 772.441800][ T1325] traverse+0x164/0x580 [ 772.441817][ T1325] seq_read_iter+0xd09/0xe20 [ 772.441835][ T1325] copy_splice_read+0x605/0xab0 [ 772.441849][ T1325] splice_direct_to_actor+0x483/0xc80 [ 772.441864][ T1325] do_splice_direct+0x19b/0x2a0 [ 772.441879][ T1325] do_sendfile+0x547/0x7e0 [ 772.441899][ T1325] __se_sys_sendfile64+0x144/0x1a0 [ 772.441918][ T1325] do_syscall_64+0x15f/0x560 [ 772.441936][ T1325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.441958][ T1325] [ 772.441958][ T1325] -> #0 (&p->lock){+.+.}-{4:4}: [ 772.441978][ T1325] __lock_acquire+0x15a5/0x2d10 [ 772.441994][ T1325] lock_acquire+0x106/0x350 [ 772.442008][ T1325] mutex_lock_nested+0x5a/0x1d0 [ 772.442020][ T1325] seq_read_iter+0xb8/0xe20 [ 772.442036][ T1325] lo_rw_aio+0xc80/0xf00 [ 772.442052][ T1325] loop_process_work+0x92a/0x11b0 [ 772.442067][ T1325] process_one_work+0x98b/0x1630 [ 772.442084][ T1325] worker_thread+0xb49/0x1140 [ 772.442101][ T1325] kthread+0x388/0x470 [ 772.442115][ T1325] ret_from_fork+0x514/0xb70 [ 772.442130][ T1325] ret_from_fork_asm+0x1a/0x30 [ 772.442147][ T1325] [ 772.442147][ T1325] other info that might help us debug this: [ 772.442147][ T1325] [ 772.442154][ T1325] Chain exists of: [ 772.442154][ T1325] &p->lock --> (wq_completion)loop8 --> (work_completion)(&lo->rootcg_work) [ 772.442154][ T1325] [ 772.442180][ T1325] Possible unsafe locking scenario: [ 772.442180][ T1325] [ 772.442185][ T1325] CPU0 CPU1 [ 772.442191][ T1325] ---- ---- [ 772.442196][ T1325] lock((work_completion)(&lo->rootcg_work)); [ 772.442208][ T1325] lock((wq_completion)loop8); [ 772.442221][ T1325] lock((work_completion)(&lo->rootcg_work)); [ 772.442234][ T1325] lock(&p->lock); [ 772.442244][ T1325] [ 772.442244][ T1325] *** DEADLOCK *** [ 772.442244][ T1325] [ 772.442249][ T1325] 2 locks held by kworker/u8:14/1325: [ 772.442259][ T1325] #0: ffff8880563ba938 ((wq_completion)loop5){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 772.442304][ T1325] #1: ffffc900065d7c40 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 772.442349][ T1325] [ 772.442349][ T1325] stack backtrace: [ 772.442363][ T1325] CPU: 1 UID: 0 PID: 1325 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 772.442387][ T1325] Tainted: [L]=SOFTLOCKUP [ 772.442393][ T1325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 772.442405][ T1325] Workqueue: loop5 loop_rootcg_workfn [ 772.442425][ T1325] Call Trace: [ 772.442432][ T1325] [ 772.442440][ T1325] dump_stack_lvl+0xe8/0x150 [ 772.442458][ T1325] print_circular_bug+0x2e1/0x300 [ 772.442480][ T1325] check_noncircular+0x12e/0x150 [ 772.442501][ T1325] __lock_acquire+0x15a5/0x2d10 [ 772.442521][ T1325] ? rcu_is_watching+0x15/0xb0 [ 772.442542][ T1325] ? __bfs+0x153/0x290 [ 772.442559][ T1325] ? __pfx_hlock_conflict+0x10/0x10 [ 772.442580][ T1325] ? seq_read_iter+0xb8/0xe20 [ 772.442600][ T1325] lock_acquire+0x106/0x350 [ 772.442616][ T1325] ? seq_read_iter+0xb8/0xe20 [ 772.442636][ T1325] ? seq_read_iter+0xb8/0xe20 [ 772.442656][ T1325] ? seq_read_iter+0xb8/0xe20 [ 772.442673][ T1325] mutex_lock_nested+0x5a/0x1d0 [ 772.442689][ T1325] ? seq_read_iter+0xb8/0xe20 [ 772.442708][ T1325] seq_read_iter+0xb8/0xe20 [ 772.442729][ T1325] ? kernfs_fop_read_iter+0x149/0x6b0 [ 772.442750][ T1325] ? __asan_memset+0x22/0x50 [ 772.442775][ T1325] lo_rw_aio+0xc80/0xf00 [ 772.442794][ T1325] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 772.442816][ T1325] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 772.442833][ T1325] ? reacquire_held_locks+0x104/0x190 [ 772.442853][ T1325] ? __pfx_lo_rw_aio+0x10/0x10 [ 772.442873][ T1325] ? rt_spin_unlock+0x14f/0x200 [ 772.442889][ T1325] ? kthread_associate_blkcg+0x359/0x600 [ 772.442906][ T1325] ? rt_spin_unlock+0x160/0x200 [ 772.442923][ T1325] loop_process_work+0x92a/0x11b0 [ 772.442958][ T1325] ? __pfx_loop_process_work+0x10/0x10 [ 772.442979][ T1325] ? __pfx___schedule+0x10/0x10 [ 772.442996][ T1325] ? add_lock_to_list+0xc7/0x100 [ 772.443017][ T1325] ? lockdep_unlock+0x5d/0xd0 [ 772.443031][ T1325] ? __lock_acquire+0x146e/0x2d10 [ 772.443052][ T1325] ? irqentry_exit+0x218/0x760 [ 772.443072][ T1325] ? lockdep_hardirqs_on+0x7a/0x110 [ 772.443091][ T1325] ? irqentry_exit+0x218/0x760 [ 772.443109][ T1325] ? rcu_is_watching+0x15/0xb0 [ 772.443133][ T1325] ? process_one_work+0x8be/0x1630 [ 772.443156][ T1325] ? lock_acquire+0x221/0x350 [ 772.443174][ T1325] ? process_one_work+0x8be/0x1630 [ 772.443194][ T1325] process_one_work+0x98b/0x1630 [ 772.443222][ T1325] ? __pfx_process_one_work+0x10/0x10 [ 772.443241][ T1325] ? do_raw_spin_lock+0x12b/0x2f0 [ 772.443261][ T1325] worker_thread+0xb49/0x1140 [ 772.443286][ T1325] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 772.443311][ T1325] kthread+0x388/0x470 [ 772.443328][ T1325] ? __pfx_worker_thread+0x10/0x10 [ 772.443349][ T1325] ? __pfx_kthread+0x10/0x10 [ 772.443366][ T1325] ret_from_fork+0x514/0xb70 [ 772.443385][ T1325] ? __pfx_ret_from_fork+0x10/0x10 [ 772.443403][ T1325] ? __switch_to+0xc79/0x1410 [ 772.443419][ T1325] ? __pfx_kthread+0x10/0x10 [ 772.443436][ T1325] ret_from_fork_asm+0x1a/0x30 [ 772.443461][ T1325] [ 772.543980][T15673] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2668'.