last executing test programs: 9.670859363s ago: executing program 1 (id=8): r0 = syz_usb_connect(0x0, 0x146, &(0x7f0000000680)={{0x12, 0x1, 0x141, 0x9d, 0x85, 0xe, 0x20, 0xbda, 0x8178, 0x3e3e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x134, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbf, 0x2, 0x2, 0x74, 0x87, 0xc2, 0x0, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "1d1f7c470b"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xa, 0xfffe, 0x7, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x6, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x0, 0xd1}, @mdlm_detail={0xc5, 0x24, 0x13, 0x1, "a54196510f6c4ee5b24ad38981b193460f72cd05803d772f4965277952242d5e1f8ae8d2b237b8176dff24df44e677e756618331151b227666300e21306a34f4bc19948cf63b613db735a617c1e52c43256f558e7fd80678cfcc0d7488daeca23bf2b4fd3fb6eb294eba53ac33329ed315d98d9672845c343df0fa526353187cd2095558c99480342399db00b8d555f6d239b80900809b68b74d2817dba73e3df7ca23ab035ebd012aa2b1002fda4ce2c9b29621b48a905511d5b49cb31304263b"}, @mdlm={0x15, 0x24, 0x12, 0xe}]}], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x0, 0x200, 0x0, 0x1, 0x5}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='@\t\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000380)={0x14, 0x0, 0x0}, &(0x7f0000000a00)={0x44, &(0x7f0000000000)={0x0, 0x1e, 0x58, "5fb0fab967ec41df1aade53f902466abe88363bfa8d322cd04b625d20ae74277cefc366d9326fa4147ad320053f69cf9b39b2f0edee62324b555948aeb6a2c1eff1b79524c1d480df7efa9453ab92edaad98b90b8d14cdd8"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x20, 0x83, 0xfffffffffffffce0, 0x1}, &(0x7f0000000980)={0x20, 0x87, 0x40, 0x4}, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="001528000000b207"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.459234241s ago: executing program 2 (id=10): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000208000140000000160900010073797a30000000000900020073797a32aff0a67c690c86b1829fedb5b074f4f58bbd9d98f8c192b0a92520ff1950ba0f24b77c605c6b5b9cd8038077b1f340753c013977e8"], 0x78}, 0x1, 0x0, 0x0, 0x8044}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x1, 0x1, 0x1, 0xe463}, {0x955, 0xfa, 0x5a, 0xffff}, {0x0, 0x3, 0x9, 0x5}, {0xfffb, 0x2, 0x2, 0x2}]}) 8.40552776s ago: executing program 2 (id=11): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.172136491s ago: executing program 0 (id=14): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c00028008000140000000020800024000000004000003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_usb_connect$uac1(0x2, 0x97, &(0x7f0000001880)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090285000301bbd0080904000000010100000a24017f0200030201020b24050600bf9b5ab6dc3e0c240202010202090800f701090401000001020000090401010101020000090501092000000180072501039a8556090402000001020000090402010101020000082402010101080a072401010203000905820920"], &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) 6.467084991s ago: executing program 1 (id=16): syz_usb_connect$cdc_ecm(0x0, 0xac, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000000010109029a000101000000090400000302020000052406000005240000000d240f01000000000000feffff042401", @ANYBLOB="5e637fba3ffd52f820fcbfc83fe6e296a5d98f77e22feea458ba29576c2106c0a9ce86ff605683763b11372e5c6c595e14efb4a0f9b36bcde5ea97c0ce348f5678d6c7e74e574664091e706fb91207"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=@updsa={0xf0, 0x1a, 0x21, 0x70bd28, 0x25dfdbff, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@loopback, 0x4e22, 0x2, 0x4e23, 0x7, 0x2, 0x80, 0x20, 0x67}, {@in=@broadcast, 0x4d6, 0x32}, @in=@empty, {0x506793d5, 0xfffffffffffffff9, 0x24f, 0x1, 0x5, 0x3ff4, 0x8, 0x5b7}, {0xd7e3, 0xff, 0x401, 0x4}, {0x6, 0x6, 0x4ae}, 0x70bd25, 0x3502, 0x2, 0x0, 0xc, 0x40}}, 0xf0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r2) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000900)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x8810) epoll_create1(0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0xe43986f95b0e4309}) ioctl$TUNGETSNDBUF(r5, 0x400454dc, &(0x7f0000001700)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x4d) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', r7, 0x0, 0x0, 0x6, 0x6, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) r8 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$vcsu(&(0x7f0000000180), 0x7, 0x10000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xc, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2, {[@lsrr={0x83, 0x1b, 0xc7, [@private=0xa010102, @rand_addr=0x64010101, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @empty]}]}}}}}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 5.623074839s ago: executing program 0 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}, {@uuid_null}], [{@fowner_lt={'fowner<', 0xee01}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-$'}}, {@pcr={'pcr', 0x3d, 0x35}}]}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x3, 0x1, 0x3, 0x10001, 0x8, 0x9, 0x3, 0x7, 0x9}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB="cfcde86fc75fbaa7d8faa734eaf32b990a4e84d222d9a59b29501b251c8a174126c047cb0b", @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000002100)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65be667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425910f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x10000004, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x1, 0x0, 0x0, 0x5, 0x1ff, 0x2}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) ioctl(r4, 0x8b32, &(0x7f0000000040)) io_setup(0x202, &(0x7f0000000200)=0x0) r6 = epoll_create1(0x80000) io_submit(r5, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x0, 0x0, r3, 0x0, 0x0, 0xae, 0x0, 0x2}]) mprotect(&(0x7f000019d000/0x3000)=nil, 0x3000, 0x6) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) dup2(r4, r6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ptrace$poke(0x5, r7, &(0x7f0000000080), 0x0) chdir(&(0x7f0000000000)='./file0\x00') 5.38386164s ago: executing program 0 (id=20): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4}) (async) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="03c90029"], 0x2d) (async) r1 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e01000008240501020205050764f7edb276"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="a001000010000100000000000000000064010102000000000000000000000000ff01000000000000000000000000000100000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000002a6de5ea00000000000000000001feffffffffffffff0000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400af0000000000000048000200656362286369706865725f6e756c6c29000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000e1"], 0x1a0}}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) 5.287712209s ago: executing program 2 (id=21): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1, 0x8, 0x2, {}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @can={{0x2, 0x1, 0x1, 0x1}, 0x1, 0x1, 0x0, 0x0, "68c76dee16687b11"}}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) open_by_handle_at(r2, &(0x7f0000000040)=@ocfs2_parent={0x18, 0x2, {{0x4, 0xfff, 0x9}, {0x4, 0x8, 0x46f}}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r2) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000000e40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e00)={&(0x7f0000001180)={0x37c, r3, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80, 0x71}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xc39}, @NL80211_ATTR_TIMEOUT={0x8}, @NL80211_ATTR_PEER_MEASUREMENTS={0x34c, 0x111, 0x0, 0x1, {0x348, 0x5, 0x0, 0x1, [{0x2d0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x78, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x254, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x158, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xcab}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x174}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}]}]}}]}, 0x37c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24048080) sendmsg$NFT_BATCH(r2, &(0x7f0000000a00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x1c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x7a2d6fcdbf6baa62, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_DELCHAIN={0xb8, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffd2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000001}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x37b56330}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c795343}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWCHAIN={0x1a8, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x47281845}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x43c0f2a3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6e660603}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip_vti0\x00'}]}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x55}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7f}]}, @NFTA_CHAIN_USERDATA={0xe7, 0xc, "f15cb629383731bd1714c44e12d23b6146ed1f78064cd0fe222aaf32116aaf32e78ef459311acb00c386d3ad99d8b62f4532798defc576be06023a2657ab271383e3e2f65e0887ebf47cf24f1636c89b861c78a38694ddca9c55866f97e2063a23a5ed2d6499d99f765e6cc077f97f245919f94617db12b45c76f6e526625e0272afb81e15fa13b8f0de8478c65c002b3f70ec90e0712d43b2369def03d9785037ef2d798305aba3e1a9aa72f72fdc8cbfd993f1c189780242e13cd1137c5bc66f0e827d608589bcf94ab689119154015c78d451061e7b383cf974eb0aba36db92cdc4"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HOOK={0x2c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv0\x00'}]}]}, @NFT_MSG_DELSET={0x2a8, 0xb, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_DESC={0x294, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xaf8d}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1c00000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff18}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbfa}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3242}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x56}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}]}]}, @NFTA_SET_DESC_CONCAT={0x88, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x487}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x32278a52}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5f0d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xad}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd82}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}]}]}, @NFT_MSG_DELSET={0xac, 0xb, 0xa, 0x706, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @redir={{0xa}, @void}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x100}, @NFTA_SET_DESC={0x24, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x497c}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x6c0}, 0x1, 0x0, 0x0, 0x4000000}, 0x42) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f00000009c0)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000200)='{(\'-!{X&5]@{:!\x00', &(0x7f0000000240)='\\\xc9\x00', 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="67a13043c1e7f529b619b6d11e678f5a6a070e2620fb8df1bb84679285ce3a6085f6491be63da392cab19d81de2917f98c522141a90d3447022e5b865ab665c79292665786dbdeab65ae54c906e6d445b5cc11a60bc94ad233d109a02f13209779222dbc45f340c5c6f2f84e7e4fa8a134429f877a20a5a5eb09ea9de35a2a64ab5106512d8032969287b011b24daedf2b6069d844df98eb643c2c39f255fb7c38243a0012dd869ea99f9470b6ad1829c247226320b0059596dc390f12a317e17b2d6660be46e5da830e7ac628864da9e9d66c32c5fb", @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000004) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x110000000097a9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x21, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875496364ab192cb8b873aa"}) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') 5.030807378s ago: executing program 2 (id=22): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r1, 0x2, r0}) (async) socket$alg(0x26, 0x5, 0x0) epoll_create1(0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe88000000000000000000000000010100000000000000000000ffffac1414260000000000000000000000003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000010000000232000000ac1414bb00eaffffff0000000000000000000000000000000000000000000000fffffeffffffffff0400000000000000040000000000000040000000000000000000000000000000000000000000000061f4ffffffffffff0300000000000000000000000000000000000100000000000000000002000000000000002dbd700000000000020005000000000000000000480002"], 0x138}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$igmp6(0xa, 0x3, 0x2) (async) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000000100)="2b23dbc8957909000000d77a88fb6e1c55d884d304", 0x15}], 0x1, 0x7, 0x58) (async) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff012145f60a823097a4"], 0x0) 4.806400244s ago: executing program 1 (id=23): r0 = userfaultfd(0x80001) syz_usb_connect(0x0, 0x6b, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad09240306010103", @ANYRES32=r0], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SECUREBITS(0x1c, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="ec0000002100010000000000fefffffffc020000000000000000000000000000fc02000000000000000000000000000000000000000000000200000084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac"], 0xec}}, 0x0) setuid(0xee01) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x73f4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x86, 0x1, {0x22, 0x47}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = inotify_init() fcntl$setlease(r3, 0x400, 0x2) 4.798416395s ago: executing program 2 (id=24): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xa9, 0x1f, 0xe2, 0x40, 0x50d, 0x122, 0x69f6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa, 0x0, 0x0, 0x9c, 0xd1, 0x1c}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, &(0x7f0000000000)={0x40, 0x22, 0xa8, {0xa8, 0x21, "fb98b1ed8e7b5b0f51c3f80c2fe53e89a7b62376b41e885886942481a633fcdc97459965d17cf68a87d1c03739cee68b00ccdae7e626a72eefdaa14cc7ff03f17041d97c01cf53d5e79f67d9163f9725b3f51907de5605cb5c1976374bce8a9f8c048907b8db98c1ab7102bad4a6b5906f43b3eea99767249143846cf4ddd208ed81edbb4d146000cc52b2fae28e4884d4e670a72198a94564056f2c9e706844deaff2ced462"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}, &(0x7f0000000140)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x9, '\x00'}, @global=@item_4={0x3, 0x1, 0xb, "98f88406"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x380, 0x0, 0x1, {0x22, 0xf9f}}}}, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x40, 0xe, 0x2, "64f2"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000002c0)={0x20, 0x1, 0x11, "c1f5771dc4f2267c79ad8d8e7d66685506"}, &(0x7f0000000300)={0x20, 0x3, 0x1, 0xa}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000380)={0x0, 0xa, 0x2, "cfe5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.623031773s ago: executing program 0 (id=27): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7}]}) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = gettid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0xffffff6a) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r6, 0xfffffffffffffc01, 0x0) tee(r2, r6, 0x60000000000, 0x0) read$FUSE(r5, &(0x7f0000032680)={0x2020}, 0x2020) r7 = syz_open_dev$vcsa(&(0x7f0000000080), 0x6, 0x208000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000600)={0x0, 0x7, 0x8001}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r7, 0x50009418, &(0x7f0000000d00)={{r1}, r8, 0x0, @unused=[0x2, 0xe90, 0x6, 0xffffffff], @devid=r9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)) r10 = socket(0x10, 0x3, 0x0) r11 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x3, 0x11, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0xfffffffd, 0x10000, 0x1, 0x3}, 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x17, &(0x7f0000000400)=[@in6={0xa, 0x4e23, 0x7fffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}], 0x1c) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) 3.397818224s ago: executing program 1 (id=28): r0 = socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 32) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) open_by_handle_at(r0, &(0x7f00000001c0)=@xfs_parent={0x1c, 0x82, {0x6, 0x15d, 0x1, 0xc74}}, 0x406000) (async, rerun: 32) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) (async) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) (async) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) close(r4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x8, r5, 0x48c}, 0xc) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000040), 0x80, &(0x7f00000000c0)=ANY=[@ANYRES8]) 3.176279925s ago: executing program 1 (id=29): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) (async) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, 0x0, &(0x7f0000000880)) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000dc0), 0x80000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xa4, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe07}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010100}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4090) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xa4, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe07}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010100}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4090) fspick(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0) (async) r5 = fspick(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000d80)='./binderfs/binder1\x00', 0x0, r2) (async) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000d80)='./binderfs/binder1\x00', 0x0, r2) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x1c, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}]}, 0x1c}}, 0x0) r6 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xbf, 0x1241, 0xf767, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x90, 0xb, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x3, 0x21, {0x9, 0x21, 0x3f3d, 0xf, 0x1, {0x22, 0x44c}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x2, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x0, 0xd, 0x3}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x5, 0x2, 0x5, 0xff, 0xfb}, 0xe6, &(0x7f0000000080)={0x5, 0xf, 0xe6, 0x6, [@generic={0x98, 0x10, 0x1, "cc17fe4d5f316c3adac288544710396d52265e388ee90dfeac50b476e71f40dcb142a1f8c9871d6ce31779c22a8fba67a1b02628baffab3bb46333ad4ebcf23e328311c7b5a55e6d678943695ea5d999f349f92ea5db08ec4e263ab74221eb138cb81ad69e472aaf99ae9037784b06984b107d13f37923758e104698106b4d40d9acf96998753f32855f6e579d7e7f6c5d3fd9b178"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x8, 0x7fff}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "4ccbd076d664901751d2aa2c946f8d79"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x9, 0x4, 0x4}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x4, 0xd5, 0x5, 0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x8, 0xf00, 0x0, [0x0, 0xff0000, 0xc000, 0xf]}]}, 0x7, [{0x10, &(0x7f0000000180)=@string={0x10, 0x3, "d3ccc2e9dfcd9aa54b8684c364ec"}}, {0x80, &(0x7f00000001c0)=@string={0x80, 0x3, "df9a371ddf9c476fa744b76a04ee19bfc32b04ec4522af0fa29419e3d29f659ab3f74093dc0c3b2c9ae88b833dcd65d04e0ec26ed1e5ef07c1d6f645082b13ca6e90e6a224a3799278566829ce82756446ca6534a7135324a804595715f8b66948cb2d5f233821b140a212bea7c06a2dd89fbeb84a06a2a6b27ccdbb38e7"}}, {0xff, &(0x7f0000000240)=@string={0xff, 0x3, "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"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2c08}}, {0x60, &(0x7f0000000380)=@string={0x60, 0x3, "be6fc073451d39601eb810105568499b993dead389ee852ffb7b3346e0910f8331684779e26790173bea1d9a88924e9d0f95259eb980381a9dd4b3dcdf16b07fa01ade329eb635f63d791e44a97ea42128b3b03f9ffa8aaeb9f8fccc3616"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x440a}}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r7, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x60, r4, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4c7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff9419}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdb60}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x44000) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) (async) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) syz_usb_control_io(r6, &(0x7f0000000800)={0x2c, &(0x7f0000000600)={0x20, 0x8, 0xe4, {0xe4, 0x31, "25d0772b5cb138be0d9055a6f5c3467cb82cc2f7c1df5f9bffd88237de128fe3cb4ac98c5ec3592f0bb349616b67b7af79fd7d505184a5fe707fc48ffaebd00c9b66a626a6a9e0c074139ab00c6ef2f9c653f1ef97e3d6a551713321a9558236c19bf9d8d352188f13944ef3d8587456cad1c81e10d410ef5d376c889d65d481ea416232c6ddd231f1379acb4d6e6f868fed62b0e6a9108df135d88ce79e94c6cb6334fd6da3f2af35a03cd1b9b38e1fb355f721342141d928b1a6ba074fcf86f0c0413b0f1b58477da2f30083b637d08dc4b06995468e9b38cdcaf3f0200f8acbca"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000700)={0x0, 0xf, 0x50, {0x5, 0xf, 0x50, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "e925abcf89f1c9058c4d805e2318ae9f"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0xa, 0x8, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x6a, 0x7f, 0x2, 0x3, 0xb}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x4, 0x3, 0x10, 0xf}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "8ae712cb5d65c65c5aa986bce72a4778"}]}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x44, 0xc0, 0x0, 0x8, "2921d83d", "a26c332a"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x60, 0x7, 0x3, 0x7f, 0xf5, 0xf4c4}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000840)={0x0, 0x2a, 0x11, "25b2f182e040766b1be6b5664bafe032eb"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x0, 0x20}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "9a67"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x400}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, &(0x7f0000000b00)={0x40, 0x17, 0x6}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "ef85"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0xeb}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0x5}}) 2.526466178s ago: executing program 0 (id=32): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xd, 0x1, 0x0, "ac9ea3c75608cf7a74445673c1f1fe7bb3fe9603a055824fd5df22e9bd6c89a0"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(r2, r2, 0x2) move_mount(0xffffffffffffffff, 0x0, r2, 0x0, 0x46) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000380)={0x30, r3, 0x9, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.394997807s ago: executing program 0 (id=33): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000380)=[{0x4, 0x0, 0x0, 0x61b4}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_usb_connect(0x1, 0x8e1, &(0x7f0000000d80)={{0x12, 0x1, 0x110, 0x5c, 0xe7, 0xf5, 0x10, 0x6f8, 0x3004, 0xb787, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8cf, 0x2, 0xd, 0x2c, 0x80, 0x8, [{{0x9, 0x4, 0x3, 0x99, 0xa, 0x8e, 0x67, 0x54, 0x3, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, 'um'}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x1, 0x2}, {0x6, 0x24, 0x1a, 0x3, 0x19}, [@obex={0x5, 0x24, 0x15, 0x21c}, @dmm={0x7, 0x24, 0x14, 0x8, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x9a5}, @mdlm_detail={0xda, 0x24, 0x13, 0xf7, "81645b8ee1bc009f5a8cd494cd61f2ef8f25b839876d55d1a4ea0b6751a58b06be0a7e7e15ad698ebea8dbcd4d371eb96aa0b1ead6238a76b00847eaa4ccfc1be90dbe7137ae4534398be85142b681991fea10d2a2ff859f4a0a24f0763d4c20259f8705e13eb7e577d67e60a9fc1cf38be57577edecd5e95e3fc81542b5bdd5b661bb53850113d4ee36c46896289715527f74c2a8fc916fbc7b2d59a8bfb0cadaf5a5e071b16573441b0bf5927c3d0f8cce001b195923532fe8bf152e548a967e35afdba7c62d55f0138e7a4a6dbf4a594f0b597683"}, @dmm={0x7, 0x24, 0x14, 0x7, 0x6}]}], [{{0x9, 0x5, 0x3, 0x10, 0x8, 0x2, 0xc, 0x1}}, {{0x9, 0x5, 0x3, 0x15, 0x400, 0xa, 0x9, 0x5, [@generic={0x37, 0x5, "88b873f30565a0223d1851890d9306cf298799bc2756b616169eb69f13622702c7167aec2acd229546f807adf225a569c48b00fa04"}, @generic={0x1d, 0x23, "8ad638e7699540323ada0099b9cd1887b24e219b67c533f81da796"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0xff, 0x1, 0x1, [@generic={0xc6, 0x6, "57ce7f0afd1b9aa9d60b96aed7dbed467469644c481135f2ecd87a51944ff31da0016c23ef443db615cba2bfc7f2ff0a8b632df0327cbb8cb3582cfe6ce6effd4c797446cb4e7a8f8ac3894f90a050f436068a3f93a6c236432f776d190f45f2596697a7d7959bd9e4588a33270f199c85009e09095fd31969ae9da48dd074027d94e5cdcd6c315ccfc152091dcf82e622a1c198a4261edbf5f9bfb9ad52f6aec30be8bb88c2066408b2088521f86b3f7b8b2405a0e27b405cc3222e2cb2e5db62c2da65"}, @generic={0x39, 0xe, "7653b26ae81f34d244b569ca68d0bbbb52d5069a1d2d3546dc2772ed9b4efcb8239decfd44b00aef87fa77b35d842156e23b770e4a44c7"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x8, 0x5, 0x1, [@generic={0xd9, 0xf, "deb29da254473a2f64ce0575b13efb3ad03253db2f8dc80e1963aeb65dd8f291e9e13eeeaa341bc297c37acf655959c8c4fd4a0de39e9cf9c777961d67426c744cc082cd432da7ec8097e8425ae94ce4754cb2a4ac2465610c1c8bbed49cbf10eb6ab065bf1e1d67884254e49e2e70a30383a56c55b9e934d5a01deec38cf169326b9870ca8598971f76ac71e5376d8af31f0ca37a0df1aadc0995ba0408ab37f565f8e7be2975722e52e9ca9e872f77393fdf8bc7c47bb8528c2637865c5249709992585578792bbcb034cbece5ef8999ef626576a44e"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x3}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x7, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x1}, @generic={0x9b, 0x23, "f4039fd093f9e5bf8ce26e31dce26579785f60243bd4629220c48c82030b329e2603fa41ee726c9f2470ed6f4a7bf150574bc44396afd1a60e1bb302b69bafeca9002ec60cf4fcf60add6adc2a5d82694e27ad61e3068ad9cb8bf1850d53487ad3466f4baa3fcb89268e2fdca79ec463dbc5a0a3039c758e9d77efc237b6970bb88b46fa92e8a9964662dbf34dbfdcac7a2d3e6a584b05a76e"}]}}, {{0x9, 0x5, 0x40b787ef9b43f5a0, 0x4, 0x8, 0x2, 0x2, 0x3, [@generic={0xdd, 0x9, "f7ce3e95f14b171eafa6535087b96a25f092dda30e2926bb22c188736284b303152b6ebab5fc4556286184d894373fec3ffbb9261f5432dca6bc71c1c08958a81f6063447fa4f0940456b48508b1c58f0425d50cf17c27315d2224740afdaadbe45611fec7901b9dc2859392f7b5492dd9f7354d1d1e0034ad3ed39c26a854e3e2412d023241e4ec68a5de2dd21bf509b56efd78d3f09399f0d15500f9929fefde9be82f2f263331c64c23d9c8673c955f499321f0576431eb32abbb9b7b3b8373c72f5109c2bb92f525b943a6d6e508aebc0eeb66e8a292cb1c02"}, @generic={0xc6, 0x24, "d7db23d19e3e8d9e9b397e27c139df749ef073f57819eb977c56bb98f42b0f2075c8fd79b2466515c53bebec84b3300d1d20b90f93d602327a870d15bc6f612c70fc63a1a0e7df72bc3e4e6aa38caf1bd01f2ca194c238f41081a6d5b90d5c17db3741a61956562e70099eb1688fe1fedee44aa22cff34a99aaa77388e04d77843e1d7994e9ba44f634ce6a1e8ae501055207fcc7fddeb0edb49e97d91897bf5339dbe4cae5b2a361b0072db4fb3ee8c15e996efe753820b22b29f9ce90c543e9172b9b0"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x8, 0x1, 0x2, [@generic={0xc0, 0xa, "da68c9aea92870df56c38e08dc821be063dead6f35f82d55647b9af4c30e7ddd65fd9c293013abef82f8fb07a92b1fdebbfd1b0649c83f1a1a1e74b9ccb323113d8b172a36274c7cd3f6a50ffa2a9f06ca5056f5b2f5803964ba8feaadcc84bc020a10c8d7a60bac92fd57f81efb13b9a69bb123a9d3aca0ca9aef748a3d572c7416dddc32c87bd55edba836cd76ef2afc6851d353843154149d2921e27b866c0893bb0f2317b1e800e9b7141d0bc65266d6f5e062c4a31388d6bd8d43a2"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x1, 0x3f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xee, 0xd}]}}, {{0x9, 0x5, 0x2, 0xc, 0x3ff, 0xff, 0x9, 0x6}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x1, 0x7, 0xfa, [@generic={0x47, 0x21, "449acb1b7642ece84eb10463bb569e923be91dbce6ccd0813de47ace2361dca5611ee59187a95c1b72f8aad7928431d03c8485a7a88da0499d6773e089d35337376cbdeb86"}, @generic={0x4d, 0x21, "39bec6fe94ff0654a6275d42f1f80466c1e28ed944eb97a93a8f3f5306cd0c3f69d00c8a4d5277ea0ea97a9a81e0560053a3766630ed2bf2f3fb982ed5724549e842e319a41eda572ee8f1"}]}}]}}, {{0x9, 0x4, 0x84, 0x3, 0x1, 0x68, 0x13, 0x17, 0x7, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "b28b0c06"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x90db, 0x7, 0x6}, {0x6, 0x24, 0x1a, 0x3, 0x30}, [@mdlm_detail={0xfa, 0x24, 0x13, 0x9, "79db239d601223d4f7cc1a547bae899a28be6ccd3a97c70fbc93782d82f71a50cd0da198f500f7d05d658d16b774efd7198fb1b1cf1c5f786ecb8ec2f1a73bf087e96dc947af1e964f967e2a65555924e6efe482e43ac6f56656cc516a26003b0d1f26944b01630ca52aca7ab112626382cf5be0638c9ba783ca24fd65fa404486ae7893b1b71144e0bd51936a3e74d75d67f28803e3f261f99085f149870670f9f9bbba56d20e79f51e7252418d8ce9feaa9c956243a7d18da41e420181130fe4d8b66d57fb4b4e6e0cc4241215115471fff777529e2014bfaed97fac17f7c629352715f40e934c9962f7aaca43eb20dc888b054d45"}, @obex={0x5, 0x24, 0x15, 0x3ff}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x7, 0x2, 0xef}]}], [{{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x80, 0x9, 0x4, [@generic={0x36, 0x543ace00c1d64af5, "00d93f17fc7c501e00f9ea805778bcf30a13920337bb45c66036bd6a0484b7045d20060b0160e12e835fecead83a4639f134d592"}]}}]}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x200, 0x3, 0x2, 0x3, 0x10, 0x6}, 0x11a, &(0x7f0000000600)={0x5, 0xf, 0x11a, 0x3, [@generic={0x34, 0x10, 0x3, "03c8106e956b9bbe14037d9c21198ba2ca36403ffe7a9c1a3fbcd9c52216603d35e208524dca55ef4241d8672be94dceab"}, @ptm_cap={0x3}, @generic={0xde, 0x10, 0x4, "b61c167cd336ffd83b63e9475ba3ff01e04cb956619735c075676bf8a1f614fd798a20443ec452efbbf37837fabf76a455e370d461fa6830f214d8bebafbf22a48f5b18a8d8f00503a30e9c328032b12efc50f1a8e07fc41557573704c49807c681b2082f81e74fffbb5338335b60e41277d2c2ba9dfb3553a829bdea936f7e39094acf7bfa284d41e7d2759afd0787581ba8afb0aecf02d26819f4a02cd69625789a2adb40330ff4a047f5a03da317fca8c74643f1d2d8be3130bf871a9212e0a7d3dba3d7f50e33111cf04ed74948c618b675d47c59885ac4b34"}]}, 0x1, [{0x19, &(0x7f0000000740)=@string={0x19, 0x3, "a49d5c27aac95e8241a30b1fc6e5b96dec2785982f9816"}}]}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000540)=0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f00000007c0)='workdir') r3 = openat$ttynull(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x19) ioctl$TCFLSH(r3, 0x40085500, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000400)={0x40, 0x1, 0x4}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000180)={0x6}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x80a0000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000200)='blacklist\x00', &(0x7f0000000000)=@secondary) keyctl$update(0x2, r8, &(0x7f0000000440)="6278abd76405e190a70e5d9f637d4d701ad17ddcbbbc5809f8a72eea8fd31d4f82abb58c7305009d3c46e37316181755083e378b89ca59c68b461db3074121361ba744", 0x43) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000008c0)={0xeb9b, 0x8004, 0x0, 0x7}, &(0x7f0000000900)=0x10) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)='./bus/file0\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) 2.235707719s ago: executing program 3 (id=34): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010002000020fedbdf252500000008000300", @ANYRES32=r3, @ANYBLOB="08002600161700000a000600505050505050000008003500000000000a003400020202020202000011000700cfa87c7b77e4a2824dc815a8ad00000005000800000000000800090005ac0f00"], 0x68}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) (async) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) (async) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) (async) socket$nl_rdma(0x10, 0x3, 0x14) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000340)={0x40, 0x8, 0x3}) 2.194022745s ago: executing program 3 (id=35): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = eventfd(0x48) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000080)={&(0x7f00000002c0)=""/206, 0xce}) (async) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000080)="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", 0x3ec}], 0x1) (async) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) (async) r5 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) (async) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r3) (async) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x151) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000200)) (async) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001280)={r3, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000), 0x4) setsockopt$sock_int(r7, 0x1, 0xa, &(0x7f0000000000)=0xffffffff, 0x4) (async) recvmmsg(r7, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000300)=ANY=[], 0x15) (async) r10 = dup(r9) write$FUSE_DIRENTPLUS(r10, 0x0, 0xb0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000003c0)={r2, 0x0, 0x2, r2}) write$eventfd(r2, &(0x7f0000000180)=0xfffffffffffffffa, 0x8) read$eventfd(r2, &(0x7f0000000100), 0x8) 2.011174119s ago: executing program 3 (id=36): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f0000000180)={'broute\x00', 0x0, 0x0, 0x0, [0x8000000000000000, 0x0, 0xe031, 0x9, 0xe, 0x80000000], 0x5, &(0x7f0000000140)=[{}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000000)={{0x2, 0x4e20, @rand_addr=0x64010101}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x12, {0x2, 0x4e24, @rand_addr=0x64010100}, 'veth0_to_team\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400a64c0000", @ANYRES16=r5, @ANYBLOB="0d022bbd7000fedbdf2501000000050005000400000008000400ffff000008000300060000000500060002000000"], 0x34}}, 0x4000) 2.010091491s ago: executing program 3 (id=37): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x800) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close(0x4) r2 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f043, 0x8}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r7, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1381}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x1b, 0xb4, 0x470}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x111b}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x748}]}, 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x40) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000100)="0f20c035000001000f22c0c744240000800000c744240207000000c7442406000000000f011424c461d8c29c61d8000000960f21d20f073664460f01c366ba610066edc461f9c5da36c7442400d0000000c74424021bf80000ff1c24c4e2692f8100000000", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) read(r0, &(0x7f0000000040)=""/59, 0x3b) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x1409, 0x262543c4cee33fe7, 0x70bd2b, 0x1000}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 1.793991641s ago: executing program 3 (id=38): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x20, r1, 0xe9715da55d7fa39, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x2400c851}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x50, 0x0, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2e}}]}, 0x50}}, 0x8000) 1.734925854s ago: executing program 3 (id=39): r0 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xfd\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\x9e\f\xf9v\x13\xda\xeee\xfd\xa8\xcd\xb8\xf8\x1bA\xfd\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) fcntl$addseals(r0, 0x409, 0x8) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x3000008, 0x13, r0, 0xf38aa000) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000740)={0x1, @vbi={0x1d, 0x7, 0x9, 0x34324948, [0xfffffff9, 0x4], [0xdf61, 0x4], 0x1}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "0f04c8a3342fbf07", "b367b24626ef554a1ead5d5699233181", "9979ed64", "bf6977b527e2b8a5"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "2dc3fa5474cf6690", "50822f66b97a105f5b00d8edc5151b4a", "b2356f41", "06b950e7846e2394"}, 0x28) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) socket$alg(0x26, 0x5, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r5 = inotify_init1(0x800) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x541b, 0x5) r6 = signalfd(r0, &(0x7f0000000040)={[0x6]}, 0x8) ioctl$KDGETMODE(r6, 0x4b3b, &(0x7f00000000c0)) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000001280)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800, 0x1, 0x2, 0x3, 0x4, 0x8}, 0x20) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000b40)={{}, "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"}) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r7, &(0x7f00000000c0)=""/46, 0x2e) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000140)={0x1, 0x7}, 0x2) syz_usb_ep_write(r2, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 1.631245751s ago: executing program 2 (id=40): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) userfaultfd(0x80001) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f00000000c0), 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) r1 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1a, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x40, 0xc, 0x77, 0x2}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x8, {0x8, 0x11, "e4ff14eca81f"}}, 0x0}, 0x0) 0s ago: executing program 1 (id=41): r0 = syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB="12011003a9372540f30c1010db26010203010902f50101030250070904"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f00000007c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x1, 0x40, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xffff, 0x7, 0x3}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x42}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xb, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7, 0x8, 0x4}}}}}}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x5, &(0x7f00000008c0)={0x5, 0xf, 0x5}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xf, 0x80, 0xff}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r2, 0x550c, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4000}) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfa, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x1, 0x58, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x92, 0xc5, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x7, 0x9}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x8, 0x8, 0x9, 0x8, 0x8}, 0x12, &(0x7f0000000080)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xff, 0xda, 0x4db}]}, 0x2, [{0x81, &(0x7f00000000c0)=@string={0x81, 0x3, "015a6f7d7abc90ea05bb12b03deed0dac6665cdb4653d159dd3928699243db3ebd401c2452337efcc8b6b674e9de69cd4e0579f8974180084a7bafe156359cbb26c4d2fffa17f96a210db69ac551bff7addef140d9a3cb8d0448b4050ffae3ac4f3fa369dc191417194ea8723a13f27dd67c23274e8ae36e6c6855f20be4b7"}}, {0x3b, &(0x7f0000000180)=@string={0x3b, 0x3, "444454fadb04ff767ba4eaab5e13dcad50c9ad0948291a4aebdcfd11c995fda64d8b2f6e33070c3249587c487db87fd1d298c19f4cdafbd4f1"}}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.84' (ED25519) to the list of known hosts. [ 83.027652][ T5816] cgroup: Unknown subsys name 'net' [ 83.180655][ T5816] cgroup: Unknown subsys name 'cpuset' [ 83.189994][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.920524][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.539033][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.548713][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.557517][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.565787][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.574861][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.588147][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.596262][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.599822][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.604453][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.641308][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.666974][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.675762][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.698053][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.707137][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.712083][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.715119][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.727623][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.729471][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.736151][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.746123][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.393395][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 88.514688][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 88.529983][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 88.589220][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 88.699006][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.707012][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.714307][ T5829] bridge_slave_0: entered allmulticast mode [ 88.722329][ T5829] bridge_slave_0: entered promiscuous mode [ 88.760832][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.768354][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.775498][ T5829] bridge_slave_1: entered allmulticast mode [ 88.783079][ T5829] bridge_slave_1: entered promiscuous mode [ 88.849104][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.856322][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.863738][ T5836] bridge_slave_0: entered allmulticast mode [ 88.871468][ T5836] bridge_slave_0: entered promiscuous mode [ 88.925972][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.933621][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.940946][ T5836] bridge_slave_1: entered allmulticast mode [ 88.949257][ T5836] bridge_slave_1: entered promiscuous mode [ 88.971820][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.979243][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.986699][ T5825] bridge_slave_0: entered allmulticast mode [ 88.994143][ T5825] bridge_slave_0: entered promiscuous mode [ 89.005283][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.043649][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.051327][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.059019][ T5825] bridge_slave_1: entered allmulticast mode [ 89.067294][ T5825] bridge_slave_1: entered promiscuous mode [ 89.077434][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.087608][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.094891][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.102996][ T5832] bridge_slave_0: entered allmulticast mode [ 89.110539][ T5832] bridge_slave_0: entered promiscuous mode [ 89.121901][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.160651][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.167981][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.175526][ T5832] bridge_slave_1: entered allmulticast mode [ 89.183277][ T5832] bridge_slave_1: entered promiscuous mode [ 89.192347][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.259429][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.271679][ T5829] team0: Port device team_slave_0 added [ 89.307399][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.318760][ T5829] team0: Port device team_slave_1 added [ 89.328357][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.341327][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.354255][ T5836] team0: Port device team_slave_0 added [ 89.402423][ T5836] team0: Port device team_slave_1 added [ 89.460066][ T5825] team0: Port device team_slave_0 added [ 89.468913][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.475876][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.502731][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.518678][ T5832] team0: Port device team_slave_0 added [ 89.540646][ T5825] team0: Port device team_slave_1 added [ 89.548103][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.555072][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.582868][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.596134][ T5832] team0: Port device team_slave_1 added [ 89.603136][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.610405][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.637368][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.682603][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.687620][ T5148] Bluetooth: hci0: command tx timeout [ 89.689859][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.721612][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.766560][ T5148] Bluetooth: hci3: command tx timeout [ 89.769521][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.779614][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.806444][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.819505][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.826683][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.853026][ T5148] Bluetooth: hci1: command tx timeout [ 89.853118][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.859506][ T5148] Bluetooth: hci2: command tx timeout [ 89.870995][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.882416][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.908894][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.922056][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.929510][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.955629][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.017152][ T5829] hsr_slave_0: entered promiscuous mode [ 90.024319][ T5829] hsr_slave_1: entered promiscuous mode [ 90.095906][ T5836] hsr_slave_0: entered promiscuous mode [ 90.103069][ T5836] hsr_slave_1: entered promiscuous mode [ 90.109648][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 90.115466][ T5836] Cannot create hsr debugfs directory [ 90.160421][ T5832] hsr_slave_0: entered promiscuous mode [ 90.167333][ T5832] hsr_slave_1: entered promiscuous mode [ 90.173518][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 90.179539][ T5832] Cannot create hsr debugfs directory [ 90.202203][ T5825] hsr_slave_0: entered promiscuous mode [ 90.208839][ T5825] hsr_slave_1: entered promiscuous mode [ 90.215000][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 90.220830][ T5825] Cannot create hsr debugfs directory [ 90.758107][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.771656][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.791370][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.812738][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.858591][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.872345][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.901389][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.912322][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.997793][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.010872][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.041455][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.051688][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.169219][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.207262][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.219261][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.231831][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.256928][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.341329][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.372850][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.391181][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.398626][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.424854][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.432129][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.467770][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.498992][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.506198][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.523826][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.548559][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.555734][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.596859][ T5829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.607703][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.669401][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.684673][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.723861][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.731338][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.766873][ T5148] Bluetooth: hci0: command tx timeout [ 91.769961][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.779553][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.833124][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.847307][ T5148] Bluetooth: hci3: command tx timeout [ 91.920360][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.926828][ T5148] Bluetooth: hci2: command tx timeout [ 91.927642][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.940729][ T5148] Bluetooth: hci1: command tx timeout [ 91.980811][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.988100][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.013158][ T9] cfg80211: failed to load regulatory.db [ 92.103130][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.306354][ T5829] veth0_vlan: entered promiscuous mode [ 92.322556][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.355968][ T5829] veth1_vlan: entered promiscuous mode [ 92.458224][ T5829] veth0_macvtap: entered promiscuous mode [ 92.489990][ T5829] veth1_macvtap: entered promiscuous mode [ 92.499155][ T5836] veth0_vlan: entered promiscuous mode [ 92.538734][ T5836] veth1_vlan: entered promiscuous mode [ 92.562218][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.597451][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.626002][ T1156] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.636059][ T1156] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.663738][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.673565][ T1156] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.682884][ T1156] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.735154][ T5836] veth0_macvtap: entered promiscuous mode [ 92.760976][ T5836] veth1_macvtap: entered promiscuous mode [ 92.771039][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.862649][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.905992][ T5825] veth0_vlan: entered promiscuous mode [ 92.917100][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.925106][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.928817][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.973984][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.978277][ T5825] veth1_vlan: entered promiscuous mode [ 92.987941][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.003170][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.012368][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.031485][ T5832] veth0_vlan: entered promiscuous mode [ 93.038521][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.048841][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.109577][ T5832] veth1_vlan: entered promiscuous mode [ 93.142783][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.218290][ T5825] veth0_macvtap: entered promiscuous mode [ 93.232283][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.245825][ T5825] veth1_macvtap: entered promiscuous mode [ 93.258849][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.365062][ T5920] block nbd3: Unsupported socket: should be TCP or UNIX. [ 93.369656][ T5832] veth0_macvtap: entered promiscuous mode [ 93.380658][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.386049][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 93.391139][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.410375][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.444259][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.465386][ T5832] veth1_macvtap: entered promiscuous mode [ 93.499307][ T2993] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.526125][ T2993] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.548451][ T2993] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.578926][ T2993] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.631685][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.690710][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.693497][ T5923] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 93.709196][ T5923] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3'. [ 93.748223][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.774865][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.846486][ T5148] Bluetooth: hci0: command tx timeout [ 93.849024][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.864087][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.885929][ T5926] netlink: 'syz.2.5': attribute type 2 has an invalid length. [ 93.907737][ T5926] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5'. [ 93.926083][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.926781][ T5148] Bluetooth: hci3: command tx timeout [ 93.988640][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.006709][ T5148] Bluetooth: hci1: command tx timeout [ 94.009450][ T52] Bluetooth: hci2: command tx timeout [ 94.236000][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.260474][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.321465][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.345884][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.425743][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.444916][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.498864][ T5899] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.667100][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 94.686343][ T5899] usb 3-1: config 6 has an invalid interface number: 161 but max is 1 [ 94.727299][ T5899] usb 3-1: config 6 has an invalid interface number: 64 but max is 1 [ 94.735598][ T5899] usb 3-1: config 6 has no interface number 0 [ 94.764414][ T5899] usb 3-1: config 6 has no interface number 1 [ 94.771879][ T5899] usb 3-1: config 6 interface 161 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 94.783939][ T5899] usb 3-1: config 6 interface 64 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 94.799500][ T5899] usb 3-1: config 6 interface 64 altsetting 7 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 94.838529][ T5899] usb 3-1: config 6 interface 64 altsetting 7 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 94.867408][ T5899] usb 3-1: config 6 interface 64 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 94.882008][ T5899] usb 3-1: config 6 interface 64 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 94.917311][ T5899] usb 3-1: config 6 interface 64 altsetting 7 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 94.935895][ T5899] usb 3-1: config 6 interface 64 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 94.948572][ T5899] usb 3-1: config 6 interface 161 has no altsetting 0 [ 94.955412][ T5899] usb 3-1: config 6 interface 64 has no altsetting 0 [ 94.969565][ T5899] usb 3-1: New USB device found, idVendor=10b8, idProduct=0bb8, bcdDevice=cf.94 [ 94.986469][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.999907][ T5899] usb 3-1: Product: 㰁 [ 95.004161][ T5899] usb 3-1: Manufacturer: ߂齓陝綗懛ꏭ鳛굥㙗寉윲휨믜ꊹ⧀㔗挅轢䱃ῬᑁԸ勩㢌˭⢝ﱂयᥓ濢佛玦欴牙᪻㛠ꭇ堛㵊㐰᯹尾齨萍퉿兝ꯞ곓肃붓빒琀ல牙ⶒ蜵䟝 [ 95.035385][ T5899] usb 3-1: SerialNumber: Ⰹ [ 95.076501][ T5900] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.226617][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.237941][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 95.244826][ T5900] usb 2-1: config 0 has an invalid interface number: 191 but max is 0 [ 95.253726][ T5900] usb 2-1: config 0 has no interface number 0 [ 95.260262][ T5900] usb 2-1: config 0 interface 191 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 95.271573][ T5900] usb 2-1: config 0 interface 191 has no altsetting 0 [ 95.281250][ T5900] usb 2-1: New USB device found, idVendor=0bda, idProduct=8178, bcdDevice=3e.3e [ 95.292737][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.309941][ T5900] usb 2-1: Product: syz [ 95.314172][ T5900] usb 2-1: Manufacturer: syz [ 95.323305][ T5900] usb 2-1: SerialNumber: syz [ 95.339809][ T5900] usb 2-1: config 0 descriptor?? [ 95.367299][ T5899] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in cold state, will try to load a firmware [ 95.390625][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.393373][ T5899] usb 3-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 95.401836][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 95.424475][ T5899] usb 3-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 95.425657][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.445981][ T9] usb 1-1: config 0 descriptor?? [ 95.664054][ T5952] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 95.884632][ T9] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 95.927841][ T5148] Bluetooth: hci0: command tx timeout [ 95.945692][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input5 [ 96.006775][ T5148] Bluetooth: hci3: command tx timeout [ 96.062707][ T9] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 96.097145][ T5828] Bluetooth: hci2: command tx timeout [ 96.103499][ T5148] Bluetooth: hci1: command tx timeout [ 96.435376][ T5965] loop3: detected capacity change from 0 to 7 [ 96.450641][ T5966] syz.3.12 uses obsolete (PF_INET,SOCK_PACKET) [ 96.459545][ T5838] Dev loop3: unable to read RDB block 7 [ 96.465526][ T5838] loop3: unable to read partition table [ 96.472159][ T5838] loop3: partition table beyond EOD, truncated [ 96.483282][ T5965] Dev loop3: unable to read RDB block 7 [ 96.493175][ T5965] loop3: unable to read partition table [ 96.499553][ T5965] loop3: partition table beyond EOD, truncated [ 96.506717][ T5965] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 96.619095][ T10] usb 1-1: USB disconnect, device number 2 [ 97.305642][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'. Stopping sshd: stopped /usr/sbin/sshd (pid 5589) OK [ 97.576627][ T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd Stopping crond: stopped /usr/sbin/crond (pid 5572) OK [ 97.740108][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 97.753664][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 97.781362][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.794035][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 97.805965][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 97.821257][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.836566][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.855036][ T10] usb 1-1: Product: syz [ 97.866497][ T10] usb 1-1: Manufacturer: syz [ 97.871193][ T10] usb 1-1: SerialNumber: syz [ 97.886626][ T24] usb 2-1: USB disconnect, device number 2 [ 98.089941][ T5148] Bluetooth: hci3: command 0x0405 tx timeout Stopping dhcpcd... [ 98.148230][ T10] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 98.158197][ T10] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 98.166151][ T10] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc stopped /sbin/dhcpcd (pid 5492) [ 98.220664][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.279634][ T10] usb 1-1: USB disconnect, device number 3 [ 98.386468][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 98.420728][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.455187][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.508133][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 Stopping network: [ 98.525613][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 98.535352][ T24] usb 2-1: SerialNumber: syz [ 98.550887][ T24] cdc_acm 2-1:1.0: skipping garbage [ 98.556163][ T24] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 98.567566][ T24] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 98.574187][ T24] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 98.662233][ T5877] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.814053][ T6004] overlay: Unknown parameter 'fowner<00000000000000060929' [ 98.828321][ T6004] fuse: Bad value for 'user_id' [ 98.834338][ T6004] fuse: Bad value for 'user_id' [ 98.841143][ T6004] warning: `syz.0.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.911507][ T984] usb 2-1: USB disconnect, device number 3 [ 98.921684][ T5877] usb 4-1: Using ep0 maxpacket: 16 [ 98.958547][ T5877] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 98.989322][ T5877] usb 4-1: config 0 has no interface number 0 [ 98.997413][ T5877] usb 4-1: config 0 interface 48 has no altsetting 0 [ 99.011457][ T5877] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 99.026504][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.034642][ T5877] usb 4-1: Product: syz [ 99.040676][ T5877] usb 4-1: Manufacturer: syz [ 99.045331][ T5877] usb 4-1: SerialNumber: syz [ 99.095534][ T5877] usb 4-1: config 0 descriptor?? [ 99.323818][ T5989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.352721][ T5989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.378309][ T984] usb 4-1: USB disconnect, device number 2 [ 99.386507][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 99.389998][ T52] Bluetooth: hci1: Unknown advertising packet type: 0x35 [ 99.394030][ T52] Bluetooth: hci1: Malformed LE Event: 0x0d [ 99.481949][ T30] audit: type=1326 audit(1759865410.817:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6118eec9 code=0x7fc00000 OK [ 99.586511][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 99.608773][ T9] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 99.633107][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.645733][ T9] usb 1-1: config 0 has no interface number 0 [ 99.659568][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 99.670015][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.691264][ T9] usb 1-1: Product: syz [ 99.695573][ T9] usb 1-1: Manufacturer: syz Stopping iptable[ 99.723270][ T9] usb 1-1: SerialNumber: syz s: [ 99.754717][ T9] usb 1-1: config 0 descriptor?? [ 99.797602][ T5884] usb 2-1: new high-speed USB device number 4 using dummy_hcd OK Stopping system message bus: [ 99.968445][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 99.974234][ T9] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 99.976911][ T6037] netlink: 76 bytes leftover after parsing attributes in process `syz.0.20'. [ 99.992137][ T9] uvcvideo 1-1:0.105: No valid video chain found. [ 100.039573][ T5884] usb 2-1: unable to get BOS descriptor or descriptor too short [ 100.050077][ T5884] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 100.059304][ T5884] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 100.087627][ T5884] usb 2-1: config 4 has no interface number 0 [ 100.100106][ T5884] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 100.123888][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.147820][ T5884] usb 2-1: Product: syz [ 100.152133][ T5884] usb 2-1: Manufacturer: syz [ 100.178910][ T5884] usb 2-1: SerialNumber: syz [ 100.190962][ T5900] usb 1-1: USB disconnect, device number 4 [ 100.411986][ T6025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.421415][ T6025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.446816][ T5884] uvcvideo 2-1:4.147: Found multiple Units with ID 6 [ 100.453830][ T5884] uvcvideo 2-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 100.462117][ T5884] uvcvideo 2-1:4.147: No valid video chain found. [ 100.472650][ T5884] usb 2-1: USB disconnect, device number 4 done [ 100.556527][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.716504][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 100.733057][ T9] usb 4-1: config 254 has an invalid interface number: 235 but max is 0 [ 100.741927][ T9] usb 4-1: config 254 has no interface number 0 [ 100.748682][ T9] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 100.775308][ T9] usb 4-1: config 254 interface 235 has no altsetting 0 [ 100.785736][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 100.795971][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 100.805082][ T9] usb 4-1: Product: syz [ 100.816553][ T9] usb 4-1: Manufacturer: syz [ 100.826827][ T9] usb 4-1: SerialNumber: syz [ 100.848721][ T6044] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 101.076177][ T6044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.096147][ T6044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.126006][ T9] usbtest 4-1:254.235: couldn't get endpoints, -71 [ 101.138283][ T9] usbtest 4-1:254.235: probe with driver usbtest failed with error -71 [ 101.171826][ T9] usb 4-1: USB disconnect, device number 3 [ 101.232763][ T30] audit: type=1326 audit(1759865412.587:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.0.27" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa500f8eec9 code=0x0 [ 101.323246][ T6058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.335910][ T6058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 Stopping klogd: [ 101.493308][ T6062] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. OK [ 101.556957][ T10] usb 2-1: new low-speed USB device number 5 using dummy_hcd Stopping acpid: [ 101.720582][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 101.736599][ T10] usb 2-1: config 0 has no interface number 0 [ 101.747337][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 101.776448][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 101.801808][ T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 101.826470][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.848425][ T10] usb 2-1: config 0 descriptor?? [ 101.855194][ T6059] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 101.874059][ T10] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 102.074901][ T5877] usb 2-1: USB disconnect, device number 5 [ 102.203299][ T6085] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.227473][ T10] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 102.366649][ T10] usb 1-1: device descriptor read/64, error -71 [ 102.406735][ T5877] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 102.556771][ T5877] usb 2-1: device descriptor read/64, error -71 [ 102.606537][ T10] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 102.609151][ T6096] netlink: 'syz.3.38': attribute type 2 has an invalid length. [ 102.623091][ T6096] netlink: 'syz.3.38': attribute type 1 has an invalid length. [ 102.729017][ T6100] netlink: 'syz.2.40': attribute type 11 has an invalid length. [ 102.746828][ T10] usb 1-1: device descriptor read/64, error -71 OK Stopping syslogd[ 102.796533][ T5877] usb 2-1: new high-speed USB device number 7 using dummy_hcd : stopped /sbin/syslogd (pid 5180) OK [ 102.876173][ T10] usb usb1-port1: attempt power cycle [ 102.936509][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.936572][ T5877] usb 2-1: device descriptor read/64, error -71 [ 103.067197][ T5877] usb usb2-port1: attempt power cycle [ 103.108309][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.119456][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 103.128875][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.141603][ T9] usb 4-1: config 0 descriptor?? umount: can't remount debugfs read-only [ 103.226531][ T10] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 103.265772][ T10] usb 1-1: device descriptor read/8, error -71 [ 103.410130][ T5877] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 103.447244][ T5877] usb 2-1: device descriptor read/8, error -71 [ 103.506501][ T10] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 103.547754][ T10] usb 1-1: device descriptor read/8, error -71 [ 103.668660][ T10] usb usb1-port1: unable to enumerate USB device [ 103.679399][ T9] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 103.696634][ T5877] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 103.714273][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input6 [ 103.739242][ T5877] usb 2-1: device descriptor read/8, error -71 [ 103.824189][ T9] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 103.854489][ T5877] usb usb2-port1: unable to enumerate USB device [ 104.438661][ T10] usb 4-1: USB disconnect, device number 4 [ 104.444761][ C0] keytouch 0003:0926:3333.0002: usb_submit_urb(ctrl) failed: -19 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 104.817102][ T5900] usb 2-1: new high-speed USB device number 10 using dummy_hcd Connection to 10.128.0.84 closed by remote host. [ 105.608686][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.680239][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.773770][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.847238][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 105.942677][ T36] bridge_slave_1: left allmulticast mode [ 105.948677][ T36] bridge_slave_1: left promiscuous mode [ 105.956981][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.969981][ T36] bridge_slave_0: left allmulticast mode [ 105.977200][ T36] bridge_slave_0: left promiscuous mode [ 105.983873][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.263628][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.275843][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.287265][ T36] bond0 (unregistering): Released all slaves [ 106.562215][ T36] hsr_slave_0: left promiscuous mode [ 106.569289][ T36] hsr_slave_1: left promiscuous mode [ 106.575233][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.583774][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.593085][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.601080][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.618650][ T36] veth1_macvtap: left promiscuous mode [ 106.624526][ T36] veth0_macvtap: left promiscuous mode [ 106.630394][ T36] veth1_vlan: left promiscuous mode [ 106.635891][ T36] veth0_vlan: left promiscuous mode [ 106.948907][ T5899] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 106.971706][ T5899] dvb_usb_dibusb_mb 3-1:6.161: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 106.998380][ T5899] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in cold state, will try to load a firmware [ 107.016156][ T5899] usb 3-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 107.026622][ T5899] usb 3-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 107.039487][ T5899] ------------[ cut here ]------------ [ 107.045167][ T5899] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x746/0x9b0, CPU#1: kworker/1:5/5899 [ 107.058480][ T5899] Modules linked in: [ 107.062560][ T5899] CPU: 1 UID: 0 PID: 5899 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 107.072141][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 107.082877][ T5899] Workqueue: usb_hub_wq hub_event [ 107.088454][ T5899] RIP: 0010:firmware_fallback_sysfs+0x746/0x9b0 [ 107.094991][ T5899] Code: ec fb e9 5d fc ff ff e8 98 3f ec fb c6 05 e2 e1 b3 09 01 48 c7 c7 80 b7 e8 8b e8 35 98 53 fb e9 85 fc ff ff e8 7b 3f ec fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 60 b8 e8 8b 4c 89 e2 e8 d5 44 58 fb e9 [ 107.116594][ T5899] RSP: 0018:ffffc90004956870 EFLAGS: 00010287 [ 107.123464][ T5899] RAX: ffffffff85d3f495 RBX: dffffc0000000000 RCX: 0000000000100000 [ 107.132227][ T5899] RDX: ffffc9001687d000 RSI: 0000000000094abd RDI: 0000000000094abe [ 107.140914][ T5899] RBP: 0000000000000001 R08: ffffffff8f9dbb77 R09: 1ffffffff1f3b76e [ 107.149238][ T5899] R10: dffffc0000000000 R11: fffffbfff1f3b76f R12: ffffffff8c31dde0 [ 107.157649][ T5899] R13: 0000000000001770 R14: ffff888023f9d0b0 R15: 00000000fffffff5 [ 107.165655][ T5899] FS: 0000000000000000(0000) GS:ffff888125e2d000(0000) knlGS:0000000000000000 [ 107.175198][ T5899] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.182642][ T5899] CR2: 00007f1dab317d60 CR3: 00000000320f6000 CR4: 00000000003526f0 [ 107.191148][ T5899] Call Trace: [ 107.194552][ T5899] [ 107.197550][ T5899] ? kmem_cache_free+0x19b/0x690 [ 107.202526][ T5899] ? _request_firmware+0x6be/0x15b0 [ 107.208584][ T5899] _request_firmware+0xf83/0x15b0 [ 107.213895][ T5899] ? preempt_schedule_thunk+0x16/0x30 [ 107.219334][ T5899] ? __pfx__request_firmware+0x10/0x10 [ 107.224899][ T5899] ? __lruvec_stat_mod_folio+0x6f/0x2e0 [ 107.230566][ T5899] request_firmware+0x36/0x50 [ 107.235247][ T5899] dvb_usb_download_firmware+0xaf/0x260 [ 107.240826][ T5899] ? __pfx__printk+0x10/0x10 [ 107.245411][ T5899] ? __pfx_dvb_usb_download_firmware+0x10/0x10 [ 107.251607][ T5899] ? dvb_usb_device_init+0x14c/0x2580 [ 107.257005][ T5899] dvb_usb_device_init+0xdd2/0x2580 [ 107.262212][ T5899] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 107.268222][ T5899] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.273430][ T5899] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 107.279511][ T5899] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 107.286149][ T5899] ? __pfx_dvb_usb_device_init+0x10/0x10 [ 107.292005][ T5899] ? __update_runtime_status+0x1b3/0x390 [ 107.297729][ T5899] ? __pm_runtime_set_status+0x785/0xa50 [ 107.303401][ T5899] dibusb_probe+0x2d/0xf0 [ 107.307869][ T5899] usb_probe_interface+0x668/0xc30 [ 107.313370][ T5899] ? __pfx_usb_probe_interface+0x10/0x10 [ 107.319031][ T5899] really_probe+0x26d/0x9e0 [ 107.323539][ T5899] __driver_probe_device+0x18c/0x2f0 [ 107.332106][ T5899] driver_probe_device+0x4f/0x430 [ 107.337196][ T5899] __device_attach_driver+0x2ce/0x530 [ 107.342843][ T5899] bus_for_each_drv+0x251/0x2e0 [ 107.347726][ T5899] ? __pfx___device_attach_driver+0x10/0x10 [ 107.353706][ T5899] ? __pfx_bus_for_each_drv+0x10/0x10 [ 107.359200][ T5899] __device_attach+0x2b8/0x400 [ 107.364086][ T5899] ? __pfx___device_attach+0x10/0x10 [ 107.371329][ T5899] ? do_raw_spin_unlock+0x122/0x240 [ 107.378037][ T5899] bus_probe_device+0x185/0x260 [ 107.383067][ T5899] device_add+0x7b6/0xb50 [ 107.388275][ T5899] usb_set_configuration+0x1a87/0x20e0 [ 107.394218][ T5899] usb_generic_driver_probe+0x8d/0x150 [ 107.400102][ T5899] usb_probe_device+0x1c4/0x390 [ 107.405106][ T5899] ? __pfx_usb_probe_device+0x10/0x10 [ 107.410754][ T5899] really_probe+0x26d/0x9e0 [ 107.415284][ T5899] __driver_probe_device+0x18c/0x2f0 [ 107.420663][ T5899] driver_probe_device+0x4f/0x430 [ 107.425801][ T5899] __device_attach_driver+0x2ce/0x530 [ 107.431361][ T5899] bus_for_each_drv+0x251/0x2e0 [ 107.436328][ T5899] ? __pfx___device_attach_driver+0x10/0x10 [ 107.442510][ T5899] ? __pfx_bus_for_each_drv+0x10/0x10 [ 107.448011][ T5899] __device_attach+0x2b8/0x400 [ 107.452776][ T5899] ? __pfx___device_attach+0x10/0x10 [ 107.458189][ T5899] ? do_raw_spin_unlock+0x122/0x240 [ 107.463575][ T5899] bus_probe_device+0x185/0x260 [ 107.468598][ T5899] device_add+0x7b6/0xb50 [ 107.473132][ T5899] usb_new_device+0xa39/0x16f0 [ 107.478063][ T5899] ? __pfx_usb_new_device+0x10/0x10 [ 107.483280][ T5899] ? _raw_spin_unlock_irq+0x23/0x50 [ 107.488918][ T5899] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.494783][ T5899] hub_event+0x2958/0x4a20 [ 107.499589][ T5899] ? __pfx_hub_event+0x10/0x10 [ 107.504536][ T5899] ? process_scheduled_works+0x9ef/0x17b0 [ 107.510479][ T5899] ? _raw_spin_unlock_irq+0x23/0x50 [ 107.515675][ T5899] ? process_scheduled_works+0x9ef/0x17b0 [ 107.521447][ T5899] ? process_scheduled_works+0x9ef/0x17b0 [ 107.527790][ T5899] process_scheduled_works+0xae1/0x17b0 [ 107.533607][ T5899] ? __pfx_process_scheduled_works+0x10/0x10 [ 107.539975][ T5899] worker_thread+0x8a0/0xda0 [ 107.544699][ T5899] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 107.551198][ T5899] ? __kthread_parkme+0x7b/0x200 [ 107.556194][ T5899] kthread+0x711/0x8a0 [ 107.560321][ T5899] ? __pfx_worker_thread+0x10/0x10 [ 107.565442][ T5899] ? __pfx_kthread+0x10/0x10 [ 107.570159][ T5899] ? _raw_spin_unlock_irq+0x23/0x50 [ 107.575545][ T5899] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.581279][ T5899] ? __pfx_kthread+0x10/0x10 [ 107.586057][ T5899] ret_from_fork+0x4bc/0x870 [ 107.591200][ T5899] ? __pfx_ret_from_fork+0x10/0x10 [ 107.596667][ T5899] ? __switch_to_asm+0x39/0x70 [ 107.601477][ T5899] ? __switch_to_asm+0x33/0x70 [ 107.606238][ T5899] ? __pfx_kthread+0x10/0x10 [ 107.610977][ T5899] ret_from_fork_asm+0x1a/0x30 [ 107.615805][ T5899] [ 107.618891][ T5899] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 107.626345][ T5899] CPU: 1 UID: 0 PID: 5899 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 107.635821][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 107.645960][ T5899] Workqueue: usb_hub_wq hub_event [ 107.650987][ T5899] Call Trace: [ 107.654535][ T5899] [ 107.657530][ T5899] dump_stack_lvl+0x99/0x250 [ 107.662166][ T5899] ? __asan_memcpy+0x40/0x70 [ 107.666884][ T5899] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.672265][ T5899] ? __pfx__printk+0x10/0x10 [ 107.676871][ T5899] vpanic+0x237/0x6d0 [ 107.681314][ T5899] ? __pfx_vpanic+0x10/0x10 [ 107.685822][ T5899] ? is_bpf_text_address+0x26/0x2b0 [ 107.691060][ T5899] panic+0xb9/0xc0 [ 107.694874][ T5899] ? __pfx_panic+0x10/0x10 [ 107.699311][ T5899] __warn+0x334/0x4c0 [ 107.703305][ T5899] ? firmware_fallback_sysfs+0x746/0x9b0 [ 107.709021][ T5899] ? firmware_fallback_sysfs+0x746/0x9b0 [ 107.714649][ T5899] report_bug+0x2be/0x4f0 [ 107.718993][ T5899] ? firmware_fallback_sysfs+0x746/0x9b0 [ 107.724812][ T5899] ? firmware_fallback_sysfs+0x746/0x9b0 [ 107.730479][ T5899] ? firmware_fallback_sysfs+0x748/0x9b0 [ 107.736131][ T5899] handle_bug+0x84/0x160 [ 107.740478][ T5899] exc_invalid_op+0x1a/0x50 [ 107.744992][ T5899] asm_exc_invalid_op+0x1a/0x20 [ 107.749950][ T5899] RIP: 0010:firmware_fallback_sysfs+0x746/0x9b0 [ 107.756277][ T5899] Code: ec fb e9 5d fc ff ff e8 98 3f ec fb c6 05 e2 e1 b3 09 01 48 c7 c7 80 b7 e8 8b e8 35 98 53 fb e9 85 fc ff ff e8 7b 3f ec fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 60 b8 e8 8b 4c 89 e2 e8 d5 44 58 fb e9 [ 107.776357][ T5899] RSP: 0018:ffffc90004956870 EFLAGS: 00010287 [ 107.782480][ T5899] RAX: ffffffff85d3f495 RBX: dffffc0000000000 RCX: 0000000000100000 [ 107.790759][ T5899] RDX: ffffc9001687d000 RSI: 0000000000094abd RDI: 0000000000094abe [ 107.799289][ T5899] RBP: 0000000000000001 R08: ffffffff8f9dbb77 R09: 1ffffffff1f3b76e [ 107.807462][ T5899] R10: dffffc0000000000 R11: fffffbfff1f3b76f R12: ffffffff8c31dde0 [ 107.815618][ T5899] R13: 0000000000001770 R14: ffff888023f9d0b0 R15: 00000000fffffff5 [ 107.823690][ T5899] ? firmware_fallback_sysfs+0x745/0x9b0 [ 107.829406][ T5899] ? kmem_cache_free+0x19b/0x690 [ 107.834393][ T5899] ? _request_firmware+0x6be/0x15b0 [ 107.839634][ T5899] _request_firmware+0xf83/0x15b0 [ 107.844769][ T5899] ? preempt_schedule_thunk+0x16/0x30 [ 107.850171][ T5899] ? __pfx__request_firmware+0x10/0x10 [ 107.855653][ T5899] ? __lruvec_stat_mod_folio+0x6f/0x2e0 [ 107.861225][ T5899] request_firmware+0x36/0x50 [ 107.865923][ T5899] dvb_usb_download_firmware+0xaf/0x260 [ 107.871575][ T5899] ? __pfx__printk+0x10/0x10 [ 107.876265][ T5899] ? __pfx_dvb_usb_download_firmware+0x10/0x10 [ 107.882425][ T5899] ? dvb_usb_device_init+0x14c/0x2580 [ 107.887817][ T5899] dvb_usb_device_init+0xdd2/0x2580 [ 107.893319][ T5899] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 107.899237][ T5899] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.904461][ T5899] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 107.910416][ T5899] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 107.916757][ T5899] ? __pfx_dvb_usb_device_init+0x10/0x10 [ 107.922403][ T5899] ? __update_runtime_status+0x1b3/0x390 [ 107.928133][ T5899] ? __pm_runtime_set_status+0x785/0xa50 [ 107.933953][ T5899] dibusb_probe+0x2d/0xf0 [ 107.938379][ T5899] usb_probe_interface+0x668/0xc30 [ 107.943595][ T5899] ? __pfx_usb_probe_interface+0x10/0x10 [ 107.949243][ T5899] really_probe+0x26d/0x9e0 [ 107.953776][ T5899] __driver_probe_device+0x18c/0x2f0 [ 107.959343][ T5899] driver_probe_device+0x4f/0x430 [ 107.964376][ T5899] __device_attach_driver+0x2ce/0x530 [ 107.969786][ T5899] bus_for_each_drv+0x251/0x2e0 [ 107.974746][ T5899] ? __pfx___device_attach_driver+0x10/0x10 [ 107.980784][ T5899] ? __pfx_bus_for_each_drv+0x10/0x10 [ 107.986382][ T5899] __device_attach+0x2b8/0x400 [ 107.991360][ T5899] ? __pfx___device_attach+0x10/0x10 [ 107.996928][ T5899] ? do_raw_spin_unlock+0x122/0x240 [ 108.002138][ T5899] bus_probe_device+0x185/0x260 [ 108.007004][ T5899] device_add+0x7b6/0xb50 [ 108.011364][ T5899] usb_set_configuration+0x1a87/0x20e0 [ 108.016859][ T5899] usb_generic_driver_probe+0x8d/0x150 [ 108.022417][ T5899] usb_probe_device+0x1c4/0x390 [ 108.027281][ T5899] ? __pfx_usb_probe_device+0x10/0x10 [ 108.032691][ T5899] really_probe+0x26d/0x9e0 [ 108.037249][ T5899] __driver_probe_device+0x18c/0x2f0 [ 108.042751][ T5899] driver_probe_device+0x4f/0x430 [ 108.047899][ T5899] __device_attach_driver+0x2ce/0x530 [ 108.053585][ T5899] bus_for_each_drv+0x251/0x2e0 [ 108.058647][ T5899] ? __pfx___device_attach_driver+0x10/0x10 [ 108.064574][ T5899] ? __pfx_bus_for_each_drv+0x10/0x10 [ 108.069984][ T5899] __device_attach+0x2b8/0x400 [ 108.074869][ T5899] ? __pfx___device_attach+0x10/0x10 [ 108.080192][ T5899] ? do_raw_spin_unlock+0x122/0x240 [ 108.085593][ T5899] bus_probe_device+0x185/0x260 [ 108.090577][ T5899] device_add+0x7b6/0xb50 [ 108.094948][ T5899] usb_new_device+0xa39/0x16f0 [ 108.099842][ T5899] ? __pfx_usb_new_device+0x10/0x10 [ 108.105065][ T5899] ? _raw_spin_unlock_irq+0x23/0x50 [ 108.110284][ T5899] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.115517][ T5899] hub_event+0x2958/0x4a20 [ 108.120209][ T5899] ? __pfx_hub_event+0x10/0x10 [ 108.125038][ T5899] ? process_scheduled_works+0x9ef/0x17b0 [ 108.130786][ T5899] ? _raw_spin_unlock_irq+0x23/0x50 [ 108.135987][ T5899] ? process_scheduled_works+0x9ef/0x17b0 [ 108.141810][ T5899] ? process_scheduled_works+0x9ef/0x17b0 [ 108.147540][ T5899] process_scheduled_works+0xae1/0x17b0 [ 108.153118][ T5899] ? __pfx_process_scheduled_works+0x10/0x10 [ 108.159116][ T5899] worker_thread+0x8a0/0xda0 [ 108.163714][ T5899] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 108.170051][ T5899] ? __kthread_parkme+0x7b/0x200 [ 108.175440][ T5899] kthread+0x711/0x8a0 [ 108.179516][ T5899] ? __pfx_worker_thread+0x10/0x10 [ 108.184635][ T5899] ? __pfx_kthread+0x10/0x10 [ 108.189242][ T5899] ? _raw_spin_unlock_irq+0x23/0x50 [ 108.194469][ T5899] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.199674][ T5899] ? __pfx_kthread+0x10/0x10 [ 108.204294][ T5899] ret_from_fork+0x4bc/0x870 [ 108.208912][ T5899] ? __pfx_ret_from_fork+0x10/0x10 [ 108.214043][ T5899] ? __switch_to_asm+0x39/0x70 [ 108.218813][ T5899] ? __switch_to_asm+0x33/0x70 [ 108.223580][ T5899] ? __pfx_kthread+0x10/0x10 [ 108.228193][ T5899] ret_from_fork_asm+0x1a/0x30 [ 108.232975][ T5899] [ 108.236358][ T5899] Kernel Offset: disabled [ 108.240688][ T5899] Rebooting in 86400 seconds..