last executing test programs: 12m23.270174252s ago: executing program 32 (id=125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$inet(0x2, 0xa, 0x5) getpeername$inet(r2, 0x0, 0x0) connect$can_bcm(r1, &(0x7f0000000140), 0x10) (async) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async) fallocate(0xffffffffffffffff, 0x10, 0x80, 0x1) (async) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r3) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) close(0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) rename(0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3b9601000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="4200330040000000080211000000080211000001505050505050000001002d1a02881b0600000100ce9500000972060303030303b109e5994fd9c4a8239f03000003472df1610d6bd365a64ee051d58c8bbb48166695bfdd000000"], 0x60}, 0x1, 0x0, 0x0, 0x8011}, 0x10) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a60000000060a090400000000000000000200000034000480300001800e000100636f6e6e6c696d69740000001c000280080002400000000008000140fffff82408000240000000020900010073797a30000000000900020073797a32"], 0x88}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 12m6.01588529s ago: executing program 33 (id=141): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x1, 0xb5, 0xe1, 0x45, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/bus/input/handlers\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffff5, 0x1) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20083, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000095}]}) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) 11m46.378775031s ago: executing program 34 (id=277): syz_usbip_server_init(0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x496, &(0x7f00000000c0)={0x0, 0xb70b, 0x3180, 0x8000, 0x40024f}, 0x0, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000001c0)=0x6) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 11m2.702337523s ago: executing program 35 (id=495): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x100000000, 0xb0000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3b9ac9ff, 0x0, 0x8, 0x0, 0x2000000000000000, 0x5a6c101, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xf}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, &(0x7f00000000c0)=[@cr4={0x1, 0x425c}], 0x1) (async) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000240)={0x20, 0xe, 0x1, "c5"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000005c0)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000340)={0x7d, &(0x7f00000006c0)={0x40, 0x6, 0x2b}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0}) (async) r4 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000400)="660f388011bad004b8f1f6efb803018ed866b8005800000f23d80f21f86635c00000b00f23f8660ffa65530fd5f9660f38800bd9ffb841000f00d0baf80c66b80ae60e8f66efbafc0ced"}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x66017, 0x3, 0x0, 0x0, 0x9835}}, 0x50) (async) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa6a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) open_by_handle_at(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000081"], 0x1) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000700)={0x0, 0x14, 0xd5, "0da5c46c571650bb13a07000aa01114c057fae3630382b44dcba5f33a48320054c528a8c465671f4a9eeadad5e18416d8c167869bdecf1e57ff676a83ed1aa438835fc1c95482405e629992211baef7147cc58685e163fc9af8c0cca9b7a8125245fca1ffbc0cdbba45a6a8e14cfd01be6d8a4c7cbd6677b93528d3ca676d8df67225d8b96edd3a5ec49d416288866b2294dddaf8211939265218ae6e0fbc6102c787ec144a97e7e818f2932835acf3d690c74c95f8edb307790eb908f9a697fb1e43c0730a8b0c77dc85d42a658f8a87ea9886865"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m22.980855417s ago: executing program 36 (id=607): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x129b01) epoll_create1(0x80000) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x502, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000001500), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYRES64=r1], 0x158}}, 0x0) 10m12.141691889s ago: executing program 7 (id=724): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x0, 0x9, 0xa2, {0xa2, 0x7, "ae8029fe39a6188c58d0c1b74041816e32776a212af7205e6d4d3b526022762df15ee62b97c45a5aabe870b00346a884a6551437f0321e5b08d162ed5e60c0084ec6e890eacff302350410212e06af6982932e35e6354d47cacac973f1ba8f8b6ed299f4cd8d1e77a52f63f36263314d7766556c82204146b305a2547ef31fac55a713e106c3ea75ae3d87ca0762a23b595a64e319dfcf6d808dacaa16e91d5b"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x20, 0x18, 0xbf, "c0ec58d0d77640a773c700fc07ac7e57bfe32e036866fb835c720d6ecef21cd5746a3cdfd9dea85a7c2663305fbdb0a6375c880e59f973fecf408fa5450413582ec06ddc1f449a08610c8826d603c53e8a97700d48532d3006a5e2d65d0a494441af3c13102aaf76b39fc5747f2559f72e2b06faec0fe86ac1c7771be97f0206f7281040178a6701c9e24fa0218be835e69085c5b95a34ae00003a6afca531dfb19cabcbd3105a657e13cdebb4a2a22b970c7ca633044a6c4c9e898dc26363"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x49}}) r0 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x2, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x90, 0x80, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x1, 0x8, 0x4f}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x9b, 0x2}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x200, 0x74, 0x8, 0xa1, 0x20, 0x4}, 0x19, &(0x7f0000000380)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "9f6cf4af6148e852487b0adb5c045bcf"}]}, 0x6, [{0x9f, &(0x7f00000003c0)=@string={0x9f, 0x3, "b448c6eabbbe07097753babc0220cbbb12706e41910e7a69a65e2bf42023c937d7601dd4ca0cb672f1d6e38ea3f4e42399c983e6c85efc6acab9ebc5e02386d91f4a54680ad29e27f369609e20d407b9012d202f6ea7e2d4174a1e29face811c36922e72f6e247929442921cf703804285e8552debbbb82cbb56c6c53cadbcaf6a71ab65979a3050ef7c1ae441903ff9bb1a7ac517a68695529376824e"}}, {0xc2, &(0x7f0000000480)=@string={0xc2, 0x3, "9c24e6f5c9cbd3d62c61dca21f6371a558996c0f295b6470911c7fa6da48dd9c93dc2aecbc8f5e899267d67579e10644165b54b67504f526f8b03cc8e326bb83de432f4446715e87f4f41d38a82d3bf4e94574cb9f2986af82de685c1d9ae7bdd1f6ac41ee08ab9c940115995fe0fedf2124e62e55c76815007991bfc85f5552827db795be3f800f893588ff6a670ae613732eff79826a12b74a63b4fcec124fa0c470f6b1c8be3241d5d544e2297d01308a6cf272d4680943098129080aed4a"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1004}}, {0x6b, &(0x7f00000005c0)=@string={0x6b, 0x3, "b41bcf2cae32b9e25e01835048c5a6622e47be992f184f018e8932362704cb45e48928a09f14a5ec50e6406433eec81deceba5520dc5c4d6513175cd62c9e219a0e6a2aaea4c545f021c5e945cd961e1033656363ac933a40e6eefee9de7616c5ad981c5b94bb66936"}}, {0xa0, &(0x7f0000000640)=@string={0xa0, 0x3, "66490adf96b23de7831bb5c17fbb0a80e46606f2ed50950c6e3756f106382da7ef81dccc0c1e07122c7afb1554f060a23916827ea2c71c5e3496b99b6df66fd8bca1d4de4594dfb89d885d625943b0b5be1c4a1cdf60bb670e951a60c9a596d325065ecec1e0c6f31470810069fd0802a1171c56b757645d34fba1e83f7ad20dcd1901d6205d1401ddc5c81a462bf97b4bbbc4ff0ca1f5c41c5eb9c883e7"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x180a}}]}) syz_usb_control_io$printer(r0, &(0x7f00000008c0)={0x14, &(0x7f00000007c0)={0x0, 0x9, 0xa7, {0xa7, 0x2, "beb70ac4acae7abf5efa545bb9de8b275728bc0dbfac0b0ef2e405c0d858a2791301429ab523c720de83d1f8fea627f11bf4fefa3ad779bfb289d2fa2aa81a593e283196873d7423bc62cfce43fe6f23e264ef2026f237a39e967ad92642a0d278dc8941a95881e10a5b3de7cf03017e1ce2b86e2b8278b8851368257e4bc412cb3202247d0ffafbc872e4872a85ce624e09ab53be75e5fcb3e3b119ce47a5dbb7cc86e4c2"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}}, &(0x7f0000000bc0)={0x34, &(0x7f0000000900)={0x40, 0x7, 0xc2, "fdb5f6cb08268fb123f685b3d4f24b1b06f14e292e837daa611b1770803d13e1ffeaae489bf262914c3455bfd4014b179fdc705d4227851b857688463fa6a24a9a0604b6a190a4d6f1e6eda4cd28b50c69a643de08b0ecd334938c4ea6d62b7cefe96646cd8d47956a61aae516c99a5595e5bd8f622e3b76cbc81d11c6635680023c855449476cce53493bbc9469f0c8c14112043051ace59f22b15a3727521a0f0d490f3277ed3840cf4f947334b8fb7aefc7f0a7880b82eb19c32ceb93a5d5400d"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000a80)={0x20, 0x0, 0x9a, {0x98, "8158131c33267f250c83e9365bb164ff1cb2a55eec176c2e9f5d91a6f900b175636d244f2c0be2a9b9d77acff4ae42dedf81d2b8077637e5079b0f7c3b7ce3130ae62bab60a534a2994cd03327e1d4a15f4499073f1e7e3f61ab4f38db9c3e6243f2f950b17edb6814b67a3c0fe031ffa616f3164c8b795437680c33bb12cb9a7001bfa432bcf2479e45082b5db0ae51e6beb0157d06d50b"}}, &(0x7f0000000b40)={0x20, 0x1, 0x1, 0xae}, &(0x7f0000000b80)={0x20, 0x0, 0x1, 0xf}}) syz_usb_disconnect(r0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000c00)={0x2, 0x4e22, @private=0xa010101}, 0x10) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000cc0)={0x14, &(0x7f0000000c40)={0x0, 0x23, 0x1f, {0x1f, 0xd, "6802eebe9e4560fcdc0e407e42abdf80b09f4949021f842eb37950b2b3"}}, &(0x7f0000000c80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}}, &(0x7f0000000f00)={0x2c, &(0x7f0000000d00)={0x40, 0x17, 0xf2, "8eab002e76714eb1bc93c15e5a181333cd60b11582cf7b5b4fc650c84a97962c4f89afc422a4e86bea6230fbb1ff0a80c5ae85d4362359f054321d8834c18f4c388832efbe2bd836c6165cca2eef54b92889c967698e282993202034358f7ff07b12399e2c684a614dd73cf127fcb97aa4b62ee8716687f65ca1770e1bb9c7c26579284e5656b277fb7337544663a2fc7b14412dbfde22ec7b3526768ab3dbf351cb85a2d92537af28424d27f185d57fbaabcc198aaff3ff59de034c7484f05c70062433e272ee45e8e99f155e9b79df87a1a920a479fe29f88d34352dd59b7aaa358f355308a60be2f2d8dad4d7909d0f13"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0xdd}, &(0x7f0000000e80)={0xc0, 0x5, 0x2, 'qo'}, &(0x7f0000000ec0)={0x40, 0x5, 0x5, "bcd7e6e63f"}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x8000) shutdown(r1, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000001080), 0x9, 0x48000) read$FUSE(0xffffffffffffffff, &(0x7f00000010c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000003100)='./file0\x00', &(0x7f0000003140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000031c0)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) write$FUSE_CREATE_OPEN(r4, &(0x7f0000003200)={0xa0, 0x0, r5, {{0x0, 0x3, 0x4, 0x6, 0x3, 0x8, {0x1, 0x3, 0x100, 0x2, 0x100, 0x5, 0x6, 0x2, 0xf, 0x1000, 0x7f44, r7, r9, 0x7, 0xe20}}, {0x0, 0x4}}}, 0xa0) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x8040ae9f, &(0x7f00000032c0)=@arm64) setsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f0000003300)=0x1, 0x4) prlimit64(r6, 0xc, &(0x7f0000003340)={0xfffffffffffffffe, 0x9}, &(0x7f0000003380)) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000003480)={0x14, &(0x7f00000033c0)={0x20, 0xb, 0x53, {0x53, 0x38, "6b17da22a294a559c19d2932c39732802cfa60ccde742c77270283da867d01aca24db500c3465a60680a6774df667606496600e839d1c09d02653096928c588e6f5d9a56a4e5bf43a862efa40fbd0ca7f4"}}, &(0x7f0000003440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000003740)={0x44, &(0x7f00000034c0)={0x0, 0x0, 0x8d, "aa8f5f8924611879eb8735bb17dab607934ad176600778c3ee66127d8bb9a26eb20a15144441544acbea00e3c26e7ceb028fbc6119076c61b60e57679e220e0b81bffda4a7b2f5a3ba518e2f6a64fb00328f8711f5eb0abca8bc312c23c520ce87e0b1d5392a2f4a7fc7ab91c73e12d45d3e92493e2b07e222e5823b9b2a989a591827e4c92bee51fe41962005"}, &(0x7f0000003580)={0x0, 0xa, 0x1, 0x91}, &(0x7f00000035c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000003600)={0x20, 0x81, 0x3, "d66ad3"}, &(0x7f0000003640)={0x20, 0x82, 0x1, "16"}, &(0x7f0000003680)={0x20, 0x83, 0x1, 'W'}, &(0x7f00000036c0)={0x20, 0x84, 0x2, "c8d4"}, &(0x7f0000003700)={0x20, 0x85, 0x3, "9aa0a1"}}) ioctl$KVM_GET_STATS_FD_cpu(r8, 0xaece) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r10, &(0x7f0000003880)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003840)={&(0x7f0000003800)={0x14, r3, 0x20, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000003900)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000003a00)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003940)={0x58, r3, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x192}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000003a80), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000003ac0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r10, &(0x7f0000003b80)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003b00)={0x2c, r12, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x800) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000003e00)={0x24, &(0x7f0000003bc0)={0x0, 0x1, 0xfb, {0xfb, 0x6, "31b743d8186bf88de14cfadfe569b88019a5ec575b774ab41b584739a38d9b2b998e0e525c25d8d8966ebcf4808b7764e54a23668b1968b1c4bab1da751f81de343e03703fafbc27449c50a2e45949825e0a135a8606679d8d39b47619100869bcaca851a97550be2bcb3461eb41a75565e58434f7f769430a01b6c3016e82edd80d08d652e622cd44649a52c72a01c8edc7d3fe0929e4ac038a8d6717f4703e640eaddb8bff8261ed5977e5eff9531b887498a639078b8d081993f7b52c73764a96d7d70e13ce7cb70601badb00653ea872a2db80502b6c29c35a893e6a5c3dc4150b0861c887cd95f502756f9da702c9e0c8cbb532dd7dab"}}, &(0x7f0000003d00)={0x0, 0x3, 0x77, @string={0x77, 0x3, "ea18ff0d9f242f34017d8373c343faa41012a0cc459e7f6fd96e12e09d2af29319f94b06b72ad4cdbb9fe030bb8a91424d8bcba9ee4ac33a1e22151b6689b86cc43cad52b2b32fab603af03d1c6ecf3b409cdb62c710e0a92ff0a838fa849f4e983867221bb92eda1a4721d8762f94b9f0f4095cfe"}}, &(0x7f0000003d80)={0x0, 0x22, 0x13, {[@global=@item_012={0x2, 0x1, 0x5, "b975"}, @main=@item_4={0x3, 0x0, 0xc, "2e687edd"}, @local=@item_012={0x0, 0x2, 0x8}, @global=@item_4={0x3, 0x1, 0x8, "be5155b1"}, @local=@item_4={0x3, 0x2, 0x7, "fc182dd7"}]}}, &(0x7f0000003dc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x690a, 0xb4, 0x1, {0x22, 0x9bc}}}}, &(0x7f0000004040)={0x2c, &(0x7f0000003e40)={0x20, 0x13, 0xf8, "8d959c9e3db1a2f8a3b958f05775fd1e1a529faf927b1435ced6012d40ca12e8606772d8b7ccf9a6459b460fe15c70010f0de166a6f424ec8ab4c867f25d69403f521d935f7133d42a1953872e514c0bbd54d10b8b303afd2d9b29ed416526a2d6ab2477506b15c15e344578c1795bf8ae1c62244c323b5bc0505c424d8eed5c4ba86a75a771541e3ae07cd836113da217dfee58cfb2dd54797730788f369f691119bd30e58a8217ae5adeee1561d9eb48e24b6df19ec0b22f6bfba44077724609dd9d5e21b5f0e938cd6aaafabc65cccedcbeb562841bef6f4457bd4f584d5a48017d4cc6a7a9c07f80e5a7cf2cea7f32684ea2d3850b50"}, &(0x7f0000003f40)={0x0, 0xa, 0x1}, &(0x7f0000003f80)={0x0, 0x8, 0x1, 0x30}, &(0x7f0000003fc0)={0x20, 0x1, 0x15, "227c37e170a95f5d54c09d672a7975f7ace33c9d5b"}, &(0x7f0000004000)={0x20, 0x3, 0x1, 0x2}}) syz_usb_control_io(r0, &(0x7f0000004400)={0x2c, &(0x7f0000004080)={0x40, 0x22, 0xfd, {0xfd, 0x21, "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"}}, &(0x7f00000041c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x419}}, &(0x7f0000004200)={0x0, 0xf, 0x161, {0x5, 0xf, 0x161, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x1, 0xf, 0x8, [0xffc0, 0xc00f, 0xffff00, 0x3f30, 0xffffc0, 0xf0]}, @generic={0xef, 0x10, 0xa, "a5a7ea56766c232b5dd7259a41e4fab1c3c2a165ebcc8d00371f4ec0504f1a519976f1adabd9450c3f3fc5fa09cb1e1faeda16afa8a4da42dd470ca0f8c4e7b2025783d211eceac92e8995e7a6d8137e572e73f61f5a5e27cd36aa9c2362c3b44f1235efb166296a7e837f9769c933af7b1f09ad059d9d75e8761755dab6c6a3e2170d39038b59310be56aa205f710339583444378de1901e56ff7bfc731ae557e0d108d6586081245c13420baadeaf7337245391cf37cfd6040459947341e956df18a4cd2a0568d0cf1501140da060c101ba5c131f66a67a07b76b0cbcd5cfb6357e03a221f940c5b5540ab"}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x0, 0xff0f, 0xa904, [0x0, 0xc0, 0xab43b162339f672c, 0xff003f, 0x3f00, 0xc0c0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x2, 0x73, 0xff}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xb, 0x2, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0xfa, "4e9b920e1e36612751a3e45926de5e3f"}]}}, &(0x7f0000004380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x8, 0x5, 0x4, "ceb14c60", "42b456e1"}}, &(0x7f00000043c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x60, 0x8, 0x8a, 0x5, 0x8, 0x1}}}, &(0x7f0000004900)={0x84, &(0x7f0000004440)={0x0, 0x31, 0xd6, "e0499520d0a4fcc1c5a3ec9f6b8fb3718329edd40f4cbce3d71095a313e47420b45721d5aedc82264cea331e573f78bcd292ed253339d5c41d6af7b6a1517e08855327d3ca544947311fe1866a6b66c31e4b4fc4f9c1dc8b482e80ec2131869124f69be64d6672cd4a4ce3b12caf7ea22da89246a87a186e324c07e7ffe4c898c3bfdbf10fedc90121ba8936ef17da2380490d3c7fd5751eb5d521324ea664f5b38cb333be7258aad7b106b99ea3e3398030aeb6654a3ab3f9783e6f5e44dd1d0d906096bb72d90c224d0520efe8935a17d33a707641"}, &(0x7f0000004540)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000004580)={0x0, 0x8, 0x1}, &(0x7f00000045c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000004600)={0x20, 0x0, 0x4, {0xc0, 0x10}}, &(0x7f0000004640)={0x40, 0x7, 0x2, 0xcf}, &(0x7f0000004680)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000046c0)={0x40, 0xb, 0x2, "d2c0"}, &(0x7f0000004700)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000004740)={0x40, 0x13, 0x6}, &(0x7f0000004780)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000047c0)={0x40, 0x19, 0x2, "972a"}, &(0x7f0000004800)={0x40, 0x1a, 0x2, 0x75d6}, &(0x7f0000004840)={0x40, 0x1c, 0x1}, &(0x7f0000004880)={0x40, 0x1e, 0x1}, &(0x7f00000048c0)={0x40, 0x21, 0x1, 0x9}}) 10m11.21416007s ago: executing program 7 (id=734): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="000000f84d09006100680000040690780a01010264843454a91720a4d2dcb9077c010102831fd364010100e00000020a010100e00000020a010101ac14143bac14149d5420b022c65c9e95bbca3bca8e942c000000000000000000000000000000000000004e2000004e22000000030000fafd64"], 0x65) 10m11.082873705s ago: executing program 7 (id=736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008050) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440040000000900010073797a30000000000800034000000007"], 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0x4c004) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) read$dsp(r1, &(0x7f00000000c0)=""/105, 0x69) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)=0xa481) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008050) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440040000000900010073797a30000000000800034000000007"], 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0x4c004) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async) read$dsp(r1, &(0x7f00000000c0)=""/105, 0x69) (async) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)=0xa481) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) 10m10.430659737s ago: executing program 7 (id=739): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201009eb465bf101e040031000000000001090224000100000000090400000103000000092100000001220500090581030002000000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000400)={0x0, 0x21, 0x21, {0x21, 0xc, "3d903f5ea7c6651f8931dbc3fb061f7d845800a40f39250586897b4407c072"}}, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x8, 0xe, 0x7, 0x3, 0x8, 0x7}}}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) (async) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000001b00)=@urb_type_interrupt={0x1, {0x6, 0x1}, 0x0, 0x45, &(0x7f0000000140)="02ed473cc0f63b3eccda47b6de05bdc5581839243b3f5a3d3b0f29d1c4a2c4bb0815d6a1529248f1000527c0d55cf64057f5554dc64bc78270995757e29875f851564a938948959235f919d3d4374ecab8c031fdf99e003489c1c02c149cac025fd79f29265b2e516b56d273df14bc6d41ab61601986c90bcc3d1f9b27a7fc0d53b7f1", 0x83, 0x2, 0x4008001, 0x0, 0xfe, 0x80, &(0x7f0000000200)="ca8147a3f8c6b06914ac20ad58b8c3980d5a3ad6d0cd132de87ce9e9afbd1220eb0bfc64a160beca1e07360cd04449406e5b5ac14528a06cdf290de69d6869ab"}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000bbc0)={0x5c, r0, 0x1, 0x70bd2b, 0xfffffffd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @broadcast, @initial, {0xa, 0xff1}}, 0x20, 0x2, @device_a, {0x0, 0x6, @default_ibss_ssid}, @void, @void}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x1000) 10m7.388022774s ago: executing program 7 (id=757): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) write$tcp_congestion(r1, &(0x7f0000000400)='illinois\x00', 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000fcdbdf25090000e60b0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572003c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080003401d"], 0xd0}, 0x1, 0x0, 0x0, 0x800c800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0xffffffffffffff36}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 10m7.267384491s ago: executing program 7 (id=758): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x4048aec9, &(0x7f0000000180)={[{0x3, 0x10, 0x0, 0x0, 0x4, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x101}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0xff}]}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$USBDEVFS_RELEASEINTERFACE(r5, 0x8038550a, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6469726563740000b2000bc0c036601670cebfba5b5c9a6364f24db5ef7feea8f9884ffa7c56933a3d1dfa1283ce34b33bcac3aa30b56f8ed77157bb7933ba51432cdff1e69f0f68987535bb3a8e87ee8b171402099d16f22991632810d4b9ecf951673708d3278b06034ebb0c3814fdf12c8fd77dc7788b16275fa3ce327c6a6cbeba6cac8d43151612c7a59a1f8083fc05037b"]) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3], 0x15) 9m52.093975287s ago: executing program 37 (id=758): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x4048aec9, &(0x7f0000000180)={[{0x3, 0x10, 0x0, 0x0, 0x4, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x101}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0xff}]}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$USBDEVFS_RELEASEINTERFACE(r5, 0x8038550a, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6469726563740000b2000bc0c036601670cebfba5b5c9a6364f24db5ef7feea8f9884ffa7c56933a3d1dfa1283ce34b33bcac3aa30b56f8ed77157bb7933ba51432cdff1e69f0f68987535bb3a8e87ee8b171402099d16f22991632810d4b9ecf951673708d3278b06034ebb0c3814fdf12c8fd77dc7788b16275fa3ce327c6a6cbeba6cac8d43151612c7a59a1f8083fc05037b"]) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3], 0x15) 7m39.502707453s ago: executing program 9 (id=1416): r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x75}, "536a97bb087f7ba01c61042d98694336a1cefea03a40e862ac768f272948b42254260b9d49b68e87be0767edaf57088ea243032a6b68432b51c09565b3553fa0fa15d5e94913b09d3a89ce8ec8d7b564157e565beeafbe8c82b3fe74a9103d2f9b99bbd4f00b80b3af6948514c7371e93032d6cb16"}, 0x79) (async) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x75}, "536a97bb087f7ba01c61042d98694336a1cefea03a40e862ac768f272948b42254260b9d49b68e87be0767edaf57088ea243032a6b68432b51c09565b3553fa0fa15d5e94913b09d3a89ce8ec8d7b564157e565beeafbe8c82b3fe74a9103d2f9b99bbd4f00b80b3af6948514c7371e93032d6cb16"}, 0x79) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000040)={0x2, 0xa00, @broadcast}, 0x10) (async) bind$inet(r2, &(0x7f0000000040)={0x2, 0xa00, @broadcast}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000200)={0x2, @pix_mp={0x0, 0x0, 0x31384142}}) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, &(0x7f0000000080)=0xfe, 0x4) syz_open_procfs$pagemap(0x0, &(0x7f00000018c0)) (async) r5 = syz_open_procfs$pagemap(0x0, &(0x7f00000018c0)) socket$kcm(0xa, 0x1, 0x106) (async) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) (async) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000024000100afefbd172f7adb9708035db5312a61ad2253ef9bfd1d31878175aa7da3dc850b22b4b843424746723d2204067a1085939fd86790553544605482c061233db31c4bcbb9654bf2babd8748ea1e10bc3b369e0db9c1920c6d80e69496ea629769e0a994858e257a658a8e6a3fc9a31bdb971cd95a61833279048cfc27447a9c55fcfb59ffcb49c8b909f45b8a07fcab7a1adb4609a0edbcf053e624fce64ea4506452c048bf96dfaf5a2fbba283c392794c389ef54df6a6e45ed41ee9d5e2a16d9a46a7a64615863f0c4d893301a96fa9cf"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) lseek(r5, 0x1000, 0x1) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) bind$alg(r8, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r9 = accept$alg(r8, 0x0, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r9, &(0x7f000001ea00)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001c00)="5985d20392a438a118753a61ccd1d0e8", 0x10}], 0x1, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x400c4}], 0x1, 0x804) recvmsg(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002c00)=""/4088, 0xff8}], 0x1}, 0x20002140) (async) recvmsg(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002c00)=""/4088, 0xff8}], 0x1}, 0x20002140) r10 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.pending_reads\x00', 0x442002, 0x80) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, &(0x7f0000000580)={{0xa, 0x4e20, 0x8, @loopback}, {0xa, 0x9, 0x8, @loopback, 0x3}, 0xffffffffffffffff, {[0xd6ae, 0x400, 0x7, 0x8001, 0xd3e, 0x2, 0x40, 0x2]}}, 0x5c) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000826bd8f00fcdbdf2564008000f7000300", @ANYRES32=r12, @ANYBLOB="0c009900ce0300004a000000"], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x20) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r13 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r13, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x1}}, 0x10) 7m39.36753095s ago: executing program 9 (id=1417): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_io_uring_complete(0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x10, 0x94, &(0x7f0000000000)="74c8ba8330dd8a0800d6bff7c36e8bcabf2822bd2a30ed56b8f95b324052f9cb0ea935e83c155cee8041dfe49e4a5d83d6c8f35d82b5c835960f7e289c6700986639f0124ce11ff620d70dc629dba1c1375e25e92bae249258f91bbdaceac858d53ae1260f9adc0d44d729451f0623a40433b9c89e1e38408e7ff08f39dcc03d577ff1c48f647de2f7ab7ed596b8ccf00689448c", 0x7, 0x1, 0x2154, 0x6, 0x8, 0x2, 0x6, 'syz0\x00'}) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000200)) 7m39.367105332s ago: executing program 9 (id=1418): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) 7m37.8616652s ago: executing program 9 (id=1427): r0 = socket$igmp6(0xa, 0x3, 0x3a) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0xce, 0x0, &(0x7f0000002940)) (async) recvfrom(r1, &(0x7f0000000140)=""/4096, 0x1000, 0x80000182, 0x0, 0x0) getsockopt$MRT6(r0, 0x3a, 0x1, 0x0, &(0x7f0000000100)) 7m37.215293086s ago: executing program 9 (id=1431): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r0, 0x6f000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x43) wait4(r1, &(0x7f0000000140), 0x1, &(0x7f0000000240)) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x2, 0x0) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000040)={@broadcast, @rand_addr=0x64010101, 0x0, "5c45dbe59911705e6159e3543409112add84c5cb1be20fe13ecce48b0ab44f52", 0x0, 0x2, 0xffff, 0x6}, 0x3c) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYRES64=r3, @ANYRES64=r3], 0x1c}}, 0x0) write$nci(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="6103020403030d0112cd7b63ad97403edf0791a27e12cb05ba7e2801"], 0x1c) 7m37.18344069s ago: executing program 9 (id=1432): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}], 0x1, 0x4000) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0), &(0x7f0000000100)=0x8) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000900)=[{{0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x4, 0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x10) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000280)) 7m22.110225578s ago: executing program 38 (id=1432): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}], 0x1, 0x4000) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0), &(0x7f0000000100)=0x8) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000900)=[{{0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x4, 0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x10) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000280)) 6m49.033186507s ago: executing program 6 (id=1710): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f00000002800000129487a71fe2c251244961f2a74ac35ff5fc", 0x3e}], 0x1}, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000500)={0x0, 0x90, 0x30000}) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x6}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_usb_connect$cdc_ecm(0x0, 0x5b, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x4, 0x80, 0x1, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x26, {{0x5}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x63, 0x3, 0x4}, [@obex={0x5, 0x24, 0x15, 0xffff}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x6d, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xb5, 0x9, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xd, 0xa, 0x1}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x9, 0x3, 0x5, 0x20, 0x2}, 0x1f, &(0x7f0000000280)={0x5, 0xf, 0x1f, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0xfd, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2, 0x2, 0x8000}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x1, [{0xc3, &(0x7f00000007c0)=ANY=[@ANYBLOB="c303c3eaf5f6f130f54101098f538535921133f640cb5ba01b2bff2f35c11b44a5230785dd0d1ba9d4caf4916699604dfe358bc3f8bbc0df9c007d4386ceda4c18b522260f4f0dff0163ff44119bd80c492772ba299c700464cbc3e4535266b8a4137c900c03ec2f310474f676075d965723adafa449342f1f2499a7f58030f150e44e9e33e4750c448d1d3204b5a1e65dae242dcd8785fce6b10f3a813f71b503593be60d654bf828d5318c1640ec95023c5a4ae6b166e9ebf6ddf97ac373af97000000000000"]}]}) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000600)={0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="00301d0000001d0354c0ee7eca829955d93ff0112a1dcd"], &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x1c, &(0x7f0000000640)={0x0, 0x3, 0x7a, "2410b8438696c08dc3c2b1f37c3a0ddfb77d40fbe7284ff2b3f6a4650fa2e5c5bc7c9c086c617f80692e614cbae97dfaf2cbe59d2c6fcfba15995af8c04db122058ba66acb418f4b4642049af6fa9ba3f3bbd8c7517020c854e6a5e81b5f168b261f4a74740bb12c4f085ba158a488e63b64af7ca2a4cfa8fa85"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x3}}) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4, 0x0, @private2}}, 0x0, 0x0, 0x47, 0x0, "74b726a137c433aa4cf0f8a94c7510ddbf387212ce63ffca84192f1a7e8fada98c09787c0f09d31204d72b1adc22136d0634dc3a24c89484e02716f385873737b1b6f21d8d87d45685a6377fb167d2e7"}, 0xd8) r5 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffff, 0x166, 0x21e89cea}) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r8, 0x0, 0xd1, 0x0, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) bind$xdp(r9, &(0x7f0000000100), 0x10) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 6m47.279188016s ago: executing program 6 (id=1722): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)={"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"}) (async) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x30, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000012c0)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r1, &(0x7f00000005c0)=[{&(0x7f0000000480)="94522ab34a71c3626b9eea26b57f9f8fed56014ac1bfa010c4b7f1092cb8ed1c8bfa506af7a3d68c4c884c9a642154b6c1faa21be92b5f2f51e4c6a129289af4db19a51fe92c780bc30384a89afa4afdf0de985e7ab6f285a8d7a6994ac4b3e8ec51eaed8db5810e687687e4047e23f770c0a7de9f9d45a36f5a262abd3a96d32f1ed6c05a90a8674a290ccbb00c37abf42430d214dc1f8b889fd3e0f0382039f9ac230a841b3e4c843823aefe09e9d0d3a9794201c35aad4b6f9b66420a", 0xbe}, {&(0x7f0000000540)="2071837cfab14af154fe8b0bbc0878488e0d7b57a264ff21fbe2c430c229bcd90c3fa57bdeb3a66cc327303cdf84c1d5c3402c9738b91ee3fb5d6cccffeeadd43762d7b52f0f57febd9c1bc2ec49d4130c569723a4d8684c0ed86049b662e7fdb3373e149afd40a6fe0e8e041637e14b245eb4c26a201fd9d5ed", 0x7a}], 0x2, 0x8, 0xfffffff0) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000000009046b00016a93f00009058803"], 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120141016cf426203d100101ea77400203010902120001000090010904"], 0x0) 6m45.92654352s ago: executing program 6 (id=1726): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) (async) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) (async) sendmsg$inet_sctp(r2, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) (async) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x82, &(0x7f0000000300)={r1, 0x10, 0x7}, 0x8) 6m44.979876841s ago: executing program 6 (id=1731): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="0285624b00000000000700000000000002000900080000000100000000000000020001000000000000000200fffffffd05000600000000000a004e220000fffffc020000000000000000000000000001ff070000000000000500050032000000de9ad6145911bf8dff020000000000000000000000000001c300000000000000"], 0x80}, 0x1, 0x7}, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f0000000140)='./file1\x00') r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000006a001501f7bf2ce0039ec5665e2470"], 0x1c}], 0x1}, 0x200000c8) (async) getpeername(r1, &(0x7f0000000480)=@alg, &(0x7f0000000100)=0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f0000000380)={0x0, 0x1, 0x2000200000a95c, 0x3, 0x1, 0x80000001, 0x48cd, 0xfffffffffffffffc, 0xffffff15}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0xe9, 0x2, @private1, 0xc}}}, &(0x7f00000002c0)=0x84) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000fd45000000250000cc0d0004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000340)={r4}, &(0x7f0000000400)=0x8) (async) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x181ac1, 0x0) fchown(r6, 0xee01, 0x0) (async, rerun: 64) r7 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x1, 0x0) (async) r8 = getpid() (async) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) getpriority(0x1, r8) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x13, r9, 0x60e58000) (async, rerun: 32) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014001000000006010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1000000000100103f5aeb4edbb57a5025ccca9ea2360db70100000040fad95e67e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000", 0xd8}], 0x1}, 0x4080044) (async, rerun: 32) sendto$inet(r6, &(0x7f00000005c0)="1c0c4359e5466d8e8353d40abd9a47dccb8d53eda97506de65fc224e29146855614506869407bfcf538d3a0aaf273c65b3783c6761947202d9438014a4fc82f7c2f6500fbbb41cb7f7e956c05acf956e18d37fb65d85ecb832be13f0fffbc3b40db45922813ca33aa86ab6b117d4db5628a30588ef7e9b1c136cecdddaf90694485012d7195dd7954cbefa749247d162b23d51f06f9ef7c7f55804cee2e2f3e26cb7f938a136d45a60c01f54900750e488fb50751faf5a8ed8a78a95d9bb723654e4e4f2819f1548cdc49e92c0ec4b5786bca986cec97db05372b9a9af377604926f631fe3834fac8cc88df0", 0xec, 0x40, 0x0, 0x0) 6m44.799585461s ago: executing program 6 (id=1733): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) (async) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) (async) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x1000000, r5}, 0x10) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r9, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) connect$unix(r10, &(0x7f0000000000)=@file={0x1}, 0x6e) (async) connect$unix(r10, &(0x7f0000000080)=@file={0x1}, 0x6e) (async) close(r9) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m41.83675788s ago: executing program 6 (id=1744): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r2) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r3, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) r4 = dup2(r0, r0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r7, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x50, r8, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9d}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x40854) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x50, r8, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9d}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x40854) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800100, 0xc, 0x40026, 0x6, 0x1101, 0x1}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800100, 0xc, 0x40026, 0x6, 0x1101, 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x313) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000300)=0x2) (async) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000300)=0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000001400000060ec970012302c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xfdef) 6m41.516404576s ago: executing program 39 (id=1744): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r2) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r3, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) r4 = dup2(r0, r0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r7, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x50, r8, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9d}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x40854) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x50, r8, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9d}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x40854) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800100, 0xc, 0x40026, 0x6, 0x1101, 0x1}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800100, 0xc, 0x40026, 0x6, 0x1101, 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x313) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000300)=0x2) (async) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000300)=0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000001400000060ec970012302c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xfdef) 5m16.569504486s ago: executing program 8 (id=2171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000018c0)=ANY=[@ANYBLOB="20000000010101010000000000000000020000080c0003"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) setresuid(0xee01, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) flock(r1, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r2) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="39020000000000000000140000000c000780070002"], 0x20}}, 0x0) r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0)) open_by_handle_at(r4, &(0x7f0000000900)=ANY=[@ANYRESDEC=r1], 0x688180) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r2) r6 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) r7 = socket(0x28, 0x5, 0x0) accept4$rose(r7, 0x0, 0x0, 0x80800) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x4, &(0x7f0000000080)=ANY=[]) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000e0eaa7", @ANYRES16=r5, @ANYBLOB="200029bd7000ffdbdf250200000006000a004e230000050002000200000014000700fe8000000000000000000000000000aa"], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f00000001c0)="bcfdc195f8b8fff0d7d38cebc3ab0a281077b472f633f263e6cec7a46ae5a30d3b4a34df3f57560217ec82ad86f90bcdc0538fb8d3974e4345d3653747b5e8e4effd9e38b7d65a6e70ead21cf7dfda1f078866875d57cfd0e398fea002ae797187ebfa9f216c998eb937235458bcf702c6ae803dfa6793c87e4471f181c01ac16cb88a61517b028928a8d3768eb6c7ffe91ec60acba2e36b0f517bc3469e9ab5a000c95300c7e59dfa32e844a00ababe920de9e0700a7a15450d9c090d2d2dff7170fd51617a78ca00", 0xc9, 0xfffffffffffffffe) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) ioctl$KVM_GET_NR_MMU_PAGES(r9, 0xae45, 0x200) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r11}, 0xc) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="fdda0d52", @ANYRES16=0x0, @ANYBLOB="01042bbd7000fbdbdf250e000000050029000100000008002b0005000000080032000500000008000600", @ANYRES32=r11, @ANYBLOB="08002c00500f0000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = openat(0xffffffffffffffff, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r12, 0x40046210, 0x0) 5m13.508944932s ago: executing program 8 (id=2185): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) syz_open_procfs$userns(0x0, &(0x7f00000001c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0, 0x3f}], 0x2}}, {{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0x1}], 0x1}}], 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) syz_usb_connect$cdc_ncm(0x6, 0x74, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x7, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'P'}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffffa, 0x6, 0x8, 0x40}, {0x6, 0x24, 0x1a, 0xd, 0x5}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0xbf}]}, {{0x9, 0x5, 0x81, 0x3, 0x228, 0x0, 0x5, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x11, 0xe0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xd1, 0x7, 0x2}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0xf1, 0x5, 0x40, 0xff, 0xad}, 0x1b9, &(0x7f0000000240)={0x5, 0xf, 0x1b9, 0x4, [@generic={0xcc, 0x10, 0xa, "14c50d8105b77d60f791eb6c0ef07e6791696dec094ca8dbbbcda9b9b882ead5511123b4bd0538d823abd1597865167c220d2434715452e347d4ab7b70881dc50247773955f6580f8159fbc1a5ae0d080c80cdac870d0e33b49a108246f046a45be487b287607da2bb0be340627db47507b0ab75aeac883dbf3ba0ce37cf1fd79c8aa58839647a39c7dbf71d15760e49680921e2d35ad22fb66770696397db0d62f39ebc43ab744e2706cd59ce874039b585c1dacb617eb27f716dc78eb2d4e38545708cb2bcd32daf"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0xfe, 0x6b, 0x5, 0x81}, @generic={0xda, 0x10, 0x3, "e2f91178ae81ef808d680f72ee58c14ffb08c13cc7719c7f34428987d87236eaf5b795cf787e3413ada7d2b1c84c46f83464f5889165a0f3b2f8154ab276464f0d0349483a4063d771459ef2c2c8c49e8faad521661e0cb6125e4c7642616acd1194f988becdc6ab8352b7c4d8cc00424414da11954ac602865b47f38f3d8454d02f7b3a64ceb0f7dc0d36427b963b538165613d6fdb7eff852c2b48dd4097f4e677798095d4a676758d2acf8c23362d288d1dd67e5450d0aa6591efb4bbf5e0b8f1186098169cf217d1acbe1dde5fa033c24bb89d2589"}]}, 0x3, [{0x85, &(0x7f0000000100)=ANY=[@ANYBLOB="8503e8e9a4c00649248105fb1c57aa49a65b993688f6ce21daa494586ba3aadb1de8cb1f9dff894d6732c909840a9dd74f8e71cfdfba9f05a692ad57bb959a86cdc07c54c20e9ac1dfb6c5db67b570aa514fe21843aa73f48a8542bdeeab2736e4e6285a70763b887355033d5b22996da0bede3e07b14b81c218ea3fcb51a0cb49ce922567"]}, {0xcb, &(0x7f0000000400)=@string={0xcb, 0x3, "9758217c1fe0512dbfc1615efd0007793c355815f13ec01081a7bb10edcd9393801f1814aa1005f8c715a7ffa288f4a07b4ad3050142a896ce7982282ce0d1c58ca08147fd66813e364f184de1381e2fa3dcb2f74339b2dc9a57ebc8380f63c7c5f8acb431171850315db1ec9b317add4d8ba3a2c2465a6ba51b1edbd3908288bdfd25efe40c4ef96a22b07fb7235f9a904e6326798c1c012dc8ecef6638857280a1ba5f41671fc95c1947a3cce21cee7303be0acb78a2b00d244f50286694596690dc010527388a94"}}, {0x92, &(0x7f0000000500)=@string={0x92, 0x3, "1a2e9aafc3d885dd0852d2f01f69edc2369bb4daf7b5350bf859403f0979a105af68841b8603105ac51578eb2000c3c32f43086bcd346012baa190e12070edd7f93708178c6305a7b8c463aab719f4cc7986ad50e300e8a3070d5779db2006765ef83473d2102af4c37b3e1722ab49eac3340352bb18a3f405705b6d092dfd4d46f0d243b3df9473a8e2a90361ad476a"}}]}) 5m12.013548422s ago: executing program 8 (id=2191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x202140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010725bd7000fcdbdfb303"], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x3) r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r5, 0xca289435, &(0x7f0000000a40)={0x0, 0x0, @status={[0x5, 0xeb, 0x708, 0x8, 0x9, 0x1]}, [0xa2a, 0x3, 0x10000, 0xe0, 0x7, 0x8, 0x9, 0x1, 0x264e9c59, 0x8, 0x400, 0x0, 0x3, 0x9, 0x0, 0x8, 0x2, 0x1ff, 0x6, 0x29, 0x100000001, 0x9, 0x8000, 0x759f, 0x4da4, 0x7e2439af, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x70, 0x3, 0x9, 0xe, 0x101, 0x13, 0xfffffffffffffffc, 0x6, 0xe, 0xfffffffffffffff9, 0xa8a5, 0x3, 0x81, 0x3, 0xe, 0x4, 0x401, 0x7, 0x67, 0x8000, 0xf, 0x0, 0x4, 0x280000000, 0xa436, 0x3, 0x0, 0x8, 0x8b0900d, 0x6, 0x10001, 0x3, 0x760, 0x2bd3]}) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r7, 0x43403d0e, &(0x7f0000000700)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$TUNGETDEVNETNS(r8, 0x54e3, 0x0) syz_clone(0x10000000, &(0x7f0000000000)="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", 0xff, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000680)="6bd222397fa9fe989f6e784196f3faddfb75d93486ec040e9deab8653047ce989d7c09d41fc7cb7da5d9a8cb3622b79aa127a01286f8b1dfe90825d4dbe250e8478dd959") ioprio_set$uid(0x3, 0x0, 0x0) r9 = open(&(0x7f0000000240)='./file1\x00', 0xe142, 0x0) sendfile(r9, r9, 0x0, 0x800000007) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x2000, 0xa, 0x9, 0x3, 0x5, 0x40, 0x29, 0x0, 0x2e, 0x1a}, {0xd000, 0x1, 0xc, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x8, 0x3, 0x1}, {0xdddd1000, 0x3000, 0xc, 0x9, 0x3, 0x7, 0xfe, 0x9, 0x1, 0xab, 0x8, 0x81}, {0x3000, 0x26000, 0x3, 0x2, 0x4, 0x42, 0x9, 0xff, 0x6, 0x7, 0x8e}, {0x8054000, 0x9000, 0x4, 0x3, 0x7, 0x7, 0xab, 0x7f, 0x9e, 0x83, 0xf7, 0x83}, {0x60000, 0x1000, 0x0, 0xa0, 0xb1, 0x9, 0x1, 0x0, 0x80, 0x11, 0x1, 0xfd}, {0xeeed4004, 0x2, 0xb, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x30000, 0xe, 0x5, 0xf, 0x8, 0xff, 0x0, 0x22, 0x1, 0x7, 0x9}, {0x4000, 0x30}, {0x10000, 0x86}, 0x31, 0x0, 0x200000, 0x242120, 0xb, 0x0, 0x1000, [0x6840000000000000, 0x4, 0x5a, 0x1]}) 5m10.362168774s ago: executing program 8 (id=2198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) ftruncate(r1, 0xffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r2, 0x0, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xb, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00') sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="a4000000180601080000000000000000050000080900020073797a30000000000800094000000002080009400000000505000100070000006c0008800c00078008000a400009aafd080c000780050007000c0000001c0007801800018014000240fc0200000000000000000000000000010c10078005000300030000000c0007801d43496780000001ff9611caafc22e7a0007800c001610a745022f4e69c4859269dac8a05bc78008000140640101010c000780"], 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582", @ANYBLOB="efe16e86"], 0x0) 5m9.020850864s ago: executing program 8 (id=2202): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0xa, 0x7, 0x3, 0x5, 0x40, 0x29, 0x0, 0x2e, 0x1a}, {0xd000, 0x1, 0xc, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x8, 0x3, 0x1}, {0xdddd1000, 0x3000, 0xe, 0x9, 0x3, 0x7, 0xfe, 0x9, 0x1, 0xab, 0x8, 0x81}, {0x3000, 0x26000, 0x3, 0x2, 0x4, 0x42, 0x9, 0xff, 0x6, 0x7, 0xe}, {0x0, 0x9000, 0xe, 0x3, 0x7, 0x7, 0xab, 0x7f, 0x9e, 0x83, 0xf7, 0x83}, {0x1000, 0x1000, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0x11, 0x1, 0xfd}, {0xeeed4004, 0x2, 0x0, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x1000, 0xe, 0x5, 0xf, 0x8, 0xff, 0x0, 0x22, 0x1, 0x7, 0x9}, {0x4000, 0x30}, {0x10000, 0x86}, 0x31, 0x0, 0x200000, 0x242120, 0xb, 0x0, 0x1000, [0x6840000000000000, 0x4, 0x5a, 0x100]}) (fail_nth: 5) 5m8.593925607s ago: executing program 8 (id=2203): setresuid(0xee01, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x100, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESHEX=r0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000280)=[{&(0x7f0000001340)="ff", 0x1}], 0x1, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r2, 0x7cb, &(0x7f0000000280)={0x3, 0xa, 0x51}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, r1, {0x7, 0x1f, 0x20000000, 0x4041, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x8000}, &(0x7f0000000040), &(0x7f0000000080)) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={&(0x7f0000000440)="293690e67025f8d4d8eb7d5625e5099dd3c832353b838ccb7ec3", &(0x7f0000000500)="4992243ebfe25e40304d45c46f4b2c4b887b0b53a86ed2c73461535cab6785ed8ec532dbf3077c28154d0e37fb21671574d8f229f49e35efdab2d52fa7c3c1495880aec840d13c93e4d3a245346233021b7dd0eba3b8afabb83452c2b9f7e551105e8d10562f3aa3e9a1c3452f2a0c75120573d67a"}}, &(0x7f0000000400)=0x0) timer_getoverrun(r6) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, 0x0, 0x14) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) timer_delete(0x0) poll(&(0x7f0000000000)=[{r5, 0xd010}], 0x1, 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x1c4) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r7, 0x40046210, 0x0) r8 = socket$inet(0x2, 0x80001, 0x84) listen(r8, 0x3) accept4(r8, 0x0, 0x0, 0x800) listen(r8, 0x0) sendto$inet(r8, &(0x7f0000000340)='|', 0x1, 0x1, &(0x7f00000003c0)={0x2, 0x4e21, @remote}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 5m8.147602225s ago: executing program 40 (id=2203): setresuid(0xee01, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x100, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESHEX=r0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000280)=[{&(0x7f0000001340)="ff", 0x1}], 0x1, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r2, 0x7cb, &(0x7f0000000280)={0x3, 0xa, 0x51}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, r1, {0x7, 0x1f, 0x20000000, 0x4041, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x8000}, &(0x7f0000000040), &(0x7f0000000080)) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={&(0x7f0000000440)="293690e67025f8d4d8eb7d5625e5099dd3c832353b838ccb7ec3", &(0x7f0000000500)="4992243ebfe25e40304d45c46f4b2c4b887b0b53a86ed2c73461535cab6785ed8ec532dbf3077c28154d0e37fb21671574d8f229f49e35efdab2d52fa7c3c1495880aec840d13c93e4d3a245346233021b7dd0eba3b8afabb83452c2b9f7e551105e8d10562f3aa3e9a1c3452f2a0c75120573d67a"}}, &(0x7f0000000400)=0x0) timer_getoverrun(r6) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, 0x0, 0x14) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) timer_delete(0x0) poll(&(0x7f0000000000)=[{r5, 0xd010}], 0x1, 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x1c4) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r7, 0x40046210, 0x0) r8 = socket$inet(0x2, 0x80001, 0x84) listen(r8, 0x3) accept4(r8, 0x0, 0x0, 0x800) listen(r8, 0x0) sendto$inet(r8, &(0x7f0000000340)='|', 0x1, 0x1, &(0x7f00000003c0)={0x2, 0x4e21, @remote}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 3m57.673974237s ago: executing program 3 (id=2609): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)={0x14, 0x16, 0xf15, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 3m57.589622119s ago: executing program 3 (id=2611): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x9c}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffb}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) 3m57.564066259s ago: executing program 3 (id=2612): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x7}, 0x4) r1 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2080, 0x4}) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x11, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x450800, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000080)={0x28, 0x0, 0x0}) ioctl$VT_DISALLOCATE(r2, 0x5608) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 3m57.438267036s ago: executing program 3 (id=2614): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002440)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000006100), &(0x7f0000006140)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) dup2(r2, r1) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r2, &(0x7f0000000340)='./file0\x00', 0x272) r3 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x267, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0xa, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x2a, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x6, 0x10, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3f, 0x3, 0x4, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x7, 0x2, 0xd}}]}}}]}}]}}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f00000003c0)=""/100) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "a2ea0076"}]}}, 0x0}, 0x0) 3m56.240429063s ago: executing program 3 (id=2622): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x40000000000000, 0x4, 0x8001}) sendmsg$nl_route_sched_retired(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=@newtaction={0x1a4c, 0x30, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [{0x1a38, 0x1, [@m_ipt={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}]}, {0x18, 0x6, "dc56f768f786fcb478da063a3fb552c98a15932d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_ipt={0x278, 0x13, 0x0, 0x0, {{0x8}, {0x180, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x90, 0x6, {0x2, 'security\x00', 0x9, 0x2, "53edc1b60e7092b292baf4a7aef84c6dc858fcda7b2abacfb7306515320461cc3bddcd7b743c42ab52841966244025f9defaad651263b154e9deef6d4bd437e8ed5d16aacd75fce083a5e814ddc9487e71edd340b6401cec314b46dcb064ea07a5a65edbde4b"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x9b, 0x6, {0xfff9, 'filter\x00', 0xd8, 0x1000, "845cf39d321cad8e4d5f20a9f9d1f4a7568c49841677c92eee943ce42bf0776bf55defa4f7c3389d864e5dee09ab2ea454df4ad2d0226dd8eb583423000bf45f530737d3f9b3a06d751744c79cf99441f19c9aaad92eeccaa063c3667946225a8ac801b84b3a01f00a0d376cdd745ddd3e"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0xd2, 0x6, "86b172a6ea3a840acbfab915b8abef261a2a45c133d68a52388d3894a504a49a48cf2edb7e6b74a7e15057f5605f10d5e4cf82e73d45b550c39d78617aa4a58aa280ef6a8ef935251940c13df21edf83e8675fb304f0aaf630e872b9ae671c2acb9be98f6b1e98c5e62be020e0b59d197ebfbc240dce0bc628ca8aa9412285a45483f72c738043f1e953329ed54d53ac3fd33960e80ed741461a6a29a5192c6ef3382b92d123562ceb363d1f73eaf96509ca1fcf55682b1dfadf66b59443367aab8dbfc7140a77392113baa88aed"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x78, 0x19, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x48, 0x6, "304481676ae2850755d5c8657f0e498eba765a8a7b16da3623d70caae259fa3b3a44055efdf5a451f75c33242fbb44c67b143d01a80db5bd32cbe5310e394339057c37ea"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0x238, 0x1d, 0x0, 0x0, {{0x8}, {0x150, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x10f, 0x6, {0x6, 'filter\x00', 0x2, 0x4, "34b544be6230758752ab4ebb4e8e8263069b74ecf6ddd3dd3fd03930ff35787b7f0bfdcd5276a2353efc40b1db876f8a0776264144af5b1ce7461fba23ba8eb7cab861a8600b05df915ed904960b101027a4f5c4cc8e3ac1340c7b6b4296dcf1ac289fc102245a78e2ec5f32ac6bfd9da544620d69983641172e4b0637a5b33e7b0565453c39e0ba711a5800087635db9653112ab30a9c7b17b1851051c3d64a451c60b480675fe9c6f65c9d315e232e3cf2b0a3f0711a3f9e6c9acefad82245a62d70a0d403e85c86d17ddc5a7a3d4fc1abffe70de0b8c1f708fe955404b3597f5d2e8eae"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xb}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0xc3, 0x6, "af4450282326d323424b98d53b569cf9b27f76f51cb4029016c278bd6dabeed2f6e560599c5fc09be6d1365f5a4ccb4b780452fa344999ace6993252485bc762ab0d0ec155a006b5549fdf3f407a6cb146dd257a39ccbd2233bfc766540630d2982ecd19111f1398260bef7a4837548a50a74a64533a8898881525f5092c39c23f58b96de605f216da976e4bf74494b782cc3eb927624eabbd1fb25f726c7c52be54dcc205da2e0da404ec5ca302e08ffd48b50aa240b01935deaaffb8d580"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ipt={0x194, 0x10, 0x0, 0x0, {{0x8}, {0x150, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd4, 0x6, {0x9, 'raw\x00', 0xbf, 0x0, "4e4a8e0344f0437c1b0d9ab1bf816cfd4657671ed3692e1f06c87fdf46efdfe2dae588def80d378d4259dd5d4075f0fa7907ff69a2de716ebc7a287e5f259e37d3e5f27213f342769a5e69e6ca2731eb8f35bb40c8402c15aeb9b4ff079d06368e372f0710aa4d240eed650fc9412e7689e82f11bf3252da797ccd48e3310d3c28e75d7cce0f832547ae5221e07700aad1492bc292dc655d1d271b3af8e0e66ceed7bee99a4688eba59b"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x401}, @TCA_IPT_TARG={0x43, 0x6, {0x0, 'nat\x00', 0xc7, 0x7f, "7fde127380213d7d9978492b29b46f17dbf3f58a0a5ff80f4a"}}]}, {0x1d, 0x6, "0e10480b2c162484dc82ac22561473984d03990a282aa40941"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0xc4, 0x14, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x140}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xb0}]}, {0x3a, 0x6, "7a68048a926a8b8f65232cfd02f1001fb77a17828f09e80c16321b405bdb015e35ec9dc06fedb6b457a8fe3dc23d2179c5059c8c8434"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x1e0, 0x10, 0x0, 0x0, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x6c, 0x6, {0x5, 'nat\x00', 0x3, 0x3, "d628bb67bd81c40dc91d8cffbf707fcf0a987f0a36af0619e527317bcf64038d2d0154f044b1d6381da6a0d17eaa51df80a423c128830811a754a25fd1cbaf54ee0f"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ipt={0x108c, 0x1a, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x47, 0x6, {0x80, 'filter\x00', 0x5, 0x4, "fd63953863482ce0af0d4ef87588a7b385e0e22ebfe1743751bd234a61"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x8000}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x1004, 0x6, "ca31234f0002fece35aed9740b61f1db4da2db682fce7985d81bb62d2e270a5fd70f42fcaf9cafef9f0c1f76e3938f4e04483428a8144b6fa7253165c6158c5e9a352846ad304f77f169774e05f18aca74a2941355aae46c71b1fdd44a558794097b12c75d4d3cc1871a2fb3a7a261492ab5b4e0efe133428461f72756646b121e06f64109aa4dd5c01aa45448a606d2ed26da1fa68cb4de43bd8bd9cebcb6c630431463ecb1649bdb4a247a423612ff54006c0336ab58683294ed1fa4e52c61b3bf77732962ce665d31e06c262984e1f72e856be6377e73ba8acc5c2b667df911962a76bc56c699a7ad362c847f4c0c2499807653b35ff30ba1d221d1ac10cd685369637705d0e267b882178048c7d72e4c72615312d727f14c4a7e36977b60289b99d80f8d9c7f845ab099fa475915a687e30555f9b2d1b48bdc5fd95c9b24122816fda93f1824d53e8a7ef144657bad8901c78a14c9892b030e5c0966d6281c4a66d7fd7660d3269ced23bff1b280547621c66936bb2da1a223c0e4c0ba0cbce370117707df5a3626ebeb3aeff903addf7fe1324706deaf37f0be7cea2c419fe66b533ba1827ad70cd6841274a2b6e6e6a45a0ceb45907457b8949d0680cb3f381ed7fb2a29619d45cf8a3b1d7748680071227d28fa2ea3f5f7c3652ff91ebd57649150bae2bbf35da982f90d6f9093a61ed84d2b2fbbcddc3d9606652eaca6a925daef3a41d01f02c2af3d8c0c2de60ab11ddeee53dffae8e6230db3f6e4d591e2abc49b3eb7d7fe9a43f3be3e2ee5087ec898f001d3d1427efbfa68c213a7761ff17f6ba1a90bb746221700e056df367af82e931dcae3e5a92610a65e2fadd0d801c989e2fe37057819befa4124cbf7b395a676fb38efdcc91c4aca518a909673d16319265b3ac1190753730fbf55f10b1826c376877f688bb101c64e9438d6252c1281bff8482686f5b007b4a1e433fac1fe200ef32bd4e120da9a09ab31f9ad02a749adcdaba30b5f36fe50ab80f3190db92e6dadc2946d26eea62f954f5f427acccafdbb49484940696c01e74598770a1e049825787f37773fb0d39fd4a80a0a8ab2c60a06f15680cc186582ac13ac5b8647a373640c2267946aeec0ed5e7dda7fad54b110db540d4d9295ed135bfdc9e2420ef842a45bc6a971b850c50f7f3b1e5f8aa980086f027b4774e6ac27ec72a4de5fac4addd818cf28cd48aa499af1fefe76848265fc2a6fd77e8d7c1f312c13a0b0d34a8283aeb0395a69bf65d0c22342f68093a075c463a3e0f811739bc8cb15eadae61621f263ef9722e86ceeb4573ee74bc50ae67cf66742fb1d3a9db040db0aeafc56838f5b8730d0ec4b0bf7375ef3348f19f7a1128c1a5d2253bf173863764f70ce64ef20f10b0c8ef00591159988a4d4ad80a716e8aadd75ce4074c2d3a9adf23907c62a96aea1ceb1ebb2aba07f6f324e044aebe166ba86790217f6cf423b62be86f4874de4a4bbcaeaa786afa840b934975e840bb356c05e80fb027adbf8a6089eb93c46b0524577ed4d83c4fe0255eb2654d319014bf6e3e8cd664e1a5785be9e7568a9f31b90d201dcade5ae7eaf0c8d16a4db55b4525b6678e052de706c69890add66bc531f5ecaf6c7525888d2e4c5776def6840723e2d69b32416c8c2129b702c26b7876e30641b346cbff5912d3839f24346775862651c487409ca316f30f6235596efccf63b673a23da42ef746f41899dabfbc8a0e1b16e3397e3105936426b6317aaf3952523315ebeb1108ad5b76230b061fe9a082b548b20080c5f5f826e647de2b49bfb52f681ccf1d3792fb7cdde3892d5c872e9d2b994ab44136fdee4f48d98b3347baa60a39deede6d1ebdf3d7f86498d5d8a4d5f35d6bd5265a8604b4a102b602d94dc500352440ef4808253e2ef6eabc810b511cea76828d626505a6b8d6f301ee727f2d592149dc3f6b8ece2ca02e3c2e87235059138bd2732180929b4312d035e6253503ef4bc077d69c7353d0af1d28ad39d64a9a2c2daa6fe925402d50f2794bc83ece96d0321516b7a10d63ae5ba308f9931809d36a450761c08cf0c1f254631abff98c302d99a0cea1e3130efe224f07ebf724c47322207be4076b60996304f365b42b83861d99e64b5c281e8f5ef0391b39a5c7317c38a6fa5298cdec4f606a3bd7e612f3dc56e9b0609b1c514b3c2e006cc84757088b3ffdaf24dde0c0aa47c6ee24c43cb4816bff52afec734bb40dd7f20ebc435c3faefee487549d66ed3d5e97321856ce706faf9216d1f7779b206fad285e47b5739ed3dffca7d56f2dacd08c1cc586d74e476b613f4ff618e442c268bbdfcfd0c6b87272e76b19e4b437cc9012482330f82d33e95ba192cb3761002daaf7ea7ab31d4dc599479c6aab7137d8a08552827e88ea71361138bfdf9ae39554556ea87ebfaabc9d36b03750eea812c7166080eae3b775df4b286b35b5f92f65f6b93877068af50372d9f5eaa16073c9098aea8f10e32579a98e0216290a2d763d1ef74ac09dd3cb5982aa925cf811cad2006b6f7ced72aafa320898d47306085542e900ab809f2d9158b8865f08435b3cb7989228ebf978c5bf912edddeaaff7dfa7e20e582aa454511977d13cc88039891fabf6f5e60e2225dc8ba795d66a39278d83cd5ec9146b2cc4a6d1ded6180a18dff8352d766b4c41abf42e7407bd0303465bb43d4041573caa07888dfb04728fe8dc39db1d70abd43bdbaa795376639a3a935adcf369f5e7bdf913896256e9a40f2a0f24b43b055c9a7bbc85bad5b2de8b8872441c16537ffaa3f0cf304df3094da364cec4beada64385ba047bc9d9a8a82007c7efa87af800f906bb9e87b266d90d4ea5a5ba4209a862ec0ecfa9ff7b4f9d4b55011756c22dacb55f7a1fda95235aeebce018126fc8ba4267501e4341808cc3009dd349d4f962357ce003736efe3b8a18f93ae2bb4a8c071562d07cf5fd713772f565a1128c3859391092d859b94656c41abc8d5a301d0984c714f3515caa1bac2f62ece71bd32f6514478966ecec2ec3587ae98fd09786e89b5a9d8aa183e8101fb439584c40609d564400ce5b6d0ba9584f088bf7fae507bee6c8a843e3bc281382ca72331fa183ec750bc081318e43fe60797d5160000e5bf83b550b39173d148ea86c5f6538c547873e1053600f38680105b50e4ed0174aee4af015b92a9bfd3b603bf196f27315a04c1ca83af3466da9c1a7ab870919863df65a121ad22b0f3a2408a46f865998d80f27a3282be278722ad2c0274aeeb4bf66c51d1f559a76c38325e4d794c383d1844b502eb83a5e8285c08854b1c8734f6f16e67e94396920587209e4a20e4203792baefe8f79ca900e8143fec8fc108474c7ce555033f0d044b7f365ec9a9164450a085478e2c6df160d70a92a6fd599abb806e7a428c62190750846881b1e4f260703c41297a7ac00226b3a2e5b3d5e23b8b059b5365dbc9021f3c927ad87e86fe8543ae9a23645b8970deaa587ee259c89544e905768598d4e14333ee62666110b5d30668d9860c044508de940825a8a746c07ad4f89bf3dbfcc86ccdb1bbd6e33cc5f84380ca91fac079c1055f9893a76aff307f6a053917fa0cf007b707fd20574113f96561496ce8460e5413f4bb68ab0257c3808cbf22586b0e67b3ca7c8b46881de1a491469d6abaeec109d6d7a2c7b67e697e2d98a96b99f00404025a63814352439e3bb3a00e4e5f361b8418eb8b8ea43808111523c2e094e330bfb19a812bd02304c03401d6235cd3cb8d4b5c586db5506c600a41f7fa6160a634908a9e39100ad63a8ecdaf11f5bfafb9b3523884b47080d48ce9c6ac4634efe05a7dd0f171ddfe2db06c03f0d4dfec28b39cc826fd70905132cd47a2d5fc9cf779c89757311f8d251d96dd5ab1bca40b3e0b29f35408641d1b91c94c11b3f948328d5d177b0f58e923b35aaa18e7bb1e465a2178887a7cad72b42bbb92ffcdaf549cbb83e36f65729d0f2efa0dd6c63abd4dd4e8b4e44150e70e633cd263cc86d6c09fabf6dd4390e80f07456c831597797ee6d931dcb55a9506b6dae21f1b0e97a12577eae4441b471361dc2b8868e467fb842f650336417c3de606b4f9c49b77921e0d4dccbf2bbf4125378e7f2f272b036b778477903df3924e50709511e3d2015e43f15b3994bd13c64216e8949c25fff1877ca79cdcc2ae6cfa32dadfe64b6d41207b501981bda028b23c083d362dd76225f4b0ea03782fa262b97ef63078542110b52add82b209d7d948d25636b2fa37129abe81a62c6e1a46dc62a1976caf486a1dce82252042446c31c588db83bd93f96ae0ea21eb43efed24f166421ccb9ed012abded836e293d61311e22678eae0a48959f5fd477f5262e96f3c274b7221da518e6a4d542c1641d1db88752d1d81197fee78376be4d774121d3eeb7ab643df1db2a64654568077df41b7afb602a155f654ea7d33411f52e3e2906504bf3d9728cb647fad6484f45bc7ee7f04229575d1cd587e4e18ac349e424aabb3728b89582908d6da5d4d3c117a6be8859ab7ddad6f88d13d28acb6471bebef00a74243cb1be24f7cd0fdcc314d5ef7d2d6fce65984622fa48080bd966dc7efd1af023349f9711f044f53ff35840b418dd1c1d760228be8c4a904383aef06e6c05133481c70f81074dc8010058b1b55e9a533fcda9ea30e0ee6ee8ba021a6e35954ae05d7680e9a8eef34c4cc101a1adee5f29c40a3fd11a57e8568d2af085bef104212c4167e139425d9031e8d7b7a33746675e2b5ac86df1e7928f5ca23ba038b34fc29d8d89ceac68ff05cce3c85469c2ecc599a5f18fb80111277acf10c4b718684c55cc7888c613c2c28a91c4db3d9a8f17c691b4b8e10a15758274ec540a3cd8b52155d418d555e19b7b3d9c3299a4cbc650d849edd90372f5c2c88038aab11a2c2f18ad0e49f05d73fafff53eb85d6a846015c5e8d62d7b1c5f5e9d58af0e449b218af2271cab70f3cc695f3f23d2687aad93664b2539fc4944668de43ec14b2329ab648fb8aec1a21cf8b2ce5b2d9b0efb94cbbbfe1d6b2eae47267c32bc6af4cf41f60af37992b93dd58d3bbbb79a3b6c26b87ca3151ed42c241936efff5a8c71d26af1b7c58cd3a28e6bb562622dcd045bdab82ae6bb666c024e72a7bdf844465daccc8248aaaed7da5a77896859fdd13fac4dfdab3b3e2c2105850e56c4078387296fb8e57242459d36af62c1610debb590e07dec3259c64d167bfd4b4f980e7b67078a4527232e09d7ce2c1bd4d7acb4dc82665c97137f69f547a6d79696f0c54d9f45d08177014dc3e062b0107f7ad6ebd1104f1e8bacf150412281cfe74ab810ac312573279b475edf81f65b6160b97fe3a1efe5552867248657dc67fb1b3b010c2ff90b03e002fed78fbc9c121bb6bf471a84134360cbf8cd428f6a4cbd108c98bbcad07ff48dc443ebf121f33af24c4e030f430985bcc2982beeec39c27e170d61e3087724d04ce642fd656ca5205ea591fb593bc410fa70c896e3f4dc956318702be704182160d8c5d77b922e873e8b3b7b02bcc9361fefb279b5c08ecae88b3139e7fc4fcdcee3d4282ade47549171480f729d42db5c27a393fda265dcfee33e0e1e2b217df04dc264a97ae2c6d968ef1cd473c559ba00717bde6255267388eb555253f737be6f1a839d204cf254f5a05707fc4612027af8db0c663be35fa1f4e301992d61dc9ddbb1a99678ff60f1b6469af5ac779b590c5aab8cb734d24539937b5092b4a9be2b23a2b8c36518da1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x1a4c}}, 0x20004800) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6, @local}, 0x10) (async) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x101, r2, &(0x7f0000000100)="5eb4a955b3e9d939520dc4ae4248221f4ce244", 0x13, 0x768, 0x0, 0x2, r2}, &(0x7f0000000200)) (async) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000580)={r1, 0x1, 0x6, @local}, 0x10) 3m56.046408972s ago: executing program 3 (id=2623): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x41) getdents64(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000600)={@val={0xa, 0x10}, @void, @eth={@broadcast, @empty, @val={@val={0x88a8, 0x5}, {0x8100, 0x1, 0x0, 0x2}}, {@ipv6={0x86dd, @generic={0x9, 0x6, "000400", 0x1b8, 0x4, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@srh={0x2c, 0xe, 0x4, 0x7, 0x2, 0x0, 0xfffd, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @local, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}]}, @hopopts={0x84, 0x1, '\x00', [@pad1, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @srh={0x3a, 0x6, 0x4, 0x3, 0x9, 0x20, 0x8, [@remote, @ipv4={'\x00', '\xff\xff', @local}, @remote]}, @routing={0x0, 0xc, 0x0, 0x1, 0x0, [@private0, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}]}, @dstopts={0x50, 0xf, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x1, 0x5, [0x1]}}, @generic={0xff}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x58, {0xce0aed818dbea840, 0x14, 0x46, 0x5, [0x7, 0x800, 0x1, 0x1, 0x6, 0x0, 0xffffffff, 0x8000, 0xa, 0xc50]}}, @ra={0x5, 0x2, 0xc2}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x1, [0x0]}]}]}}}}}}, 0x1fa) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r6 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x18\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r7, 0xc054561d, &(0x7f0000000180)={0x0, "8ebd01b3292084cff57a96a55557e37c122c5fa914737fd4dd21cf71c4870784"}) ftruncate(r6, 0x10000) fcntl$addseals(r6, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000380)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) syz_usb_control_io(r4, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x20, 0x2d, 0x17, {0x17, 0xd, "7ade8dc489e1e678994b0aa78f36e5dbb2660b695c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) modify_ldt$read(0x0, &(0x7f0000000140)=""/92, 0x5c) 3m55.837627863s ago: executing program 41 (id=2623): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x41) getdents64(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000600)={@val={0xa, 0x10}, @void, @eth={@broadcast, @empty, @val={@val={0x88a8, 0x5}, {0x8100, 0x1, 0x0, 0x2}}, {@ipv6={0x86dd, @generic={0x9, 0x6, "000400", 0x1b8, 0x4, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@srh={0x2c, 0xe, 0x4, 0x7, 0x2, 0x0, 0xfffd, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @local, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}]}, @hopopts={0x84, 0x1, '\x00', [@pad1, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @srh={0x3a, 0x6, 0x4, 0x3, 0x9, 0x20, 0x8, [@remote, @ipv4={'\x00', '\xff\xff', @local}, @remote]}, @routing={0x0, 0xc, 0x0, 0x1, 0x0, [@private0, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}]}, @dstopts={0x50, 0xf, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x1, 0x5, [0x1]}}, @generic={0xff}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x58, {0xce0aed818dbea840, 0x14, 0x46, 0x5, [0x7, 0x800, 0x1, 0x1, 0x6, 0x0, 0xffffffff, 0x8000, 0xa, 0xc50]}}, @ra={0x5, 0x2, 0xc2}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x1, [0x0]}]}]}}}}}}, 0x1fa) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r6 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x18\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r7, 0xc054561d, &(0x7f0000000180)={0x0, "8ebd01b3292084cff57a96a55557e37c122c5fa914737fd4dd21cf71c4870784"}) ftruncate(r6, 0x10000) fcntl$addseals(r6, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000380)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) syz_usb_control_io(r4, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x20, 0x2d, 0x17, {0x17, 0xd, "7ade8dc489e1e678994b0aa78f36e5dbb2660b695c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) modify_ldt$read(0x0, &(0x7f0000000140)=""/92, 0x5c) 2m8.043202017s ago: executing program 2 (id=3303): syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (async) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) (async) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x3e, 0x0, &(0x7f0000000140)=0xff64) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r4, 0x4b30, 0x10001) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="2e00000010008188040f80ec49acbc0413a181010100000000010000000000000e000a000f00000002800600121f", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="2e00000010008188040f80ec49acbc0413a181010100000000010000000000000e000a000f00000002800600121f", 0x2e}], 0x1}, 0x0) 2m7.955037561s ago: executing program 2 (id=3304): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40186f40, &(0x7f0000000100)={0x8, 0x0, 0x5d, 0x1, 'syz1\x00', 0x2}) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2m7.953898365s ago: executing program 2 (id=3305): r0 = socket$can_raw(0x1d, 0x3, 0x1) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c8499308d8132200aafa010203f58c61e7000100fefffffd0447000009093eeab0ad0000000000"], 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) truncate(&(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) write(r1, &(0x7f0000000380)="42a2dd046b6f2274d6e9f95de861d5710c2987de25be91e5b25d3fd9009ab591c8a453ec4e3d4405895fa9527be5793d5df28a49f6709e8396e922701d0cf321d3a979f093bc6fdf49b4d122d8902edc2400087ba1129a44bf46049a234a2d96f1778a45c763b562fbdead44e1632b5b977b0b379af26284608d8dfc1e236bb45799af957850ec6b056c951dacfdc41c860be30aa6ff3e9d80ab74690bbcb67835b2d672cca82d3678ed93f57d5bc3f58dec1c80c06f3deee47e505768c6a24ca5884751206d1f8a14f54665c88f6f6fa771dac4bc9f30df29cf4ba8f99719e0c5ab2739f161132167c9d587f2", 0xed) bind$can_raw(r0, &(0x7f0000000100)={0x1d, r3}, 0xfffffffffffffe66) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}], 0x10) close(r0) r4 = syz_open_dev$amidi(&(0x7f0000000140), 0x6c53, 0x44200) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000900, r5, &(0x7f0000000300)) 2m7.338340942s ago: executing program 2 (id=3311): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) (rerun: 64) 2m6.958522983s ago: executing program 2 (id=3316): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100f0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1eb42d00000000000109022400010000002209040000010300020009210000000122040009058103"], 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1eb42d00000000000109022400010000002209040000010300020009210000000122040009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="0021ac"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m6.306610302s ago: executing program 2 (id=3321): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="c656424641b5832cb2b3f58f60b4a27b59b6ba2ced2a80952f4742cd184015cfff3ea1491931aa", 0x27}], 0x1000018f) (async, rerun: 64) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff000905"], 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) (async) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000340)="80003f135e2a6b9420b7e793000000000000", 0x12, 0x8040, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @local}, 0x14) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, r0, 0x401, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0xfffffffffffffeaf, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x100}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 1m51.11717916s ago: executing program 42 (id=3321): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="c656424641b5832cb2b3f58f60b4a27b59b6ba2ced2a80952f4742cd184015cfff3ea1491931aa", 0x27}], 0x1000018f) (async, rerun: 64) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff000905"], 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) (async) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000340)="80003f135e2a6b9420b7e793000000000000", 0x12, 0x8040, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @local}, 0x14) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, r0, 0x401, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0xfffffffffffffeaf, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x100}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 6.395198603s ago: executing program 0 (id=3903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r2, 0x7d243a6ea807936d, 0x12, 0x25dfdbf8, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c891}, 0x880) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b690007e03dd6446ce8880000000000", 0x11}, {&(0x7f0000000200)="b7", 0x1}], 0x2) 6.326847455s ago: executing program 1 (id=3904): ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000d80)={{0x1, 0x1, 0x0, 0x4, 'syz1\x00', 0x6}, 0x1, [0x9, 0x5, 0x1ff, 0x4, 0x1, 0x4, 0x2, 0x5, 0x7f, 0x4, 0x9, 0x10000, 0xb, 0x2f, 0x4, 0xb221, 0xfff, 0x0, 0xb8a1, 0x6, 0xced, 0x3, 0x1000, 0x7, 0xc, 0x101, 0x1, 0x40, 0x6, 0x9, 0x100000001, 0x5, 0x0, 0x7, 0x5, 0x9, 0x8001, 0x4, 0x0, 0x9, 0xffffffffffffff80, 0x7f, 0x3, 0x200, 0x9, 0x5, 0x82c2, 0x7, 0x4, 0x100, 0x4, 0xa, 0x7, 0x2, 0x10000, 0x9, 0x0, 0x0, 0x1, 0x10, 0x4, 0x3, 0x9, 0x80000000, 0x8, 0x7, 0x1ff, 0xffffffffffffff00, 0x9, 0x3399, 0x7, 0x87, 0x8, 0x12d2, 0x10, 0x2, 0x8, 0x2, 0xa1, 0x3f800000000000, 0x1, 0x0, 0x4, 0x3, 0x3, 0x8000, 0x8000000000000000, 0x6, 0xfffffffffffffffd, 0x8, 0x5, 0xa, 0x0, 0x2, 0x0, 0x3, 0x5, 0x7ff, 0xa24, 0x80000001, 0x7, 0xbf6, 0xc000000000, 0x6, 0x80, 0x7ff, 0x101, 0x9, 0x400, 0x7f, 0x5, 0x2, 0x0, 0x100, 0x3, 0x8, 0x2e, 0x10, 0x1400000000400000, 0x5, 0x1, 0x1, 0x8000000000000001, 0x1, 0x3, 0x7f, 0x6, 0x800]}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004021600080008", 0x65, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003001f00000000", 0x39}], 0x1) 6.243810509s ago: executing program 1 (id=3906): mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r0, 0xb5d6) (async) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) (async) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd76888006ef0aade) (async) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000003c0)={0x0, 0x7, 0x8}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000800)={r3, "a372fe69e6ac8ec0e5d6d581f8d75d45"}) 6.198810077s ago: executing program 0 (id=3907): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80003, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x5}}}, 0x4) r1 = msgget$private(0x0, 0x102) msgctl$IPC_INFO(r1, 0x3, &(0x7f00000002c0)=""/72) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) msgrcv(r1, &(0x7f0000000480)={0x0, ""/83}, 0x5b, 0x0, 0x1000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYBLOB="2f03bac6c75bef54b57901ce9c63dae3933f2b"]}]}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) syz_emit_vhci(&(0x7f00000003c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x93}, "122ddd5bcbe3aed3f1ffb0542856b5c847009c1b163867b4ed201f8b3e6f47a616153700e61ea55545406e03c352b1c79ea7eb1bd60cb2c07943612b9d5d0487d95d444388b972d288cc15e90844fccee1d98adf5df615a0c890f2c82bf3e6698f2a1cec76ce0dd16ad51c1ee1afc9e34797039adc455868d89c95944545514bf27e30e3e12ab906b500628ea769c52a6561ee"}, 0x97) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x20000, &(0x7f0000000600)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x2d, 0x32]}}, {@uid={'uid', 0x3d, r2}}], [{@audit}, {@fsname={'fsname', 0x3d, '/dev/zero\x00'}}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@audit}, {@fowner_gt}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@subj_user={'subj_user', 0x3d, '/dev/zero\x00'}}, {@dont_hash}]}) 6.157133327s ago: executing program 1 (id=3910): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40034) syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902940003010000000904000000010100000a2401000000020102132406000006000000400000000000000000000924030000000000000924050000f8431cfd09240300000000040004240504"], 0x0) 5.782603929s ago: executing program 4 (id=3913): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x41) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x5) sendmmsg$unix(r3, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004814}}], 0x1, 0x480d0) r4 = socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f00000014c0)={{r2}, "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"}) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a00000000000000000000000000000000000000000000010b0000000000000a02000100000000000000070c0000000005000500000000000a00000000000000fc0100000000000000f8ff000000000107000000000000000100140007"], 0x90}, 0x1, 0x7}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x1ac, 0x20, 0x400, 0x0, 0x25dfdbfb, "", [@nested={0x19c, 0x115, 0x0, 0x1, [@nested={0x45, 0x113, 0x0, 0x1, [@generic="2ac1228c8a04e56b57cb66b2df2b7b3292467c77d23fe4ebc455374f4580ab37fd6cff58d46cf1006cf9ce8d08243b5d96d22459e4b170590a4b46a4e4d756d9d3"]}, @generic="9afd165cc05ec8517ce285100f5c3589e19ea74c3866ae742dbe81204252ccc35c2c7528b98e74e5e439bf148b4f2fbc91cab1ddde4dfa6db3a4b08dcb31697cdf8fd64da233e730e6f73d49a7c0fdd53cb9f57efbf087afdcc680cf6c7bf2b8470319cab36842850fd9186d701121372907c69b835b7bdf58e829228220a4ce9e", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac643378030d47eb640dc5061dc35817c8a66c29", @generic]}]}, 0x1ac}], 0x1, 0x0, 0x0, 0x1}, 0x0) 5.455970127s ago: executing program 4 (id=3914): ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000d80)={{0x1, 0x1, 0x0, 0x4, 'syz1\x00', 0x6}, 0x1, [0x9, 0x5, 0x1ff, 0x4, 0x1, 0x4, 0x2, 0x5, 0x7f, 0x4, 0x9, 0x10000, 0xb, 0x2f, 0x4, 0xb221, 0xfff, 0x0, 0xb8a1, 0x6, 0xced, 0x3, 0x1000, 0x7, 0xc, 0x101, 0x1, 0x40, 0x6, 0x9, 0x100000001, 0x5, 0x0, 0x7, 0x5, 0x9, 0x8001, 0x4, 0x0, 0x9, 0xffffffffffffff80, 0x7f, 0x3, 0x200, 0x9, 0x5, 0x82c2, 0x7, 0x4, 0x100, 0x4, 0xa, 0x7, 0x2, 0x10000, 0x9, 0x0, 0x0, 0x1, 0x10, 0x4, 0x3, 0x9, 0x80000000, 0x8, 0x7, 0x1ff, 0xffffffffffffff00, 0x9, 0x3399, 0x7, 0x87, 0x8, 0x12d2, 0x10, 0x2, 0x8, 0x2, 0xa1, 0x3f800000000000, 0x1, 0x0, 0x4, 0x3, 0x3, 0x8000, 0x8000000000000000, 0x6, 0xfffffffffffffffd, 0x8, 0x5, 0xa, 0x0, 0x2, 0x0, 0x3, 0x5, 0x7ff, 0xa24, 0x80000001, 0x7, 0xbf6, 0xc000000000, 0x6, 0x80, 0x7ff, 0x101, 0x9, 0x400, 0x7f, 0x5, 0x2, 0x0, 0x100, 0x3, 0x8, 0x2e, 0x10, 0x1400000000400000, 0x5, 0x1, 0x1, 0x8000000000000001, 0x1, 0x3, 0x7f, 0x6, 0x800]}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004021600080008", 0x65, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003001f00000000", 0x39}], 0x1) 5.378428218s ago: executing program 4 (id=3915): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x4, 0x5, 0x8, 0x8000000000000001, 0x2, 0x10000, 0xcbf7, 0x3, 0x1], 0x100000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xc, 0x2, 0xb6, '\x00', 0x5}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000000200), 0x1, 0x2) (async) r5 = syz_open_dev$swradio(&(0x7f0000000200), 0x1, 0x2) r6 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x83, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000080)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000180)={0x5}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) socket$key(0xf, 0x3, 0x2) (async) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="02090000020040000000000000000000428efcb670efeba125065c0abb78067c5bae8e3597ffa6ecfd8ba310b2ff0300002a7f018c18576345598f0723423fa827671111619befba46ae6209f2d414eb8c6092a1d7cbc139726354efc90c0c725431d881bfc5828284c7e99661efb9d76f59"], 0x10}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r7, 0x10001}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x3, r7, 0x10, 0x0, @ib={0x1b, 0xfff9, 0xc320, {"2ec963731af98a0054a089fc1fbe9b51"}, 0x2, 0x0, 0xfffffffffffffbff}}}, 0xa0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000005c0)=[{0x2e, 0x0, [0x0, 0x4, 0x80, 0x7, 0x8, 0x10, 0x3, 0x6, 0x4, 0x704a, 0x94, 0x6, 0x8, 0x80000001, 0x3, 0x1]}, {0x0, 0x0, [0xc, 0xffffaa5e, 0x1, 0xd, 0x6a, 0x1, 0x2, 0x210d13f5, 0x8, 0xfffffff9, 0xe, 0x7, 0x3, 0x9, 0x5, 0xfa3]}, {0x20, 0x0, [0x0, 0x100, 0x3, 0x7d7d553c, 0x69, 0x7, 0x4e84, 0x0, 0x81, 0x8, 0x0, 0x1, 0x3, 0x60, 0x7fffffff, 0x9f]}, {0x8, 0x0, [0x8, 0x2, 0x2, 0x4, 0x6, 0x3, 0xe, 0xffff0001, 0x9e, 0xe129, 0x3, 0x1000, 0x100, 0x0, 0xa3, 0x9]}, {0x10, 0x0, [0x2, 0x5, 0x6, 0x4, 0x80, 0x5, 0x1, 0x8, 0x0, 0x8000, 0x3ff, 0x0, 0x7fffffff, 0x4, 0x0, 0x5a]}, {0x14, 0x0, [0x80000001, 0x7, 0x85c, 0x3, 0x2, 0x0, 0x4, 0x3, 0x4, 0x10, 0x5, 0x7ef5, 0x40, 0x0, 0xfffffff9, 0x1]}, {0x20, 0x0, [0x7fff, 0x7, 0x3, 0xfffff000, 0xa8, 0x7, 0x1ff, 0x2, 0x8001, 0x5, 0x0, 0x7, 0x4, 0x3, 0x7f, 0x4]}, {0x8, 0x0, [0x8, 0x8, 0xf, 0x1, 0x0, 0x5, 0xfffffff1, 0x3, 0x7f, 0xffffffe4, 0xfff, 0x9, 0x3, 0x5, 0x9, 0x5]}], r7, 0x1, 0x1, 0x240}}, 0x20) close_range(r1, r2, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81, 0x6a, 0xa, 0xbcf3}, {0x6, 0xf, 0xac, 0xc}]}) 5.098277037s ago: executing program 4 (id=3916): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0xfffffe12}, 0x1, 0x0, 0x0, 0x20000904}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0xfffffffffffffe21, &(0x7f0000000240)={0x0, 0x1, 0x100, "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"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0}) 4.806269628s ago: executing program 1 (id=3917): syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r0 = socket(0x1d, 0x2, 0x6) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) (async, rerun: 32) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004) (async, rerun: 32) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c910"], 0x15) 4.027310146s ago: executing program 1 (id=3924): mount$9p_unix(&(0x7f0000003680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000300)={{0x0, 0xff}, 'port1\x00'}) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) recvfrom$inet(r2, 0x0, 0x0, 0x20060, 0x0, 0x0) ptrace(0x10, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load user:+ 00000000000000000525 '], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/182, 0xb6}], 0x1, 0x82, 0xffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}]}, &(0x7f0000000180)=0x10) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"}) 3.677946728s ago: executing program 1 (id=3927): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x56555958}}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getpriority(0x2, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2011441, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) shutdown(r2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xcf, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={r4, 0x200}, 0x8) setreuid(0x0, 0xee00) io_setup(0x7f, &(0x7f0000000100)) 3.670719241s ago: executing program 5 (id=3928): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) 3.458036308s ago: executing program 43 (id=3927): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x56555958}}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getpriority(0x2, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2011441, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) shutdown(r2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xcf, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={r4, 0x200}, 0x8) setreuid(0x0, 0xee00) io_setup(0x7f, &(0x7f0000000100)) 3.405458934s ago: executing program 5 (id=3930): socket(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x5) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90324fc60", 0x38}], 0x1}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r3) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300050018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010029bd7000fedbdf251700000008000300f1cbe63386851335e1d953a7891e0bd4aee9854e0f5933a423b6db81e95834fbe2ec64f1", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000580)=0x1008240, 0x4) recvmsg(r1, &(0x7f00000005c0)={&(0x7f0000000640)=@generic, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/220, 0xdc}, {&(0x7f00000001c0)=""/163, 0xa3}, {&(0x7f0000000280)=""/215, 0xd7}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f0000000400)=""/126, 0x7e}, {&(0x7f0000000480)=""/124, 0x7c}], 0x6, &(0x7f0000000040)}, 0x100) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x1c, r8, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 3.249473725s ago: executing program 5 (id=3931): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000000000107d1e2e2c00000000000109022400010000200c09040000010300000009210020030122050009058103"], 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="f07c0ba2c81bf452a200040c0000000705014b"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000900), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001140)=[0x0], 0x0, 0x0, 0x0, 0x1}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0x0) utime(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)={0x0, 0x5}) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f00000003c0)) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x404f444) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f00000000c0)=r7) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000001200)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xa}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680), 0x103000, 0x0) ioctl$TUNGETVNETHDRSZ(r10, 0x5452, &(0x7f0000000000)) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x3}, 0xe) r11 = gettid() r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r12, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x20000000}, 0xc, &(0x7f0000000200)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="8c000000180000042bbd7000fddbdf254c00bc00c554cf77b76182de23ae4d831592ccf3938d227ee52c26633820aabe922e86928a8e8614b6a0ba7c251eb5af34182780a15b1b15b98ad63721b40081e5df052d2a5e053157322555528f695ed54cf8310a2ae7e88da5bee06d378370baeda70099df025b92f01ed735e8242fb67880d1fed4db845def0a3f"], 0x8c}, {&(0x7f0000002500)={0x12ec, 0x22, 0x400, 0x70bd2a, 0x25dfdbfd, "", [@generic="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", @generic="f53825ce0911896410ba961674fdfcc58633e652a307d369bf89f0dd01e81f4e3440512f5b06b95282d2b3542b2b480f7891f11210bc621977811e5cbf209a20c17579bebfb154d11b528abbbca060bb150df5ae5a908419dad3116ee990755549c3d842a6d6060549bfddbf0cb15a350b69b90c13e047344b7a5eb35b6d595190dcfd4d7665ad91205f64e4de29671f3ff6", @nested={0x245, 0x8c, 0x0, 0x1, [@typed={0x8, 0x136, 0x0, 0x0, @pid=r11}, @nested={0x126, 0x31, 0x0, 0x1, [@typed={0x8, 0x45, 0x0, 0x0, @fd=r12}, @nested={0x7e, 0x13d, 0x0, 0x1, [@generic="24835663199465b3c0ae2dcc0f02a356418e5ffb414d5390d551beba1c04370a6d065598e77eaf387d5b7b631fa24babe7c58104927b502bd4e957493376e5dcdeb64f04ada9200f9554d18d645b5ee8c63655fa51ab5b6b6dfb1efa11079e5169e13a3b3e2be6a6a71800a737ea20a74f3299cf32149c27b2db"]}, @generic="de4d4b5c4817b6f63b856eebc2555c327ad02db1255e3bb1672f9478bed5b7c0eaa8d9a493ab39e90eff34a4151b03ce32d074863d4ea6c6a98f04e3d9b236e9273803d0fe2bef5bc0c53cc11486ba08fcf6638bc37b77fea3012a0de2a4291b6ef72230ca81a2cb685bd439c2067bc94aad6c7b72cc645fa8c3706b16dd9b638a0950ba8b4d0fdc4e4aa352cc3759c33879", @typed={0x8, 0x18, 0x0, 0x0, @u32=0xc94c}]}, @generic="f55fcc980037f7ff5a99b145065b8fb2dac60562ce7c7636cb3e296d0020975f3db8e05bf8d5ff1f40e27a1009f171ca01b146fe8f185270872b9a33bf4851881ce4847f46c0ee6139e3edbc80fb4eb2d103c18b1568a3ad488eeddfef5a7b32568775e65be4b123", @generic="44877f733546aedb3b7e06a343498889f57bda16", @generic="cc1515ef1410349789976373ebf1253f677ce186c7292582f75ebf0040565ca5e0dad8750b5644ad8adb298fe11e2438763e6f541c2204ac589fe35599047b869038c7713404a1060fa64faf4f6ce4f2a623781376d45b45f508d9b78343a4c6feaedeff3f03f8d79c23baa49af8b7725c670da5cccbc4f317a976dfad589133abfccdf57a296f0fb563bb5ea636752dd31d9fdc03"]}]}, 0x12ec}, {&(0x7f0000000280)={0xcc, 0x12, 0x400, 0x70bd2d, 0x25dfdbfb, "", [@typed={0xb9, 0x51, 0x0, 0x0, @binary="9b3f707715ce40099656f6fd0c5bd0ade903cd266e6b5825aa86af5becc7de5f15ee9b1e8784424eade1d763b165531f9290e3991bc2be6ad75b13c77d383568c6cb2c91f63a486c0cbf7663d6279e5324cbcaaefe94603871250b910b83b5ef87b31660f847df4e7597add53be091c78e29f802b507729f59af154b86fbd26d94a4230917c07d765b7af4444fe91c4350572cc1cc46b06b657adaa000b4fc2d50a86cb3de994f0ccc067d09a484e40589c2d596a9"}]}, 0xcc}], 0x3, 0x0, 0x0, 0x1}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="080070192278037ec2909b00000000"], 0x0}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000480)=ANY=[@ANYRES8, @ANYBLOB="f598b755135f8e458450312cd5d300c594fbf49ac64849d444daf7441a73e67148675b7d17b3d5d4c619c6db22830139135f1ba3c08fad99bc1a38e7af078309f31358bf2cf13abe06694edf01cd37b1fc18b7f7b3fc6d3657f158bf57801ac48063aa1bffaa3a473090744eb14de9bbc11b3d3461a362e710916e349a2f685d0af267ce34a6da93d61fe55f767e9a23b3a5ffbc647a24d4c9df70b30e6752d12cbac03af93d14269ec63e1fe0cdfab2eb5695906060786633", @ANYRES32, @ANYRES16=r1, @ANYRESDEC, @ANYRESDEC=r3, @ANYBLOB="744313707015d0880a48967aa9e966862fe19e14df021805291a05c0a1cd1eb7db7d54fe2c5efb3aa546374b2950faf3", @ANYRESOCT=r3], 0x2c}], 0x1}, 0x0) 3.130300716s ago: executing program 0 (id=3932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x50}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r1) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x34}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000080}, 0x48004) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000003b80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="090300807000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) r4 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000280)={0x698, r5, 0x0, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xf4, 0x64}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x9}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x1}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x3}, @NL80211_ATTR_PEER_MEASUREMENTS={0x658, 0x111, 0x0, 0x1, {0x654, 0x5, 0x0, 0x1, [{0x24c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x214, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x100, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4715}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4b7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ba}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}]}, {0x204, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0x17c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x32}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd21}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}]}, {0xf0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0xc4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2b}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f0}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x110, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x15}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1df}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}]}, 0x698}, 0x1, 0x0, 0x0, 0x10}, 0x804) 2.946806744s ago: executing program 0 (id=3933): ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000d80)={{0x1, 0x1, 0x0, 0x4, 'syz1\x00', 0x6}, 0x1, [0x9, 0x5, 0x1ff, 0x4, 0x1, 0x4, 0x2, 0x5, 0x7f, 0x4, 0x9, 0x10000, 0xb, 0x2f, 0x4, 0xb221, 0xfff, 0x0, 0xb8a1, 0x6, 0xced, 0x3, 0x1000, 0x7, 0xc, 0x101, 0x1, 0x40, 0x6, 0x9, 0x100000001, 0x5, 0x0, 0x7, 0x5, 0x9, 0x8001, 0x4, 0x0, 0x9, 0xffffffffffffff80, 0x7f, 0x3, 0x200, 0x9, 0x5, 0x82c2, 0x7, 0x4, 0x100, 0x4, 0xa, 0x7, 0x2, 0x10000, 0x9, 0x0, 0x0, 0x1, 0x10, 0x4, 0x3, 0x9, 0x80000000, 0x8, 0x7, 0x1ff, 0xffffffffffffff00, 0x9, 0x3399, 0x7, 0x87, 0x8, 0x12d2, 0x10, 0x2, 0x8, 0x2, 0xa1, 0x3f800000000000, 0x1, 0x0, 0x4, 0x3, 0x3, 0x8000, 0x8000000000000000, 0x6, 0xfffffffffffffffd, 0x8, 0x5, 0xa, 0x0, 0x2, 0x0, 0x3, 0x5, 0x7ff, 0xa24, 0x80000001, 0x7, 0xbf6, 0xc000000000, 0x6, 0x80, 0x7ff, 0x101, 0x9, 0x400, 0x7f, 0x5, 0x2, 0x0, 0x100, 0x3, 0x8, 0x2e, 0x10, 0x1400000000400000, 0x5, 0x1, 0x1, 0x8000000000000001, 0x1, 0x3, 0x7f, 0x6, 0x800]}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004021600080008", 0x65, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003001f00000000", 0x39}], 0x1) 2.001282286s ago: executing program 0 (id=3934): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) socket$alg(0x26, 0x5, 0x0) capget(&(0x7f0000000100)={0x19980330}, &(0x7f0000004340)={0x8a, 0xfffffff7, 0x6, 0x9, 0x10001, 0x3}) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB='A']) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) capget(&(0x7f0000000100)={0x19980330}, &(0x7f0000004340)={0x8a, 0xfffffff7, 0x6, 0x9, 0x10001, 0x3}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) dup(r0) (async) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB='A']) (async) 1.954044256s ago: executing program 4 (id=3935): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0002040000080904000065d4695e000905", @ANYBLOB="e739bf"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000000c0)={0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="00000001"], 0x0}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x0, 0x1}, 0x20) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000440)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, &(0x7f0000000180)=0x1, 0x4) connect$can_bcm(r7, &(0x7f00000005c0), 0x10) recvmmsg(r7, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r8, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001801400"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)={0x128, r5, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="c4fb53d3fa23"}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="37f9ffb031de"}, @NL80211_ATTR_DISABLE_VHT={0x4}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x39, 0x115, "2d7cf69ebf2e685fbb8d24b4c6cf568c50a1c3abf1af756be043df2408e46f6419366cad0a521fd108ff1cb2d489261108e5398bd6"}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac00]}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8}, @NL80211_ATTR_SAE_PASSWORD={0x1c, 0x115, "dab6f7331106645739aeeab6139a4c4570b08c9eefbce3c9"}, @NL80211_ATTR_PMK={0x3b, 0xfe, "f09c1177733de2cee1fc0086366c25c74ce00e25bafb19ac3d11d12b08d37e1af946695ccb6ccc22cf971378a2ff84b32f975953072af9"}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}], @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_SSID={0x24, 0x34, @random="b4ea61f3b34eb341197a7fa33cd3301ea38197dc06f7737dce71d88fe6f53d5d"}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x8000003, {0x8, 0x2, 0x7, 0x7}}}]}, 0x128}}, 0x50) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0xf4, r1, 0x2e7fd573c8d583d5, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x800}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x31}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x14}, 0x4008814) 1.814218948s ago: executing program 0 (id=3936): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0x1, 0x8, 0x10, 0xf, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "3149586c88"}, {0x5, 0x24, 0x0, 0x3c}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x8, 0x800, 0xf}, {0x6, 0x24, 0x1a, 0x35b, 0x4}, [@dmm={0x7, 0x24, 0x14, 0xc, 0x8000}, @mdlm={0x15, 0x24, 0x12, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0xa0, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0xb363b397d329a6c4, 0x6, 0x0, 0xf0}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xb8, 0xcb, 0x1}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x9, 0xb, 0x4, 0x30, 0x4}, 0x75, &(0x7f0000000280)={0x5, 0xf, 0x75, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xa2, "e3d0a82e8d0e64c15d0f22f29b9b0e29"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x8, 0x80, 0x9, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xd, 0xa, 0xc124}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x19941e6, 0x0, 0x6, [0x3ff0, 0xff0000, 0xc0, 0xff3fcf, 0xff000f]}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x5, 0xf000, 0x5, [0x0, 0x3f00, 0x30, 0x3f00, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x16, 0x3, 0xd4, 0x9}]}, 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42f}}, {0x5a, &(0x7f0000000340)=@string={0x5a, 0x3, "47164a5edf7c8e29bf5442e655e60bf4fdcddc0d49b2e9b2c8f922ddcd09db82802ee00c6bb1c06a897681982a6cd5c4313267a85ed87ab734dc17a0492f0bed6eca809fcc93108fde0399754cfe810a6a2232c2fd959098"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3c0a}}]}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000f80)={0x0, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400101000000b4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r1) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000440)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000740ae2d00ebbc5219cf04fb340d69f1583a7ecef5e110ce6b3d24a092325fff4d7d7cde14c26fcc6b0a5d2f72f8fcdf9d981cc7f039f8f51832baf8f6b88cee277416c65bbad3ba0278bf67a6a8249711563c66fbf784ceba2c7bf2d5e13b38e4b40df61a3513fcc2dfbbdcb17854fbf129fd6204d696d72eb40dd66f0825daea2e9a4c4238f99c23e28fd9c750024894d455b952cf3531bc76c10069a2d9124838f4ded9d78ecb312ff01666b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.138874876s ago: executing program 5 (id=3937): recvmmsg(0xffffffffffffffff, &(0x7f00000063c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, 0x0}, 0x1000}, {{0x0, 0x0, &(0x7f0000004a80)=[{0x0}, {&(0x7f00000062c0)=""/194, 0xc2}], 0x2}}, {{0x0, 0x0, 0x0}, 0xb}], 0x6, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) getsockopt(r0, 0x4e5, 0x2, &(0x7f0000000080)=""/129, &(0x7f0000000140)=0x81) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x7, @broadcast, 'macvlan1\x00'}}, 0x1e) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r3, 0x4b45, 0x2) sendmmsg(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) 710.701988ms ago: executing program 5 (id=3938): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x3) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$VT_ACTIVATE(r0, 0x5606, 0x3) (async) dup(r0) (async) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) (async) 390.340787ms ago: executing program 5 (id=3939): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80003, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x5}}}, 0x4) r1 = msgget$private(0x0, 0x102) msgctl$IPC_INFO(r1, 0x3, &(0x7f00000002c0)=""/72) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) msgrcv(r1, &(0x7f0000000480)={0x0, ""/83}, 0x5b, 0x0, 0x1000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYBLOB="2f03bac6c75bef54b57901ce9c63dae3933f2b"]}]}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) syz_emit_vhci(&(0x7f00000003c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x93}, "122ddd5bcbe3aed3f1ffb0542856b5c847009c1b163867b4ed201f8b3e6f47a616153700e61ea55545406e03c352b1c79ea7eb1bd60cb2c07943612b9d5d0487d95d444388b972d288cc15e90844fccee1d98adf5df615a0c890f2c82bf3e6698f2a1cec76ce0dd16ad51c1ee1afc9e34797039adc455868d89c95944545514bf27e30e3e12ab906b500628ea769c52a6561ee"}, 0x97) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x20000, &(0x7f0000000600)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x2d, 0x32]}}, {@uid={'uid', 0x3d, r2}}], [{@audit}, {@fsname={'fsname', 0x3d, '/dev/zero\x00'}}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@audit}, {@fowner_gt}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@subj_user={'subj_user', 0x3d, '/dev/zero\x00'}}, {@dont_hash}]}) 0s ago: executing program 4 (id=3940): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x85494000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x60) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00009a4000/0x2000)=nil, &(0x7f0000305000/0x3000)=nil, 0x2000, 0x2}) (async) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f000002f000/0x1000)=nil, 0x1000}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) kernel console output (not intermixed with test programs): T846] usb 2-1: device firmware changed [ 779.475780][ T54] usb 2-1: USB disconnect, device number 86 [ 779.490116][ T54] hid-steam 0003:28DE:1142.004F: Steam wireless receiver disconnected [ 779.611438][T20100] ubi: mtd0 is already attached to ubi8 [ 779.634866][ T54] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 779.788072][ T54] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 779.808984][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.842833][ T54] usb 2-1: config 0 descriptor?? [ 779.862728][ T54] cp210x 2-1:0.0: cp210x converter detected [ 779.874148][T20113] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3595'. [ 780.063636][T20094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.076619][T20094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.084802][T20119] netlink: 42496 bytes leftover after parsing attributes in process `syz.5.3598'. [ 780.113186][ T54] usb 2-1: cp210x converter now attached to ttyUSB0 [ 780.174558][ T846] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 780.309454][T20124] delete_channel: no stack [ 780.334460][ T846] usb 1-1: Using ep0 maxpacket: 16 [ 780.342023][ T846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.353519][ T846] usb 1-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 780.367071][ T846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.386353][ T846] usb 1-1: config 0 descriptor?? [ 780.399180][T20129] ubi: mtd0 is already attached to ubi8 [ 780.607480][T20117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.629684][T20117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.662520][T20117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.678892][T20117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.895840][ T846] usbhid 1-1:0.0: can't add hid device: -71 [ 780.912862][ T846] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 780.931627][ T846] usb 1-1: USB disconnect, device number 97 [ 781.017808][ T5915] usb 5-1: USB disconnect, device number 77 [ 781.390765][ T5915] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 781.408555][T20143] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3604'. [ 781.578187][ T5915] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 781.611105][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.636680][ T5915] usb 5-1: Product: syz [ 781.640894][ T5915] usb 5-1: Manufacturer: syz [ 781.652728][ T5915] usb 5-1: SerialNumber: syz [ 781.701526][T15291] usb 2-1: USB disconnect, device number 87 [ 781.740480][T15291] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 781.788374][T15291] cp210x 2-1:0.0: device disconnected [ 781.945942][T20161] loop5: detected capacity change from 0 to 4759 [ 781.963689][ T54] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 781.975659][T20161] sit0: entered promiscuous mode [ 781.991348][T10535] Buffer I/O error on dev loop5, logical block 594, async page read [ 781.995839][T20161] netlink: 'syz.5.3610': attribute type 1 has an invalid length. [ 782.023615][T20161] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3610'. [ 782.103747][T15291] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 782.143922][ T54] usb 1-1: Using ep0 maxpacket: 16 [ 782.151706][ T54] usb 1-1: config index 0 descriptor too short (expected 8192, got 18) [ 782.170114][ T54] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.193349][ T54] usb 1-1: config 0 has no interfaces? [ 782.205709][ T54] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 782.225755][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.251547][ T54] usb 1-1: config 0 descriptor?? [ 782.276247][T15291] usb 2-1: Using ep0 maxpacket: 32 [ 782.276591][T20135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.291390][T15291] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 782.307258][T20135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.308502][T15291] usb 2-1: config 0 has no interface number 0 [ 782.330505][ T5915] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 782.332103][T15291] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 782.358630][ T5915] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 782.389734][T15291] usb 2-1: config 0 interface 85 has no altsetting 0 [ 782.394210][ T5915] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 782.407507][T15291] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 782.419163][ T5915] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 782.427874][T15291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.434902][ T5915] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 782.448323][T15291] usb 2-1: Product: syz [ 782.452533][T15291] usb 2-1: Manufacturer: syz [ 782.459882][ T5915] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 782.468557][T15291] usb 2-1: SerialNumber: syz [ 782.481037][ T5915] usb 5-1: USB disconnect, device number 78 [ 782.491592][T15291] usb 2-1: config 0 descriptor?? [ 782.491633][ T54] usb 1-1: string descriptor 0 read error: -71 [ 782.526961][ T54] usb 1-1: USB disconnect, device number 98 [ 782.886921][T20164] ubi: mtd0 is already attached to ubi8 [ 782.908725][T15291] appletouch 2-1:0.85: Geyser mode initialized. [ 782.930035][T15291] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input107 [ 783.085854][ T9] usb 2-1: USB disconnect, device number 88 [ 783.115941][ T9] appletouch 2-1:0.85: input: appletouch disconnected [ 783.183321][T15291] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 783.227688][T20180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.236722][ T10] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 783.248815][T20180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.332964][T15291] usb 5-1: Using ep0 maxpacket: 8 [ 783.341404][T15291] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=71.5a [ 783.350720][T15291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.358859][T15291] usb 5-1: Product: syz [ 783.363966][T15291] usb 5-1: Manufacturer: syz [ 783.369235][T15291] usb 5-1: SerialNumber: syz [ 783.376265][T15291] usb 5-1: config 0 descriptor?? [ 783.387930][T15291] ati_remote2 5-1:0.0: ati_remote2_probe(): interface 0 must have an endpoint [ 783.400653][ T10] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 783.410914][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.419217][ T10] usb 6-1: Product: syz [ 783.423744][ T10] usb 6-1: Manufacturer: syz [ 783.428347][ T10] usb 6-1: SerialNumber: syz [ 783.435100][ T10] usb 6-1: config 0 descriptor?? [ 783.463974][ T54] usb 1-1: new low-speed USB device number 99 using dummy_hcd [ 783.504149][ T9] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 783.591126][ T5915] usb 5-1: USB disconnect, device number 79 [ 783.622799][ T54] usb 1-1: Invalid ep0 maxpacket: 32 [ 783.641960][T20168] netlink: 'syz.5.3613': attribute type 21 has an invalid length. [ 783.650010][T20168] netlink: 'syz.5.3613': attribute type 5 has an invalid length. [ 783.658199][T20168] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3613'. [ 783.662817][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 783.677260][ T9] usb 2-1: config 0 has no interfaces? [ 783.686711][ T10] hso 6-1:0.0: Failed to find BULK IN ep [ 783.694795][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=817a, bcdDevice=eb.19 [ 783.704512][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.714328][ T10] usb-storage 6-1:0.0: USB Mass Storage device detected [ 783.721520][ T9] usb 2-1: Product: syz [ 783.726465][ T9] usb 2-1: Manufacturer: syz [ 783.731073][ T9] usb 2-1: SerialNumber: syz [ 783.740501][ T9] usb 2-1: config 0 descriptor?? [ 783.752814][ T54] usb 1-1: new low-speed USB device number 100 using dummy_hcd [ 783.887600][T20168] netlink: 'syz.5.3613': attribute type 2 has an invalid length. [ 783.922670][ T54] usb 1-1: Invalid ep0 maxpacket: 32 [ 783.928638][ T54] usb usb1-port1: attempt power cycle [ 783.958887][ T5915] usb 2-1: USB disconnect, device number 89 [ 784.043955][ T5857] usb 6-1: USB disconnect, device number 124 [ 784.273326][ T54] usb 1-1: new low-speed USB device number 101 using dummy_hcd [ 784.302923][ T54] usb 1-1: Invalid ep0 maxpacket: 32 [ 784.402414][ T10] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 784.432437][ T54] usb 1-1: new low-speed USB device number 102 using dummy_hcd [ 784.453352][ T54] usb 1-1: Invalid ep0 maxpacket: 32 [ 784.458885][ T54] usb usb1-port1: unable to enumerate USB device [ 784.552413][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 784.561467][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.583485][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.619595][ T10] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 784.639299][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.662891][ T10] usb 5-1: config 0 descriptor?? [ 784.675883][T20193] ubi: mtd0 is already attached to ubi8 [ 785.086532][ T10] cherry 0003:046A:0027.0052: unknown main item tag 0x2 [ 785.094532][ T10] cherry 0003:046A:0027.0052: unknown main item tag 0x0 [ 785.101723][ T10] cherry 0003:046A:0027.0052: unknown main item tag 0x0 [ 785.119668][ T10] cherry 0003:046A:0027.0052: unknown main item tag 0x0 [ 785.127856][ T10] cherry 0003:046A:0027.0052: unknown main item tag 0x0 [ 785.135736][ T10] cherry 0003:046A:0027.0052: unknown main item tag 0x0 [ 785.143646][ T10] cherry 0003:046A:0027.0052: unknown main item tag 0x0 [ 785.150739][ T10] cherry 0003:046A:0027.0052: unknown main item tag 0x0 [ 785.159582][ T10] cherry 0003:046A:0027.0052: unknown main item tag 0x0 [ 785.169817][ T10] cherry 0003:046A:0027.0052: unknown main item tag 0x0 [ 785.182694][ T10] cherry 0003:046A:0027.0052: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.4-1/input0 [ 785.287970][ T10] usb 5-1: USB disconnect, device number 80 [ 785.786966][T20220] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3630'. [ 785.866911][T20225] netlink: 'syz.4.3631': attribute type 10 has an invalid length. [ 785.892098][T20225] veth0_vlan: left promiscuous mode [ 785.900792][T20225] veth0_vlan: entered promiscuous mode [ 785.920532][T20225] team0: Device veth0_vlan failed to register rx_handler [ 785.971914][T20229] ubi: mtd0 is already attached to ubi8 [ 786.272429][ T10] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 786.281472][T15291] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 786.321446][ T5827] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 786.442947][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 786.454706][T15291] usb 6-1: config 2 has an invalid interface number: 194 but max is 0 [ 786.463186][ T10] usb 5-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 786.472372][T15291] usb 6-1: config 2 has no interface number 0 [ 786.478442][T15291] usb 6-1: config 2 interface 194 altsetting 6 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 786.489670][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.498678][T15291] usb 6-1: config 2 interface 194 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 786.508888][ T5827] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 786.520737][ T10] usb 5-1: config 0 descriptor?? [ 786.526482][ T5827] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 786.535788][T15291] usb 6-1: config 2 interface 194 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 786.537251][T20232] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 786.549904][T15291] usb 6-1: config 2 interface 194 has no altsetting 0 [ 786.567287][ T5827] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 786.576813][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 786.584967][ T5827] usb 2-1: SerialNumber: syz [ 786.592025][T15291] usb 6-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=ad.a7 [ 786.602496][T15291] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.611870][T15291] usb 6-1: Product: syz [ 786.616181][T15291] usb 6-1: Manufacturer: syz [ 786.621700][T15291] usb 6-1: SerialNumber: syz [ 786.651324][ T9] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 786.811200][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 786.818261][ T9] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 786.826847][ T9] usb 1-1: config 0 has no interface number 0 [ 786.835582][ T5827] usb 2-1: 0:2 : does not exist [ 786.840567][ T5827] usb 2-1: unit 255 not found! [ 786.846153][ T9] usb 1-1: config 0 interface 12 has no altsetting 0 [ 786.856434][ T9] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 786.866436][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.875183][ T9] usb 1-1: Product: syz [ 786.879751][ T9] usb 1-1: Manufacturer: syz [ 786.885367][ T9] usb 1-1: SerialNumber: syz [ 786.890077][ T5827] usb 2-1: 5:0: cannot get min/max values for control 10 (id 5) [ 786.900761][ T9] usb 1-1: config 0 descriptor?? [ 786.937155][ T5827] usb 2-1: USB disconnect, device number 90 [ 786.964321][ T9927] udevd[9927]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 786.990868][ T10] asus 0003:0B05:1807.0053: item fetching failed at offset 0/5 [ 787.003163][ T10] asus 0003:0B05:1807.0053: Asus hid parse failed: -22 [ 787.010394][ T10] asus 0003:0B05:1807.0053: probe with driver asus failed with error -22 [ 787.192505][ T5857] usb 5-1: USB disconnect, device number 81 [ 787.620816][ T5857] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 787.772575][ T5857] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 787.783086][ T5857] usb 2-1: config 0 has no interface number 0 [ 787.792042][ T5857] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 787.801464][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.809464][ T5857] usb 2-1: Product: syz [ 787.813813][ T5857] usb 2-1: Manufacturer: syz [ 787.818419][ T5857] usb 2-1: SerialNumber: syz [ 787.826477][ T5857] usb 2-1: config 0 descriptor?? [ 787.991022][ T5915] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 788.116183][T20242] loop8: detected capacity change from 0 to 7 [ 788.124453][T20242] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 788.131824][T20242] loop8: partition table partially beyond EOD, truncated [ 788.139164][T20242] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 788.143686][ T5915] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 52, changing to 7 [ 788.158041][ T5915] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 9272, setting to 1024 [ 788.159652][T20242] loop8: p2 start 956478 is beyond EOD, truncated [ 788.173014][ T5915] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 788.203441][ T9] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: 70 failed: -71 [ 788.219941][ T5915] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 788.220042][ T9] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 788.229153][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 788.243913][ T9] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 788.261940][ T9] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 788.271423][ T5915] usb 5-1: SerialNumber: syz [ 788.275307][T10026] udevd[10026]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 788.323132][ T9] usb 1-1: USB disconnect, device number 103 [ 788.360243][ T5857] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 788.438956][ T5857] usb 2-1: USB disconnect, device number 91 [ 788.487129][ T9951] udevd[9951]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 788.524579][ T5915] usbtest 5-1:1.0: Linux user mode ISO test driver [ 788.542181][ T5915] usbtest 5-1:1.0: high-speed {control bulk-in iso-out} tests (+alt) [ 788.559028][ T5915] usb 5-1: USB disconnect, device number 82 [ 788.798994][T20254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3641'. [ 788.977264][T15291] cypress_m8 6-1:2.194: HID->COM RS232 Adapter converter detected [ 789.007644][T15291] cyphidcom ttyUSB0: required endpoint is missing [ 789.080317][T15291] usb 6-1: USB disconnect, device number 125 [ 789.088502][T15291] cypress_m8 6-1:2.194: device disconnected [ 789.177154][T20271] loop5: detected capacity change from 0 to 1511 [ 789.236249][T20271] sit0: entered promiscuous mode [ 789.260974][T20271] netlink: 'syz.1.3645': attribute type 1 has an invalid length. [ 789.294113][T20271] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3645'. [ 789.393222][T20279] syzkaller1: entered promiscuous mode [ 789.398897][T20279] syzkaller1: entered allmulticast mode [ 789.492916][T20278] kvm_intel: kvm [20276]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x6e75 [ 789.506728][T20278] overlayfs: upper fs does not support file handles, falling back to index=off. [ 789.535753][ T54] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 789.709754][ T54] usb 5-1: Using ep0 maxpacket: 32 [ 789.722316][ T54] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 789.737239][ T54] usb 5-1: config 2 has no interface number 0 [ 789.745630][ T54] usb 5-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 789.770512][ T54] usb 5-1: config 2 interface 88 has no altsetting 0 [ 789.792983][ T54] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 789.805467][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.816925][ T54] usb 5-1: Product: syz [ 789.822833][ T54] usb 5-1: Manufacturer: syz [ 789.827607][ T54] usb 5-1: SerialNumber: syz [ 789.838189][T20275] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 789.878779][T20291] netlink: 'syz.5.3651': attribute type 10 has an invalid length. [ 789.930998][T20294] infiniband: Added to hash: ib_dev=ffff888079d54000 (0)() ndev=ffff8880598a4000 (70)(bond0) [ 789.945428][T20291] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 789.969044][T20294] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 790.048472][T20275] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 790.089269][ T54] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 790.103409][ T54] asix 5-1:2.88: probe with driver asix failed with error -71 [ 790.119877][ T5886] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 790.125138][ T54] usb 5-1: USB disconnect, device number 83 [ 790.170147][T20299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3653'. [ 790.229694][ T5915] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 790.314978][ T5886] usb 1-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=61.d7 [ 790.399569][ T5915] usb 6-1: Using ep0 maxpacket: 16 [ 790.412201][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.412771][ T5915] usb 6-1: config 8 has an invalid interface number: 206 but max is 0 [ 790.420956][ T5886] usb 1-1: Product: syz [ 790.430667][ T5915] usb 6-1: config 8 has no interface number 0 [ 790.433762][ T5886] usb 1-1: Manufacturer: syz [ 790.439876][ T5915] usb 6-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 790.444446][ T5886] usb 1-1: SerialNumber: syz [ 790.464080][ T5886] usb 1-1: config 0 descriptor?? [ 790.470635][ T5915] usb 6-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 790.477053][ T5886] ldusb 1-1:0.0: Interrupt in endpoint not found [ 790.483407][ T5915] usb 6-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 790.503261][ T54] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 790.511053][ T5915] usb 6-1: config 8 interface 206 has no altsetting 0 [ 790.520173][ T5915] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 790.531182][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.539162][ T5915] usb 6-1: Product: syz [ 790.543800][ T5915] usb 6-1: Manufacturer: syz [ 790.548835][ T5915] usb 6-1: SerialNumber: syz [ 790.660857][ T54] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 790.670280][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.686878][ T54] usb 2-1: config 0 descriptor?? [ 790.710353][ T54] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 790.753044][ T846] usb 1-1: USB disconnect, device number 104 [ 790.775315][ T5915] garmin_gps 6-1:8.206: Garmin GPS usb/tty converter detected [ 790.793946][ T5915] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 790.808343][ T5915] usb 6-1: USB disconnect, device number 126 [ 790.828276][ T5915] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 790.840394][ T5915] garmin_gps 6-1:8.206: device disconnected [ 791.308835][T20317] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3658'. [ 791.367391][T20319] ubi: mtd0 is already attached to ubi8 [ 791.417135][ T5821] Bluetooth: hci3: hardware error 0x05 [ 791.588866][ T5915] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 791.709782][ T5923] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 791.756931][ T5915] usb 1-1: config 0 has an invalid interface number: 165 but max is 0 [ 791.765883][ T5915] usb 1-1: config 0 has no interface number 0 [ 791.773465][ T5915] usb 1-1: config 0 interface 165 has no altsetting 0 [ 791.796195][ T5915] usb 1-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=71.ba [ 791.816404][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.836140][ T5915] usb 1-1: Product: syz [ 791.846257][ T5915] usb 1-1: Manufacturer: syz [ 791.856801][ T5915] usb 1-1: SerialNumber: syz [ 791.877759][ T5915] usb 1-1: config 0 descriptor?? [ 791.883314][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 791.893506][ T5923] usb 5-1: unable to get BOS descriptor or descriptor too short [ 791.903627][ T5923] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 791.913544][ T5923] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 791.924776][ T5923] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 791.936559][ T5923] usb 5-1: config 128 has no interface number 0 [ 791.945563][ T5923] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 791.957496][ T5923] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 791.968911][ T5923] usb 5-1: config 128 interface 127 has no altsetting 0 [ 791.979783][ T5923] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 791.989912][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.997957][ T5923] usb 5-1: Product: syz [ 792.006234][ T5923] usb 5-1: Manufacturer: syz [ 792.016156][ T5923] usb 5-1: SerialNumber: syz [ 792.105057][ T5915] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 792.137983][ T5915] usb 1-1: USB disconnect, device number 105 [ 792.701614][T20350] netlink: 'syz.0.3667': attribute type 10 has an invalid length. [ 792.713086][T20350] infiniband: Added to hash: ib_dev=ffff88806b6cc000 (0)() ndev=ffff88802a93c000 (72)(bond0) [ 792.727250][T20350] siw: device registration error -23 [ 792.733283][T20350] infiniband: Removed from hash: ib_dev=ffff88806b6cc000 (0)() ndev=ffff88802a93c000 (72)(bond0) [ 793.245167][T20354] netlink: 'syz.5.3668': attribute type 10 has an invalid length. [ 793.271691][T20354] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 793.285446][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.295534][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.488359][ T5821] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 793.531949][T20358] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3670'. [ 793.542639][T20358] ubi: mtd0 is already attached to ubi8 [ 793.598120][ T54] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 793.757760][ T54] usb 6-1: Using ep0 maxpacket: 16 [ 793.764502][ T54] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 793.776076][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 97, changing to 7 [ 793.787144][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 49629, setting to 1024 [ 793.800820][ T54] usb 6-1: New USB device found, idVendor=3f40, idProduct=0264, bcdDevice=4e.d1 [ 793.812875][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.820966][ T54] usb 6-1: Product: syz [ 793.825370][ T54] usb 6-1: Manufacturer: syz [ 793.830718][ T54] usb 6-1: SerialNumber: syz [ 793.840074][ T54] usb 6-1: config 0 descriptor?? [ 793.897995][ T5886] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 794.038713][ T5886] usb 1-1: device descriptor read/64, error -71 [ 794.141508][ T9] usb 2-1: USB disconnect, device number 92 [ 794.240606][T20366] netlink: 'syz.1.3673': attribute type 32 has an invalid length. [ 794.277568][ T5886] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 794.407399][ T5886] usb 1-1: device descriptor read/64, error -71 [ 794.489775][ T5923] usb 5-1: USB disconnect, device number 84 [ 794.520197][ T5886] usb usb1-port1: attempt power cycle [ 794.524505][ T9927] udevd[9927]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 794.867177][ T5886] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 794.888498][ T5886] usb 1-1: device descriptor read/8, error -71 [ 795.037239][ T9] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 795.087069][T15291] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 795.127077][ T5886] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 795.147771][ T5886] usb 1-1: device descriptor read/8, error -71 [ 795.177030][ T9] usb 5-1: device descriptor read/64, error -71 [ 795.248516][T15291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.259171][T15291] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 795.268512][ T5886] usb usb1-port1: unable to enumerate USB device [ 795.275855][T15291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.287225][T15291] usb 2-1: config 0 descriptor?? [ 795.417211][ T9] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 795.546881][ T9] usb 5-1: device descriptor read/64, error -71 [ 795.667909][ T9] usb usb5-port1: attempt power cycle [ 795.897455][T15291] razer 0003:1532:010E.0054: failed to enable macro keys: -71 [ 795.908024][T15291] razer 0003:1532:010E.0054: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.1-1/input0 [ 795.923952][T15291] usb 2-1: USB disconnect, device number 93 [ 795.961580][T20389] fido_id[20389]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 796.016925][ T9] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 796.037798][ T9] usb 5-1: device descriptor read/8, error -71 [ 796.276500][ T9] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 796.296871][ T9] usb 5-1: device descriptor read/8, error -71 [ 796.374959][T15291] usb 6-1: USB disconnect, device number 127 [ 796.416606][ T9] usb usb5-port1: unable to enumerate USB device [ 796.460129][T20392] ubi: mtd0 is already attached to ubi8 [ 796.856194][ T5923] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 797.016341][ T5923] usb 6-1: Using ep0 maxpacket: 32 [ 797.023525][ T5923] usb 6-1: unable to get BOS descriptor or descriptor too short [ 797.032299][ T5923] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 797.040758][ T5923] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 797.051051][ T5923] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 797.061132][ T5923] usb 6-1: config 128 has no interface number 0 [ 797.068545][ T5923] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 797.079926][ T5923] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 797.090546][ T5923] usb 6-1: config 128 interface 127 has no altsetting 0 [ 797.100058][ T5923] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 797.109105][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.117117][ T5923] usb 6-1: Product: syz [ 797.121276][ T5923] usb 6-1: Manufacturer: syz [ 797.125850][ T5923] usb 6-1: SerialNumber: syz [ 797.136046][T15291] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 797.265986][T15291] usb 2-1: device descriptor read/64, error -71 [ 797.345540][T20421] ubi: mtd0 is already attached to ubi8 [ 797.452728][T20424] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 797.452728][T20424] The task syz.0.3691 (20424) triggered the difference, watch for misbehavior. [ 797.505897][T15291] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 797.635796][T15291] usb 2-1: device descriptor read/64, error -71 [ 797.748777][T15291] usb usb2-port1: attempt power cycle [ 798.086560][T15291] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 798.116265][T15291] usb 2-1: device descriptor read/8, error -71 [ 798.217062][ T846] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 798.365735][T15291] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 798.379707][ T846] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.393925][ T846] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 798.396451][T15291] usb 2-1: device descriptor read/8, error -71 [ 798.406935][ T846] usb 5-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 798.421381][ T846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.441314][ T846] usb 5-1: config 0 descriptor?? [ 798.528059][T15291] usb usb2-port1: unable to enumerate USB device [ 798.630419][T20440] loop5: detected capacity change from 0 to 7407 [ 798.667047][T10535] Buffer I/O error on dev loop5, logical block 925, async page read [ 799.497781][T20443] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 799.509523][T20443] Buffer I/O error on dev nbd0, logical block 0, async page read [ 799.518464][T20443] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 799.530839][T20443] Buffer I/O error on dev nbd0, logical block 1, async page read [ 799.540004][T20443] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 799.550152][T20443] Buffer I/O error on dev nbd0, logical block 2, async page read [ 799.558633][T20443] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 799.569477][T20443] Buffer I/O error on dev nbd0, logical block 3, async page read [ 799.579636][T20443] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 799.590062][T20443] Buffer I/O error on dev nbd0, logical block 0, async page read [ 799.600273][T20443] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 799.609865][T20443] Buffer I/O error on dev nbd0, logical block 1, async page read [ 799.618138][T20443] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 799.627806][T20443] Buffer I/O error on dev nbd0, logical block 2, async page read [ 799.636256][T20443] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 799.665139][T20443] Buffer I/O error on dev nbd0, logical block 3, async page read [ 799.673167][T20443] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 799.688420][T20443] Buffer I/O error on dev nbd0, logical block 0, async page read [ 799.697121][T20443] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 799.707491][T20443] ldm_validate_partition_table(): Disk read failed. [ 799.712062][ T5923] usb 6-1: USB disconnect, device number 2 [ 799.727726][T20443] Dev nbd0: unable to read RDB block 0 [ 799.733634][T20443] nbd0: unable to read partition table [ 799.750737][T20443] F2FS-fs (nbd0): Unable to read 1th superblock [ 799.757049][ T9927] udevd[9927]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 799.775960][T20443] F2FS-fs (nbd0): Unable to read 2th superblock [ 800.054751][ T5827] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 800.214523][ T5827] usb 1-1: Using ep0 maxpacket: 8 [ 800.228346][ T5827] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 800.248301][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.270947][ T5827] usb 1-1: Product: syz [ 800.276265][ T5827] usb 1-1: Manufacturer: syz [ 800.280956][ T5827] usb 1-1: SerialNumber: syz [ 800.290671][ T5827] usb 1-1: config 0 descriptor?? [ 800.324567][ T5923] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 800.476511][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 800.484425][T15291] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 800.487657][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.507129][ T5923] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 800.507444][ T5827] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 800.516454][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=31, SerialNumber=0 [ 800.533223][ T5923] usb 2-1: Product: syz [ 800.539960][ T5923] usb 2-1: config 0 descriptor?? [ 800.625488][T15291] usb 6-1: device descriptor read/64, error -71 [ 800.747625][T20449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.760202][T20449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.770204][T20449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.779038][T20449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.788365][T20449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.797425][T20449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.806855][T20449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.815666][T20449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.824757][T20449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.834806][T20449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.862253][ T5923] hid_parser_main: 44 callbacks suppressed [ 800.862277][ T5923] hid-led 0003:04D8:F372.0055: unknown main item tag 0x0 [ 800.864840][T15291] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 800.869329][ T5923] hid-led 0003:04D8:F372.0055: unknown main item tag 0x0 [ 800.890895][ T5923] hid-led 0003:04D8:F372.0055: unknown main item tag 0x0 [ 800.898038][ T5923] hid-led 0003:04D8:F372.0055: unknown main item tag 0x0 [ 800.906834][ T5923] hid-led 0003:04D8:F372.0055: unknown main item tag 0x0 [ 800.913814][ T10] usb 5-1: USB disconnect, device number 89 [ 800.913896][ T5923] hid-led 0003:04D8:F372.0055: unknown main item tag 0x0 [ 800.933145][ T5923] hid-led 0003:04D8:F372.0055: unknown main item tag 0x0 [ 800.950660][ T5923] hid-led 0003:04D8:F372.0055: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 801.012439][ T5923] hid-led 0003:04D8:F372.0055: Greynut Luxafor initialized [ 801.024398][T15291] usb 6-1: device descriptor read/64, error -71 [ 801.078661][ T5923] usb 2-1: USB disconnect, device number 98 [ 801.115377][ T4554] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 801.140679][T15291] usb usb6-port1: attempt power cycle [ 801.150546][ T5827] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 801.170449][ T4554] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 801.183166][ T5827] usb 1-1: USB disconnect, device number 110 [ 801.189512][ T4554] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 801.190909][ T4554] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 801.211983][T20455] fido_id[20455]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 801.222022][ T48] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 801.249063][ T48] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 801.270718][ T4554] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 801.289572][ T48] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 801.299889][ T4554] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 801.309933][ T48] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 801.319866][ T4554] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 801.329623][ T48] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 801.339918][ T4554] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 801.349581][ T48] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 801.360844][ T4865] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 801.370153][ T4865] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 801.382104][T20461] netlink: 'syz.4.3702': attribute type 5 has an invalid length. [ 801.383295][ T4865] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 801.400587][ T48] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 801.506594][T15291] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 801.536327][T15291] usb 6-1: device descriptor read/8, error -71 [ 801.762037][T20473] loop5: detected capacity change from 0 to 9847 [ 801.774071][T15291] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 801.804484][T15291] usb 6-1: device descriptor read/8, error -71 [ 801.933669][ T5923] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 801.933671][T15291] usb usb6-port1: unable to enumerate USB device [ 802.106839][ T5923] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 802.118486][ T5923] usb 1-1: config 0 has no interface number 0 [ 802.132029][ T5923] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=95.fe [ 802.141562][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.150546][ T5923] usb 1-1: Product: syz [ 802.155025][ T5923] usb 1-1: Manufacturer: syz [ 802.159640][ T5923] usb 1-1: SerialNumber: syz [ 802.168386][ T5923] usb 1-1: config 0 descriptor?? [ 802.189678][ T5923] usb_ehset_test 1-1:0.219: probe with driver usb_ehset_test failed with error -32 [ 802.211515][T20482] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3711'. [ 802.382341][T15291] usb 1-1: USB disconnect, device number 111 [ 802.703257][T15291] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 802.864651][T15291] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.876946][T15291] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 802.886331][T15291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.894405][T15291] usb 5-1: Product: syz [ 802.898645][T15291] usb 5-1: Manufacturer: syz [ 802.903345][T15291] usb 5-1: SerialNumber: syz [ 802.910847][T15291] usb 5-1: config 0 descriptor?? [ 802.925054][T15291] hub 5-1:0.0: bad descriptor, ignoring hub [ 802.931111][T15291] hub 5-1:0.0: probe with driver hub failed with error -5 [ 802.942994][T15291] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 802.995034][T15291] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 803.053144][ T846] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 803.072599][T20457] udevd[20457]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 803.125051][T20491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.135154][T20491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.203004][ T846] usb 2-1: Using ep0 maxpacket: 16 [ 803.209633][ T846] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 803.219381][ T846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.229607][ T846] usb 2-1: config 0 descriptor?? [ 803.238146][ T846] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 803.257007][ T5923] usb 5-1: USB disconnect, device number 90 [ 803.274425][T15291] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 803.435304][T15291] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 803.446149][T15291] usb 1-1: config 0 interface 0 has no altsetting 0 [ 803.455598][T15291] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 803.464873][T15291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.472931][T15291] usb 1-1: Product: syz [ 803.477098][T15291] usb 1-1: Manufacturer: syz [ 803.481685][T15291] usb 1-1: SerialNumber: syz [ 803.489331][T15291] usb 1-1: config 0 descriptor?? [ 803.502156][T15291] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 803.513534][T15291] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 803.524629][T15291] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 803.534723][T15291] usb 1-1: media controller created [ 803.550620][T15291] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 803.596819][T15291] DVB: Unable to find symbol tda10046_attach() [ 803.603093][T15291] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 803.611726][T15291] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 803.652799][ T5827] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 803.751266][T20513] ubi: mtd0 is already attached to ubi8 [ 803.802949][ T5827] usb 6-1: Using ep0 maxpacket: 16 [ 803.810903][ T5827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 803.823379][ T5827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.833279][ T5827] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 803.847056][ T5827] usb 6-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 803.862873][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.883544][ T5827] usb 6-1: config 0 descriptor?? [ 804.031045][T20522] loop5: detected capacity change from 0 to 6679 [ 804.065601][T20456] buffer_io_error: 58 callbacks suppressed [ 804.065645][T20456] Buffer I/O error on dev loop5, logical block 834, async page read [ 804.115427][T15291] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 804.141087][T15291] usb 1-1: USB disconnect, device number 112 [ 804.249224][ T846] usb 2-1: USB disconnect, device number 99 [ 804.308155][T20507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.317042][T20507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.342122][ T5827] usbhid 6-1:0.0: can't add hid device: -71 [ 804.363752][ T5827] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 804.379210][ T5827] usb 6-1: USB disconnect, device number 7 [ 804.388828][T20527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3726'. [ 804.417819][T20456] Buffer I/O error on dev loop5, logical block 834, async page read [ 805.123069][T20541] ubi: mtd0 is already attached to ubi8 [ 805.188475][T20543] netlink: 'syz.5.3733': attribute type 29 has an invalid length. [ 805.207206][T20543] netlink: 'syz.5.3733': attribute type 29 has an invalid length. [ 805.234342][T20543] netlink: 500 bytes leftover after parsing attributes in process `syz.5.3733'. [ 805.305072][T20547] netlink: 393 bytes leftover after parsing attributes in process `syz.0.3735'. [ 805.403690][T20556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.432246][T20556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.642142][ T846] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 805.673116][T20565] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3740'. [ 805.748232][T20567] ubi: mtd0 is already attached to ubi8 [ 805.802312][ T846] usb 1-1: device descriptor read/64, error -71 [ 805.824502][T20569] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3742'. [ 805.861685][ T5827] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 806.011631][ T5827] usb 2-1: Using ep0 maxpacket: 8 [ 806.020233][ T5827] usb 2-1: unable to get BOS descriptor or descriptor too short [ 806.038661][ T5827] usb 2-1: config 1 interface 0 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 1023 [ 806.054892][ T5827] usb 2-1: config 1 interface 0 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 806.065418][ T5827] usb 2-1: config 1 interface 0 has no altsetting 0 [ 806.071628][ T846] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 806.075035][ T5827] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 806.090101][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.138030][ T5827] usb 2-1: Product: syz [ 806.155470][ T5827] usb 2-1: Manufacturer: syz [ 806.160115][ T5827] usb 2-1: SerialNumber: syz [ 806.198673][T20563] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 806.211749][ T846] usb 1-1: device descriptor read/64, error -71 [ 806.224006][T20563] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 806.288269][T20580] 9p: Unknown Cache mode or invalid value n [ 806.332284][ T846] usb usb1-port1: attempt power cycle [ 806.448569][T20563] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3739'. [ 806.519706][T20563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.534650][T20563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.571789][ T5827] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 100 if 0 alt 13 proto 2 vid 0x0525 pid 0xA4A8 [ 806.627056][ T5827] usb 2-1: USB disconnect, device number 100 [ 806.654376][ T5827] usblp0: removed [ 806.681709][ T846] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 806.702010][ T846] usb 1-1: device descriptor read/8, error -71 [ 806.861190][ T5886] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 806.951190][ T846] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 806.971554][ T846] usb 1-1: device descriptor read/8, error -71 [ 807.001423][ T5886] usb 6-1: device descriptor read/64, error -71 [ 807.083688][ T846] usb usb1-port1: unable to enumerate USB device [ 807.251031][ T5886] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 807.350976][ T846] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 807.380951][ T5886] usb 6-1: device descriptor read/64, error -71 [ 807.492350][ T5886] usb usb6-port1: attempt power cycle [ 807.504563][ T846] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 807.513757][ T846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.522128][ T846] usb 2-1: Product: syz [ 807.526390][ T846] usb 2-1: Manufacturer: syz [ 807.531116][ T846] usb 2-1: SerialNumber: syz [ 807.542907][ T846] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 807.559179][ T54] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 807.830714][ T5886] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 807.851118][ T5886] usb 6-1: device descriptor read/8, error -71 [ 807.860679][ T10] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 808.010605][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 808.020801][ T10] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 808.029962][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.043086][ T10] usb 5-1: Product: syz [ 808.047303][ T10] usb 5-1: Manufacturer: syz [ 808.052916][ T10] usb 5-1: SerialNumber: syz [ 808.061221][ T10] usb 5-1: config 0 descriptor?? [ 808.069545][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 808.100595][ T5886] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 808.121497][ T5886] usb 6-1: device descriptor read/8, error -71 [ 808.231981][ T5886] usb usb6-port1: unable to enumerate USB device [ 808.275160][T20595] kAFS: unable to lookup cell '.,cL' [ 808.610470][ T54] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 808.617556][ T54] ath9k_htc: Failed to initialize the device [ 808.646529][ T54] usb 2-1: ath9k_htc: USB layer deinitialized [ 808.810317][ T846] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 808.865453][ T54] usb 2-1: USB disconnect, device number 101 [ 808.940228][ T846] usb 1-1: device descriptor read/64, error -71 [ 808.954277][T20608] tipc: Started in network mode [ 808.959276][T20608] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 808.972915][T20608] tipc: Enabled bearer , priority 10 [ 809.190036][ T846] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 809.319987][ T10] usb 5-1: reset high-speed USB device number 91 using dummy_hcd [ 809.320342][ T846] usb 1-1: device descriptor read/64, error -71 [ 809.328884][ T10] usb 5-1: device reset changed ep0 maxpacket size! [ 809.344675][ T10] gspca_se401: read req failed req 0x06 error -19 [ 809.354103][ T10] usb 5-1: USB disconnect, device number 91 [ 809.437120][T20610] cgroup: noprefix used incorrectly [ 809.443757][ T846] usb usb1-port1: attempt power cycle [ 809.490195][ T10] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 809.498798][T20612] netlink: 'syz.1.3756': attribute type 46 has an invalid length. [ 809.506881][T20612] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3756'. [ 809.597017][T20615] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 809.651089][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 809.666829][ T10] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 809.676186][ T10] usb 5-1: config 0 has no interface number 0 [ 809.693088][ T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 809.703406][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.730443][ T10] usb 5-1: Product: syz [ 809.734651][ T10] usb 5-1: Manufacturer: syz [ 809.739294][ T10] usb 5-1: SerialNumber: syz [ 809.746921][ T10] usb 5-1: config 0 descriptor?? [ 809.754860][ T10] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 809.800004][ T846] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 809.817130][T20624] netlink: 'syz.5.3759': attribute type 1 has an invalid length. [ 809.826099][T20624] netlink: 'syz.5.3759': attribute type 2 has an invalid length. [ 809.834173][T20624] netlink: 'syz.5.3759': attribute type 1 has an invalid length. [ 809.842521][T20624] netlink: 'syz.5.3759': attribute type 2 has an invalid length. [ 809.843597][ T846] usb 1-1: device descriptor read/8, error -71 [ 809.861744][ T5886] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 810.019615][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 810.027305][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 200, changing to 11 [ 810.039046][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 57661, setting to 1024 [ 810.057801][ T5886] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 810.068899][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.085677][ T5886] usb 2-1: Product: syz [ 810.096572][ T9] tipc: Node number set to 4269801488 [ 810.103659][ T5886] usb 2-1: Manufacturer: syz [ 810.108353][ T5886] usb 2-1: SerialNumber: syz [ 810.117518][ T5886] usb 2-1: config 0 descriptor?? [ 810.120374][ T846] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 810.133065][ T5886] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 810.142704][ T5886] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 810.150015][ T846] usb 1-1: device descriptor read/8, error -71 [ 810.269709][ T846] usb usb1-port1: unable to enumerate USB device [ 810.317516][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 810.335056][T20617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.345096][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 810.355119][T20617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.394049][T20617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.429885][T20617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.440716][T20617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.450524][T20617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.463579][T20617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.484013][T20617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.495407][T20617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.508531][T20617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.528028][T20608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.550704][T20608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.566401][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 810.574490][ T9] usb 5-1: USB disconnect, device number 92 [ 810.586802][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 810.604215][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 810.621641][ T9] quatech2 5-1:0.51: device disconnected [ 810.966643][ T5886] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 811.252052][ T5886] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 811.260136][ T5886] em28xx 2-1:0.0: board has no eeprom [ 811.329259][ T5886] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 811.337110][ T5886] em28xx 2-1:0.0: dvb set to bulk mode. [ 811.343546][ T10] em28xx 2-1:0.0: Binding DVB extension [ 811.356733][ T5886] usb 2-1: USB disconnect, device number 102 [ 811.368985][ T9] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 811.378046][ T5886] em28xx 2-1:0.0: Disconnecting em28xx [ 811.412940][ T10] em28xx 2-1:0.0: Registering input extension [ 811.420240][ T5886] em28xx 2-1:0.0: Closing input extension [ 811.438724][ T5886] em28xx 2-1:0.0: Freeing device [ 811.488477][T20665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3764'. [ 811.540838][ T9] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 811.568826][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.579661][ T9] usb 5-1: config 0 has no interface number 0 [ 811.588267][ T9] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 811.597871][ T9] usb 5-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 811.609435][ T9] usb 5-1: Product: syz [ 811.614537][ T9] usb 5-1: Manufacturer: syz [ 811.620339][ T9] usb 5-1: SerialNumber: syz [ 811.636760][ T9] usb 5-1: config 0 descriptor?? [ 811.660850][ T9] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 811.668322][ T9] uvcvideo 5-1:0.105: Entity type for entity Output 1 was not initialized! [ 811.703522][ T9] uvcvideo 5-1:0.105: Failed to create links for entity 1 [ 811.711036][ T9] uvcvideo 5-1:0.105: Failed to register entities (-22). [ 811.779146][ T5886] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 811.796273][T20676] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 811.804586][T20676] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 811.813207][T20676] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 811.821741][T20676] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 811.860728][ T846] usb 5-1: USB disconnect, device number 93 [ 811.929364][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 811.935988][ T5886] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 811.945410][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.955447][ T5886] usb 2-1: config 0 descriptor?? [ 811.969062][ T5886] gspca_main: sunplus-2.14.0 probing 041e:400b [ 811.989601][ T9] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 812.148522][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 812.155205][ T9] usb 1-1: config 0 has an invalid interface number: 111 but max is 0 [ 812.163645][ T9] usb 1-1: config 0 has an invalid descriptor of length 152, skipping remainder of the config [ 812.174020][ T9] usb 1-1: config 0 has no interface number 0 [ 812.180652][ T9] usb 1-1: config 0 interface 111 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 812.196321][ T9] usb 1-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=fc.66 [ 812.205481][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.213730][ T9] usb 1-1: Product: syz [ 812.217972][ T9] usb 1-1: Manufacturer: syz [ 812.222768][ T9] usb 1-1: SerialNumber: syz [ 812.231907][ T9] usb 1-1: config 0 descriptor?? [ 812.288568][ T846] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 812.420979][T20679] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3770'. [ 812.432130][T20679] syz.4.3770 (20679): /proc/20678/oom_adj is deprecated, please use /proc/20678/oom_score_adj instead. [ 812.446087][ T846] usb 6-1: Using ep0 maxpacket: 8 [ 812.468785][ T846] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 812.472868][ T9] usb 1-1: USB disconnect, device number 121 [ 812.477912][ T846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.505115][ T846] usb 6-1: Product: syz [ 812.509735][ T846] usb 6-1: Manufacturer: syz [ 812.515414][ T846] usb 6-1: SerialNumber: syz [ 812.532444][ T846] usb 6-1: config 0 descriptor?? [ 812.749374][ T846] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 812.808227][ T5923] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 812.958246][ T5923] usb 5-1: Using ep0 maxpacket: 16 [ 812.966157][ T5923] usb 5-1: config 166 has an invalid interface number: 177 but max is 1 [ 812.976796][ T5923] usb 5-1: config 166 has an invalid interface number: 34 but max is 1 [ 812.985764][ T5923] usb 5-1: config 166 has no interface number 0 [ 812.993077][ T5923] usb 5-1: config 166 has no interface number 1 [ 813.000046][ T5923] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 813.011655][ T5923] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 813.023799][ T5923] usb 5-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 813.035152][ T5923] usb 5-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 813.048906][ T5923] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 813.061885][ T5923] usb 5-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 813.072779][ T5923] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 813.093060][ T5923] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 813.109359][ T5923] usb 5-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 813.112394][T20684] ubi: mtd0 is already attached to ubi8 [ 813.123408][ T5923] usb 5-1: config 166 interface 177 has no altsetting 0 [ 813.139367][ T5923] usb 5-1: config 166 interface 34 has no altsetting 0 [ 813.154665][ T5923] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 813.163808][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.172676][ T5923] usb 5-1: Product: syz [ 813.177053][ T5923] usb 5-1: Manufacturer: syz [ 813.182922][ T5923] usb 5-1: SerialNumber: syz [ 813.259415][ T9] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 813.295445][ T9] hid-generic 0000:0000:0000.0056: hidraw0: HID v0.00 Device [syz1] on syz0 [ 813.381476][ T846] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 813.402476][ T5923] ums-realtek 5-1:166.177: USB Mass Storage device detected [ 813.426718][ T846] usb 6-1: USB disconnect, device number 12 [ 813.499094][ T5923] ums-realtek 5-1:166.34: USB Mass Storage device detected [ 813.582063][ T5923] ums-realtek 5-1:166.34: probe with driver ums-realtek failed with error -5 [ 813.593256][ T5923] uvcvideo 5-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 813.600764][ T5923] uvcvideo 5-1:166.34: No valid video chain found. [ 813.618072][ T5923] usb 5-1: USB disconnect, device number 94 [ 813.809825][ T5886] gspca_sunplus: reg_w_riv err -71 [ 813.818172][ T5886] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 813.828666][ T5886] usb 2-1: USB disconnect, device number 103 [ 814.170786][ T5886] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 814.277984][ T5923] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 814.362458][ T5886] usb 1-1: config 6 has an invalid interface number: 213 but max is 0 [ 814.387654][ T5886] usb 1-1: config 6 has no interface number 0 [ 814.393906][ T5886] usb 1-1: config 6 interface 213 has no altsetting 0 [ 814.411209][ T5886] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=99.6d [ 814.438136][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.450384][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 814.457823][ T5886] usb 1-1: Product: syz [ 814.462019][ T5886] usb 1-1: Manufacturer: syz [ 814.466658][ T5886] usb 1-1: SerialNumber: syz [ 814.472928][ T5923] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.504467][ T5923] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 814.528556][ T5923] usb 5-1: config 0 interface 0 has no altsetting 0 [ 814.536702][ T5923] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 814.559234][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.581477][ T5923] usb 5-1: config 0 descriptor?? [ 814.677684][ T9] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 814.710737][T20704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.724950][T20704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.739511][ T5886] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 814.750953][ T5886] usb 1-1: setting power ON [ 814.755554][ T5886] dvb-usb: bulk message failed: -22 (2/0) [ 814.768979][ T5886] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 814.783723][ T5886] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 814.794305][ T5886] dvb_usb_cxusb 1-1:6.213: probe with driver dvb_usb_cxusb failed with error -22 [ 814.810462][ T5886] usb 1-1: USB disconnect, device number 122 [ 814.858326][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 814.867692][ T9] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= d.65 [ 814.876846][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.885711][ T9] usb 2-1: Product: syz [ 814.891476][ T9] usb 2-1: Manufacturer: syz [ 814.896086][ T9] usb 2-1: SerialNumber: syz [ 814.903222][ T9] usb 2-1: config 0 descriptor?? [ 814.913703][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 815.009554][ T5915] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 815.020962][ T5923] lenovo 0003:17EF:6062.0057: unknown main item tag 0x2 [ 815.031866][ T5923] lenovo 0003:17EF:6062.0057: hidraw0: USB HID v4.00 Device [HID 17ef:6062] on usb-dummy_hcd.4-1/input0 [ 815.178640][ T5915] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 815.188076][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.199696][ T5915] usb 6-1: config 0 descriptor?? [ 815.215775][T20710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.224937][T20710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.235264][ T5923] usb 5-1: USB disconnect, device number 95 [ 815.315126][T20722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.328737][T20722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.339428][ T9] gspca_vc032x: reg_r err -32 [ 815.345309][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 815.359418][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 815.364854][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 815.370805][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 815.376155][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 815.382127][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 815.387688][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 815.393344][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 815.399745][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 815.408149][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 815.413631][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 815.419471][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 815.424800][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 815.430217][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 815.435728][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 815.441711][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 815.452139][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 815.459252][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 815.464563][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 815.472464][ T9] gspca_vc032x: Unknown sensor... [ 815.477968][ T9] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 815.491463][ T9] usb 2-1: USB disconnect, device number 104 [ 815.608074][ T5915] hackrf 6-1:0.0: Board ID: 00 [ 815.612884][ T5915] hackrf 6-1:0.0: Firmware version: [ 815.619875][ T5915] hackrf 6-1:0.0: Registered as swradio24 [ 815.626255][ T5915] videodev: could not get a free minor [ 815.632711][ T5915] hackrf 6-1:0.0: Failed to register as video device (-23) [ 815.643642][ T5915] hackrf 6-1:0.0: probe with driver hackrf failed with error -23 [ 815.779711][T20744] netlink: 'syz.4.3791': attribute type 10 has an invalid length. [ 815.789940][T20744] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3791'. [ 815.797608][ T5886] usb 1-1: new low-speed USB device number 123 using dummy_hcd [ 815.823390][T20744] team0: Port device geneve0 added [ 815.831774][ T5915] usb 6-1: USB disconnect, device number 13 [ 815.957940][ T5886] usb 1-1: device descriptor read/64, error -71 [ 816.163162][ T29] audit: type=1400 audit(6291402478.831:203): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=20767 comm="syz.4.3799" [ 816.206675][ T5886] usb 1-1: new low-speed USB device number 124 using dummy_hcd [ 816.217967][ T5915] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 816.256642][ T5923] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 816.346431][ T5886] usb 1-1: device descriptor read/64, error -71 [ 816.388494][ T5915] usb 6-1: unable to get BOS descriptor or descriptor too short [ 816.412667][ T5915] usb 6-1: not running at top speed; connect to a high speed hub [ 816.438703][ T5915] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 816.466674][ T5923] usb 2-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 816.467436][ T5886] usb usb1-port1: attempt power cycle [ 816.497725][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.506396][ T5915] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 816.550786][ T5915] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 816.566840][ T5923] usb 2-1: config 0 descriptor?? [ 816.580795][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.594512][ T5923] pwc: Creative Labs Webcam Pro Ex detected. [ 816.602129][ T5915] usb 6-1: Product: syz [ 816.606820][ T5915] usb 6-1: Manufacturer: syz [ 816.611484][ T5915] usb 6-1: SerialNumber: syz [ 816.804334][ T5923] pwc: recv_control_msg error -71 req 02 val 2700 [ 816.811472][ T5923] pwc: recv_control_msg error -71 req 04 val 1600 [ 816.833933][T20750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.836225][ T9] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 816.844345][ T5923] pwc: recv_control_msg error -71 req 02 val 2c00 [ 816.865147][T20750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.888690][ T5923] pwc: recv_control_msg error -71 req 04 val 1000 [ 816.895641][ T5923] pwc: recv_control_msg error -71 req 04 val 1300 [ 816.903975][ T5923] pwc: recv_control_msg error -71 req 04 val 1400 [ 816.911616][ T5915] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 816.917035][ T5886] usb 1-1: new low-speed USB device number 125 using dummy_hcd [ 816.920453][ T5923] pwc: recv_control_msg error -71 req 02 val 2000 [ 816.940123][ T5886] usb 1-1: device descriptor read/8, error -71 [ 816.946842][ T5923] pwc: recv_control_msg error -71 req 02 val 2100 [ 816.963161][ T5923] pwc: recv_control_msg error -71 req 06 val 0600 [ 816.979035][ T5923] pwc: recv_control_msg error -71 req 04 val 1500 [ 816.987144][ T5915] usb 6-1: USB disconnect, device number 14 [ 816.993593][ T5923] pwc: recv_control_msg error -71 req 02 val 2500 [ 817.016781][T20457] udevd[20457]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 817.017197][ T5923] pwc: recv_control_msg error -71 req 02 val 2400 [ 817.033902][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 817.050929][ T5923] pwc: recv_control_msg error -71 req 02 val 2600 [ 817.051137][ T9] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.063029][ T5923] pwc: recv_control_msg error -71 req 02 val 2900 [ 817.072224][ T9] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.076846][ T5923] pwc: recv_control_msg error -71 req 02 val 2800 [ 817.089033][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 817.093158][ T5923] pwc: recv_control_msg error -71 req 04 val 1100 [ 817.102068][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 817.108129][ T5923] pwc: recv_control_msg error -71 req 04 val 1200 [ 817.114850][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.125647][ T5923] pwc: Registered as video103. [ 817.138901][ T5923] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input109 [ 817.175657][ T9] usb 5-1: config 0 descriptor?? [ 817.189742][ T5923] usb 2-1: USB disconnect, device number 105 [ 817.206482][ T5886] usb 1-1: new low-speed USB device number 126 using dummy_hcd [ 817.224597][T20457] udevd[20457]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 817.247373][ T5886] usb 1-1: device descriptor read/8, error -71 [ 817.356350][ T5886] usb usb1-port1: unable to enumerate USB device [ 817.405590][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 817.426081][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 817.468723][ T9] usb 5-1: USB disconnect, device number 96 [ 817.536803][ T5923] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 817.738718][ T5923] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 817.752066][ T5915] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 817.764443][ T5923] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 817.774744][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 817.782965][ T5923] usb 2-1: SerialNumber: syz [ 817.824000][T20815] nbd: must specify a size in bytes for the device [ 817.905660][ T5915] usb 6-1: Using ep0 maxpacket: 8 [ 817.913111][ T5915] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 817.921608][ T5915] usb 6-1: config 2 has no interface number 0 [ 817.935737][ T5915] usb 6-1: config 2 interface 31 has no altsetting 0 [ 817.945874][ T5915] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 817.955261][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.964173][ T5915] usb 6-1: Product: syz [ 817.968457][ T5915] usb 6-1: Manufacturer: syz [ 817.973085][ T5915] usb 6-1: SerialNumber: syz [ 818.265866][ T54] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 818.415433][ T54] usb 5-1: Using ep0 maxpacket: 16 [ 818.422292][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.433288][ T54] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 818.446546][ T54] usb 5-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 818.455734][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.472607][ T54] usb 5-1: config 0 descriptor?? [ 818.598838][ T5915] ch9200 6-1:2.31: probe with driver ch9200 failed with error -22 [ 818.618593][T20830] fuse: Bad value for 'rootmode' [ 818.624805][ T5915] usb 6-1: USB disconnect, device number 15 [ 818.803960][ T5923] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 818.901870][ T54] uclogic 0003:5543:0064.0058: hidraw0: USB HID v0.05 Device [HID 5543:0064] on usb-dummy_hcd.4-1/input0 [ 819.094648][ T9] usb 5-1: USB disconnect, device number 97 [ 819.764761][ T846] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 819.909783][ T54] usb 2-1: USB disconnect, device number 106 [ 819.933141][ T54] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 819.945117][ T846] usb 6-1: Using ep0 maxpacket: 16 [ 819.962265][ T846] usb 6-1: unable to get BOS descriptor or descriptor too short [ 819.995564][ T846] usb 6-1: config 106 has an invalid interface number: 15 but max is 0 [ 820.003859][ T846] usb 6-1: config 106 has no interface number 0 [ 820.012056][ T846] usb 6-1: config 106 interface 15 has no altsetting 0 [ 820.059010][ T846] usb 6-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=56.45 [ 820.083668][ T846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.084987][ T9] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 820.091817][ T846] usb 6-1: Product: syz [ 820.103635][ T846] usb 6-1: Manufacturer: syz [ 820.108322][ T846] usb 6-1: SerialNumber: syz [ 820.244526][ T9] usb 1-1: device descriptor read/64, error -71 [ 820.304476][ T5923] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 820.343304][ T846] cdc_subset 6-1:106.15: probe with driver cdc_subset failed with error -71 [ 820.367326][ T846] usb 6-1: USB disconnect, device number 16 [ 820.464467][ T5923] usb 5-1: Using ep0 maxpacket: 16 [ 820.488207][ T5923] usb 5-1: unable to get BOS descriptor or descriptor too short [ 820.489660][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 820.517204][ T5923] usb 5-1: config 13 has an invalid interface number: 50 but max is 0 [ 820.534395][ T5923] usb 5-1: config 13 has no interface number 0 [ 820.551275][ T5923] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 820.572846][ T5923] usb 5-1: config 13 interface 50 has no altsetting 0 [ 820.586229][ T5923] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 820.613213][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.626319][ T5923] usb 5-1: Product: 、 [ 820.630530][ T5923] usb 5-1: Manufacturer: й [ 820.638774][ T5923] usb 5-1: SerialNumber: Ц [ 820.653717][T20875] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 820.658849][ T9] usb 1-1: device descriptor read/64, error -71 [ 820.774663][ T9] usb usb1-port1: attempt power cycle [ 820.882157][ T5923] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 820.890001][ T5923] usb 5-1: MIDIStreaming interface descriptor not found [ 820.971585][ T5923] usb 5-1: USB disconnect, device number 98 [ 821.053260][T10143] udevd[10143]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 821.144086][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 821.174538][ T9] usb 1-1: device descriptor read/8, error -71 [ 821.220446][ T846] IPVS: starting estimator thread 0... [ 821.324075][T20919] IPVS: using max 26 ests per chain, 62400 per kthread [ 821.340296][T20926] binder: 20925:20926 ioctl c00c6211 0 returned -14 [ 821.389562][T20929] netlink: 'syz.5.3833': attribute type 10 has an invalid length. [ 821.397733][T20929] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3833'. [ 821.410245][T20929] bond0: entered promiscuous mode [ 821.421417][T20929] bond_slave_0: entered promiscuous mode [ 821.424191][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 821.427818][T20929] bond_slave_1: entered promiscuous mode [ 821.455391][ T9] usb 1-1: device descriptor read/8, error -71 [ 821.461053][T20929] syz_tun: entered promiscuous mode [ 821.487835][T20929] mac80211_hwsim hwsim49 wlan1: entered promiscuous mode [ 821.495850][T20929] bridge0: port 3(bond0) entered blocking state [ 821.502308][T20929] bridge0: port 3(bond0) entered disabled state [ 821.514888][T20929] bond0: entered allmulticast mode [ 821.520136][T20929] bond_slave_0: entered allmulticast mode [ 821.530085][T20929] bond_slave_1: entered allmulticast mode [ 821.538875][T20929] syz_tun: entered allmulticast mode [ 821.546964][T20929] mac80211_hwsim hwsim49 wlan1: entered allmulticast mode [ 821.558834][T20929] bridge0: port 3(bond0) entered blocking state [ 821.565269][T20929] bridge0: port 3(bond0) entered forwarding state [ 821.574690][ T9] usb usb1-port1: unable to enumerate USB device [ 821.586129][T20931] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 821.773881][ T9] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 821.803856][T15291] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 821.913643][ T9] usb 2-1: device descriptor read/64, error -71 [ 821.943821][T15291] usb 5-1: device descriptor read/64, error -71 [ 822.078409][T20956] netlink: 65051 bytes leftover after parsing attributes in process `syz.5.3837'. [ 822.173494][ T9] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 822.203581][T15291] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 822.333642][ T9] usb 2-1: device descriptor read/64, error -71 [ 822.363521][T15291] usb 5-1: device descriptor read/64, error -71 [ 822.446692][ T9] usb usb2-port1: attempt power cycle [ 822.474087][T15291] usb usb5-port1: attempt power cycle [ 822.803231][ T9] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 822.823284][T15291] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 822.835660][ T9] usb 2-1: device descriptor read/8, error -71 [ 822.856094][T15291] usb 5-1: device descriptor read/8, error -71 [ 822.862353][ T5886] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 823.024826][ T5886] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 823.033647][ T5886] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 823.044953][ T5886] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 823.054266][ T5886] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 823.065288][ T5886] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 823.079017][ T5886] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 823.088172][ T9] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 823.096458][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 823.105981][ T5886] usb 6-1: Product: syz [ 823.110365][ T5886] usb 6-1: Manufacturer: syz [ 823.115263][T15291] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 823.124871][ T9] usb 2-1: device descriptor read/8, error -71 [ 823.134972][ T5886] cdc_wdm 6-1:1.0: skipping garbage [ 823.140200][ T5886] cdc_wdm 6-1:1.0: skipping garbage [ 823.146015][T15291] usb 5-1: device descriptor read/8, error -71 [ 823.153909][ T5886] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 823.159834][ T5886] cdc_wdm 6-1:1.0: Unknown control protocol [ 823.233797][ T9] usb usb2-port1: unable to enumerate USB device [ 823.245186][ T846] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 823.253277][T15291] usb usb5-port1: unable to enumerate USB device [ 823.402893][ T846] usb 1-1: Using ep0 maxpacket: 16 [ 823.409528][ T846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.420782][ T846] usb 1-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 823.429923][ T846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.440522][ T846] usb 1-1: config 0 descriptor?? [ 823.855938][ T846] aquacomputer_d5next 0003:0C70:F010.0059: unknown main item tag 0x0 [ 823.864283][ T846] aquacomputer_d5next 0003:0C70:F010.0059: unknown main item tag 0x0 [ 823.872389][ T846] aquacomputer_d5next 0003:0C70:F010.0059: unknown main item tag 0x0 [ 823.880635][ T846] aquacomputer_d5next 0003:0C70:F010.0059: unknown main item tag 0x0 [ 823.889445][ T846] aquacomputer_d5next 0003:0C70:F010.0059: unknown main item tag 0x0 [ 823.900380][ T846] aquacomputer_d5next 0003:0C70:F010.0059: hidraw0: USB HID v0.05 Device [HID 0c70:f010] on usb-dummy_hcd.0-1/input0 [ 824.055477][T20987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.064420][T20987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.074648][T15291] usb 1-1: USB disconnect, device number 5 [ 824.605178][T20990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3842'. [ 824.615750][T20990] bridge_slave_1: left allmulticast mode [ 824.622592][T20990] bridge_slave_1: left promiscuous mode [ 824.628331][T20990] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.639896][T20990] bridge_slave_0: left allmulticast mode [ 824.649120][T20990] bridge_slave_0: left promiscuous mode [ 824.655587][T20990] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.913034][ T5886] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 824.952483][T15291] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 825.078395][ T5886] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 825.088188][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.096342][T15291] usb 2-1: device descriptor read/64, error -71 [ 825.103663][ T5886] usb 1-1: Product: syz [ 825.107838][ T5886] usb 1-1: Manufacturer: syz [ 825.112632][ T5886] usb 1-1: SerialNumber: syz [ 825.242069][ T5923] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 825.326476][ T5886] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 825.345740][ T5886] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 825.356697][T15291] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 825.364624][ T5886] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 825.379021][ T5886] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 825.391948][ T5923] usb 5-1: Using ep0 maxpacket: 16 [ 825.393340][ T5886] usb 1-1: USB disconnect, device number 6 [ 825.404401][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 825.416667][ T5923] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 825.426742][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 1024 [ 825.439637][ T5923] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 825.455795][ T5923] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 825.465022][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.473575][ T5923] usb 5-1: Product: syz [ 825.477946][ T5923] usb 5-1: Manufacturer: syz [ 825.483028][ T5923] usb 5-1: SerialNumber: syz [ 825.489713][ T5923] usb 5-1: config 0 descriptor?? [ 825.495536][T21002] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 825.502871][T15291] usb 2-1: device descriptor read/64, error -71 [ 825.519043][ T5923] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 825.525435][ T5923] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 825.532256][ T5923] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 825.538402][ T5923] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 825.545037][ T5923] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 825.627965][T15291] usb usb2-port1: attempt power cycle [ 825.639190][ T5886] usb 6-1: USB disconnect, device number 17 [ 825.718926][T21008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.740603][T21008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.748756][T21002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.763916][T21002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.766655][T21011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.787191][ T9] usb 5-1: USB disconnect, device number 103 [ 825.790688][T21011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.795190][T21008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.815536][ T9] mcba_usb 5-1:0.0 can0: device disconnected [ 825.830132][T21008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.927886][T21015] binder: 21014:21015 ioctl c018620c 200000000080 returned -22 [ 825.935988][T21015] netlink: 'syz.0.3848': attribute type 10 has an invalid length. [ 825.946267][T21015] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3848'. [ 825.990054][T21015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3848'. [ 825.991632][T15291] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 826.010566][T21015] : entered promiscuous mode [ 826.033446][ T5886] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 826.060136][T15291] usb 2-1: device descriptor read/8, error -71 [ 826.215276][ T5886] usb 6-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 826.234625][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 826.267798][ T5886] usb 6-1: Product: syz [ 826.276514][ T5886] usb 6-1: SerialNumber: syz [ 826.287681][ T5886] usb 6-1: config 0 descriptor?? [ 826.311572][T15291] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 826.331483][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 826.357209][T15291] usb 2-1: device descriptor read/8, error -71 [ 826.496496][T15291] usb usb2-port1: unable to enumerate USB device [ 826.509795][ T5886] ldusb 6-1:0.0: Interrupt in endpoint not found [ 826.521587][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 826.548166][ T9] usb 1-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config [ 826.568423][ T5886] usb 6-1: USB disconnect, device number 18 [ 826.594384][ T29] audit: type=1400 audit(6291402489.256:204): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=21031 comm="syz.4.3850" [ 826.610936][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 826.639158][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 826.660209][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.671410][ T9] usb 1-1: Product: syz [ 826.675679][ T9] usb 1-1: Manufacturer: syz [ 826.685440][ T9] usb 1-1: SerialNumber: syz [ 826.790065][ T29] audit: type=1326 audit(6291402489.456:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21043 comm="syz.4.3851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e74b8f749 code=0x7ffc0000 [ 826.827607][ T29] audit: type=1326 audit(6291402489.456:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21043 comm="syz.4.3851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7e74b8f749 code=0x7ffc0000 [ 826.857988][ T29] audit: type=1326 audit(6291402489.456:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21043 comm="syz.4.3851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e74b8f749 code=0x7ffc0000 [ 826.884451][ T29] audit: type=1326 audit(6291402489.466:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21043 comm="syz.4.3851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f7e74b8f749 code=0x7ffc0000 [ 826.923446][ T9] usb 1-1: 0:2 : does not exist [ 826.934491][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 826.993428][ T9] usb 1-1: USB disconnect, device number 7 [ 827.018107][T20457] udevd[20457]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 827.071221][ T5886] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 827.112444][T21051] netlink: 'syz.5.3852': attribute type 3 has an invalid length. [ 827.120199][T21051] netlink: 766 bytes leftover after parsing attributes in process `syz.5.3852'. [ 827.233153][ T5886] usb 5-1: unable to get BOS descriptor or descriptor too short [ 827.241802][ T5886] usb 5-1: not running at top speed; connect to a high speed hub [ 827.250440][ T5886] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 827.262188][ T5886] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 827.274025][ T5886] usb 5-1: too many endpoints for config 1 interface 1 altsetting 23: 170, using maximum allowed: 30 [ 827.285005][ T5886] usb 5-1: config 1 interface 1 altsetting 23 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 827.298616][ T5886] usb 5-1: config 1 interface 1 has no altsetting 0 [ 827.307666][ T5886] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 827.316769][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 827.324910][ T5886] usb 5-1: Product: syz [ 827.329088][ T5886] usb 5-1: Manufacturer: syz [ 827.334306][ T5886] usb 5-1: SerialNumber: syz [ 827.341578][T21047] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 827.391374][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 827.540822][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 827.548549][ T9] usb 6-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 32 [ 827.561860][ T9] usb 6-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 827.572316][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 827.582702][ T9] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 827.592026][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.608176][ T9] usb 6-1: Product: syz [ 827.618209][ T9] usb 6-1: Manufacturer: syz [ 827.629612][ T9] usb 6-1: SerialNumber: syz [ 827.657186][ T9] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 827.685612][ T9] usb 6-1: no configuration chosen from 1 choice [ 827.745305][T21055] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3854'. [ 827.920664][ T5923] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 828.000663][ T9] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 828.070606][ T5923] usb 1-1: Using ep0 maxpacket: 32 [ 828.079203][ T5923] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 828.087653][ T5923] usb 1-1: config 0 has no interface number 0 [ 828.094307][ T5923] usb 1-1: config 0 interface 12 has no altsetting 0 [ 828.103463][ T5923] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 828.113130][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.121168][ T5923] usb 1-1: Product: syz [ 828.125330][ T5923] usb 1-1: Manufacturer: syz [ 828.129912][ T5923] usb 1-1: SerialNumber: syz [ 828.137348][ T5923] usb 1-1: config 0 descriptor?? [ 828.150680][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 828.157612][ T9] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 828.167020][ T9] usb 2-1: config 0 has no interface number 0 [ 828.173588][ T9] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 828.185505][ T9] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 828.200182][ T9] usb 2-1: config 0 interface 255 has no altsetting 0 [ 828.210256][ T9] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 828.219897][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.228186][ T9] usb 2-1: Product: syz [ 828.232480][ T9] usb 2-1: Manufacturer: syz [ 828.237109][ T9] usb 2-1: SerialNumber: syz [ 828.245057][ T9] usb 2-1: config 0 descriptor?? [ 828.455137][ T9] gspca_main: sq905-2.14.0 probing 2770:9120 [ 828.463567][ T9] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 828.471159][ T9] sq905 2-1:0.255: probe with driver sq905 failed with error -71 [ 828.482552][ T9] usb 2-1: USB disconnect, device number 115 [ 829.071674][T21057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3855'. [ 829.366193][T21067] i2c i2c-0: Invalid block write size 34 [ 829.812905][ T5886] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 829.837197][ T5886] usb 5-1: USB disconnect, device number 104 [ 829.899753][ T846] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 830.072012][ T846] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 830.080433][ T846] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 830.089314][ T846] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 830.100000][ T846] usb 2-1: config 220 has no interface number 2 [ 830.106319][ T846] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 830.120087][ T846] usb 2-1: config 220 interface 0 has no altsetting 0 [ 830.126896][ T846] usb 2-1: config 220 interface 76 has no altsetting 0 [ 830.134174][ T846] usb 2-1: config 220 interface 1 has no altsetting 0 [ 830.145615][ T846] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 830.155541][ T846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.164972][ T846] usb 2-1: Product: syz [ 830.168580][T15291] usb 6-1: USB disconnect, device number 19 [ 830.169162][ T846] usb 2-1: Manufacturer: syz [ 830.193944][ T846] usb 2-1: SerialNumber: syz [ 830.309492][ T5886] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 830.425754][ T846] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 830.433917][ T846] uvcvideo 2-1:220.0: No valid video chain found. [ 830.440936][ T846] usb 2-1: selecting invalid altsetting 0 [ 830.462144][ T846] usb 2-1: selecting invalid altsetting 0 [ 830.469016][ T846] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 830.479626][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 830.484831][ T846] usb 2-1: USB disconnect, device number 116 [ 830.507827][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.529586][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.549557][ T5886] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 830.563060][ T5886] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 830.572678][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.593125][ T5886] usb 5-1: config 0 descriptor?? [ 830.649308][T15291] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 830.814459][T15291] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 830.825024][T15291] usb 6-1: config 0 has no interface number 0 [ 830.832550][T15291] usb 6-1: config 0 interface 41 has no altsetting 0 [ 830.844477][T15291] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 830.853800][T15291] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.864286][T15291] usb 6-1: Product: syz [ 830.868511][T15291] usb 6-1: Manufacturer: syz [ 830.873491][T15291] usb 6-1: SerialNumber: syz [ 830.882694][T15291] usb 6-1: config 0 descriptor?? [ 831.023994][ T5886] logitech 0003:046D:C293.005A: nested delimiters [ 831.039952][ T5886] logitech 0003:046D:C293.005A: item 0 4 2 10 parsing failed [ 831.048327][ T5886] logitech 0003:046D:C293.005A: parse failed [ 831.055122][ T5886] logitech 0003:046D:C293.005A: probe with driver logitech failed with error -22 [ 831.231204][ T846] usb 5-1: USB disconnect, device number 105 [ 831.376637][ T5923] f81534 1-1:0.12: f81534_get_register: reg: 1004 failed: -71 [ 831.398913][ T5923] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 831.411542][ T5923] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 831.420127][ T5923] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 831.440702][ T5923] usb 1-1: USB disconnect, device number 8 [ 831.908789][ T5886] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 832.071384][ T9] IPVS: starting estimator thread 0... [ 832.077695][T21115] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 832.100056][ T5886] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 832.120428][T21119] input: syz1 as /devices/virtual/input/input112 [ 832.123053][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.139117][T21115] program syz.0.3869 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 832.191661][ T5886] usb 2-1: config 0 descriptor?? [ 832.206017][ T5886] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 832.218839][T21116] IPVS: using max 28 ests per chain, 67200 per kthread [ 832.315605][T21123] binder: Bad value for 'stats' [ 832.382306][T21124] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3872'. [ 832.588610][ T5923] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 832.616988][T21100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.637617][T21100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.660230][ T5886] gp8psk: usb out operation failed. [ 832.672938][ T5886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 832.717408][ T5886] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 832.737013][ T5886] usb 2-1: media controller created [ 832.750231][ T5923] usb 5-1: Using ep0 maxpacket: 16 [ 832.771772][ T5923] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 832.779999][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 832.797413][T21135] sit0: entered promiscuous mode [ 832.806293][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.826900][T21135] netlink: 'syz.0.3873': attribute type 1 has an invalid length. [ 832.838233][ T5923] usb 5-1: Product: syz [ 832.842451][ T5923] usb 5-1: Manufacturer: syz [ 832.862052][ T5886] gp8psk_fe: Frontend attached [ 832.865053][T21135] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3873'. [ 832.866931][ T5886] usb 2-1: DVB: registering adapter 6 frontend 0 (Genpix DVB-S)... [ 832.886461][ T5923] usb 5-1: SerialNumber: syz [ 832.905311][ T5923] usb 5-1: config 0 descriptor?? [ 832.927678][ T5886] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 832.931726][ T5923] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 832.970664][ T5923] usb 5-1: Detected FT232B [ 833.082408][ T5886] gp8psk: usb in 138 operation failed. [ 833.091673][ T5886] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 833.103299][ T5886] gp8psk: found Genpix USB device pID = 203 (hex) [ 833.120607][ T5886] usb 2-1: USB disconnect, device number 117 [ 833.158125][ T5923] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 833.189087][ T5923] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 833.218508][ T5923] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 833.258175][ T5923] usb 5-1: USB disconnect, device number 106 [ 833.302077][ T5923] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 833.349107][ T5923] ftdi_sio 5-1:0.0: device disconnected [ 833.362539][T15291] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 833.376003][ T5886] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 833.423693][T15291] usb 6-1: USB disconnect, device number 20 [ 833.631712][ T29] audit: type=1326 audit(6291402496.309:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21144 comm="syz.1.3875" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f3878f749 code=0x0 [ 833.682962][T21148] kvm: apic: phys broadcast and lowest prio [ 833.710968][T21151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3875'. [ 834.274699][T21181] sit0: entered promiscuous mode [ 834.309320][T21181] netlink: 'syz.4.3885': attribute type 1 has an invalid length. [ 834.317082][T21181] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3885'. [ 834.706164][T21190] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3888'. [ 834.723507][T21199] syzkaller1: entered promiscuous mode [ 834.730323][T21199] syzkaller1: entered allmulticast mode [ 834.739258][T21190] tipc: Enabling of bearer rejected, failed to enable media [ 834.999674][ T29] audit: type=1326 audit(6291402497.680:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21206 comm="syz.1.3894" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f3878f749 code=0x0 [ 835.023668][ T29] audit: type=1326 audit(6291402497.680:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21206 comm="syz.1.3894" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f3878f749 code=0x0 [ 835.078210][T21210] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3895'. [ 835.128046][T15291] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 835.275523][T21221] binder: 21218:21221 ioctl c00c6211 0 returned -14 [ 835.283116][T21221] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3898'. [ 835.299804][T15291] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 835.310473][T15291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.321585][T15291] usb 1-1: Product: syz [ 835.325958][T15291] usb 1-1: Manufacturer: syz [ 835.331532][T15291] usb 1-1: SerialNumber: syz [ 835.410633][T15291] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 835.437089][ T5886] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 835.449538][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 835.622483][ T5886] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 835.633901][ T5886] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 835.646053][ T5886] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 835.657855][ T5886] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 835.675343][ T5886] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 835.688821][ T5886] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 835.696894][ T5923] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 835.727819][ T5886] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 835.738273][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 835.747540][ T5886] usb 2-1: Product: syz [ 835.752500][ T5886] usb 2-1: Manufacturer: syz [ 835.765313][T21217] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 835.775654][ T5886] cdc_wdm 2-1:1.0: skipping garbage [ 835.786678][ T5886] cdc_wdm 2-1:1.0: skipping garbage [ 835.794375][ T5886] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 835.800760][ T5886] cdc_wdm 2-1:1.0: Unknown control protocol [ 835.853141][T21228] netlink: 252 bytes leftover after parsing attributes in process `syz.4.3901'. [ 835.862657][ T5923] usb 6-1: Using ep0 maxpacket: 16 [ 835.886226][ T54] usb 1-1: USB disconnect, device number 9 [ 835.893616][ T5923] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 835.922042][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.947674][ T5923] usb 6-1: config 0 descriptor?? [ 835.965611][ T5923] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 835.985506][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 835.992135][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 835.999431][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 836.006044][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 836.014880][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 836.021507][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 836.027169][T21217] 9p: Bad value for 'rfdno' [ 836.028316][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 836.038689][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 836.045541][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 836.052167][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 836.058840][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 836.065454][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 836.072366][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 836.078988][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 836.087101][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 836.093708][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 836.100914][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 836.107525][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 836.113638][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 836.124217][ T846] usb 2-1: USB disconnect, device number 118 [ 836.163313][T21226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.179298][T21226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.231041][T21226] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 836.242282][T21226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.252415][T21226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.439035][ T5923] usb 6-1: Detected FT232A [ 836.462162][ T5923] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 836.489967][ T5923] usb 6-1: USB disconnect, device number 21 [ 836.508290][ T5923] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 836.521391][T21235] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3902'. [ 836.521850][ T5923] ftdi_sio 6-1:0.0: device disconnected [ 836.590668][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 836.608126][ T9] ath9k_htc: Failed to initialize the device [ 836.614818][ T54] usb 1-1: ath9k_htc: USB layer deinitialized [ 836.866761][T21241] netlink: 'syz.1.3904': attribute type 1 has an invalid length. [ 836.874518][T21241] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3904'. [ 837.033870][T21250] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 837.296007][ T9] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 837.315981][ T54] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 837.337505][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 837.448593][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 837.456904][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 837.465909][ T54] usb 6-1: Using ep0 maxpacket: 8 [ 837.468088][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 837.484648][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 837.492474][ T54] usb 6-1: unable to get BOS descriptor or descriptor too short [ 837.504096][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.504923][ T54] usb 6-1: config 9 has no interfaces? [ 837.512893][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 837.524615][ T54] usb 6-1: New USB device found, idVendor=1186, idProduct=3e04, bcdDevice= 0.00 [ 837.534942][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.535046][ T9] usb 2-1: Product: syz [ 837.545671][ T54] usb 6-1: Product: 䚻鹠꬏鶈〥Ǹ⾍͔̌ৃļ랹俷ᕻ椾픩闃北进놄䤀礊爢௵⑈膥缏⤄΁姺郇൪錜좃﹬洙腡疙杼אָꉃ禉≚ષ젔呦㑃鲹㫪얀ᶰ줗櫺㾆㫊莗˂㙱锚੠証△奖ⓖ᱄앙魘静㲔㜡ᕳ䛧업輒锝ஊ擊⊅᧙Ɗꭉ敪鯸硙넹蔮࣎㉺繍ኂ㿢ߍᆜ昺짧 [ 837.558121][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 837.581824][ T54] usb 6-1: Manufacturer: ф [ 837.592913][ T9] usb 2-1: Manufacturer: syz [ 837.595492][ T54] usb 6-1: SerialNumber: syz [ 837.604880][ T9] usb 2-1: SerialNumber: syz [ 837.637335][ T10] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 837.648218][ T10] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 837.659017][ T10] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 837.668500][ T10] usb 1-1: config 128 has no interface number 0 [ 837.674915][ T10] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 837.686901][ T10] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 837.697367][ T10] usb 1-1: config 128 interface 127 has no altsetting 0 [ 837.711889][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 837.722577][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.731255][ T10] usb 1-1: Product: syz [ 837.735539][ T10] usb 1-1: Manufacturer: syz [ 837.740701][ T10] usb 1-1: SerialNumber: syz [ 837.761078][T21275] netlink: 'syz.4.3914': attribute type 1 has an invalid length. [ 837.769003][T21275] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3914'. [ 837.829894][ T9] usb 2-1: 0:2 : does not exist [ 837.829951][T21255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.857487][T21255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.897106][ T9] usb 2-1: USB disconnect, device number 119 [ 837.907075][ T29] audit: type=1326 audit(6291402500.591:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21276 comm="syz.4.3915" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e74b8f749 code=0x0 [ 837.929002][T20457] udevd[20457]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 838.071371][T21255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.083272][T21255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.100993][T21255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.111142][T21255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.125100][ T54] usb 6-1: USB disconnect, device number 22 [ 838.325658][ T9] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 838.489427][ T9] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 838.499824][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.508070][ T9] usb 5-1: Product: syz [ 838.512265][ T9] usb 5-1: Manufacturer: syz [ 838.517164][ T9] usb 5-1: SerialNumber: syz [ 838.523607][ T9] usb 5-1: config 0 descriptor?? [ 838.533478][ T9] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 838.625376][ T54] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 838.737971][T21288] netlink: 232 bytes leftover after parsing attributes in process `syz.5.3919'. [ 838.748925][T21288] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3919'. [ 838.785243][ T54] usb 2-1: Using ep0 maxpacket: 8 [ 838.797116][ T54] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 838.808345][ T54] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 838.821090][ T54] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 838.843034][ T54] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 838.853114][ T54] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 838.866960][ T54] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 838.891378][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.143222][ T54] usb 2-1: usb_control_msg returned -71 [ 839.163659][T21308] netlink: 'syz.5.3923': attribute type 1 has an invalid length. [ 839.175057][ T54] usbtmc 2-1:16.0: can't read capabilities [ 839.197130][T21308] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3923'. [ 839.211413][ T54] usb 2-1: USB disconnect, device number 120 [ 839.455256][ T9] gspca_sunplus: reg_r err -110 [ 839.460430][ T9] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 839.753704][T21317] netlink: 'syz.5.3930': attribute type 5 has an invalid length. [ 839.763793][T21317] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.3930'. [ 839.961233][T17147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 839.973028][T17147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 839.983571][T17147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 839.992843][T17147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 840.000627][T17147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 840.107712][ T10] usb 1-1: USB disconnect, device number 10 [ 840.140667][T20457] udevd[20457]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 840.224947][T15291] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 840.271124][T21331] netlink: 'syz.0.3933': attribute type 1 has an invalid length. [ 840.279670][T21331] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3933'. [ 840.321692][T21321] chnl_net:caif_netlink_parms(): no params data found [ 840.384555][T15291] usb 6-1: Using ep0 maxpacket: 16 [ 840.401487][T15291] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.413799][T21321] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.424092][T21321] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.433350][T15291] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.443497][T21321] bridge_slave_0: entered allmulticast mode [ 840.449939][T15291] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 840.456969][T21321] bridge_slave_0: entered promiscuous mode [ 840.459041][T15291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.468950][T21321] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.481112][T21321] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.483452][T15291] usb 6-1: config 0 descriptor?? [ 840.488841][T21321] bridge_slave_1: entered allmulticast mode [ 840.503560][T21321] bridge_slave_1: entered promiscuous mode [ 840.552765][T21321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.566478][T21321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.606256][T21321] team0: Port device team_slave_0 added [ 840.615224][T21321] team0: Port device team_slave_1 added [ 840.651159][T21321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.658237][T21321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.685261][T21321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.697911][T21321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.705984][T21321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.722992][T21324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.732123][T21321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.762302][T21324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.796291][T21321] hsr_slave_0: entered promiscuous mode [ 840.803208][T21321] hsr_slave_1: entered promiscuous mode [ 840.810378][T21321] debugfs: 'hsr0' already exists in 'hsr' [ 840.816568][T21321] Cannot create hsr debugfs directory [ 841.207313][ T10] usb 5-1: USB disconnect, device number 107 [ 841.404829][T15291] usbhid 6-1:0.0: can't add hid device: -71 [ 841.410894][T15291] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 841.429526][T15291] usb 6-1: USB disconnect, device number 23 [ 841.614015][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 841.634008][ T10] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 841.783807][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 841.797208][ T9] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 841.810017][ T10] usb 5-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 841.820188][T21321] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 841.827789][ T9] usb 1-1: config 0 has no interface number 0 [ 841.834489][ T10] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 841.846540][ T9] usb 1-1: config 0 interface 12 has no altsetting 0 [ 841.856345][ T9] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 841.869667][T21321] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 841.877446][ T10] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 841.889059][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.901978][T21321] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 841.910743][ T9] usb 1-1: Product: syz [ 841.915484][ T10] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 841.927004][ T9] usb 1-1: Manufacturer: syz [ 841.931654][ T9] usb 1-1: SerialNumber: syz [ 841.945556][ T9] usb 1-1: config 0 descriptor?? [ 841.966961][T21321] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 841.967459][ T10] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 842.012237][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 842.043845][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.104116][T17147] Bluetooth: hci0: command tx timeout [ 842.215352][T21321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.269422][T21321] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.273612][T21354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.302091][T21354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.312768][ T3014] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.320009][ T3014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.393181][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.400480][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.411280][T21356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.430497][T21356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.549676][ T10] ath6kl: Failed to submit usb control message: -71 [ 842.593488][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 842.593520][ T10] ath6kl: Unable to send get target info: -71 [ 842.594542][ T10] ath6kl: Failed to init ath6kl core: -71 [ 842.595104][ T10] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 842.614702][ T10] usb 5-1: USB disconnect, device number 108 [ 842.892943][T21321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.083403][ T54] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 843.265465][ T54] usb 6-1: Using ep0 maxpacket: 32 [ 843.283021][ T54] usb 6-1: unable to get BOS descriptor or descriptor too short [ 843.311785][ T54] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 843.341258][ T54] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 843.371023][ T54] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 843.402996][ T54] usb 6-1: config 128 has no interface number 0 [ 843.403024][T21425] ------------[ cut here ]------------ [ 843.409337][ T54] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 843.409368][ T54] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 843.409391][ T54] usb 6-1: config 128 interface 127 has no altsetting 0 [ 843.434424][ T54] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 843.437182][T21425] kernel BUG at mm/swap_cgroup.c:78! [ 843.458411][T21425] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 843.464647][T21425] CPU: 0 UID: 0 PID: 21425 Comm: syz.0.3936 Tainted: G L syzkaller #0 PREEMPT(full) [ 843.475577][T21425] Tainted: [L]=SOFTLOCKUP [ 843.479924][T21425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 843.490045][T21425] RIP: 0010:swap_cgroup_record+0x19c/0x1c0 [ 843.495842][T21425] Code: 02 e9 6d ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 35 ff ff ff 4c 89 f7 e8 ff 79 f6 ff e9 28 ff ff ff e8 55 a9 8f ff 90 <0f> 0b e8 4d a9 8f ff 4c 89 f7 48 c7 c6 60 f7 98 8b e8 0e b9 f6 fe [ 843.515432][T21425] RSP: 0018:ffffc9000c6f6700 EFLAGS: 00010087 [ 843.521477][T21425] RAX: ffffffff8231516b RBX: 0000000000000144 RCX: 0000000000080000 [ 843.529427][T21425] RDX: ffffc9000fb1e000 RSI: 0000000000043c65 RDI: 0000000000043c66 [ 843.537386][T21425] RBP: 0000000000000005 R08: 0000000000000003 R09: 0000000000000004 [ 843.545357][T21425] R10: dffffc0000000000 R11: fffff520018decd0 R12: dffffc0000000000 [ 843.553314][T21425] R13: 0000000000000000 R14: ffffc9000b27c000 R15: 000000000000000b [ 843.561292][T21425] FS: 00007f5c4ba676c0(0000) GS:ffff8881259bb000(0000) knlGS:0000000000000000 [ 843.570232][T21425] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 843.576893][T21425] CR2: 00007f5c4ba66f98 CR3: 000000005b362000 CR4: 00000000003526f0 [ 843.584853][T21425] DR0: 0000000000000000 DR1: 000000000000afe8 DR2: 0000000000000083 [ 843.592805][T21425] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 843.600761][T21425] Call Trace: [ 843.604023][T21425] [ 843.606936][T21425] memcg1_swapout+0x2fa/0x830 [ 843.611605][T21425] __remove_mapping+0xac5/0xe30 [ 843.616435][T21425] shrink_folio_list+0x28a8/0x5200 [ 843.621564][T21425] ? __pfx_shrink_folio_list+0x10/0x10 [ 843.627013][T21425] ? css_rstat_updated+0x239/0x520 [ 843.632107][T21425] ? __pfx_css_rstat_updated+0x10/0x10 [ 843.637547][T21425] reclaim_folio_list+0xeb/0x4e0 [ 843.642471][T21425] ? __lock_acquire+0x6b6/0x2cf0 [ 843.647398][T21425] ? __pfx_reclaim_folio_list+0x10/0x10 [ 843.652954][T21425] ? lru_gen_update_size+0x818/0xd20 [ 843.658240][T21425] ? __mod_zone_page_state+0xd7/0x140 [ 843.663680][T21425] ? lru_gen_del_folio+0x359/0x540 [ 843.668785][T21425] reclaim_pages+0x454/0x520 [ 843.673358][T21425] ? __pfx_reclaim_pages+0x10/0x10 [ 843.678457][T21425] ? madvise_cold_or_pageout_pte_range+0x1977/0x1ce0 [ 843.685110][T21425] madvise_cold_or_pageout_pte_range+0x19a0/0x1ce0 [ 843.691595][T21425] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 843.698420][T21425] ? css_rstat_updated+0x239/0x520 [ 843.703515][T21425] ? __pfx_css_rstat_updated+0x10/0x10 [ 843.708959][T21425] ? __lock_acquire+0x6b6/0x2cf0 [ 843.713877][T21425] walk_pgd_range+0x1037/0x1d30 [ 843.718713][T21425] ? __lock_acquire+0x6b6/0x2cf0 [ 843.723641][T21425] ? __pfx_walk_pgd_range+0x10/0x10 [ 843.728821][T21425] ? folios_put_refs+0x58b/0x670 [ 843.733755][T21425] __walk_page_range+0x14c/0x710 [ 843.738682][T21425] ? folio_batch_move_lru+0x39b/0x420 [ 843.744035][T21425] walk_page_range_vma_unsafe+0x34c/0x400 [ 843.749737][T21425] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 843.755958][T21425] ? mlock_drain_local+0x79/0x480 [ 843.760964][T21425] ? walk_page_range_vma+0x6b/0x90 [ 843.766057][T21425] madvise_vma_behavior+0x3132/0x4170 [ 843.771410][T21425] ? __update_page_owner_handle+0x5a/0x570 [ 843.777211][T21425] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 843.783782][T21425] ? __page_table_check_zero+0x6a/0x3e0 [ 843.789317][T21425] ? __page_table_check_zero+0x6a/0x3e0 [ 843.794846][T21425] ? __page_table_check_zero+0x6a/0x3e0 [ 843.800380][T21425] ? __page_table_check_zero+0x397/0x3e0 [ 843.806010][T21425] ? __page_table_check_zero+0x6a/0x3e0 [ 843.811538][T21425] ? post_alloc_hook+0x250/0x2a0 [ 843.816459][T21425] ? get_page_from_freelist+0x23a5/0x2440 [ 843.822158][T21425] ? __lock_acquire+0x6b6/0x2cf0 [ 843.827078][T21425] ? fs_reclaim_acquire+0x7d/0x100 [ 843.832169][T21425] ? mas_prev_slot+0xb31/0xbb0 [ 843.836912][T21425] ? find_vma_prev+0xe3/0x150 [ 843.841589][T21425] ? __pfx_find_vma_prev+0x10/0x10 [ 843.846681][T21425] ? page_table_check_set+0x148/0x610 [ 843.852027][T21425] madvise_walk_vmas+0x575/0xaf0 [ 843.856975][T21425] ? __lock_acquire+0x6b6/0x2cf0 [ 843.861904][T21425] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 843.867341][T21425] ? blk_start_plug+0x6f/0x1b0 [ 843.872089][T21425] madvise_do_behavior+0x38e/0x550 [ 843.877179][T21425] ? __pfx_madvise_do_behavior+0x10/0x10 [ 843.882812][T21425] ? down_read+0x274/0x2e0 [ 843.887217][T21425] ? madvise_lock+0x146/0x2f0 [ 843.891869][T21425] do_madvise+0x1bc/0x270 [ 843.896178][T21425] ? __pfx_do_madvise+0x10/0x10 [ 843.901004][T21425] ? lock_vma_under_rcu+0x42c/0x4a0 [ 843.906187][T21425] __x64_sys_madvise+0xa7/0xc0 [ 843.910928][T21425] do_syscall_64+0xec/0xf80 [ 843.915407][T21425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.921449][T21425] ? trace_irq_disable+0x37/0x100 [ 843.926450][T21425] ? clear_bhb_loop+0x40/0x90 [ 843.931107][T21425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.936978][T21425] RIP: 0033:0x7f5c4ab8f749 [ 843.941372][T21425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 843.960955][T21425] RSP: 002b:00007f5c4ba67038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 843.969357][T21425] RAX: ffffffffffffffda RBX: 00007f5c4ade6090 RCX: 00007f5c4ab8f749 [ 843.977320][T21425] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000200000000000 [ 843.985281][T21425] RBP: 00007f5c4ac13f91 R08: 0000000000000000 R09: 0000000000000000 [ 843.993233][T21425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.001303][T21425] R13: 00007f5c4ade6128 R14: 00007f5c4ade6090 R15: 00007ffeefbdcb78 [ 844.009263][T21425] [ 844.012272][T21425] Modules linked in: [ 844.016153][T21425] ---[ end trace 0000000000000000 ]--- [ 844.021589][T21425] RIP: 0010:swap_cgroup_record+0x19c/0x1c0 [ 844.027407][T21425] Code: 02 e9 6d ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 35 ff ff ff 4c 89 f7 e8 ff 79 f6 ff e9 28 ff ff ff e8 55 a9 8f ff 90 <0f> 0b e8 4d a9 8f ff 4c 89 f7 48 c7 c6 60 f7 98 8b e8 0e b9 f6 fe [ 844.046997][T21425] RSP: 0018:ffffc9000c6f6700 EFLAGS: 00010087 [ 844.053049][T21425] RAX: ffffffff8231516b RBX: 0000000000000144 RCX: 0000000000080000 [ 844.061007][T21425] RDX: ffffc9000fb1e000 RSI: 0000000000043c65 RDI: 0000000000043c66 [ 844.068956][T21425] RBP: 0000000000000005 R08: 0000000000000003 R09: 0000000000000004 [ 844.076908][T21425] R10: dffffc0000000000 R11: fffff520018decd0 R12: dffffc0000000000 [ 844.084860][T21425] R13: 0000000000000000 R14: ffffc9000b27c000 R15: 000000000000000b [ 844.092826][T21425] FS: 00007f5c4ba676c0(0000) GS:ffff8881259bb000(0000) knlGS:0000000000000000 [ 844.101752][T21425] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 844.108322][T21425] CR2: 00007f5c4ba66f98 CR3: 000000005b362000 CR4: 00000000003526f0 [ 844.116280][T21425] DR0: 0000000000000000 DR1: 000000000000afe8 DR2: 0000000000000083 [ 844.124234][T21425] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 844.132188][T21425] Kernel panic - not syncing: Fatal exception [ 844.138615][T21425] Kernel Offset: disabled [ 844.143010][T21425] Rebooting in 86400 seconds..