last executing test programs: 11m52.442227594s ago: executing program 3 (id=777): execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 11m52.240671686s ago: executing program 3 (id=778): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r1, 0x40047452, 0x0) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x1, 0x12c) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r5, 0xc008ae91, &(0x7f00000000c0)) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r2, 0x0, 0x2) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) close(r3) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 11m51.999078053s ago: executing program 3 (id=780): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000180)=0x9, 0x4) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x18, &(0x7f0000000800)={0x0, 0x1, 0x6, @random="be189782b5ba"}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) close(r3) fgetxattr(r3, &(0x7f0000000380)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r4, 0x29, 0xcf, 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000003180)={0x2020}, 0x2020) 11m51.925443644s ago: executing program 3 (id=781): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9e5237125374bc3}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4020}, 0x800) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000b00)={'#! ', './file1/../file0', [{0x20, '1\x01\x9e\x00\x00\xf6\xb2\xa1\xec\x13\vi\x06\x05cZe\x87\xf6\xbae\xf0\xe3?\x01\x83\f\x0e\xac\xec8\x8e\x8b\xce\xe6\xc1\xda\xf1\xb6\xfe\xb5D\xf1\xea^\\}]s}\xe4zB|\xd9>.TF\xd3g\x90\xafa\x13\xeb\xbbN\xb7i\v\x82\x02\xfb\x95\f\xe8J\xef\xee\xaf\xea\xf3]<\xd9\xa5\x02\n\xaa\xe2\xcdZ\xda\x85\xdd*\x13\x0e&.\x1a\xaf\"\x11\x97zS\xbc\xaan~/U\xe0>\xfc\x17S\x9b\xf5\xf7\xdb\xbeH\xc2\v\xa3r\a\xdaC\xc9\xee{\xa3\xd2IL\xe4\")\xd9s9Y&UiO\xcd\xf4\xd3>\xd2\x98\x8d\x1d~\xd3}\x90\xb3i\xff\xff-\x7f\xb9Jdq(\xd8\xfe\x9cu\x12\xe9\x15y \x91\xc2\xcfN\xc0\x9c\xbb8x#\xc8L\xbcd\x00'/210}, {0x20, '\x12'}, {0x20, '\x1b_G\x86~)\x18\x95\x96\xb9\xff\xa4W\xf4]\xea\x88\xeb;\n:\x19\xb0\xb5Fn\xae\xbc\x047/\x1d\xe6,b%\xfd_W\x1f\xb8\x0ex\xe5\xdd0\xd2\x11\xc4\xfc\x13\xa7\x1du\xa4\xc8_7Rv\x1e\x02\xca\x1am\xe6uW\xc50\x80F$\x9cXV\xe6c\xb6\xc0\xf3\x17\x93\xe1a_'}, {0x20, '\x7f7\x8e\xad\xfe\xde\x18(\x14&\xc7\xd8Q\x95\xdb\x84\x82\xa9C|vh\xe9\xa3\x8cc\xce\xc7\x99#e\xf5\x99\xde\xe6\xbcg\xf8_[%*\x91\x85\xa4S\x02\xfb\xb9\x13r\xdao8\xec\x8e\x00\x0f\x01\xeb\xf5\xdb,\xe3A\x1a\xef\xeb\x90t\x1bG\x1c\xd9\xd4$ PGo\x10T7#\xc9\xa89f\x881G\xb2\xaa\x80ME\xe8V\x1c\x1b*\x04WOP\xff\xba\'k\x93s\xa1e\xed$\"?\xc7\xda\xb2S\xd28-K\x95\xfe;\x03j\xd5\x1e\xf0\xc8\xb4E\x9a\x9f\xd0Q\xb9\x99\xdc^\xfc\x92\xa5\xb3\n\xfc/\x0f\x00'}, {0x20, 'D\xd4 ,xq\x92z\x12\xf3q`\xf2\x9f\x04\xca\xdf\x1bpL\xea\xd3\x7f6t8\xc9\xb8\xdc\x1b?s\xaf\a\xf3\x97\xac\xa33\x10\xea\xac\xeb\xd3Uyog\xc6\xcc\xea\xec0\xdfh\xd7\x00\x04E7\x1f/R\xc4\xb1g\xadt\xd3\xb3\xc7J\x15\xe7\r\xee\x99\xd7+\x9a\xafi\t\x19\xc3\x10\xb2Y\xba\xc5O\xca\'\xf4/\xde\v\x04Pzi\x8c(\x84K\x1f\xf9s\xc6\x9d\x92\xca\xac\xbd\xc6\x82\xc8W\x06\xcdC\x9c\xd4=r\a\x90\x87Y\xe15\x11hW\x8d!\xbb\xeb\xfee\xe5+\xc2\x01\x85\xe5\x8b=\xf2y`\x1c\x98\xec$\xdd\xef\x06>\xedd\xa74\x87u\x14J\x96\x1b\xcce\x10\xc1\xac\xbfag/\xf9FM\xa7dN\v\xc7x\x02\x92_\xb8'}]}, 0x29a) r4 = socket(0x1d, 0x2, 0x6) r5 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYRESOCT=r5], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r6, 0x4, {0x1, 0x1, 0x2}, 0x2}, 0x18) fstat(r4, &(0x7f0000000240)) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000480)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) 11m51.653638309s ago: executing program 3 (id=784): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/166, 0xa6}, {&(0x7f0000000140)=""/20, 0x14}, {&(0x7f0000000180)=""/72, 0x48}, {&(0x7f0000000200)=""/210, 0xd2}, {&(0x7f0000000300)=""/246, 0xf6}], 0x5, &(0x7f0000000480)=""/85, 0x55}, 0x8060) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000540)=0x0) timer_create(0x3, &(0x7f0000000580)={0x0, 0x36, 0x0, @tid=r1}, &(0x7f00000005c0)=0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x2, 0x4, @thr={&(0x7f0000000600)="94b7281b1e83bab99eaa9224b49cbaeb1aaf2e3863fd0b95413ed57424614fc8f6e71ce10d7fe52b26174f519c08b09375750daf9da993b123e04370defd7dfeb246f138fb1c48ad0fda36860f424c87a643742272d5c43ec211fe55d6fdc086da4107a7bc885497944ea7ca8eb9e843e7578019277201dbaff63f74a7758e3e85a402740b9ed0da666640d68f122836625eb2a5ebfde769ef92b9ed8931b156c85e586f3f8831680b00a0a6122f7d3cc86c4a7292251e1f8fee", &(0x7f00000006c0)="0b99a7de42c1a4685673a493a8a3472e5393f977cc923448cf36b7b14a4c87521963a28a0c26ee72b0d4ccad54bc0a6ac2bdf1ace625a45705e490fdd3"}}) r3 = creat(&(0x7f0000000740)='./file0\x00', 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r4, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048044}, 0x20000000) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f00000008c0)=0x1, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000900)={0x0, 0x0}) kcmp(r1, r6, 0x0, r0, r0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000980)=r6) close_range(r3, r0, 0x0) setitimer(0x1, &(0x7f00000009c0)={{}, {0x77359400}}, &(0x7f0000000a00)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000ac0)={'ip6_vti0\x00', &(0x7f0000000a40)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0xa5, 0x8bb, 0x20, @mcast1, @mcast2, 0x8, 0x10, 0x2, 0xfffffff9}}) sendmsg$xdp(r3, &(0x7f0000000d40)={&(0x7f0000000b00)={0x2c, 0x4, r7, 0xd}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000b40)="013fcf651082d85f0d9ca401e4665e731dc24363bcaffafb19daeeab34f30154d23106d9e7dc0bc939094641631ecc53e59c25744b818be8aaf6eaa72779a9f636002fb0f566b50ee2ba0c16732f39818448e3595245a7e8f7c164670a3c91eef98a0eafc6a7b666a4961531e4875a102be843d2ffe34817ebf1174ce0bc9051b8ba0232407b1c04a48132c56f81506453a00b059939733095be1f1bf54316b2", 0xa0}, {&(0x7f0000000c00)="6387d068fd80d1aafbfcfd776f1c1d87eba462462a10423a3e08163b848e3b2c8bc211554b5d90287d745ef684156ab78aa064a68871acabfca93ea0aff65683c539d983fe635ff468d16e6dc69bd074877cf5a9383f3d5828eb5146da82ca0c029e975d2acd65c4c109c5002842dcff82b1c70898960017214b663d95439cc50717f52de8ea09610fdf151ab438b4597aa1204744aac64c38061df6a6a8d608d51e811c58f668b4a7f0a8f62e0bfd652064a0d797c6c8ef433c834eef2fa7c5bcde29fd310eac0e3b87518fddc9ac5a9b68f2d80f197084254d99c363847c5480ed0a90c103e0d29fbddbd648d45ad532613f", 0xf3}], 0x2, 0x0, 0x0, 0xc000}, 0x4000880) r8 = syz_socket_connect_nvme_tcp() ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000d80)={r5, 0x2, r8, 0x5}) gettid() r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000e00)={'wg2\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000001300)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000e40)={0x454, 0x12, 0x200, 0x70bd2a, 0x25dfdbfc, {0x10, 0x6, 0x0, 0x3, {0x4e20, 0x4e20, [0xff, 0x6417, 0x5, 0x8], [0xfff, 0x4, 0x6, 0x1], r10, [0xa6, 0x53f]}, 0x80, 0x4faa}, [@INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "eda900aaf19f0179f33ab7ee88fa1866d10d48040acb99164d"}, @INET_DIAG_REQ_BYTECODE={0x20, 0x1, "16feb51ced433497fd942b35728b928f9616add737695e9b05c560ad"}, @INET_DIAG_REQ_BYTECODE={0xfa, 0x1, "e0471a122610072cc39a1b2460afeaa0e9dfaf8c56e3ec3b4730798611797952075031300a7183775e7170df39d9bacef4af2db16685f022aba81691eba4e41d818ab6e12a07ba940a9505dd0cc5fb8b174a9005a78d6505feeb814f81ef7aca20a0dfa6d47b487090fe4d06476e7238a216d020bcbb03aaf92fe00ec617461346d80c4ada8b09ba6cca264841cc0248b82e11e34723528a479e8280c3ee8d7c8bd46e5d143dabd597e54b8c153ae7303b087779237799c00e206d0c38594a3dde15674a2661bfb867d86598b90539c09580087f0f211ed2e9a26b9578a20f95dd0aae246f6c70ad14c533d867a96b062e5ce2aa215e"}, @INET_DIAG_REQ_BYTECODE={0xb2, 0x1, "13e31e73df5931d2d2517415dfd1310948ddfbfa7a5d9b9a0030a0c82fa46dbbe23b86327444b5e2ed95fe76c35ce267638eaa4e5cf1328487b6a5f78582f8c4e4628d07f8ae472100c54006f17607c6ced15a43f5c1b1e2a03fe06498e215f9375bf620387260f7d6de31144cbe8d78786ea22af14b1117b61b44fbc15542e3aa63c30173f0f485a8e1e6da16901e887b747cb3423d5eb1be44855c860bced408485510ab33138df301c4ade319"}, @INET_DIAG_REQ_BYTECODE={0xc7, 0x1, "a4a70785fffb5cfd76a0837b5e9ee6a77d968a59f9cf0d68acb41416e4850551d5a173fdaaa88e4c85872ee054263b9dc5772994736f9b568fa75d9522cdeb0704b86d24c7ac6d55e17f8f078202a0d7b8a0686416f982ac3b9f3188dd9c887f82afdf734a460d862d4083184d62caa4fb254e3a9b7a23db7f1e2d67d4490d937b784e807b04e3fbba58870883798d606b4a34671b854ad12cf70e8b537b783bde3018a6bd068ba1b3d6714afe66c73b8a0fd4d7f3a76ba4ffb30775a921fcdf00e7fe"}, @INET_DIAG_REQ_BYTECODE={0x48, 0x1, "c6449ef2f2c1a97a227c1c893992a36d32357cbc6531b8b1a0a25a0a980392832c22092d6092fe3df81f89b979d990f28be8db9a03d36d5b3b38bb1b5807c39865692c02"}, @INET_DIAG_REQ_BYTECODE={0x51, 0x1, "db00486cecfcc4a6caead1d688bd4eb64615fd7907978cc3db2d2b994c2ae1eb4e88b363fa17acd070ac566ef4ccd75b70b7c5fae2f512282084b04977db721682617281043a2c0ba4416932db"}, @INET_DIAG_REQ_BYTECODE={0xb4, 0x1, "ba91cca8ab69e228d96695eafa06d409fe745f93d93c1d87225f2503a45e5cb94c0c7eebb3a60ae3deea9d299dbeedebb2f7c1ed30efb1ee80bbbc4df555c5b0b4edaa71a5216e72ef58951002eaf8311b6a72e4e0ba27f960419826a9d40793709b496c6ee9b02f547023b6caec4bd839ddd5272da82d9c401e9aada603d32f30172565f619de4a6c2a67f9c2a2204b9ef5088af3f1db87a387c0eedbbfc899de717307851f3690240cdfbb330e9a4c"}]}, 0x454}, 0x1, 0x0, 0x0, 0x4008045}, 0x1) ioctl$NILFS_IOCTL_GET_VINFO(r8, 0xc0186e86, &(0x7f0000001440)={&(0x7f0000001340)=[{0x400, 0x1, 0x1000, 0x9}, {0x8000, 0x2, 0xc, 0x1}, {0x8000000000000000, 0x9, 0x8, 0x9}, {0x7, 0x0, 0x6feab5de, 0x2}, {0x3, 0x5, 0x6, 0x5}, {0x3e, 0x5000, 0xdfde, 0x9}, {0xffffffffffff18da, 0xfffffffffffffff7, 0x400, 0x5}, {0xdc, 0x0, 0x5, 0x1}], 0x8, 0x20, 0x343, 0x3}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000001700)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001500)={0x190, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x10}, 0x0) timer_delete(r2) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000001740)=0x6, 0x4) syz_usb_connect(0x5, 0x4a3, &(0x7f0000001780)={{0x12, 0x1, 0x250, 0xea, 0x83, 0xfc, 0x0, 0x582, 0x27, 0xbcbb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x491, 0x2, 0x7, 0x81, 0x10, 0x3, "", [{{0x9, 0x4, 0xb7, 0x1, 0x6, 0x83, 0xf, 0x6d, 0x7, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xaa5, 0x8, 0x4, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3ba, 0x9, 0x1, 0xa}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x14, 0x2, 0x1, 0xd, "", "d0"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x2, 0x0, 0xd4, "c6e987f7f3"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x2, 0x6, 0x4}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "448fb0"}, {0x5, 0x24, 0x0, 0x3a}, {0xd, 0x24, 0xf, 0x1, 0x3d4, 0x1, 0x3, 0x5}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x89}, @mdlm_detail={0xfc, 0x24, 0x13, 0x6c, "fa2a510efcd3c9c2929cdf67866429c54384bcf8c9d85ae7b3fe3c1918e344a3703568c2cbe45ad04701db8e1667c9c562ca4d41d94a05f9f8c288ddeef721db0b3562610c44498f3a267efbf9c5d0cba6e2aab63551bb0c37ffc91980eb4589508e903e4c7356857385542fbfa4f51afdfcaa948160143735355f1350df2d43e999332324ba42ddc0c6ab8f019a6597685daba151cb40b7b7de2cf0741f9947b58dba21e7c742679ee2a8deaa2995f4b488e5ceaeff4bf9ac7d4b7b2ca031f6ea602f40064a3dc4438a1be1336bd0f5007876a07413fb02bdd91425c329d4edc1142b59a9c2eace1a56c43432746b610c7782dce12bca42"}, @ncm={0x6, 0x24, 0x1a, 0xe, 0x3d}, @dmm={0x7, 0x24, 0x14, 0x22, 0x1000}, @country_functional={0xa, 0x24, 0x7, 0x13, 0x6, [0x400, 0x81]}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x4, 0x9}]}], [{{0x9, 0x5, 0x80, 0x0, 0x20, 0x4, 0x3, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x873}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0xde1}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x6, 0xfd, 0x9, [@generic={0xb5, 0x5, "547398a216ce6c287dc82095b47066a7476b8ca0a94c5bb5114fb59938494323a82b8798cbef24bf308f32c7e0e7927573711bf2aee584c132286997effc12d5e276f0ffa19e5ba7936a9e2a79a436c1fb95b13692a7690f1a61828d0104625287019b9f278399f8fa61135fa924866ac6d03f8fe1cf027b0d56cf9f59c9683214b85abf1ad65a1c366dba2951d0a9d07f606b9e24ce960b09ab04ae1caf6f9d2eb98813019516c4eddd01fa81bd0e31ea5a3a"}, @generic={0xf6, 0x4, "7a18815345c95f1dbb63d1c977ad4760740cc35fd5c9ac2c8988339bc22eb27b73b6ac34e44e6403f713e8e8e6e6a1c15c92968ed410c17be47e0b523f93a1d3d0dd909ef8530a80557641f215efe2ea1b6ec826f754a50128e06242c2aef14e74c574155cc2446836352bac6fed478515ac8829706792c4babcefaa669df055dd56e281f80cdccfc79300b0c478e9079587641cab1c9704ab2088659e0e314c460824cdccb5b01e960541a6b408c6dfcd092da494497161cadf2dced6bd3eec2f40dd905760c748b62f55e2fe7dcb30e3c41cf23c20d6cc8619c39944ea51c37f5d834514328bd7ed7b05f9614eac1a4228e73f"}]}}, {{0x9, 0x5, 0xf, 0x1c, 0x8, 0x8, 0x7f, 0xf, [@generic={0xd2, 0xc, "cef71968b0b83b49c8f0e16b80baeb09cac973beeee4232bdd1b80288a142e52cebef994ba91537588469307877626d59598ffee62ee746b6adf47c0ae3c4619e441e0fd17956c1677d51618546fc1fb2dab5ebedeb7e9aec3c8b2f31113efd2ecb67e6ae695b69ddb68ede25bafca3e4fcf392e711eb5391a798cb0e3672ec701b76ecc15384251c7e260f6b804be6017174c514dbfd00a2dba03edff66f005cc16d35204c87cb9f79bb3161427e6621fe0d7f2d5b310d56d24746a2daf897b3d23944441aae3c26a94e51513c2d139"}]}}, {{0x9, 0x5, 0x75210f472f5b23cf, 0x0, 0x8, 0x5, 0x3, 0xd, [@generic={0xb, 0xe, "273a8378125a541337"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xdd5}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x6, 0xb8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xfa, 0xd}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x3, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfd, 0x1}]}}]}}, {{0x9, 0x4, 0xcf, 0x5, 0x0, 0x78, 0x5e, 0xfc, 0x40, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "a079"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xa, 0x1, 0xc2, 0x7}, {0x6, 0x24, 0x1a, 0xd25, 0x1}}]}}]}}]}}, &(0x7f0000001e80)={0xa, &(0x7f0000001c40)={0xa, 0x6, 0x200, 0xd, 0x0, 0x3, 0xef, 0x23}, 0x40, &(0x7f0000001c80)={0x5, 0xf, 0x40, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0x18, 0x5, 0x3, 0xf00, 0xa224, [0x30, 0xc0, 0xc0cf, 0x1013f00, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x4, 0x9, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x78, "fffbe601822816f3cb10e9adf7a506b5"}]}, 0x5, [{0x4b, &(0x7f0000001cc0)=@string={0x4b, 0x3, "0811669e52a823e379f7142f7eac06591ff8818abe613d6a8aa6ee9ae46d72e55ffa70184e9d0be440a6fab67f6b5f2074a28e47537810757e7bc2a984da197e61167d72ac3bdaa728"}}, {0x4, &(0x7f0000001d40)=@lang_id={0x4, 0x3, 0x445}}, {0x79, &(0x7f0000001d80)=@string={0x79, 0x3, "3582a66d7aa726fd87f22d06983c43905d28a2f39edc3ab9b68f9b39df53420d3e8c07e4d6c1f05e84813a8baece6325afd7e33b428e1858afb56289166b2eb3bde882da2ba9cb34cd9b931d1470fd96ad237d2797ebbe852c930384638e491bebe678bcf00fd3c8857d0587d3200155d8bf7c03e0529a"}}, {0x1e, &(0x7f0000001e00)=@string={0x1e, 0x3, "4b0953a8002428200ba4de14349cc73840be9db1824f7d466d4aff08"}}, {0x4, &(0x7f0000001e40)=@lang_id={0x4}}]}) socket(0x2c, 0x6, 0x8) 11m48.530794293s ago: executing program 3 (id=796): r0 = socket$unix(0x1, 0x5, 0x0) listen(r0, 0x787) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000580)={0x0, 0xb, 0xd8}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001380)={r2, "c7616ef640adc0979d48ee46ec30cbad"}) listen(r0, 0x2) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xb, 0x181301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001400010125bd7000fdd3df25011f08104e24"], 0x4c}, 0x1, 0x0, 0x0, 0x404c0dc}, 0x20008000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x800, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@noxattr}]}}) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r5, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040000) sendmsg$can_bcm(r1, &(0x7f0000000380)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={&(0x7f0000000280)={0x3, 0x114, 0xe93a, {}, {0x0, 0x2710}, {0x2, 0x0, 0x1}, 0x1, @canfd={{0x3, 0x1}, 0x16, 0x1, 0x0, 0x0, "3d2ece112a1b778ed3a4d0c06ca8ffd0131b2135c1d61e9c1e54e9f3f76421d63f9ad58ec322a9d6536ba986c1d243d26ee8d7848ac19655c32bf9334fc5d13f"}}, 0x80}, 0x1, 0x0, 0x0, 0x40090}, 0x804) 11m33.496866317s ago: executing program 32 (id=796): r0 = socket$unix(0x1, 0x5, 0x0) listen(r0, 0x787) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000580)={0x0, 0xb, 0xd8}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001380)={r2, "c7616ef640adc0979d48ee46ec30cbad"}) listen(r0, 0x2) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xb, 0x181301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001400010125bd7000fdd3df25011f08104e24"], 0x4c}, 0x1, 0x0, 0x0, 0x404c0dc}, 0x20008000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x800, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@noxattr}]}}) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r5, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040000) sendmsg$can_bcm(r1, &(0x7f0000000380)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={&(0x7f0000000280)={0x3, 0x114, 0xe93a, {}, {0x0, 0x2710}, {0x2, 0x0, 0x1}, 0x1, @canfd={{0x3, 0x1}, 0x16, 0x1, 0x0, 0x0, "3d2ece112a1b778ed3a4d0c06ca8ffd0131b2135c1d61e9c1e54e9f3f76421d63f9ad58ec322a9d6536ba986c1d243d26ee8d7848ac19655c32bf9334fc5d13f"}}, 0x80}, 0x1, 0x0, 0x0, 0x40090}, 0x804) 11m25.141481344s ago: executing program 2 (id=937): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x22e403) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES16=r0], 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="00051f2000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="00051f2000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11m23.612285473s ago: executing program 2 (id=944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2002) (async) syz_usb_connect$midi(0x5, 0x55, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000088c0d0c0040000102030109024300010102b0e80904000002010330070724030102020b0724018b00070006240201000309050f1720000901bd07250103c1ed02"], 0x0) 11m22.311559644s ago: executing program 2 (id=948): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x27, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000"], 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000100)={0x1, 0x2, 0x7fffffffffffffef, 0x2}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f93b2938f8d2a9000070900be008300000000"], 0x0}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000100)=""/95) read$midi(r0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x60442, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000140)={{&(0x7f000097b000/0x2000)=nil, 0x2000}}) 11m19.293462668s ago: executing program 2 (id=955): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) lstat(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x1, r1, 0x1c, 0x1, @ib={0x1b, 0x8, 0xa3b4, {"fe5dcf3308ba4ff55cef6d30838914f1"}, 0xdf6, 0x81, 0x9}}}, 0xa0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) setresuid(0xee00, 0xee00, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') 11m19.244172904s ago: executing program 2 (id=956): madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x38, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000026c0)='net/packet\x00') preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000000)={0x0, 0x3}) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001500010000000000000000000a00000004"], 0x44}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r8, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r7, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r9, 0x0, r8}) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000140)=0x9, 0x4) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x400000b5, 0x0, 0x6b7d}]}) mprotect(&(0x7f0000363000/0x2000)=nil, 0x2000, 0x2) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='qnx4\x00', 0xbac042, 0x0) 11m18.906168998s ago: executing program 2 (id=957): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x6, 0x3, 0x3, 0x4, 0xc, 0x0, {0x1006, 0xfffffffffffffffd, 0x80000000000, 0x80000000004, 0x400000000000, 0x4, 0x5, 0x9, 0x1, 0x1000, 0x7, 0x0, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000001480)=""/4096) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000140)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4c}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)={0x6e8, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe2c, 0x46}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x548, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2}, @device_b, @device_a, @initial, {0x5, 0x6}}, 0x0, 0x4, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0xe6, "ad395852539188dd57d772763229c67f94cf64470bb103eab46410a687f655bc17a66f22cc7d0f273690056740f277468775dc76a7d971f1e7453effdb10faaddbf22d33c2b651da0493edc42e5a86ce322b96cc63268d07f62348edc6ba2d8af13cc807509f836a8b57e9def6f46bb25d9644c877550c917227177bbd257641829530780a40d02fcd027a6b1f0bcac600cf6804b710553ff518bc7a6ea6f88af9e2ea57f393fa808da8f1637cd3bfc611498c675da420e6487402fdd54f6d3e9d8219fcef069daf163659ddd6f3d4b3659e74dbdd2aec40b9a11a969cb6820b75f2e2e98dfd"}, {0xdd, 0xe8, "0d5e2606be1d5f182ad9bf5b9581c67da8a695faf4ba84e21a4af056516290030b87778959062c6334207181beeaebc826047b247abb6d8f66afcb1084ba3a28c0329e9034c1b78335afee908bab54d6902588fb3e83376ed52b366e2d43a239143b636742edba65dff989c8f82ab15e2e6910428cd7462b971bdd056b8190b4de652af81816db1816a5f9706ba16a01d786a90f188b6498d87231a673d31eda9ea6056ee65899b59295d6ae398d3ab30b16f2db9fcb1c871f28dab77979d9ee7b5228d8780103f2d553b7cfbf15214d51213367ed4efa5b266b922a1aebbb27d7f6d7bfc9769e17"}, {0xdd, 0x7d, "2bb0fd5a7bce697b00bfd545c8c0a8607abada696737cb0c73ae5b96387f85b3f0e6d86e569c11925566611a06e11db213f5ed0fb49e038196b449396b8fc049c7adc3f52c68ca569af1b8f5f902f6dfa8d30f9a20ae07f170473376f28a4d20eea2f59d65aa19fde6679ec0404b59a3907639fd34d555ab35a8adf2e7"}, {0xdd, 0xdd, "337de4a9ba0f5bccacc5829af3be324d1b51d68289d1a49b39080b6b168fdf268e095636f4c484ed214ed52e81873972767f92d7fb073ec69c865e13d9754e1a0b1864bb63189e81156894338ce2c6578dff1491cea0d0454d626dfe471dec8b01458070fd376818e30602f33fbbdda4575229a079362f1828d29fac91a0eee3e736ab5ee33e52b4fc350bf93348ff3f6dfbdfca5cf53a8887ca85d51530c56071d0f9cf8224b23ab36b39547923d67847ea67651647008d66142c726393487b5633dc3684b69bd8d004f3e7bc848baf50655dd92c8646a0496ea51d93"}, {0xdd, 0x47, "099414c93c3b45a4a7f252a869d574da1d7e845baac4d120bb04c7b7eb190bb438123cb7a6da6a509fef2d8f0c32bb54fa960de8b44186e526b2f2e6cf142fb40b063d9ea98e4d"}, {0xdd, 0x13, "769bd2c55befab49437ff627631421e3065864"}, {0xdd, 0xb3, "fd21d46967209039041fbdcde805abbd474ebb9ecf9f7c06c30223f913866c8f50b8b173bf37b012d124a9989563fbf1f782d5354e62626131f9e11b09e5b44d10f8bd2b78ffe03f31b336388504d29556bb5486fd8944c09a54cec08bc81eae78fa3693d572e8162852e70df53d0b7cd9eba9e74bd44d8bb3b46f2b29ccdba6375c0cb4b7387b677ab40f8899ce25729542ef040d7b8d5aa246a20a6ef0b1b7604dbfd8a89601465f1fb46ede3cce598de4fe"}, {0xdd, 0x18, "47b85202898b27ee8864c1f6ecdbf8bb5626861d1ecd9908"}, {0xdd, 0x2a, "2622f155a95c0105e829981fcd7c8302be8b3a507f9821d6dea7ebe9c5f3d7881ba15d4db07fbd0f496b"}, {0xdd, 0x95, "e54992a0e6a9291024497cc0a446a4bdd40740361f083ebdccc5e2b212a599e6aede3b2cf875ae2b6b28cc469d16b845d388e0263a3b4464d3ea1add90bf2875898afb4db8caf9d34f83af062762a343572bcda3d0b833b7c57dc68fc710add41eddaeba76b89f9b0a59292e885ba35120acae8c8c0533a5b7367895502e2be1c90cc25a5ba61fb3ed3192b6a8afe7077133f860fd"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfd3}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5fe}, @NL80211_ATTR_FRAME={0x155, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1}, {0x141}, @device_b, @device_a, @from_mac=@broadcast, {0x1, 0x1}}, 0x1, 0x1, 0x3f, @val={0x10, 0x1, 0x70}, [{0xdd, 0x49, "30e04e43778f5faf720c1a7ceec5e3a90d6bb40f421fd8543aa9744914adb6351092dbbe2d6c2be7fadf8f1ec4e3c9912ce9e091786384836434d33eccaff25ce77166b55f8b94190c"}, {0xdd, 0xe3, "0c38d9c3f1ca9c835daf155991652c695946571ba2ce5c4c289be110e0706460ff4c3de4b8895a222ee69126d3c18e978faa0981151e2a73d1b2949b54812cb58c7684cb2681577152e6a5fb1d08c7fdc89d5b8720c9df5f6dcb9e721da81ae9d3ed8eb6f947dbf8f2e907aa20762ad36fff55ef3ff6b093b780cf8aa49d2c5bdc133b9e60c4714a3c295185541965418b6922354c2473a8033ed7cf62dd1aa738404ec2dd7f0143eada78262127e26a19e6e6e04aa72a3aed19c2c6febbf9b4f2f44cc321b7fe6c1111982bce1d323c6d436f3faa1354dea861ec54d83d670083652c"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xa47}]}, 0x6e8}, 0x1, 0x0, 0x0, 0x20008044}, 0x4000050) 11m18.620990791s ago: executing program 33 (id=957): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x6, 0x3, 0x3, 0x4, 0xc, 0x0, {0x1006, 0xfffffffffffffffd, 0x80000000000, 0x80000000004, 0x400000000000, 0x4, 0x5, 0x9, 0x1, 0x1000, 0x7, 0x0, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000001480)=""/4096) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000140)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4c}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)={0x6e8, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe2c, 0x46}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x548, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2}, @device_b, @device_a, @initial, {0x5, 0x6}}, 0x0, 0x4, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0xe6, "ad395852539188dd57d772763229c67f94cf64470bb103eab46410a687f655bc17a66f22cc7d0f273690056740f277468775dc76a7d971f1e7453effdb10faaddbf22d33c2b651da0493edc42e5a86ce322b96cc63268d07f62348edc6ba2d8af13cc807509f836a8b57e9def6f46bb25d9644c877550c917227177bbd257641829530780a40d02fcd027a6b1f0bcac600cf6804b710553ff518bc7a6ea6f88af9e2ea57f393fa808da8f1637cd3bfc611498c675da420e6487402fdd54f6d3e9d8219fcef069daf163659ddd6f3d4b3659e74dbdd2aec40b9a11a969cb6820b75f2e2e98dfd"}, {0xdd, 0xe8, "0d5e2606be1d5f182ad9bf5b9581c67da8a695faf4ba84e21a4af056516290030b87778959062c6334207181beeaebc826047b247abb6d8f66afcb1084ba3a28c0329e9034c1b78335afee908bab54d6902588fb3e83376ed52b366e2d43a239143b636742edba65dff989c8f82ab15e2e6910428cd7462b971bdd056b8190b4de652af81816db1816a5f9706ba16a01d786a90f188b6498d87231a673d31eda9ea6056ee65899b59295d6ae398d3ab30b16f2db9fcb1c871f28dab77979d9ee7b5228d8780103f2d553b7cfbf15214d51213367ed4efa5b266b922a1aebbb27d7f6d7bfc9769e17"}, {0xdd, 0x7d, "2bb0fd5a7bce697b00bfd545c8c0a8607abada696737cb0c73ae5b96387f85b3f0e6d86e569c11925566611a06e11db213f5ed0fb49e038196b449396b8fc049c7adc3f52c68ca569af1b8f5f902f6dfa8d30f9a20ae07f170473376f28a4d20eea2f59d65aa19fde6679ec0404b59a3907639fd34d555ab35a8adf2e7"}, {0xdd, 0xdd, "337de4a9ba0f5bccacc5829af3be324d1b51d68289d1a49b39080b6b168fdf268e095636f4c484ed214ed52e81873972767f92d7fb073ec69c865e13d9754e1a0b1864bb63189e81156894338ce2c6578dff1491cea0d0454d626dfe471dec8b01458070fd376818e30602f33fbbdda4575229a079362f1828d29fac91a0eee3e736ab5ee33e52b4fc350bf93348ff3f6dfbdfca5cf53a8887ca85d51530c56071d0f9cf8224b23ab36b39547923d67847ea67651647008d66142c726393487b5633dc3684b69bd8d004f3e7bc848baf50655dd92c8646a0496ea51d93"}, {0xdd, 0x47, "099414c93c3b45a4a7f252a869d574da1d7e845baac4d120bb04c7b7eb190bb438123cb7a6da6a509fef2d8f0c32bb54fa960de8b44186e526b2f2e6cf142fb40b063d9ea98e4d"}, {0xdd, 0x13, "769bd2c55befab49437ff627631421e3065864"}, {0xdd, 0xb3, "fd21d46967209039041fbdcde805abbd474ebb9ecf9f7c06c30223f913866c8f50b8b173bf37b012d124a9989563fbf1f782d5354e62626131f9e11b09e5b44d10f8bd2b78ffe03f31b336388504d29556bb5486fd8944c09a54cec08bc81eae78fa3693d572e8162852e70df53d0b7cd9eba9e74bd44d8bb3b46f2b29ccdba6375c0cb4b7387b677ab40f8899ce25729542ef040d7b8d5aa246a20a6ef0b1b7604dbfd8a89601465f1fb46ede3cce598de4fe"}, {0xdd, 0x18, "47b85202898b27ee8864c1f6ecdbf8bb5626861d1ecd9908"}, {0xdd, 0x2a, "2622f155a95c0105e829981fcd7c8302be8b3a507f9821d6dea7ebe9c5f3d7881ba15d4db07fbd0f496b"}, {0xdd, 0x95, "e54992a0e6a9291024497cc0a446a4bdd40740361f083ebdccc5e2b212a599e6aede3b2cf875ae2b6b28cc469d16b845d388e0263a3b4464d3ea1add90bf2875898afb4db8caf9d34f83af062762a343572bcda3d0b833b7c57dc68fc710add41eddaeba76b89f9b0a59292e885ba35120acae8c8c0533a5b7367895502e2be1c90cc25a5ba61fb3ed3192b6a8afe7077133f860fd"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfd3}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5fe}, @NL80211_ATTR_FRAME={0x155, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1}, {0x141}, @device_b, @device_a, @from_mac=@broadcast, {0x1, 0x1}}, 0x1, 0x1, 0x3f, @val={0x10, 0x1, 0x70}, [{0xdd, 0x49, "30e04e43778f5faf720c1a7ceec5e3a90d6bb40f421fd8543aa9744914adb6351092dbbe2d6c2be7fadf8f1ec4e3c9912ce9e091786384836434d33eccaff25ce77166b55f8b94190c"}, {0xdd, 0xe3, "0c38d9c3f1ca9c835daf155991652c695946571ba2ce5c4c289be110e0706460ff4c3de4b8895a222ee69126d3c18e978faa0981151e2a73d1b2949b54812cb58c7684cb2681577152e6a5fb1d08c7fdc89d5b8720c9df5f6dcb9e721da81ae9d3ed8eb6f947dbf8f2e907aa20762ad36fff55ef3ff6b093b780cf8aa49d2c5bdc133b9e60c4714a3c295185541965418b6922354c2473a8033ed7cf62dd1aa738404ec2dd7f0143eada78262127e26a19e6e6e04aa72a3aed19c2c6febbf9b4f2f44cc321b7fe6c1111982bce1d323c6d436f3faa1354dea861ec54d83d670083652c"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xa47}]}, 0x6e8}, 0x1, 0x0, 0x0, 0x20008044}, 0x4000050) 5m6.752767877s ago: executing program 1 (id=3150): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x100001, 0x80001) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x0, r3}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x0, r3}) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) 5m6.149134269s ago: executing program 1 (id=3151): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x152) (async) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) syz_usb_control_io$uac1(r3, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0003b8000000b803"]}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300020c0000000000000000000000030006000004000002000000000000000000000000000000020001000000000000000800000000c0030005000000000002000000ac14ffaa"], 0x60}, 0x1, 0x7}, 0x90) (async) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 5m5.582732354s ago: executing program 1 (id=3154): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000800)={0x0, {0xfffffff9, 0x0, 0x8, 0x3, 0x3, 0xbb}}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000840)={'syz1\x00', {0x4f36, 0x2ac4, 0x1}, 0x18, [0x100, 0x1ff, 0x8, 0x0, 0x3, 0x10, 0x1800000, 0x7, 0xfffffff5, 0x4, 0x2d25aaaf, 0x6, 0x0, 0x61, 0x7, 0x9a, 0x37c, 0x8, 0x7, 0x5, 0xb, 0xf, 0xfff, 0x1, 0x0, 0x458a, 0x3, 0x6, 0x3, 0x0, 0x4, 0x101, 0x10001, 0x2, 0x9049, 0x3, 0x0, 0x9, 0x7, 0x1, 0x3, 0x8, 0x40, 0xbdb4, 0x1, 0x9, 0x81, 0x7, 0x62, 0x9, 0x7fffffff, 0x10, 0x2, 0x8, 0x2, 0x4008, 0x10000, 0x5, 0x7ff, 0x2, 0x1, 0x1, 0xffff, 0x6], [0x10001, 0x6, 0x4, 0x8, 0x3, 0x6, 0x128f00, 0xb488, 0xfffffff7, 0x0, 0x81, 0x8, 0x4d, 0x7, 0x401, 0xf03, 0x3, 0x1, 0x29, 0x8, 0xb, 0x1, 0xb7b, 0x7, 0x5, 0x4, 0xa1, 0xfffff000, 0x3ff, 0x10000, 0x6, 0x4, 0x7, 0xe, 0x7fffffff, 0x4, 0x5d2acac, 0x0, 0xaed, 0x10001, 0x91f, 0x1000, 0x100, 0x7, 0x4, 0x9, 0x6, 0xc00, 0x10, 0x7, 0x80000000, 0x2, 0x7d76, 0x2, 0x3, 0x5, 0x9, 0xffffffff, 0x4, 0xffff, 0x2, 0x3, 0x4, 0x8], [0x7, 0x5, 0x7fff, 0x1, 0x4, 0xe7c, 0x3ffc000, 0x6, 0x80000000, 0x9, 0x4, 0x7fff, 0x7, 0x4, 0x3, 0x7, 0x5, 0x800, 0x0, 0x5, 0x8, 0x0, 0x400, 0x7, 0x1ff, 0x2, 0x6, 0xfffff000, 0x2, 0x5, 0x0, 0x7, 0x0, 0xcc, 0x2, 0x5, 0x6, 0xf9, 0x8, 0x4, 0x3, 0x7fffffff, 0x1, 0x7, 0xcff, 0xc, 0x66, 0x9, 0x42f, 0x2, 0x4, 0x7f, 0x401, 0x5, 0x1, 0x7ff, 0x9, 0x9, 0x459, 0x5, 0x8, 0x0, 0x3, 0x1ff], [0x1, 0x6b, 0x8, 0x2, 0x6, 0xfffffff9, 0x80, 0x9, 0x6, 0x6, 0x5a666cf9, 0xac0e, 0x2baf, 0x79, 0x1, 0x5, 0x7, 0x2, 0x6, 0x8, 0x8, 0x0, 0x13, 0xfffffff7, 0x4, 0x5, 0x6, 0x8, 0x3, 0x80, 0xffff, 0x29dd, 0x80000001, 0x6, 0x401, 0x7, 0x9, 0x7, 0xb6, 0xfffffffa, 0x6aa0, 0x2, 0x4, 0x800, 0x9, 0x9, 0x6, 0x6, 0x9, 0x1000, 0xc590, 0x6, 0xe679, 0x776, 0x401, 0x100, 0x4, 0x1, 0x200, 0xfffffffb, 0xe8, 0x1, 0x7, 0x5]}, 0x45c) syz_init_net_socket$ax25(0x3, 0x3, 0xce) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f0000000700)=""/228, 0xe4}], 0x2}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000100)=0xa, 0x4) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB=' \n\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) mount(0x0, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x27, 0x0) ioctl$HIDIOCGRDESC(r5, 0x90044802, &(0x7f0000000000)={0xffffffffffffffef, "a5cf27d047ccbb89c1f100c4290def60e820cd8c04b1c593b61e33d495b06be46cdcd2311370ed9c07275742032bb2e44288967c70cd701ce0c12a45842875e8227d6cb40397f2eb7d49b3088b3ebc835bcca76ff6619e90cb54f7c521c679b25bcebda5fc398b9c05767955246311071fedaa9a378cc709642ac04d40ff2c71fa910da868fb3aed27b688940dc6a0d9d97ee7e3f9ec75fcbd8ca675953c2bea817becdc9dc1762e758c334d3b156be6923e78bbf23132ce96574d33cebd32164717acd9ede1791b611c80a8a693ed966363ce6da2a145d3dbd0a1"}) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f00000001c0)={'security\x00', 0x0, [0x3, 0xfffff800, 0xeb3a, 0x26]}, &(0x7f0000000300)=0x54) socket$pptp(0x18, 0x1, 0x2) 5m5.004703625s ago: executing program 1 (id=3157): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000780)=@in={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000180)={r4}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={r4, 0x6}, &(0x7f00000002c0)=0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140e90003600e41b0000900ac00060011000000a400050001", 0x39}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf252000000024002d8008000300080000000500040001000000050004000100000005000400010000000c0006000100000001000000b5164f84085f97159c9d77110514c365bd37d95ea68093c1d5c13013c6b23dc9b56a100622beebfa78f12c1b98affaf1d85bef826b1904067bd25a79ee6ddff27ca0cf69142355b91e36c40293684b2939d10d37739d40eea9a564eebca3c2846e3d9eedec65fd07966529dc800a4fd700693b85e1e896a1344274d0f68090"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x40) r7 = syz_usb_connect(0x1, 0x3f3, &(0x7f0000000980)=ANY=[@ANYBLOB="9d7b2153a5ae2a397a4ff5bd1f0f037a904324b3cd5766cc2e7cb86b005f2009ee71c00b2fd3a65b37d4012c2c19b2b604e4cd00f661ce856642160ac0b3070beafff99509b9f26e2995b255fe349d1b26840cf9166d5c27ed6eb11c94810df17ea6820c1e88f18b81efa07761e28e607a103f1dae4ce4c70d60bd52ed1aae3869b79b8728210fdc58556f6f0d2f", @ANYRESHEX=r5, @ANYBLOB="c2d67dfb970b8293d553176d2e3d09b98bb91603e0aeebad4abc7893e6a41779ec8e099c338ea3d2d54d578cbe5d62b192d16d0a61b05c7607b6661f599c1f8d4e68c694aa25b624a6cf9d9517cdf83c6e08c47c86d28aaea5ab2f9a4aa4ba172180f03a78cab06714a5d4c13dfb1e431bc31f95d91a88d30fd3660a21833ed2bc3187d875454edcbf60560da93f9087d6babb3ff15558d54e2f58202ef8e1a56a2057b7032cd9f7def913872795da93bb2af060d53e650ccd847c5b7a120c5aed7a213e71e4227c6ec8c42eee1fb1d95ca4e8c502622544ec4d662c3c68877b65fc9ee5ee8848e47cac507b1a50ce03d6f7575d5ddc367639f93983185ba5c0b5de2b6e896ee842f2e06f3b19104354f5cd9b30db65015333975297e79b771aa4648408acd41fe016d69cc9fabedd99cc852d9d98861afe85c6ca35a91d5d4f510048ab31cb6ad24f029068b95460f76b1314bc6b0b70582e28b71bfb572e97972b5c34a62191db7bc6d3ef210895b5b3e34ab9577e299d1bfff15e6767d582ae018b0bcda63870fdf7a5339a4d1acb1bedc4d6ca7d2bf2a2d7d69e10f79f0fbabfdfd1e784e24d6218e77f8db2ef186a9bd201c407fb730a81d0086cca3b2ddd83a387b26d20a42d211219d79c65b10818b39b8e67a1418c7142557112d27f31c2711641bbce25a30c57559efd74b74f0c58d5baefb574fe2e63555fe851c564a57cbe9f74e6f62a4004238211f1af79a74c55043cc3e67790fb95bf26095ac251f5889e8d8196d44189d13e6aa796a296f005f74d4b80c3a43616da3adc8ce6b04c3bfd56d8071933fe33ec45a4867160dda100a03a770155b411b1146c22cde90eacc7ee9f45ab4595e6580510ba50ad2f3de292cedb98f359b99338818144bd807e47fa50ffea738cafbcca1968541c0cedbc291d3f276416ffcfbada6933e2826ffc80a1d1c23f6ced6c08330d177f3b66a4713287f991b2322348ca11985bd64bcc756f1019df420e038a0e57f0fc197ca13b403078942c349c156e22e290f029e1dd4361a2e27feb95029aa83aed01636c9a901c55fb2c854e80a2ded8a6c45c0293e7936d12b68aea397c0cef540552fc0581b47ba69c7e358f6cdf299ae6be3926b831ae3bbee9b4710065feaa16f7ebc4d16de33b6ec539c6e50d92407cde8d3f32c82d13205167a83db3833d0daa1733cc110052b7178f920559649dcf660fe9e32d587090cd21f46961f06919ea11c841d2ddfedc7d81d01fb41ed5b5db110173e4b134bc537871d24d06725b180461f9d5c5b4a836cc19196b699dc73eb826fb6d41b8ccd05330b1467c489eee7b6dd9cffa7a5b68449aa0cb3974b4e287354dad4ecc80d43ab8fd7ef5e3142dcaf6128b100a3daa76d90cbc597c08e623daab3e271ec7c781b6e08a10a767bba60ccfe638798090e33411546819bee8e74ee8f2353c7aba383d980d79aaa88863fe06f2143e1a225526675a9092dcb8bf1daaaed58ec0731a9b4074f7dd367526db6845a3f1912ffb87f0312770c157b3baea747a3b900cc3ae7d341aeb1636cd42b430f790697f39b86da15800fbad1efe2af75204763a2980417f01b1f2d3a3d3cf5abe530650f42b4e2bb2e5f2b877925f161366cf1ae82966c14b0fdaad295d823689e84a978e55fdb8fd53ad596fdc691309c4e8957b719f8bcc473ec8dff39efcc2f5c97ee4c0527f2f8af466dc1ab285159061b36d5455f17868b197745510e6a1a786140cbb3a423b75615b281af5fdfe9cbafa74904260d96669c40f4119d3a23e1d96815c1f136c9317643c48de9225a566ec98174129d4a480625a19d6e184e76f9e02024f31684ff674fed30e1fd1564d1dac637e5757a90f7ef3004d224202c35c8889be2305e80617526a3d0b2723dd263196302b1e29d32ef243d63f70a7c0de8c658c55dbde4718c9b5d52143ad1a53b9b6c55df65e52f8b29fb2a69dee83acc995606a19e7702cfa5b047e967c3dbbc1f4914dd6c8dddd7d48004351812c09e0ce36f902c7ed68ed5b25af4aa939b23fcb0880f60bfdc48d3cee6966c1db782780ca04289bae4eb1c220f76d53c3ea734d2143e84975062f1eec8f83f20de3848c0974c62e44c399e73ac21a5efbff85de0941b4968e65bd21f0bab2a6d386148efbabfda0a421eb0aaf5b8b6f0f71c632a39c5c0b8192d11517d80d800dab8738e27a9d88860798a8c725ae04bca957008044147c7cc06b115e1e2a0f00c3f7b820d8d45f9033589f3e754009ca45136913cfca6da3ad2321507584a8b3c05b42ea9945dd12ba7cda360b7ceb61f91c257306008367ab16d0a7ea605dcf707a211056f0d31611155d4e88355e629e48090a5748505c960863a1a86f28ab3842b226b8be9720909867bd7b7ee28eefb75e0350e418febbaaa18c1c3fb329736aad6d6180f1b91cc2b833406edcfb04f86800cbb51b6f5121801dde4a73a4b816c278d428db02ec998e3500f6530df60cea4e5583a0dc6d201b1ec4aa65f589558397069561f0fd412635fa7e9a3b4ef8b41ac7f23c6884148a07715054edf33119b2d32750725eac849a2d686e347b00dd2a5be34f20fb5da98e69cc3519c8649242bcb975d8a5db600e5cbbe40975533919f93e3d239f757273e0b35da04ba1337c8062e1d1dff502b4761beb944cd89c6cbf3dc5406dd453bbbaf3eb8964fb6b56db56f6f8667e25f07840ad7b7cd4f979670000520a11627f908af8baea27062d0f3f4e67ae00456fc8cb4d4eddce73dd45e291c512d46ea62d233fc11a5544b3de2f2c31c87080c3cfca5a07e329300a64bfd3e96cbc745ed12ff188c59958d319b326476aad26ffb35b872e66aca70f4f9c06b97f349ad18682225dedc443e3501d7008c9c845cb686de31735555e048d1293257d3a2f909bbb5a1263cfc3b84263a08a1946358175c5143f6041535c9a1d9c57a17c99141e1f7651b8070951f08a2712b9e3976ba9c7c7349ea76ed3f65348db96c6cc1ac0038e6b1d044fe5179ae35f0eaa24cdfe50c3cf667e45cfd88be474a2f40ddac2f728961c84ba170948c4ccd8169c786abfaf94e1647cb06b58d3b76377dd441a8841717235f5d14dc69034aaa950d7bf99553ece533ad6f77ce2fc8bd051baf4707f0eaa20b90c2222f54c42ec0b7a22188538dd3fc84bb46297d74898176a232c99cb81043986fb37d6e4fec90afc942f9190d0cfa3b01b6a10bc4fce4ece6edb07c07118d35fcee6bd9751e6f1154f691012144cc794c8691b2cb36a54620b1c975782e2c2bf847eccafe7356d70fe77b75e0bcbcf8f6e5dd3f2ac9a6314cbe96acc5522ba2785751f88f02fb19a0a712c6c5ea3565fd591669533d5015b160ebd508a213e75685843461cbdfbc6995b3fdd63d11e16d85402677398b1961e533db600803018f629fe4221278f3a42302ca396f9af16fb5968c02981a405459fd878f973a7386ae1307892c48539ffff92b7c5ac4fef108ae92fa91c1c318b1d3aa1e002d0bb38d94dc2f18d85c7d6df05cbe6478c7949e762622196a8c66e0da2e9344996a3a1ab5bfd566d8990abd1a8169f7b7ea187fb89e0f661489a878dea7cb7d7fcb3f06ad1bebd943d169abc2ae48fe4f518425fabcf6bbf8d1f398e2a2b6759ffa6c3f59ae39c342e242c65237b80b2ed267f5768386c5c943e9ff0007cf8649ee94294a53d9fd299176f5318d079fc3209c48c2e9fbd8a01381d2dce1a31a187a77c469a305d79a16ac9fa26f3a5e826cb87fc7dc0804c4e9682f36ea2ac268a617a79df1caea919265c32929ef754ddcb3593809fbebb3bad59b982e4aba04b9fa0226c22a3c1ed4ecd0cd4771f67469e8cb2bcc73f5ede463d8e6ab0bb14916689f3e9f8daceea1b814eeca11f25d1a9461c4ef0b7ff6847befe762250a15e96c10db43b78bd0f12851ea2834eb0fa02fb7462be7433b2a319ec421b4b954ccb67172f348a47380834dccbb8d0f2adf42fd3665d8f0e4f318719cad40549f0183a37aceebc763aaf38bec6086b30a4b4085bcce37cb49e5150c631a57fba39e85e553c67027659286e3180d14b9c15ba535251f40ceda108f2771389e84c5c00ef82237f85afa051a12d40e366f835501097724e9ab2dbac876151a8d568a7aa4953ab65f6edbd4d0e3a527a6d7cb5f8be4d6b8bb611bde510c6ffe8c0b17c6341551b71cf7055461f8625e08801ff213107b79ff8a51d035d8b5d5e995ddcaff6cff8d9843b2578a17c6bcd81d92b69bb8b5b5d908b65086ebf05ed21503dc8d3445e6f17463aab78eaa20c1cffb759ef29cdddbc1dc354b25e979bf6f5e964e32cedf582f96db1a2aba407c79a845c565147d951a778c4266e7dabbaa1ade6ce7d9558eb14d525118ce4b01b91c23aff9d9acd84653ca9bddaa7fa5201d4465f6358235005454a23f9dcd120fd5bc0e4e83633c84b11e0b558ad38a9474f052425110e8949033cc41d5ba36ede649e609b528f3f13ced9dfcc58a73d669ef845ab7b0e82c9d60812aadcd15bc38f2602b28c18c18a2c5c3d0eb64ade0c66f88d638b0a5e50282d38289678e5f3bb41ef6ff4d9fcd0a87273eea056810fa97c67cb3715189910e6fd837e0347bf2863ab74907926d2d1a86c0f1e18f40c3aa5e29aa80906aab2c13b015dfd42ff1c735c54e41d2a53f49464facf4dad689e587c5b4c719fa96b916186d5b6023d9475169ff42c546140aa400d5b5f1b58010d50404921a73bc3fa1213109dd08c4bf4031c6e4c58535b942487af35527a288347b3d8138a9378c2c85f5df6ab4c03d0bbc122cd5603a85e37651428666dc9c3d8131dc17a015345bd81117e2a563b7fd88b82a01cd97b8b558ff160ec5ef69fd60c890e067ac20697a6d5c3d8e21aa754128ef7c3201a27ce43505c8b95aced7c3f198e8e1bb29b8ebee002e7f3c6b94ade5897f700591ba44cb17fc441f3aac313ef7a889c214aa0b3d2064fb65fb914d919d2c7f34597474f2c546bee6a72b757d98666e31fe0e2bf8a8c95a905f9f34d265e1ac48fc2873aea1eafbe625dc877c6b38d8099141a8ada574fad89d05f34fa4417bcadc81dbee56e14dfed8a450f79786779dae127acdbdd3947c2bc99ab9ddaad0c4332b9180131ee0e551e39628c869392ffd37ec693cb340ad417ad159195304ee82a205ffa54ec94b0e7fca8b7a5c6c4b44b09db6ddbc3eac91f141fec6e68f3c67ab43a2ccc1fd73d0afd6de46db4f2ff8c183a3f0df2af98f53d71d90e7343237fe13fa127c5ac287a0bac35dffc086b3d20ab147059e75690d6b272e2d99ffb68f33cf6894936f8ebdf5bede2e1fb3c1d3800f01f5d29e0534515a22f8d57760116f95b0f6ceeafa5648fe89b9b9dfc574124218818fa156d24436f9b10933f5def99096898fba2925d7e5784af43f2c8eb1eb2cf116aff52cdbd50c28436f30d03bae15c67f829f09b974913dd27a3ab4c9cc12c2e3c4399fed5889f4b392247f146c4cfe974eca45641b4a48460cd7f33171543310a82b1731d7fb6d9882663ce4e144133d3625073f987313f9ce049b1f615fd92800ac787f0d40b06076ff559653a8933c4f7195f5e4193aa2bedd98ec5d8fd596acc40266cba3cc110862413c77092881a32e0a9158464a1ec05ebdf3f354c73c97ce43c2d798be2a566a2a334d47ade23aa2fa3f373ede42de5b8e905ba21e085b6d07661fc09bb5c8692ac2a61dc7e53c9b760cf24a8a9505e0da7ecbd33f2879503b7f287abbcb6c5cb9b9280ad1dc4e892ac", @ANYRESHEX=r3, @ANYRESHEX=r0, @ANYRESHEX=r0], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010002000000020301090224000101adc0f6090400ca010301020609212b2f090122310609058103ff03050903"], &(0x7f0000000480)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x200, 0xdf, 0x9, 0x42, 0x40, 0x6}, 0x5, &(0x7f00000003c0)={0x5, 0xf, 0x5}, 0x1, [{0x76, &(0x7f0000000400)=@string={0x76, 0x3, "0e8a919261bde31b19b6a2cf927d4d932a492a09c620a463450bc11e660639a0756fd5cc6183363a2c9346b693e5c2b0698bd8ae3bcbfee6024146092eae4d6322ed64d92427dc1ce22ff8ff240970e45ef18310a7f404f6b1ccf9d57191f5c5ba348f914fd723f6c2c4c8546f280c605771674c"}}]}) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000006c0)={r4, 0x5d, 0x7d, 0xfffd, 0x7, 0x9, 0x10, 0x7fffffff, {r4, @in6={{0xa, 0x4e24, 0xa, @mcast1, 0xfd}}, 0x10000, 0x5, 0x7, 0x1ff, 0xe}}, &(0x7f0000000500)=0xb0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000680)={0x18, 0x8008, 0x6, 0x7, r8}, 0x10) syz_usb_control_io$uac2(r7, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008200800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000380)={0x0, 0x11, 0x2, "ab54"}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x800) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r10, 0x8008af26, 0xffffffffffffffff) mkdir(&(0x7f0000000940)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r12, 0x65, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 5m4.344695974s ago: executing program 1 (id=3158): ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000140)={0xc, 0x0}) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000180)={0x40, r0}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001100)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="07013e80b7cb8cf9d72909fdda7df5ec1eb06e56de6c5bb4498379e3f77d7f58a2904181c376ac1a4cd7d3731848d3d3101a92d6061d10fc1330319e28105e09c84e4ee86764e900f651dfd7d63fa7f4335bdb58f9282de4cd738bc9b95b78d765b00d87289f0605f0bc68dd40600e2557efcc5b40ad91191c2b4bd2e60675d7d7af587f35a1d1042c2fe555c827e3621922e333540d06cf5fb67e55f705818070149c4bad1997cf3c893d278b2b12413250ab90bcc521ea3e3b665edf59cdc73cf88e5628938530aa646df0f55aac1c623466dfd147bb0c17f7c3db0c77a3952ae96b06c363d534f31ef5d6f371753405b7670800c200", @ANYRES32=r2, @ANYBLOB="090049005d23402500000000007f030980bba33e88f85b2dd18a89e1dc44f72a6dcd656a9c89e28b0b1a44d8fbbd65e1d22526e8506b86487a51f83f59306d8449b75177874a1175d0976d05e3e18495bd7c90377b03d46b772415bf9c79b6559e7b258bd1b12cf87e87cd3a376b14cb360d5598989a0875682e511239c9037556ba7cd6295b000878dda69cd2489efcb65c9d3c1d87d397010ee2f2c96a6cf4cd2a62b5c88366ab37ac388540cb2b05f5ede0b9f7f60e31cdefe458d263b96cf322bea564231cb770ba7fc80171801400da8008000d00", @ANYRES32=r1, @ANYBLOB='\b\x00\r\x00', @ANYRES32=0x0, @ANYBLOB="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"], 0x8d8}], 0x1, 0x0, 0x0, 0x400c814}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000080)={0x2, 'ip6_vti0\x00', {0x7}, 0x8}) 5m3.767589663s ago: executing program 1 (id=3161): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000400)="8a", 0x1}], 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x80, 0x1, 0x7, 0x40010001, 0x5, "1afa86d32101b58680cdda128ed251c679583d", 0x3b, 0x80000008}) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/161, 0xa1}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setreuid(0x0, 0xee00) unlink(&(0x7f0000000340)='./mnt/file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, 0xffffffffffffffff, 0x0) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x4, 0x9}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x800) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x33fe0) r4 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) fremovexattr(r0, &(0x7f0000000300)=@random={'trusted.', '-\xe6}\xb5),-\x00'}) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/psched\x00') readlinkat(r5, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, &(0x7f0000000000)={0xffff, [0xfff, 0x5]}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "8bc73d8d597d253bab65d6260ebb5854bf058cdf47222f34a09fbd5b9fb686d11508f646f1ebf5ca"}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4004850}, 0x24000840) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000001c0)) 5m3.614998303s ago: executing program 34 (id=3161): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000400)="8a", 0x1}], 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x80, 0x1, 0x7, 0x40010001, 0x5, "1afa86d32101b58680cdda128ed251c679583d", 0x3b, 0x80000008}) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/161, 0xa1}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setreuid(0x0, 0xee00) unlink(&(0x7f0000000340)='./mnt/file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, 0xffffffffffffffff, 0x0) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x4, 0x9}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x800) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x33fe0) r4 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) fremovexattr(r0, &(0x7f0000000300)=@random={'trusted.', '-\xe6}\xb5),-\x00'}) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/psched\x00') readlinkat(r5, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, &(0x7f0000000000)={0xffff, [0xfff, 0x5]}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "8bc73d8d597d253bab65d6260ebb5854bf058cdf47222f34a09fbd5b9fb686d11508f646f1ebf5ca"}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4004850}, 0x24000840) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000001c0)) 2m44.364278195s ago: executing program 5 (id=3731): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7fff, @null, @bpq0, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @default]}) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b87511d0000007ea60864160af3653c000cc004000202080003000300000007002100eab556a705251e618294ff0051f60a84c9f4d493800500000000000000000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'veth0\x00', 0x100}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x11, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@private0, 0x0, 0x33}, 0x0, @in=@local}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xcd}, {{@in=@dev, 0x1, 0x6c}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x9}]}]}, 0x1bc}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_open_dev$hiddev(&(0x7f0000000100), 0x3, 0xa0300) ioctl$HIDIOCGFLAG(r5, 0x8004480e, &(0x7f0000000140)) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000c}, 0xc, &(0x7f0000000080)={&(0x7f0000000680)={0x290, r4, 0x300, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x9}}, {0x8, 0xb, 0x10000}, {0x6, 0x16, 0x7a8}, {0x5}, {0x6, 0x11, 0x879f}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x2b00}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xff01}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0xffffff03}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x7fff}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0xfffffff7}}]}, 0x290}, 0x1, 0x0, 0x0, 0x4004840}, 0x48c4) 2m44.186311286s ago: executing program 5 (id=3733): syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1100000015002b"], 0x14}, 0x1, 0x0, 0x0, 0x20008941}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0xd) read$FUSE(r1, &(0x7f0000001a00)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x1c}, {0x6, 0x4, 0x80, 0x7ffffeb9}]}) 2m44.026344659s ago: executing program 5 (id=3734): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x3, @private0, 0x7, 0x1}, 0x20) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000f00)='/sys/power/pm_print_times', 0x1a1081, 0x0) pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='2', 0x1}], 0x1, 0x0, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000080)={'exec ', ':\x00'}, 0x7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) 2m43.956734921s ago: executing program 5 (id=3735): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) recvmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xd2fc64283d314c74, 0x0) 2m43.842891688s ago: executing program 5 (id=3736): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x1, 0x0, 0x0, @sint={0x2, 0x400}}]}) socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x2b, 0xffffffde, 0x300345a0, 0x2, 0x2, 0x5, 0xfffffff6, 0x0, 0x0, 0x8, 0x500}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) socket$netlink(0x10, 0x3, 0xb) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) recvmmsg(r8, &(0x7f0000006100), 0x49f, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r10, 0x407, 0x7000000) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000740)={0x0, 0x0, 0x1, 0x81, 0xfffffff9, 0x3b1}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r11, 0x407, 0x0) fcntl$setpipe(r11, 0x407, 0x10ae) ioctl$KVM_SET_CPUID2(r9, 0x4048aecb, &(0x7f0000000480)={0x7, 0x0, [{0xb, 0xffffffff, 0x4, 0xffffff89, 0x6, 0x6, 0x2}, {0x1, 0x4, 0x0, 0x8, 0x0, 0x5, 0x5}, {0x0, 0x8, 0x0, 0x3ff, 0x7ffffdff, 0x8005, 0x31}, {0x80000019, 0xe5f, 0x1, 0x7, 0xdf3, 0x6, 0x80000001}, {0x80000000, 0x2bb, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0xc0000000, 0x100, 0x4, 0x6, 0x400003, 0x40000002, 0x100003}, {0x80000001, 0x2, 0x3f91c194927b8e21, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) 2m42.858515588s ago: executing program 5 (id=3744): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$qrtrtun(0xffffff9c, &(0x7f0000000000), 0x980) (async) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) (async, rerun: 64) munlockall() (rerun: 64) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) r1 = syz_open_dev$vbi(&(0x7f0000000300), 0x0, 0x2) write(r1, &(0x7f0000000080)="366cb2a6dd2334552e8666b8bb220d22aab7d6dd408845ac9e39b8bf032053a5b1c4df04ebaf8c0fe841f176ee7d0aa0da576c96ec8f645588928c5d9e5db1ecabd9be8f5c0f1a48d453e258ab7b22e294244aa874508776e7501d8b3222e6", 0x5f) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x9, 0x7c}, [@nested={0xa, 0x1, 0x0, 0x1, [@generic="188e14ae979e"]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 2m26.853185295s ago: executing program 35 (id=3744): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$qrtrtun(0xffffff9c, &(0x7f0000000000), 0x980) (async) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) (async, rerun: 64) munlockall() (rerun: 64) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) r1 = syz_open_dev$vbi(&(0x7f0000000300), 0x0, 0x2) write(r1, &(0x7f0000000080)="366cb2a6dd2334552e8666b8bb220d22aab7d6dd408845ac9e39b8bf032053a5b1c4df04ebaf8c0fe841f176ee7d0aa0da576c96ec8f645588928c5d9e5db1ecabd9be8f5c0f1a48d453e258ab7b22e294244aa874508776e7501d8b3222e6", 0x5f) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x9, 0x7c}, [@nested={0xa, 0x1, 0x0, 0x1, [@generic="188e14ae979e"]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 1m56.286095182s ago: executing program 4 (id=3891): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$FIONREAD(r1, 0x7040, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) 1m54.072542649s ago: executing program 4 (id=3896): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000001580)=ANY=[@ANYRES8=r0], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c}}}, 0x0) (async) syz_usb_control_io$uac1(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c}}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x86, @string={0x86, 0x3, "91ad51a0313ac673fde8b5176cfb623aa0ac167d15d6bf1279d98e95c6af43979d65a680c1b1de1311f8f752a2b2adea6e99748e04e5e2d592a0b7aedfe701f3cfdcdd0378d40d3c36a26a2ae169ba100b1f8ab024e58c103082d7f2dbe544485b4ab397921acf2115ad6e4aec104243db207f0214c4c73a7c310d1316d0d97afb3f6822"}}, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x86, @string={0x86, 0x3, "91ad51a0313ac673fde8b5176cfb623aa0ac167d15d6bf1279d98e95c6af43979d65a680c1b1de1311f8f752a2b2adea6e99748e04e5e2d592a0b7aedfe701f3cfdcdd0378d40d3c36a26a2ae169ba100b1f8ab024e58c103082d7f2dbe544485b4ab397921acf2115ad6e4aec104243db207f0214c4c73a7c310d1316d0d97afb3f6822"}}, 0x0, 0x0}, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2400, 0x0) fchown(r2, 0xee00, 0x0) syz_clone(0x102200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x102200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xb, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000580)={{}, r4, 0x1c, @inherit={0x58, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x7, {0x18, 0x0, 0x3, 0x4, 0x640cd8ff}, [0x9, 0x7]}}, @name="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"}) ptrace(0x4208, r3) (async) ptrace(0x4208, r3) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) ioctl$TUNSETVNETHDRSZ(r7, 0x800454e0, &(0x7f0000000140)=0xffffffff) ptrace$setregs(0xd, r3, 0x6, 0xfffffffffffffffe) (async) ptrace$setregs(0xd, r3, 0x6, 0xfffffffffffffffe) socket$alg(0x26, 0x5, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)=',8', 0x2) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)=',8', 0x2) write$dsp(0xffffffffffffffff, &(0x7f0000000200)="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", 0x142) 1m50.953987781s ago: executing program 4 (id=3908): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x48, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x1ff, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0x8, 0x0, 0x200, 0xcbf, 0x401, 0x5, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0x2, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x7, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) (async, rerun: 32) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @remote}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x77359400}, 0x0, 0x0) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000000)={0x28, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xfffffffffffffffe}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004814}, 0x0) 1m50.088585582s ago: executing program 4 (id=3912): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e0028000f000300028000001294", 0x2e}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, 0xa, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r4, &(0x7f0000003040)=[{{&(0x7f0000000440)=@hci, 0x80, &(0x7f0000000880)=[{&(0x7f0000000500)=""/123, 0x7b}, {&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/126, 0x7e}, {&(0x7f0000000780)=""/101, 0x65}, {&(0x7f0000000980)=""/167, 0xa7}], 0x5}, 0x5}, {{&(0x7f0000000a40)=@qipcrtr, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000ac0)=""/137, 0x89}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/138, 0x8a}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/107, 0x6b}, {&(0x7f0000000180)=""/8, 0x8}, {&(0x7f0000000cc0)=""/119, 0x77}, {&(0x7f0000000d40)=""/174, 0xae}, {&(0x7f0000000e00)=""/255, 0xff}, {&(0x7f0000000240)=""/51, 0x33}], 0xa, &(0x7f00000002c0)=""/31, 0x1f}}], 0x2, 0x100, &(0x7f00000005c0)={0x0, 0x3938700}) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (async) lsetxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), &(0x7f00000003c0)=ANY=[@ANYBLOB="03021100000007edff"], 0x9, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r3, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x30, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x7ffffffffd}, @flat=@weak_binder={0x77622a85, 0x1100, 0x0, 0x48}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x94}}, 0x0) 1m50.018395269s ago: executing program 4 (id=3913): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x1, 0x5000003a, r2, 0x0) mkdirat(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r4, &(0x7f00000002c0)='./file0\x00', 0x2) read$FUSE(r3, &(0x7f0000000f40)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a00956201020301090234000100000000090492"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x14}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x4, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x9c}}, 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc20e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf, 0xb0, 0x67, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x1, 0x80, {0x9, 0x21, 0xcf5, 0x6, 0x1, {0x22, 0x197}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0xc1}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x82, 0x2, 0x9}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x4, 0x0, 0x2, 0x8, 0x2}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0xa, [{0x22, &(0x7f0000000100)=@string={0x22, 0x3, "ec88352bee8215aeae603c8744b358137478bc5421aea31b619cf036ef52e93f"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1004}}, {0x76, &(0x7f0000000180)=@string={0x76, 0x3, "85a7de6ee34d7f27759ae6da0cfc9d5e00acf61592902a3fc0b864968c2d1fbac815d1cf0c52e9b21f7277aac4f0a2f3f2636478a07aa0b8c772d7fd0f83375cc011fc3583d8cea5c3e2c60702f7d605e810c5c7a9c1443b9efa2d8e9c28747a6344eb041a5983dea77aed51d0baf949e018b7c9"}}, {0x99, &(0x7f0000000200)=@string={0x99, 0x3, "3c97049b4122118050f545bb73812a1d2e5c7b0c1cb6ac7a58f33d70cd93edf4e90f399621043da600234ad42e0152fca445f5ea895234f796e0985af539870ac870d6e71964f910a75534a56a1576669eda0a5e61e2ef8dfd09c16a168862559bc6db8acd1eaa9c1a75e3e0480efef810c456b8a31eab1a872eee4f02421a77970127d9394cda46937c0466e5b02344ca7fcc499fca0e"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x427}}, {0xe8, &(0x7f0000000300)=@string={0xe8, 0x3, "b1756085a6172c0272e7b2d50acaf89e3ca02d807b645c87677e57eb04d15728fa71b342a8ccbbe007cc2b24e9750f88365a146deb63d326f324b1601dd76dd4b934b5fa8f29395aa163bd31177209bf1f6ca1a1caaf63a87c2003349f0e8056c5781a99274d627d4109e3b49cdcba4d70c1af14c2dd10f6c0469773af48f48ec0fa0093c3489f9197923262137a7e06324d8c6ef94a76667982250225a6f84673c464953f410b4563e3995e7730830a79681bd75cd0036040c09093987a06c22b4b10b1bb185ba80a6d07324b7cd550bbb8e829f3ab9cb1f8070fe3134e27bc18b6827be847"}}, {0xc7, &(0x7f0000000400)=@string={0xc7, 0x3, "818f827b1b03ace8c21a346da13e74b430dda6db5f1c216f9d041dbef501e9d00fc7870795c4415c18d304e0bee85f6fe700f94d0e4deb006908bf18b59adbf61340257ffa445b0ea378971fa420c15318cedf48b07efb26b5f29341410941a4d8d5b7be47e1b6d213fa3b204fec328efdf2cfd79f4b4c8c5b6adf8133b4ce0ab65311852b1ab61b0e8b8ab1db1dbba99c7c0fb3b85cf4f80bd4d3da467a99143c37920ffc91b8d1057cd40d673b58d66d000ea80ca35bc207d23e357a80d30603a99f944a"}}, {0x10, &(0x7f0000000500)=@string={0x10, 0x3, "57f9d45d6ee90f29b3c787a5bb8b"}}, {0x6f, &(0x7f0000000540)=@string={0x6f, 0x3, "1cb341bab1c7d782ce4801bc2b130c9819d800f526358c0ee6dcbc25d0f3cee786270962dfb8931da7a209b6727f2725795c946e8c58f352031d11e1d2c189a246a98a2a977b81e5be7d045e2a0127805f18713365634ee31f915f06b4ed79c49f306d6edf11bea4c6f009ac83"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x43f}}]}) 1m48.7181991s ago: executing program 4 (id=3915): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) mount(&(0x7f0000000280)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000000c0)='squashfs\x00', 0x208002, 0x0) (async) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0) 1m33.305548616s ago: executing program 36 (id=3915): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) mount(&(0x7f0000000280)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000000c0)='squashfs\x00', 0x208002, 0x0) (async) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0) 6.894865871s ago: executing program 6 (id=4288): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d8000000100081", 0x7}], 0x1}, 0x20000880) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xc}}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1411, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) r6 = add_key$user(&(0x7f0000000040), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000480)="00000000000000ee8da9baec2f9f4bf1531585f47f8d9ec6db8dcb9921311b88437a1a8e493a5dc9baf4b31514e5bd90f1ccf77a6591bc81bfeb8c574f4075a5475bf4602432f02d3b2411d7f7ccb7e33b9d91d81ba1a45708b77838e2dcff133e895a4b7014d1e7c5cb8a34ebce6ffcf9198f534a2c5ee57cb6549f64a30ce383e99716f6420f152a9caaa3603f0b770276cefd68b5952faed61d22d4308951aa207d365dc13c561a1eeccf075b907b9b4263d8d784c8d99fa69e3c8cccc4786fbeb67314f4540b5e3f", 0xca, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(r5, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r8, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) r9 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r9, 0x40106f52, &(0x7f00000000c0)={0x3a, &(0x7f0000000200)=[{0x16, '\x00', @buffer={"fba7da26a04473d626223e06db1622b63f01149726f1cdac55cdad58041bdaf4", 0x20}, 0x4}]}) inotify_add_watch(r2, &(0x7f0000000380)='./file0/file0\x00', 0x250) fcntl$lock(r8, 0x24, &(0x7f0000000140)={0x0, 0x0, 0x4000000081, 0xfffffffffffffff9}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f0000000340)=0xc) fcntl$setown(r0, 0x8, r10) write$cgroup_subtree(r8, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r8], 0xfe33) 6.654113731s ago: executing program 6 (id=4292): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001480)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[@assoc={0x18, 0x117, 0x4, 0x64d3c56c}, @iv={0xd8, 0x117, 0x2, 0xbe, "84baf5aa529a4e20122e68b8a54d084eb0ecb6f48aa04f929c6b2628961518a0397a18ffea227147b1c65807dac99f5bc0518bcdf8ace2aabe97d814dc53acc9c51b6dfb329ab9740a9e867c0dd7f2cb3cfb8f724527b68349a2c955f0a8d83734761f233a57425a1af3eb7417f269e3a2cac686a9ee081af7d645d52e5e4250ab79d2ee620daaa2dd4cfe11519ef15400fcfe302e81c977975adb8b077dc98a83d5b0bafdeb74fbf7359eaddbf11e4afa1a71a8b2129ed4a9297954d5b4"}, @iv={0x58, 0x117, 0x2, 0x3f, "d5509745b590a86e39642847c0c42d6ff3a8f0c601d92fb54e852f1670dfd85d694afe50f0e449419461a3ec6de5fe5c80f61007f5c67cfd0612c3f8e82778"}, @op={0x18, 0x117, 0x3, 0x1}], 0x160, 0x40c0}, {0x0, 0x0, 0x0}], 0x2, 0x48804) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$char_usb(r1, &(0x7f00000008c0)='-0', 0x2) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[], 0x6) (async) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x52, 0x1, 0x7, 0x1, 0x2, 0x50, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x5, 0x1, 0xe}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x3, 0x80}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x6f, 0xd, 0x5, 0x20, 0x3}, 0x3e, &(0x7f0000000180)={0x5, 0xf, 0x3e, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x81, 0x9, 0x7}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x8, 0x200}, @generic={0x1f, 0x10, 0xa, "c36f1ce64a41859da051d07c54d052dbd81e047e603688c3831e05a6"}]}, 0x5, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x7f, &(0x7f0000000200)=@string={0x7f, 0x3, "36163903adf521864d428ada1f64bf6ef521f3de64764a974496a12eae948bd604295ec0df1d36ec261d0d868bae1e49e806285f0bd51377c57329e1728e5cad63bc1290a3d6a8d8b065f4ef65fdc8971a54b381bf16b5fd0a3f67bde0b27f348558c5683772b76639980d6dbd80dde8b0e798005e0b4fe5f3b8a635fe"}}, {0xd0, &(0x7f0000000300)=@string={0xd0, 0x3, "ec725498c8659f3ac5a821f51184e39879fc5708a2aea38ccc2a6533e97d33a12ae9a8c461bf13fecbff4b25198ebe3c3804e466a5de840677c6e6fa4364d15c4204c99a15b4a87fd705455855289689e4f3b29c76d4246d4bea14a38716c23125473fbaa0af56e2d1bbe2c4ca20127ac841d61f6d35656817b504cbcccfa42a154c66459495a66b075cd040fbe6cdaeab2010ac2c40184da34e5293d1c135d1f03eda72167218021db79dc2f512b991905b1a1b82999bba6f7c045f54e446da0ab7e6e9c8c2e49a50c52ef87d0f"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x446}}]}) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000d80)=ANY=[@ANYBLOB="ddf963efbeb08a", @ANYBLOB="9ebe7c71a123a6fb03cec931f700677e0b126f1f5986ccafe71c1b550f2ad260ec946ea93eebe89a41706be3379af67835b11def814f7ac51b52408b99ce20f30f9aee23926ed84e39a3ff1bf195c5226d69b99d06e54087339373adf824b4fb718af0fe0471186a576891d89c7643972071b738f0161048d2a011c751ca01a8c09e4efa145d0b130efac60ffba07796e33bc7a6027e8dc733e90027a769f2f0ec0093560ff3169887ed13d836582bfcb68c03cd1a47c4dfdcbe830da0e8e1948e245970d95a7154134106b80957e0d03cb91080f1e90b3b91c644fe5564e6946d9645864388374fc644c20c7749064cd80a86b1dc32821c6d4ac4c408993ebe2c3668871ff0fae09077346d84ea4497e56251c233e5ac203b558ca87f0064a2e647b4e5c71402763ba81b7c82eb00b9b36d9a65a9ef09ebe37d453fa989d5fb29eaf4686e5ad112762b03e5ab42dbbd03d376860e2d2925576eab67eaa5b5fa3ee2c431430480e24ca63a8964e1f91d9ab6da5128b8432f4eff3e0f8ec95fc2d04a48f6f10759c61c5566e6d613f685529eb5a2b87e4da439b59800612f38119253c3863222e0c9dcbaf12376745c877471d7a2bc243f516138433793c0094093e13ca3b834137b00b4fb8561474c35bd63c92c50bffa8ebf164c41fd5718b70c7da8dd79a830736434faa517607e97a3812956c3766e46d309a24912822cd77059f900159f7e58c0a72ec60932c84e1ad75e2dadbd217dd60d2937a561e4a887a312dc77a65fd7962484ae6aefaed551b85ce65770fc0b0a5a4f89941cbb8484c38af83c2fea123cd48af455b99fc0c14b186b16e61c73bbacf294e53ffd7a7b804417aab4282cf420a0a3685224c00dae021eb810b467ff68fb49b43742e5b1095f183c1053849fbae276a984419474ed39ca456ccd74185de100b4f607051f40c1471090cd864738d08a952752a67b4bf0ca6c73a9135c5068ea472b70ce126470db14d48f96b9f211dfaed75829b14a1a2cbac87de61c127b4c5063ef0dd40c5ede8a5bd20988862648e274edfcf3d424aa5c0770635d655ca10f09506a9837d73849d90ef533e6e2d9a13d7ee26474261448da7e5a1743b5ceaeebc65672734738881e1134bfddc6328f86312061972404c682e1f09edb22d91351831b6b963fa06e8fbfc250cc66c7d29b69938f0a75662abf4b585d0199928d9377ccf629d3385b10c6adebef1a767f2ad7e2ddcd4278fd56d5638180c920a3ccf50b08c193c932bb86f0101be47e35b5f1f5534b6f080845fc3602e5fa8bff7f806a7e6855a724167e43a01c428d428fb40bd996c6cf743ab524f5f3a0bb2f4b219188407d34ceec56f6ba97dacdcc41480b85edb698945704de95f8019fa80e992974fa400c34138e993c83f8516046e942ab89ae165dd7000cbe218688781a867f4fb75a57cd3dd04d1e4e88d3166c91c5db6fd9935d882a6f2d771e7699aa7e12c4a018df495b567e0f12c91615fb2184ba3ca098f783acd14b0c1ec489a73e3e9e0a759eadf7f646259981393a91e8279d95ed0216ddd593ccf215794aff73d9ed880b8a05a8170bff8bc7a2c556e192a3555780f57d8e9dbb1427c0d763d25e86f0a9ba1f5c2e6c87052f330f52a146c365a8eb3a2ec6914a60a5799af13975b9de44ab37f358390b8dda4f459f3f42b697d36b8e418a39f092b127cc400a2f8b1eae70849c66a9459596080e540b2f3f8a5e36448254555eb6e08e040e27fa14e506f3a9e7dca498786eab24eaa20d16adc485780288a7f71d84ac48674c08826dd1bfa72a5e48448fab1cafcac101cb4081c6ca76502d9d8639d0fe863aa3294c4bee68ed1fe4623e56cc4df2d42f5cdecdd2a7c64272908b5f197a0408f590191b2af3ca8c34577254003977a33112c3b4d1a51d5b53ab823b90438afc815e75ce36dc25d20979afcbb7b7c9e1d74e149c536584032f4fb459758e8cad5406eb8ddf9e07b24d7a8247b646098434f5abf5703c004dcd47aade4385936d0ddc0305177afaf1165db02778140385c8802e456e6a834bb53aa42067e3bc6c366b89cf2f7c55ee75290b093052a323e8fcce96acc75a00e72a0eb53ad5035f14f1d35491f1cb72647142341644f5047b4584ee0e39a51dde8992046e2ba55521766c55e99bf64628c339aac63cfc72269e493d46f95d4f533be54adb67d05b4941497450b3206d0bc4785305124792c091dfe4df456ccbb5dc64deffdae71b482a9deb02e536607ef689dcbf606346b47f3f2f7801f4d64b55defacc1bc0f7f3e86d1a810e766a79a2345551fcd450d8f038092bbf079400809725656235dba67766f3e5afbb03134119cb6e70af106791a68385634ad9fd599947d15d8448223e6b49a26733477366c8e318d46eba0aa2c9061cf44f8dbe08732a727788dd72518bb84b17828f4a400246e5bdc44f108bc309c5ac0af2aa8950cbe1942401aad8a688b508f6c688ec5a42c58c7749227a99be8ec0b85cbdc416bbcf077e6bbd59892f260291df286c64e2490e6be70bb849d8e42a253036bb74617607462bfd444dbac2e25f0794e9d2ee592f73009bd4a07fb9d20776cbc1a50758143941a6a597d28dc62110632d4b0f02ea7df532f6ee2263046ddd579c7a352527ad6cc92150ffd7a2603c1bdb01fba997ddc2c2346934e5f85fa30800db0454d837787a243c267118dfebf63fd76473573764388545389bacf12e949ea132467379a5a180acd17750ef7f306fad9a804801b55be6f33defc0c286f2f5a15926a3d1ef187f7000e241c759066dd42ae13b595f2b87edde1dcf1bb2deff9978d5716a1955fb19a3a8cc5e576c2cd10611eb1859f755cd16c5b656c30e32cb9ec858f98426267fb13988b2ceba6dec8ed0d38c46ebeb9ef89aa94d4619cc8ccbc5067aa1539588785439199b5942c4a5b41a2a2e28ccdaf9821ce34732a39f0cc35c8e88f16e28327184456be80ef6bb4b4e18b4872a93a50b33e4009af632b93ba73f9e6b9e4cd7be5a4a96a191464171219ad30b135e96f934f1b4780125dc637af326040ca8b9e706656b688054e1169b6af70959081b6cdee494c85a1dd73f5b737f8ed570471dd10c70241d7b6193a9ba2d24e0b025d36b273bd40f697ab6413ff59dc800754c652a3c29264af355fbf3a9df51889cc0ead6c8d99e93398d1616ffd7927ad38ed9d32ef4f7ca08e98482d2abfc7f9f06"]) 6.518587045s ago: executing program 0 (id=4296): r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) close_range(r0, r1, 0x2) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r2, 0x7b3, &(0x7f00000000c0)) close_range(r0, r2, 0xdd477d738caa7764) ioctl$XFS_IOC_FSGROWFSDATA(r2, 0x4010586e, &(0x7f0000000100)={0x8000000000000000, 0x6}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000140)=""/73, &(0x7f00000001c0)=0x49) r4 = accept4$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f0000000240)=0x1c, 0x800) writev(r4, &(0x7f0000002500)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="bdb2c66588e54cd646a9e0629294eb7d5449d7ce7996f9c2ff530e2862cd79f99aca254aeff356f01e5b17c4e199d9da50440883c43edc33da39d83cad3d28cb257ca71aa742dd0064c6680ca7f1a3c9ef16a40ba47e0a5957eed4dfca5bf1ae9a737225818e58ddce6d1bfe3fa69b56483a4a8ee39a", 0x76}, {&(0x7f0000001300)="29642e7b0b968086f6c980e42933a22abccea8472e783ebe5a5e653fb8811943fa32ab424461f9732ba652908553b0e169813a1ef54a8f219fecfb7ad983190de0cc0b994656f382b1502d6e845c1ce065dcec08e826bb775e2999aa1cd4b4a8ddf0858078a34cd06229ea9b40e3a571755876672b984523f13036d0d998a534e61b621a7314aa5f", 0x88}, {&(0x7f00000013c0)="ea27a3d6f75606c080d9db8d919e95f451b4205f2a1e0a7eff48c0059a3f5fea4dc364367c08acf704dd9b5116562360775f853144aba00f6fdb98a702e168468182152068e7f895ebe53283585232b1fe8e07d00de53ae8213017c7c2984baecada66beecc92030414e81ad", 0x6c}, {&(0x7f0000001440)="aa8749593bb57609a3477d81ee0ccf9cdcf33d34865015c675700f877ace84ee958334581fa71dc70ca674124b5eb19a", 0x30}, {&(0x7f0000001480)="028a90fd15943c6afd3269d5bcf8f1a08cecf9df286d4727e39c17f265ba5350eb007ed9055cfb4ca8e561b073f6524c79c7", 0x32}, {&(0x7f00000014c0)="df7a9635850f98c78e09a60f385dbcb9ac1c3faa0bd95f344241ba251debf4af23b1d107fdd308", 0x27}, {&(0x7f0000001500)="75820cbcc770b97a6d76b13e538bd5dbe221150227ee2822730c861cd67cd949d6f36ebe4d8b5c5cfef416b8fce6c2431a336b8ed84ead9fb5f7987a4fb652e65cec2ac95f969e38eb958de24acc088efa54b1a921b06a628b5cf0351fb7ba974a654d7aee48cc7d0cad6b109967c444c39c6511fbf183feba471c7857a71f9edd3a7797cc3aeb3c2157d1331453601acf700ebf285274b299daacf6769e96d86135bce5102a6efe4a3e026103bc3e6adb8b597965dddfef2d1997a5dcfa3e87497e5b5a15de6714e37d2bd761814854dfdd7429e208806792cc2edc2b30582085eea4842a8b6f0df2d4f3df6efe07478ac052339067fcf17d381e3780b2c5c7946b07866d2ecd18fc60299cbf03762dcf8f90ed89d20a00d061f8628e81fa5937ff027ade13f710492f84e4457026f51e8a9b4cafd20bd5ff4bc479e1e6820226bfa5e0e64eb5d938fb1b89ab85862b7e012010e5c1b0124d96f40992b7b62f32d14b08afe231433e18ed8eca13096fb7aa906b856c47153d1248ab6f84b487a9fa186ebef2f660990b5d729bb81f7f230f7e2237dca9c6d5c85ab29b5bd4e330f0d8f5b8be3d59e51c33ff28279d25df3143a21ff94b9e1511019bacb18718d19978239a961e2e70db4af4d6868187e08533d163b825e595d18afb733e748688652d8af0587890ef0c9bb2cbc0b48d79a596c24b3732e3203d33a4795acf394915504f4824a466eeb0a2f3f379a365548164e7afda75f5fb99781c017a57c719d00d69f3e5ce56a8b6c3a9d685d346d3ff5ae5a1be8e8d46ce3e1cacd479cd0556e858055cef4b7f0b2424ad23273d2844ab998f090086e036ce2385ffd1fbae8bbee7819f3b1e88fed448956892995147d372f7d704a550c435c30ba45ce0632569def6e1c9450954ca449232c7cebb1488f1bc6c92ab583185ad29ed9e7b6b4dd8deb9d615955c62aba47ea4eacf37e199faa52221c8b5d65252b6e3bfe78b2cab31eaec76584c81219a0271f54ab436ab73141e94d8758d54a29bf6255fc2581c000b4ff4463d67049e4ed45944f6962555dc640b116b9c031151619815c3368aa6ecba357d22229f3661b7c5aac5a38fb62c2814d18086567eed3100ede4afdb79c516ee59732671d99d4ace36a48efaf071734d6023d792eed92fa559347883857111cc80623aadad1bb31c038d578a78bf014d6c849d42a5d772ebbca82fca18c85d21fde70ad28e27fc2ca18a3e7947ba8b9f0c7f816063c98fc2ca9953c1b286eee84dd4d5a97b33329a7a6bff7118b102b7c990cecdac2a1435ee8e60f56e3f7245cba674bb3132af191d7c8b5ebd9f69e8622b506c3e5b35d41ca083ea49dcd7665fe1a2651d65c05276911b98309e3201b36a942d911fb6f89f45cda569660a7f2ee4d3ffef5aba76496e417b54ddb516c90f9719a0fa23b88934cf8cdd141abdf12e9f9b2c39ee86774606d8aa9f38594b8e23bd4be7e9d096443dc6294c4b5685adca7a2c056eb9e17317803f31eafc842afd21e41812d0579cd218ea48ea043c6dbe8a5eae8ebc1fffcb3bcfbca4f5ecbd95df2707eaed6619dea7d39d63683b1d2690361e7ad83f3d0c167af33e521d975f26d4087ec4467198a86c2c88e148c3432a37e89dd596c9f3396371157c2e1c13f2554facff9fd153577774a04e37d4b5f27ad052515e3239fa847840f926017597413004abc8a93b73e05cdb887160009901a7edcf256374f6e221e07cb723166670c1c2a0b59cfaf98f1267770a0735d9bfc4e785b4b4cdbe62d6f9b5d85f698028ddf835e297471f342af24a722cba3b9844e4f3ef6bcec9310035e373c781f1520ff8d611a4f238c3961690a5cdb0bec0bcdd3484cdf0b1db48e123cc12016d16232bcd7b3990188c8e263039eb2f9b70b97156c7edc128f54f54fc70d870d0dbbf47a37f5589712789f121170f5dcb40dfcc95b209a895d4fbb135e8c173a57d681f68bdef1885db91e197c5440839c41ed7b568d46b8819e079e9041f553104668ef70a0e4d78ab743d95de68cac00d096bb08df65bcc1679c20dd2d5175acaedbb0ef98dfd52c2e2993de030d404be3d5da5360722822e6bfce808f3c163629069b8687924277dd0092e518ccd919aa25b3d0bb50e13aa91ca3008d8d4e203d3fad51314a93cfed51bc45c4c1b9bb3d8f615b26ef505bf9e135575c399f997ce190094725618a5096794c4162c9e5712626f682d3c23d6f597c9fb3afa42dd76b57c7951725a18e5c70f07a012f1c7d09a743cbcb4e4f541a5f03fd105cf959471fb8b967a9f3c100c452a0f739c09ca46beea862e33115fe23db03bcca9b32aaf62d9f0d0d2e21f5236e3b33c9faaec2200dbd47058b7c68d65c1c366ec51d6ef2e513bed55d103e5b656c3a9b3e09222adf6d5491d354f692a537347f1c8f7f6d1c96c9e2e697ae1fd2af8664e7945c6fa4c05a477450035b7d43f57a80d3d02a316ceaf8fafb64d44ab4b1df94c0066ff825cb28898924c384a657f22e147a2fb0f5f0c86874ae00105becb4fb2562558084d0f2eb43ece41c6d1e35ccbb883bebeede1d5629a2685b5765c9aa0849e3e630868383986851eb8da7c9c6019b2180c6327cb363e6da1d13113ba06c5fc69304610d530119b9f6f71213bcec0067c0b84dbe80fe88c171dfa0d9d14798761665a60aca071f3800cab00c6ab02a05862dcbef1ca27f0880a61fa8c65905e332fcaa2ab1ac3431f48e52052c3d5ba9d396bedfce6def7c750f05fd6a6c32cb61c1363e3a425ff558fc79385732736a203804771a726718139b03e88d0948ca9db7201722a1ab0cabf9d9de4b698ad83ea658b7f082697fbfbdc781bc7e4f26b788156c96f29a05263017d225fdaf8710ecfd55efdd6272ba115268c2c4df730f16a2b23ff4a57b2d61c19953c6d641ee5069fd1104e7baf729ad5a29a295db9c6e1700f415e832f7877d9bf2b0a3d06b88830e50943b5d7ab856c173fbb57becd1b76d15d006e767aa513168d019b0f7eda820eaa4cd6f8ec8a0cd513c5d6b9ea01899b86233d02dab6f4a46c2d7a1bd3bc7206b50806b896394a58d80e7208859e0095e761f1ebc204a3d8031b0dd785a224bb91e2d34abf5bd6e8235d49f75aee50e33e8bce379855c0f56a17beb84d96b39ff3b16a2a6403639d4fb9e5202932b459d18a6322bd0659f1b37ff7669aab44e3927d51937efb3c48d0d89889585abd4346968c59be61c9caf2b61344a666d728cc55dff7150db55db48288ef4758ed0aad67017b9ee906ee83221fc19c9099949de14781ab3d6b92da0368b124897ee4d2450550eec942e3e09ccd738875711fc68fa32e7a967025bf9209bf636a11c977567b003c2aa84d5ee2b7661dd9a1fe1c3d02743445f5c56cb359a35d8d08374c788d9cc9cfe7d88d968495a7ccd6eb35ada8f378365195290a6cdd243cf5ab8d3a26be9313d6aa728b267e6cac6a37d35403c21cd6beaa9d00853e1e957754cc2d8242bce096a5a82ad9557b36d75fcbcaa3eb31a6f3d56ff2782512ae425410e73277d665c90fa0f01148fde7247e81c1136e83b793bf8211b327303c575ea7d59c9a799f4e001e8b76d2f44556a4213d5ddd4a1d376f8d1f6d305809497c4dccaa6ebea9922884eb248c6f8fc995311fe83a2bdd72d78310ccfa339e03c4af4dab071e4921212b88865217b009870b6a40002c67e50ac7d30745f5de3ee14867e10630f7b8cf00b804188f38c80e9f9f811d1562b6d49a5612a9d148fca04874f0d9914dda3133d1d23faafc5f1885c82700369f728102ea504a7617dc184ab9dc216a52f57d9f661124665422feee4211d244ff2a1566c949f399e27ec73742ca7d6730ec4cab38100318a1a322a0a3256ecdc9b6a96a7ee3c45605d15e8308cc7da2264a5f03e90d4ce284b4f75c179fc8b020bea11d12f896e7fd7d0be072add572269097db90e838c955f7e8417a205cf54f87715e6782d1c144289530ef74f6330b12a2864cd7bbc60ba83d2eb8f70f712246e1e2690b4ebe24e89a1f9542a64185cf25567a7766a67882954101e12a035b91f1fac411deadd4f3501d98c4fe61f531d8c1db17adaccd070b36285ef714e5546d5288a74b707c437675a11a1f061b503af7ba18af396bdd9a8290f69b16fce0b5349b83f6c928e1325e8a1816c97982521dcf5ed8bfe736a3a8ede857b7da77b50fa825748f771d9a546a434efded4d89f81d3066cc3be19a053ab6fec25df659ff05dc6d9121d8f09b2e3fef3db4a24340ee138a912df1070c2cfb44b4f3bb736a6fc73189d730423283d533db86ca302c439165435134515fe334caab31d12d9760cf07ce41aac415c3bddc3d8bf5309b37bdfe0898a4f45fd3dba69c27e08194ff72ea690960b924602fcd753a32e7d1f3b20835e2a2695c3203c55ed44551360aa1a8a3fdd6296bdd9b5ac9515caf7c719605240379158d7b760f1c9965bff72e0b6fb7f54a54d8e0961da0a60ed858761517db391174965edc46fd78f3d44bc4b44c4d3c2f8de82e9715e5371e0b3dbbee9aa7d3afec9d9e8b457eaf834a25251554b7fec87f0a89f4184f70aa786e14c0b4ad5886bd3ad58758b0b4c2e8e00ac601aec9dc290ff514484c9d8e292bd2448669f13a5db9c32e768fb036a42d90388aa26d453bc1e84d6696aa705ada7b942e85abd61f8544551a33069c31fa75372b47c1196c932a609cfa987e7d66a764e7a872634b673b318ba6f3355fae7ffc1303daf728fd2b517dcce787e36ba14b556f1e01bcd1c429dfed33dc50f9ca8a9906b3ed83dc0a0876ecee6b20e21f436bfd9ae617a48c3a91aa51c3ba17ff43584a4c98a9040271a91a2e3bec0ccfead27b6032780ccff0083fe788f04263c4d33bc3d43109d8051dcccc9d494ec32a5bc4cfd2708eca589b71772919cf4f999b6f9a23cc85619dec3baf8745253dd3c121be0affa7698008fea3ddfc01165f3131f1cffb5e55f58e7401efb9a2f8b9ff6d8c645eba05912a442c53c3c5afc80dae4a2498e8d1d9f8ef120353738c69f872d810ed29a94004400e608003fff024a5a3462a89c89252078090944e2adc0466285c1ea74a2923f9f1f27e824214f6098063fe79a72b6f404836754ec20a8d40f5e10354f8700571885bf15332d3d42c9f60343fa6f70466b86408938a2fceeb3b044d6610d4b3a7bd1b0281b12612aca75ffcdb6268771c9f815ef2d5fd4bf1ef41f87ce0a80ed0fbb0d0eb7fb953dbdb1a57d93c9c654372ce59e4f56cfab6de2d31630d9e63f2111ed454f06bcd599bf83e4e2a2421eccd26a68a6655bd9fe8afb048fb71b985a06f7f7431ad8ab66b13e2df3e8721ae0c7c3573162d3a6a4266655a3a9bf30667d53a7d5744063c9c194c8c521b76626238917eb4496fe05e37c137731657a8735c297989e020f73b571b771dc18f74ea87ce94c4b49e7c2c60800011204307c969709e152c8acd42526c14bb9275c0881a1e50c6c87de743dd1cc1a81dba1f76ec6406874dacfa8631a2eca15e06afe2e3356de860598002bee57895c12b0b02e95e7ecbb5779004a79878c7adcf4c263a81aae599cf840ff2c6380ced0f6a51ff30deeee80125e8173e23cd5e75f658de1b7236d42872dd98eb1b021c8a991fc2c7246f8e72aea4620a3b6b838a515d3200f4985b686840b29cca88bbcf73af883ea5cdbe9f0a3891b4b2baa58be8c18c7c4e5e0329ebe9e420b1d046c60837fdbf9938ea69fe3f746f3e5f5868bfa4b124fea8b308d5", 0x1000}], 0x8) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002580), 0x400300, 0x0) bind$bt_l2cap(r5, &(0x7f00000025c0)={0x1f, 0xe39f, @any, 0x6}, 0xe) preadv(r1, &(0x7f0000003900)=[{&(0x7f0000002600)}, {&(0x7f0000002640)=""/88, 0x58}, {&(0x7f00000026c0)=""/23, 0x17}, {&(0x7f0000002700)=""/12, 0xc}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/20, 0x14}, {&(0x7f0000003780)=""/205, 0xcd}, {&(0x7f0000003880)=""/119, 0x77}], 0x8, 0xca9, 0x9) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x28, 0x2, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000003a80)={0x0, 0x8, {0xe4, @struct={0x4, 0x1ff}, 0x0, 0xffffffff, 0x1, 0x6, 0xfff, 0x7ff, 0xcc, @usage=0xbf2, 0x8, 0xdc, [0x4c, 0x7, 0x8, 0x5, 0x2aac9202, 0x5]}, {0xa90c, @usage=0x1, 0x0, 0x0, 0x60, 0x30, 0x80000001, 0x740d, 0x40, @struct={0x7f, 0xfffffeca}, 0x8000, 0x7, [0x1ff, 0x4d2, 0x6abb, 0x3ff, 0x3, 0x7]}, {0x6, @struct={0xfffffffe, 0x7}, 0x0, 0xa, 0x0, 0x87d, 0x101, 0x3, 0x40, @struct={0x1, 0x3}, 0x80000001, 0x3, [0x3, 0x9, 0x800, 0x4, 0x3, 0x6e0]}, {0x6, 0x6, 0xe7}}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000003e80)={r6, 0x2, 0x3}) r7 = dup2(r4, r0) ppoll(&(0x7f0000004280)=[{r7, 0x4400}, {r7, 0x13}], 0x2, &(0x7f00000042c0)={0x0, 0x989680}, &(0x7f0000004300)={[0x7ff]}, 0x8) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000004340)={r5}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000004380)={0x3, 0x4, 0x8000000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) sendto$llc(r5, &(0x7f00000043c0), 0x0, 0x8800, &(0x7f0000004400)={0x1a, 0x17, 0x37, 0x8, 0x6, 0x10, @link_local}, 0x10) ioctl$CEC_ADAP_S_PHYS_ADDR(r7, 0x40026102, &(0x7f0000004440)=0xa) ioctl$KVM_SET_BOOT_CPU_ID(r5, 0xae78, &(0x7f0000004480)=0x1) ioctl(r4, 0x0, &(0x7f00000044c0)="2694367351bb632ab08108608f894878e3a58ae46a4ae465796e985d677beddd642d583f04c3f6d3a60f39f7ef063e9543c82b106fe31f0d0cfa9dac2528c529c55a0f74e3cda59b5486c4b454981f235903ae9facd11925731e06bc51babad46f4d6d747685757e497229675fc8673540635d4f18b9fe7399a0f6cbc3d51b00f78386dd148f0ea061ac16168322edb3862e4e2c5d58f939879564475040970cda059dd32df75cff19140ab28dc5d0cefaf7aa0efa03c2cfbf4c700c72") memfd_secret(0x80000) r10 = syz_genetlink_get_family_id$team(&(0x7f00000045c0), r9) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f00000055c0)={&(0x7f0000004580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000005580)={&(0x7f0000004d40)={0x83c, r10, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x81, 0xff, 0x6, 0x8f80}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x90, 0x8, 0x8, 0x8001000}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffeff}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x83c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004010) 5.623782871s ago: executing program 0 (id=4298): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = openat$kvm(0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) preadv(r4, 0x0, 0x0, 0xfffffffe, 0x6) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fb"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0xc048aec8, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x8c0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000001100)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000001200)=""/127, 0x7f, 0x1, &(0x7f0000000100)=""/4096, 0xd05}, &(0x7f0000000080)=0x40) ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, &(0x7f00000011c0)={0x28, 0x0, 0x0, 0x31, &(0x7f0000001180)=""/49}) ioctl$FIOCLEX(r9, 0x5451) 3.550709722s ago: executing program 6 (id=4303): prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0xa}) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) 3.522536752s ago: executing program 6 (id=4304): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$inet_nvme(r1, 0x0, 0x0, 0x40000002, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000600), 0x0, 0x121001) ioctl$CEC_RECEIVE(r4, 0xc0386106, &(0x7f0000000640)={0x1003, 0xfffffffffffffe01, 0x400, 0x0, 0xd, 0x190, "ac8e657480820080000000000000b8e5", 0x4, 0x2, 0x4, 0x8, 0x9, 0x88, 0x85}) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000100)={0x40, 0x31, 0xd, "91088f7006dc47b9a31e9a0eeb"}, 0x0, 0x0}) 3.398859155s ago: executing program 7 (id=4305): syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) (async) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) syz_usb_ep_read(r0, 0x9, 0xc6, &(0x7f00000011c0)=""/198) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000000)=[{0x6, 0x2001, 0x2, &(0x7f0000000100)="9d36"}], 0x1}) (async) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000000)=[{0x6, 0x2001, 0x2, &(0x7f0000000100)="9d36"}], 0x1}) ioctl$I2C_TIMEOUT(r1, 0x702, 0x7) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000140)=@svm={0x2, 0x1, 0x1080, {0x200000}, {"fd464385cdf5fd393fe858177193403a792a0a9770b6016ed4fe24f33786ece67de3037f56b6c5d1bad10c50ce6a999856f111bc2a35aea5f8a6110f7ce8c12b77a893f94eee5f4d6bd32299b3468715cf4c005c2e7eba43de60e830af6b2eba4605487df3ba3b9321b3cafce18c0e460bd1b2c6e4bb6029e6cca34d9c12940747a48be7e8efa314e81d59aca4781535708abb8a5676ba3514e6d8b6910e6b64a4cc02edc509c9e0d0af7b481ae09f7ca8fa028b7b780409c6b7dc9844d8837f1fd7827e9d34600e9fcce7557059deb4533ad4a3b4e4ccdf5d4fd8ffdaf24923e7540dd825534e03f7720ff7b36b87597d53617b5b2181bf63bc426f2cfb1076a0e935ed1dd27332fec7f67ffec3711f886efadbb3a9b25f45242e59d884cbfa879995540a22958dd58b41d0a2dc9ca36f3b35aaaa0eb61fef375c4ea2bd6648556a752bfbb11079927dcaf1c33ed7eb41dd1ff7d50e084ea4ebccada29422ebc6b2df7f7a5f59074fe11aa493fdba2361fc51d886cfc88e47cbc01ee5f562d235f211eaec8005b92d060b420114167fb2515ebb513820ea8312685c977a7fa528b6460643f67d0f2b31caf6827ce3fce48b562bbfd03ce67a3debb7f6061662863ae1e1df7a4795ee4c12667e62f0c703ff931aa5e9b34ff7059e23e26abdf29c1ff80fab39ea8a801512e0eedcdc45aa477b175b05cd5e84c1a714ae00d90b09ea3977002a072fd39b3b8af91f7a6544fa81eec6268eee375abb39f64c1285853696d5f6870c0d1bf0a65c28c4e0064a77b8debdf038ce6132a5b63d7f7213779a09e61b056538df2ee813352026fc650b105ff76d37bddea1d002d3b0c2d5318463ecedd2484836fc033e41e2ce9c15d0494f357bcd2e0573d5522a80e33807647ca78f4ba1825f531b8f897e8eb9c346af3b1f9b25fe5f3e15882ac33f8d28454aacaab0858cbda5ab1ca31f904ff128137584fd395c7014627962b0372a012d0849e5fb645e9a443acd43044c22333800c59d40a32e62929aae791269386c8fe77c0948fd9c6d51b2439bf89f2d7c57a94e85656ffe7058cba4ee59418112ad35412025e69d0e000ac1f44d7c82060c75b4f00533cde6b0347f637c9e9a3cc7791f2226352dbb1eaf2b92d50065c059da4ab9c266695cf3f0814e72e8c85b5750de320bf33040702a5822c5d8f067d91665089cc4c9f5219d140f4596c6e69af92d316aa03684d520cfc644d04a442c601695a0318d6c6455dbc30cdd5536aa255472cb09a3b94644772ec72453733c0f26b6456b90babba2bd4cf0c6e3233972aaed3014b77b2930d9c701ae816a473d20bbb2fe29778a534eb0c50a5602d0a88dd4de04883e8ab8f5761dd4992753058e19ad89ab295a631fc2a6d782144422ed45a2f9d0346ed49bc38f911c89ca4a38b52a3280aed6ae49bd1b9dc7e4c35ded4403749b2f3b4f4d21d255260c69d8f4115d0b60dafab700c80baf02bce7ee552f389b2219f816b2e15344a29ad0e21f08d6762c335a42919550c79c85b9698584a34de67e6fd4df5d2bb8930fd66eabe3ff6a78f1e785d858fcd1e2dba05017900fcc986530ab973489abdbc16889bf54c059d790400e171bd8ca5681da01569da2ad4d7e12c17ea0a31327cdee89e344aa996ad65efd82f7a1da9bed7d232a2c1c7e4abfa3cfd7dd73ec2cee3399691825eef2594b2b048a89d7e006ce342bf203fb35267ac894317f6220274c20dd09a20c0afb13dce3765a55dbfea3fa94dabb2fe8fe44eaec9d505f9ac9c38042886ba0580f4af6fe5e031dba62d476f5e83ab6f0265af251694d6a8ff0f739e2ea7e60e4af91b4b1fe58fc575315b2bdef75bba5a414c7fb05152ee33bbdad8b95d366fdb4b4a790c44b8cb031814deb670672e37ee59ddd8a357e43f42f07efeaf4a1be3f4a14c2389eacca4044188fd0c99c7978fba97a26d57ed7ee5155401cc3dcb34899b00f14d224e8a33a87ace689ee15f63f6ca1ec1b3e8aaf5b25bb19040b0a406f930ff0896c6e7f1dccbbef38dbdadb00b72047cf92427404e22bc7f1e5746b5cb7df1c743ad3c7e861cbd4b85b72c8791af1495ad31c0c67e4cacb2491679a7b568ba00fd598ca4ca092a91346c651408b0baa9aadc9180dcab1da464beaa4a10136dc643383d43b6e6d729d221c814024bd000d8488029ff431a7e7642e7a79a9a31774a46d6098850ec1ef069e6f68872acfd3f223aa58a4cc6b7820e40008348aa1dd9742275eabf32e8ea49b6b894f6b205667157a7cb902159a8721b92c2f5af828fd6207521c4cf35f8fd1f98e9835958ec4b933193929ecdc2977732ffc7185d5d83bbfdca68578b7e6f6ac5f4b91635874beb8855990825cb6216f38d102f1b3b8c44419e0aa5e66ea8a7a144ef13aa81c7b44eec8b0bb59b0ccc260d9101c19b26de3c51b723b948a4aa517f4eb69c84ffb3b50a7b58b2e90ebb3d69136ca13b055f60dbd826c7871107a5bf9f72fb337a2865330e53d437e1c244ec283ad85369b463c38f7cd59900a8d7478dfaac99122b66da4869260907c67ad44ae47d8ed8b5636cae735a31c8aa9430ddb237994cbb980768eb0cef902b24c4bfe8424aef0c7a5ed7f879b611f28eaf4d2da01786006a8a0335ecee7b4e66287ae6e3d11c9eaf171a23dcc8bad7bac7e98a863b7ed5a403407cb53443e63ad40968d91e617cee6d7289fa782ce8c3b2b0286b4b813f86c683c58dfb59baa54f00fddef09a63f0570c197f44034070c165b376ff7acf34c08cb9e00252ad48ed7878fe7725cbf5d7d997957d328c86cdbffe59bf0a0be380637361747d3e4552708be8db0f336c3fc8e3e7943872b1f787d52089e60b01cc9d7867883b27f0e6bea809b22b6c0530f1f1e181e591ddb6e09533fc7ab9f296800e8b2cefb6744539554e49c580a1838793feed358f6829e8d091af4f9f23a01960bc60ab70600ceaeeaf8115f18591320a2f7944a423e58f59832edc6fe9156c8c5d38506c02a21d0370e844c9b741613d181ea68f40a1f88bcf3c61369de231989a1fa0626254f950d4dd01786df4ef6f6d2f2b3a6ead80f6980b5917072b342a1c08c82d6c1c5ccdf1ef6e071a35f96cbfd7a2124fabf106644058422f908865c1e15f96136670f8435d2feff1098fb2a2ed21eb96cc36c1654a0a675f8866a75a3cf4758c4dd61d5bed6b07d65be7fef1d0ef3332fe78a61334b687890547eeaf49ab2c0fc2169310acce27a91c6283d7102fdc7ceffa5929c1667a48903ca78cee5e0baf7ec8b2205adaa70ba9ba39472fd73135b30bc5da3dfd8a9b2cdc4a7d0d9872e87b869a1ba70ea07b0bc6d0f7dd7851200f7fd62229b98b2493f50632013b99904c1057bcecd34023688242155de127a390acc9ac8303bb940fba97461fd521538b96660a97e1c4a34c558bca62ca4493401720fa1198997fd6effc4efd5a500f2e85d3418707c375df13bde03e0b56dcb93a0ce577ffd8912d7be64b2b16183aca92e4e770eef75949b4553e7cc91a5e0cf10723b222c3e3317644f6e6c35ccfa0351fefd6c6f8d4d212612f7725c8283c764158dd1ce1de5a1175ea5b8b848233fc4796ad98b6ee951ec732b29a1bfd65859d928b7c02e835c6528629bd68c9e558f8d05f9d6c422227d224bf7ad4c95f6d12613a66ce377f2d2badc45e1c93a64ef4a0d97169ca5410c3deb5705a6a6050b72401b2107d08743e6923057937dea789884d85cecc2685d69827a3095070e144542796c5d6a3771d6ef514557cece5eb036213b53f2b93a9748b9f3d5b4c6c38155a271574bcad11fc75d32a417e2ec6b210032e3ab1d10f6593a18e358e8819022df6e0e8d26b60e6309a1df8f9ccaae52a41a729f26a8404f1aa66ca3356521148b78cd98ad24e74eeef2b7f576dc5d4352a90c8c2a0d3641221320a5096dd1b38edce14090c3e69e7a491d4850a6830c6e43727d7b6c14d9c7ddb20834a5097feffc857770ad0b89248bd826e5dc8eac26b6d0c77f8793fb8154424f0b6ce32dab6fcf4b8c9721f29350722af6cb8ffcc423d2a1f6e2efc8d07911b0c4c52296760fa6f1242b01d89e1701c81036153f2395b2cdf8c5b4e890f72592237c15afeb7de5f08de12c4e6235278193311af2edea27f80ecbe4d46364a1888a2c02900fcaee21b6610b71cfe77b8e1d687df23faa2114b9d94ff64c6f329c15440e07bab37b22fb81310912d31da55e63505d56e1a597b1470cec7684daea5b3693df8e5e5b6d489a093da230de250a950ea031d5ac93f169ca13f23727b868857e77cdeaa67a8ceffd0be6220609033e85422fc53ad37b6ec7c753e715b0e81efe0209f756493be01fc63b4b895c36821d176e649020bcc395d71bca6ba7375818b1d865eae82ccef500304d4e46a109694f9d39bcf1719e8f944e15d3398f0b5961cbe10973b85587a781189c51743e30fc21e5f9f7dd98572a7a5dee5a21ea5fcdff52180f33212750be1c957b21b0810e85af9f076eaf2d24fcafcb1e53b945c05fd16119cbc8a82ab62c9f0577d53999a6ac702f2df44d6276768e809990a99913477aa8579f6c7f4edfed1d15adc9e663a776e4806503ac3aa8db2bbaa3a6cacab34cdc0888375d32ce52a9480c6cb41be15014a8e0e2c23177e5a5e88cebb1128821776510312845964f09a4d4a77fa9b195c48b82483723ca7bee8a936064b13e53608a8ad2d0683377b17b9771a21d7c977cf17b303a6ca7eebfc15897a88f3cfd3d45a31184cad2c0e184949b6a5ae5f214f66210181450f258b373bdf82b7e7a4cb5583c09de6b5e23e01317c7a53d5e85e0cd2e4f853420d0f77dbe1ff8a75c6aa5e8217bb55284d337af968583d01a9796c71ca9a5016ca1e805de2d7e55fa2c9f90a1c0746edac1eae2b609e4317358fbba9178a3c8dc64cb9a6bb0a94d9d955b2ecceb7a783e9fb6aecfcc2fc514736e0c87fd76747210992a5db464499703c5acb366e162296e5dd49694b4f1ac5ba8ec5d9bc2d356ddd54b9c7c7f09030776b351b2aaac05030e667e2a5b339dda51b4077d977833644eb2db613325d39146bd8c5b0a4070d952daf1b64656d505a896764954431dd2e70e76ff0178eadf16fbb9d26a4bccf855cff9c87d3ccfeea710b603bbf18b2866020c695501607e03f36ef73b1b59f69638b5edbd6652f5bb7c1f90f1f31c4642df1521bffb869965ff94699a0f90575314952c8488c7192d3bc03c4621fabb2b4f616feb6db946668cc74df6f4480daa51547b663b466cca2e25f0d647a86acd434481eaeda52cad836212913f1951a3fb968d96a3457b2db259464968d35f89157bce1f48d54894955c46190cef94c11b39e364045106b2f2d1af16ac817c28a294f566160b7723501714c761d9ceb20fe44328f03930fbc416c728392d9e93b7009172d6dcf57abd34555d8595481217993f08a90954f64a69c603e56c2a7df9a5bb699333dd8ee0f3a817a7ec66df54c392e1518d93c0f9bdea4a50f0b58540810b519fb335ffd838fc9a0bfa2ffc0e81b51aebc6ec004c2b92c1b60ae489f79d662b11c6dc808d4c88c468a598ddb381329d567878159639001188ce51afeabd256881c50dbc3fbf8a0f06027e50c7babc54dd82afa976a4dc9de94cfb80684980fae087fcc40738035c346b887de50beabe487385f9dcd2e747b21010cf611a8e34f20dea644f2e0f99ce3c0a0f209bff9f3ae06b0fb13f014886add899a049b7385e30f19654b3451ef06e6b5fdeac7827d9"}}) 2.711057484s ago: executing program 8 (id=4309): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c0099004100000060000000080026009a030000080027"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) connect$nfc_llcp(r6, &(0x7f0000000180)={0x27, r7, 0xffffffffffffffff, 0x4, 0x72, 0x81, "e2b049e713ccb374728f19566c3110e7a84afd6e88e32e340875195d04604af286170e57564e7c82a5689ce134634aaa8f20c7b784dad171302da357741dce", 0x14}, 0x60) setresuid(0xee01, 0x0, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r11, &(0x7f0000000240)=[{&(0x7f0000000140)=""/16, 0x10}], 0x1) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000003c0)=0x2) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@cache_fscache}]}}) 2.592088501s ago: executing program 0 (id=4310): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x34}, 0x1, 0x0, 0xf802, 0x40000}, 0x4) 2.523461056s ago: executing program 0 (id=4311): lsm_set_self_attr(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="678f895b6c97b64066000000e200000000000000000000004d000000000000001300000000000000d7bd175c8cafb57115b0c0f69b21174d0be940187b424a1602f7f73f0ff65e0b0ab4a470415daad6a63074f49ff1a24b1d718e4a6a02474cb8f303cdf99e220489ee377507d40957dcb23d1104ed3b73a2944529757acdf28c7d7ab81b12e08489"], 0x4d, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi2\x00', 0x101001, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$COMEDI_CANCEL(r0, 0x6407) setuid(0xee00) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r5, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000880)={@in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x27, 0x0, "bb353738cb593fc7c9f1cf53b6a7b4e24740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189312c95f39ccd00"}, 0xd8) ioctl$COMEDI_SUBDINFO(r0, 0x80486402, &(0x7f0000000240)) sendto$inet6(r5, &(0x7f0000000000)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x40, @empty}, 0x1c) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 2.522684776s ago: executing program 8 (id=4312): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$sock_timeval(r0, 0x1, 0x56, &(0x7f0000000000), &(0x7f0000000040)=0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080)=0x9, 0x4) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000100)) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x420000) ioctl$NBD_CLEAR_QUE(r3, 0xab05) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x140f, 0x800, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x44005) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000340)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x93, "3a5c8bcce3b4b8f542625a0260b508e4a18a73c07c6a95f654db022388e55c9c5c9435632f67702fab0e2585482cc219fa3154561887402bc1de6412ec73abdf9d2e1844e2a1567b6d92fd31ab14a29a8837e6ede95c3ffa50ee585695c36aa853941a06b986b7765c9c53ebfe857e0b55af628660dad246ac4cf5292ce733198cd9802e064ee9697b4f5c44d2859a22e9e264"}, &(0x7f0000000440)=0x9b) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000480)={r5, 0xfac, 0x5000, 0xf, 0x3, 0x1}, &(0x7f00000004c0)=0x14) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000900)={r6, "970e93cb565fe98392eb4a5101dd5610"}) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000001900)) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000001940)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000001980)={0xc, r7}) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000001b00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x88, 0x0, 0x9, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000010) getpeername$l2tp6(r4, &(0x7f0000001b40)={0xa, 0x0, 0x0, @remote}, &(0x7f0000001b80)=0x20) sync_file_range(r3, 0x6, 0xeef, 0x1) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000001c40)={0x28, 0x5, r7, 0x0, &(0x7f0000001bc0)="339ba651e8582c5cfa3bc07d28291711efea7fdefb9f8dbc7bc6c32e54e93406f7625ab2845faf7deb42b1bb68702965d54094837c8b176ade8323961e747246a29687493a5f34626bc364c386fc270c5e24a688efc1c1626836c0f11a61a105bcd5e871cd0fe63ba6c1b491a46df6b8495f395dcc504f98e9d3f5847e", 0x7d, 0x93e8}) write$9p(r4, &(0x7f0000001c80)="6931e298c2457fdd77dc468465a5ad16685e92abd706eb213c867c63d59df8d401366ed792a9098970f8b63fca06c2800635992f1aec944929f3642880a5eae944c7f28914e791b81267f9f97da080804d1b432da052c0ff065a694ccf7fa527419cf7ace35b08a47d59fbbdd9e2190c10fb7f2c7a07ec3d6868f735ed16d60e7e684686504bc2e883a8fd7e4a355b89114f6711", 0x94) syz_emit_vhci(&(0x7f0000001d40)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x63}, {0x7, [{@none, 0x4, 0x2, 0x0, "7f3217", 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x98, 0x1, 0x0, "7d87e5", 0x9}, {@any, 0x48, 0x74, 0x3, 'E&^', 0xd}, {@any, 0x3, 0x4, 0x9, "210d7f", 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x9b, 0x6, "56dae7", 0x4}, {@none, 0x5, 0x2, 0xc, "cf217c", 0xffff}, {@none, 0xf8, 0x9, 0x6, "e4c9ae", 0x7}]}}}, 0x66) bind$bt_l2cap(r4, &(0x7f0000001dc0)={0x1f, 0x5, @any, 0x6}, 0xe) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xd) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001e00), 0x200, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001e40), 0x100) write$sndseq(r8, &(0x7f0000001f80)=[{0xfc, 0x5, 0x9, 0x5, @time={0x4, 0xb9008ec3}, {0xec, 0x5}, {0x1, 0x6}, @ext={0x94, &(0x7f0000001e80)="0dd6627b5021d9636fa3d3ea3b96bedc45d312efaeb441a5b59e3b3df9a118b37c841690ea64f00c3ee2cee234ad0f11f3d420f35c2ab4897c73caacccedc25c553e97b563e67dedbeebec8d9eba0edb58e3a2186306c8ecd58ce31352f74c2f6aa97fa4d700aa7adcf24b39525e88f425f30b6ca1f186173e9a23b9c749087664055d4cc1a31ea21ddc9dafcc58a4cb1f920e07"}}, {0x0, 0x5b, 0x6b, 0x9, @time={0x4, 0x5}, {0xba, 0x5b}, {0x1, 0x7}, @addr={0x5, 0x6}}, {0x0, 0x7, 0x6, 0xa, @tick, {0x1, 0x8}, {0x10, 0x44}, @note={0x10, 0x8, 0xf7, 0x8}}, {0x3, 0xc, 0x2, 0x9, @time={0x6, 0xb}, {0xb, 0x2}, {0x2, 0x6}, @quote={{0x71, 0xe}, 0x8, &(0x7f0000001f40)={0x3, 0x7f, 0x81, 0x3, @tick=0x40, {0x2, 0x7}, {0xb, 0x72}, @note={0x9, 0x6, 0x9, 0x0, 0x3}}}}, {0xd, 0x3e, 0x1e, 0x4, @tick=0x2, {0x7}, {0x11, 0x88}, @queue={0x9, {0x5, 0x3e4f}}}, {0x5, 0xd, 0x7, 0x5, @time={0x40, 0x6}, {0xf8, 0xf}, {0x80, 0x4}, @addr={0xb, 0x80}}], 0xa8) 2.441504519s ago: executing program 8 (id=4313): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x81, 0x282300) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000340)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000025c0)={{0x5, 0x3, 0x1, 0xfffffe00, 'syz1\x00', 0xc2}, 0x5, 0x100, 0x4, r3, 0x5, 0x3ff, 'syz1\x00', &(0x7f0000000380)=['*\'&}\x00', 'cgroup2\x00', '/[\x00', '*\x00', 'overlay\x00'], 0x1a}) r4 = dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000002580)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000240)={0x2, 0x9}, 0x2) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r6 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f00000001c0)=0x9, 0x4) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f00000003c0)=@rnullb, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='ext2\x00', 0x8000, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x182400, &(0x7f0000000100)={[{@verity_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r7, &(0x7f0000004200)={0x2020}, 0x2020) 2.439901661s ago: executing program 0 (id=4314): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0) mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x8001) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x8001) r3 = getpgid(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3}) fcntl$setsig(r2, 0xa, 0x1c) sendmmsg$unix(r1, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) syz_clone3(&(0x7f00000003c0)={0x101040000, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x410080, 0x0) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x410080, 0x0) ioctl$KVM_GET_XSAVE2(r4, 0x9000aecf, &(0x7f0000ff0000/0x2000)=nil) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) 2.366845983s ago: executing program 8 (id=4315): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) close(0x3) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000300)=@x86={0x5, 0x0, 0x3, 0x0, 0x8, 0xe9, 0x1, 0x7, 0x2, 0x1, 0x93, 0x84, 0x0, 0x7, 0x8, 0xec, 0xe2, 0x7, 0xe, '\x00', 0x9, 0x1}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) write$binfmt_script(r0, 0x0, 0x6f4000) 2.304225447s ago: executing program 0 (id=4316): syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000040)) (async) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000040)) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) 2.235331502s ago: executing program 8 (id=4317): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xfffffffffffffff8, 0x80400) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000080)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r1, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x4000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) 2.147058483s ago: executing program 8 (id=4318): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$userio(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = openat$kvm(0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) preadv(r4, 0x0, 0x0, 0xfffffffe, 0x6) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fb"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0xc048aec8, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x8c0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000001100)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000001200)=""/127, 0x7f, 0x1, &(0x7f0000000100)=""/4096, 0xd05}, &(0x7f0000000080)=0x40) ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, &(0x7f00000011c0)={0x28, 0x0, 0x0, 0x31, &(0x7f0000001180)=""/49}) ioctl$FIOCLEX(r9, 0x5451) 483.747262ms ago: executing program 6 (id=4319): lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000600), 0x0, 0xff, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x34, r1, 0x301, 0x0, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x34}}, 0x40896) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="58000000070601080000000000000000000000000900020073797a3000000000050004000000001200030068617368869265742c706f72740000000c0007800500150002000000050005000a0000000500010006000000"], 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x6) 428.300675ms ago: executing program 6 (id=4320): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) fchdir(r1) creat(&(0x7f0000000100)='./file0\x00', 0x7a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) accept4(0xffffffffffffffff, &(0x7f0000000140)=@in6, &(0x7f0000000240)=0x80, 0x80000) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000280)) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="88000000", @ANYRES16=r3, @ANYBLOB="050026bd707dd2c8ba5441bbfe0008000300", @ANYRES32=r4, @ANYBLOB="4c000e0080000000ffffffffffff08021100000008021100000000000000000000000000640001002d1a01001d00000000000000a60200fe0004000000000009000000037206030303030303080026006c09"], 0x88}}, 0x20000014) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file2\x00') syz_usb_connect$uac2(0x2, 0x9f, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 314.92134ms ago: executing program 7 (id=4321): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x34}, 0x1, 0x0, 0xfdff, 0x40000}, 0x4) 299.352816ms ago: executing program 7 (id=4322): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="470f23fc48b8e7320000000000000f21f80f23e1f8440f014a000f2221c7c4c3fd01ce002063800000002c24f30f556797c483fd005b02ea64267b470f1fcfcf666466430f3833af00580000", 0x4c}], 0x1, 0x3c, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x3, 0x5, @buffer={0x0, 0xb3, &(0x7f0000000200)=""/179}, &(0x7f0000000180)="d417b2", &(0x7f0000000300)=""/184, 0x3, 0x5, 0x2, &(0x7f00000003c0)}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000b80), 0x0, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0xba, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x8000000, 0x3, 0x1, {0x1, @pix={0x65b, 0x5, 0x375c505b, 0x9, 0x6bb, 0x5, 0x8, 0x6, 0x1, 0x1, 0x0, 0x4}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000400)={0x0, 0x5, 0x2, {0x1, @pix_mp={0x800, 0x0, 0xf166411, 0x1, 0x2, [{0x8, 0x4}, {0x0, 0xbe8}, {0x1ff, 0x9}, {0x1ff, 0x3}, {0x1, 0x4}, {0x9, 0x2}, {0x5, 0x80}, {0x9, 0x1}], 0xc2, 0x5, 0x9}}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 154.133481ms ago: executing program 7 (id=4323): lsm_set_self_attr(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="678f895b6c97b64066000000e200000000000000000000004d000000000000001300000000000000d7bd175c8cafb57115b0c0f69b21174d0be940187b424a1602f7f73f0ff65e0b0ab4a470415daad6a63074f49ff1a24b1d718e4a6a02474cb8f303cdf99e220489ee377507d40957dcb23d1104ed3b73a2944529757acdf28c7d7ab81b12e08489"], 0x4d, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi2\x00', 0x101001, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$COMEDI_CANCEL(r0, 0x6407) setuid(0xee00) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r5, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000880)={@in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x27, 0x0, "bb353738cb593fc7c9f1cf53b6a7b4e24740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189312c95f39ccd00"}, 0xd8) ioctl$COMEDI_SUBDINFO(r0, 0x80486402, &(0x7f0000000240)) sendto$inet6(r5, &(0x7f0000000000)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x40, @empty}, 0x1c) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 98.379754ms ago: executing program 7 (id=4324): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x101001, &(0x7f0000000040)={@_ha_fsid={[0x8, 0x1]}, {0xf, 0x8, 0x9, 0x200}}, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x643f}) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000140)={0x9, 0x4a6d5077, 0x7, 0x7, 0x8000, 0x8, 0x5, 0x42}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000001c0)={0x8, 0x1}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000001200)={&(0x7f0000000200)=""/4096, 0x1000}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000001240)={@any, 0x465, 0x4, 0x101, 0x7fff, 0x4, "490b61fe7823e45c3de923d07391337a0f7c0305f91a745c10c4fd29cc330040113934c4b64cbaeb4904eac403326d70fdbeb1a8fbf593ea6508dd4bd7c718bd149ec49dcbc0167c5ee9475654fb89fade8917d2f1612d252d90913cc196166e5f0a982621985e47e2716ee88459cd5203964d6c4d5ad239acbefb0c7c782b32"}) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x28010, 0xffffffffffffffff, 0x8000000) r2 = accept4$phonet_pipe(r0, &(0x7f0000001300), &(0x7f0000001340)=0x10, 0x80000) syz_io_uring_submit(r1, 0x0, &(0x7f0000001380)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x13, r2, 0x0, 0x0, 0x0, 0x1}) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f00000013c0)={0xe08, 0x1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000016500)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e23, @local}, {0x2, 0x4e21, @broadcast}, 0xa, 0x0, 0x0, 0x0, 0x2e, &(0x7f00000164c0)='pim6reg1\x00', 0x6, 0xf174, 0x4}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000016580)={0x6, 'veth0_to_batadv\x00', {0x7}, 0xfff}) fcntl$getflags(r2, 0x40a) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000165c0)={0x0, 0x2, 0xffff, 0x4}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000016700)={&(0x7f0000016600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000166c0)={&(0x7f0000016640)={0x78, 0x2, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xeb8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6c0}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x385}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3ff}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x8000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000002, 0x8010, r0, 0x436c1000) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000016740)={@local, @local}) r4 = syz_open_dev$vcsa(&(0x7f0000016780), 0x1f, 0x24081) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000167c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000016840)={r5, 0x2, r3, 0x1, 0x80000}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000016880)=0x100000, 0x4) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f00000168c0)={0x1, 0x0, 0x9, 0x3, 0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000016900)={0x1, 0x0, 0xb9b, 0x9, 0xd6, 0x4a4, 0x2}) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r0, 0x4068aea3, &(0x7f0000016940)={0xc1, 0x0, 0x2}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000016ac0)={r2, &(0x7f00000169c0)='/dev/vcsa#\x00', 0x0, &(0x7f0000016a00)={@align=0xa, {0x3, 0x7, 0xffff03c3, 0x6}}, 0x7ff, &(0x7f0000016a40)={@_ha_fsid}, &(0x7f0000016a80)=0x1ff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000016bc0)={'ip_vti0\x00', &(0x7f0000016b00)={'tunl0\x00', 0x0, 0x40, 0x1, 0x3, 0x7, {{0x1e, 0x4, 0x0, 0x3, 0x78, 0x66, 0x0, 0x9, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x34, 0x3, [{0x5, 0x11, "e004023382d4172a6adf9a7447cd3c"}, {0x6, 0xf, "3c0f9d4a9b6090a6cc6aa2f846"}, {0x1, 0xe, "20389da7b63fc08c1ee4c25e"}]}, @timestamp_addr={0x44, 0xc, 0x64, 0x1, 0xf, [{@remote, 0x9}]}, @end, @cipso={0x86, 0x22, 0xffffffffffffffff, [{0x6, 0x4, 'DJ'}, {0x1, 0xb, "35ba64ec2e762991fb"}, {0x5, 0xd, "4f5fbfc4f47436cc1ceca0"}]}]}}}}}) sendmsg$can_j1939(r3, &(0x7f0000016cc0)={&(0x7f0000016c00)={0x1d, r7, 0x3, {0x1, 0xff, 0x1}, 0x2}, 0x18, &(0x7f0000016c80)={&(0x7f0000016c40)="58aba12d28e2dbd1bd84da0da95af71cf82bb3b06a22c6", 0x17}, 0x1, 0x0, 0x0, 0x50}, 0x20000800) r8 = syz_open_dev$evdev(&(0x7f0000016d00), 0x1, 0x2000) ioctl$EVIOCSABS20(r8, 0x401845e0, &(0x7f0000016d40)={0x1, 0x10000, 0x3, 0x1000, 0x1, 0x10}) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r4, 0x8044610a, &(0x7f0000016d80)) 0s ago: executing program 7 (id=4325): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000840)="97", 0x1}, {&(0x7f0000000900)="5c98", 0x2}], 0x2, 0x0, 0x0, 0x40000}}], 0x1, 0x20000880) syz_usb_connect(0x0, 0x3b, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0xee, 0x2, 0x59, 0x20, 0x2c7c, 0x800, 0xd337, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x10, 0x5, 0x0, 0x6, "", [{{0x9, 0x4, 0x24, 0x9, 0x0, 0xff, 0xff, 0xff, 0x8, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xa, 0x7, 0x1}}]}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): ge read [ 715.899707][T17232] Buffer I/O error on dev loop4, logical block 0, async page read [ 715.909170][T17232] Buffer I/O error on dev loop4, logical block 0, async page read [ 715.917913][T17232] Buffer I/O error on dev loop4, logical block 0, async page read [ 715.926799][T17232] ldm_validate_partition_table(): Disk read failed. [ 715.933569][T17232] Buffer I/O error on dev loop4, logical block 0, async page read [ 715.941746][T17232] Buffer I/O error on dev loop4, logical block 0, async page read [ 715.953050][T17232] Buffer I/O error on dev loop4, logical block 0, async page read [ 715.962030][T17232] Dev loop4: unable to read RDB block 0 [ 715.968112][T17232] loop4: unable to read partition table [ 715.974051][T17232] loop4: partition table beyond EOD, truncated [ 715.982494][T17894] ldm_validate_partition_table(): Disk read failed. [ 715.989629][T17894] Dev loop4: unable to read RDB block 0 [ 715.995844][T17894] loop4: unable to read partition table [ 716.001882][T17894] loop4: partition table beyond EOD, truncated [ 716.009765][T17894] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 716.095900][ T5929] Process accounting resumed [ 716.318289][T17906] netlink: 'syz.6.3547': attribute type 3 has an invalid length. [ 716.326647][T17906] netlink: 'syz.6.3547': attribute type 4 has an invalid length. [ 716.336308][T17906] netlink: 'syz.6.3547': attribute type 5 has an invalid length. [ 716.344108][T17906] netlink: 'syz.6.3547': attribute type 6 has an invalid length. [ 716.370149][T17906] netlink: 'syz.6.3547': attribute type 7 has an invalid length. [ 716.383337][T17906] netlink: 'syz.6.3547': attribute type 7 has an invalid length. [ 716.392570][T17906] netlink: 13626 bytes leftover after parsing attributes in process `syz.6.3547'. [ 716.460639][T17912] netlink: 'syz.5.3550': attribute type 10 has an invalid length. [ 716.468643][T17912] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3550'. [ 716.558383][T17919] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3552'. [ 716.814323][ T9] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 716.944431][ T9] usb 6-1: device descriptor read/64, error -71 [ 717.184339][ T9] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 717.314387][ T9] usb 6-1: device descriptor read/64, error -71 [ 717.424600][ T9] usb usb6-port1: attempt power cycle [ 717.502755][T17924] overlay: ./file0 is not a directory [ 717.513071][T17924] overlay: ./file0 is not a directory [ 717.702833][T17928] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 717.706681][T17927] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3555'. [ 717.722824][T17927] 0: renamed from hsr_slave_1 (while UP) [ 717.730850][T17927] 0: entered allmulticast mode [ 717.736326][T17927] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 717.764362][ T9] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 717.797309][ T9] usb 6-1: device descriptor read/8, error -71 [ 718.054333][ T9] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 718.085393][T17705] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 718.096741][ T9] usb 6-1: device descriptor read/8, error -71 [ 718.204787][ T9] usb usb6-port1: unable to enumerate USB device [ 718.244315][T17705] usb 5-1: Using ep0 maxpacket: 16 [ 718.252021][T17705] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.263964][T17705] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 718.273406][T17705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.283547][T17705] usb 5-1: config 0 descriptor?? [ 718.296251][T17705] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input64 [ 718.581781][ T5194] bcm5974 5-1:0.0: could not read from device [ 718.590858][ T5194] bcm5974 5-1:0.0: could not read from device [ 718.601351][ T5194] bcm5974 5-1:0.0: could not read from device [ 718.616471][T17705] usb 5-1: USB disconnect, device number 65 [ 718.619554][ T5194] bcm5974 5-1:0.0: could not read from device [ 718.635465][T17232] bcm5974 5-1:0.0: could not read from device [ 719.417711][T17957] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 719.504304][ T42] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 719.661405][T17965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.666084][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 719.674666][T17965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.692605][ T42] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 719.717270][ T42] usb 5-1: config 1 has no interface number 0 [ 719.738470][ T42] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 719.765123][ T42] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 719.786665][ T42] usb 5-1: config 1 interface 105 has no altsetting 0 [ 719.807682][ T42] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 719.831485][ T42] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 719.841282][ T42] usb 5-1: Product: syz [ 719.845645][ T42] usb 5-1: Manufacturer: syz [ 719.850266][ T42] usb 5-1: SerialNumber: syz [ 719.860795][T17954] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 719.877288][T17954] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 720.104284][ T5848] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 720.254287][ T5848] usb 6-1: Using ep0 maxpacket: 32 [ 720.261293][ T5848] usb 6-1: unable to get BOS descriptor or descriptor too short [ 720.271896][ T5848] usb 6-1: config 16 has an invalid interface number: 119 but max is 0 [ 720.281415][ T5848] usb 6-1: config 16 has no interface number 0 [ 720.288406][ T5848] usb 6-1: config 16 interface 119 has no altsetting 0 [ 720.295215][T17952] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 720.298217][ T5848] usb 6-1: New USB device found, idVendor=12d1, idProduct=1c23, bcdDevice=2b.c7 [ 720.302890][T17952] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 720.313417][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.327204][ T5848] usb 6-1: Manufacturer: ࠠ [ 720.332141][ T5848] usb 6-1: SerialNumber: 醪잖ᝌ禢⯪礎鼻֩紥㵪疃⃨﵁✝ꩶ읇覸䁵걸挦鴅테쑪漣䎧⛯∡ᝩ㵨쌯䎷醒╯첼隌᪚㔴貯ኴꎺ访喜獄ѡ⠣⏔藵ች媽趽㲔씏ꋷꔊ桎鄸琲ʹࣾ㞠聓ꝉ쾨齃᥈ [ 720.585898][ T5848] rndis_host 6-1:16.119: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 720.596755][ T5848] option 6-1:16.119: GSM modem (1-port) converter detected [ 720.610912][ T5848] usb 6-1: USB disconnect, device number 89 [ 720.621260][ T5848] option 6-1:16.119: device disconnected [ 721.134100][ T42] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 721.172381][ T42] aqc111 5-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, b6:0a:3c:1d:58:94 [ 721.206137][ T42] usb 5-1: USB disconnect, device number 66 [ 721.245995][ T42] aqc111 5-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 721.329546][ T42] aqc111 5-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 721.351623][ T42] aqc111 5-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 721.374464][ T42] aqc111 5-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 722.204616][ T42] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 722.354292][ T42] usb 6-1: Using ep0 maxpacket: 16 [ 722.373763][ T42] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 722.395872][T16548] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 722.414261][ T42] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 722.426534][ T42] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 722.442006][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.450199][ T42] usb 6-1: Product: syz [ 722.454611][ T42] usb 6-1: Manufacturer: syz [ 722.460435][ T42] usb 6-1: SerialNumber: syz [ 722.480316][ T42] usb 6-1: 0:2 : does not exist [ 722.485886][ T42] usb 6-1: unit 9 not found! [ 722.576332][T16548] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 722.599989][T16548] usb 5-1: config 0 has no interface number 0 [ 722.622137][T16548] usb 5-1: config 0 interface 41 has no altsetting 0 [ 722.649565][T16548] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 722.664762][T16548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.673046][T16548] usb 5-1: Product: syz [ 722.685913][T16548] usb 5-1: Manufacturer: syz [ 722.696305][T16548] usb 5-1: SerialNumber: syz [ 722.712569][T16548] usb 5-1: config 0 descriptor?? [ 722.743752][ T42] usb 6-1: 4:0: cannot get min/max values for control 1 (id 4) [ 722.765597][ T42] usb 6-1: 4:0: cannot get min/max values for control 2 (id 4) [ 722.779614][ T42] usb 6-1: 4:0: cannot get min/max values for control 3 (id 4) [ 722.794087][ T42] usb 6-1: 4:0: cannot get min/max values for control 4 (id 4) [ 722.810685][ T42] usb 6-1: 4:0: cannot get min/max values for control 5 (id 4) [ 722.827732][ T42] usb 6-1: 4:0: cannot get min/max values for control 6 (id 4) [ 722.892214][ T42] usb 6-1: USB disconnect, device number 90 [ 723.199123][T18037] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3583'. [ 723.289495][T18039] : renamed from vlan0 (while UP) [ 723.551400][T18010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.576177][T18010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.709126][T12977] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 723.737431][T12977] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 723.750372][T12977] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 723.760624][T12977] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 723.770731][T12977] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 723.812573][T16548] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 723.826447][T16548] usb 5-1: USB disconnect, device number 67 [ 723.905627][T18044] hma(sha224): entered promiscuous mode [ 724.340017][ T1147] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.532152][ T1147] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.748556][T18045] chnl_net:caif_netlink_parms(): no params data found [ 724.793696][ T1147] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.877386][ T1147] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.884374][ T5929] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 724.940957][T18045] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.948893][T18045] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.958275][T18045] bridge_slave_0: entered allmulticast mode [ 724.967787][T18045] bridge_slave_0: entered promiscuous mode [ 724.979360][T18045] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.987401][T18045] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.995529][T18045] bridge_slave_1: entered allmulticast mode [ 725.003409][T18045] bridge_slave_1: entered promiscuous mode [ 725.044307][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 725.062505][ T5929] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 725.073426][T18045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.086672][ T5929] usb 5-1: config 0 has no interface number 0 [ 725.095982][ T5929] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 725.108491][T18045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.121826][ T5929] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 725.131507][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.139801][ T5929] usb 5-1: Product: syz [ 725.145751][ T5929] usb 5-1: Manufacturer: syz [ 725.150691][ T5929] usb 5-1: SerialNumber: syz [ 725.162134][ T5929] usb 5-1: config 0 descriptor?? [ 725.178918][ T5929] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 725.204053][ T5929] em28xx 5-1:0.132: Video interface 132 found: [ 725.241743][T18045] team0: Port device team_slave_0 added [ 725.287302][T18045] team0: Port device team_slave_1 added [ 725.378216][T18045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.386310][T18045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.413338][T18045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.426841][ T1147] bridge_slave_1: left allmulticast mode [ 725.426920][ T5929] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 725.433767][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.448311][ T1147] bridge_slave_0: left allmulticast mode [ 725.454115][ T1147] bridge_slave_0: left promiscuous mode [ 725.459974][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.472636][ T1147] tipc: Resetting bearer [ 725.640985][ T5929] em28xx 5-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 725.653144][ T5929] em28xx 5-1:0.132: board has no eeprom [ 725.683825][ T1147] tipc: Disabling bearer [ 725.725812][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.740760][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.744311][ T5929] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 725.758977][ T5929] em28xx 5-1:0.132: analog set to bulk mode. [ 725.766514][ T9] em28xx 5-1:0.132: Registering V4L2 extension [ 725.780116][ T1147] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 725.808191][ T1147] bond0 (unregistering): Released all slaves [ 725.859813][T18045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.876488][ T51] Bluetooth: hci4: command tx timeout [ 725.883430][T18045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.883463][T18045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.957355][ T9] em28xx 5-1:0.132: reading from i2c device at 0x4a failed: couldn't get the received message from the bridge (error=-5) [ 725.963468][ T1147] tipc: Disabling bearer [ 726.010953][ T1147] tipc: Left network mode [ 726.011457][ T9] em28xx 5-1:0.132: reading from i2c device at 0x48 failed: couldn't get the received message from the bridge (error=-5) [ 726.060708][ T9] em28xx 5-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 726.106381][ T9] em28xx 5-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 726.117945][ T8948] usb 5-1: USB disconnect, device number 68 [ 726.137428][ T8948] em28xx 5-1:0.132: Disconnecting em28xx [ 726.266520][T18045] hsr_slave_0: entered promiscuous mode [ 726.310011][T18045] hsr_slave_1: entered promiscuous mode [ 726.317988][T18045] debugfs: 'hsr0' already exists in 'hsr' [ 726.326538][T18045] Cannot create hsr debugfs directory [ 726.414765][ T9] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 726.444215][ T9] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 726.480585][ T9] em28xx 5-1:0.132: No AC97 audio processor [ 726.933772][ T9] usb 5-1: Decoder not found [ 726.951924][ T9] em28xx 5-1:0.132: failed to create media graph [ 726.972835][ T9] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 727.118450][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3599'. [ 727.127345][ T9] em28xx 5-1:0.132: Remote control support is not available for this card. [ 727.181484][ T8948] em28xx 5-1:0.132: Closing input extension [ 727.500084][ T8948] em28xx 5-1:0.132: Freeing device [ 727.634646][T18114] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3601'. [ 727.878947][ T1147] hsr_slave_0: left promiscuous mode [ 727.886441][ T8948] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 727.894625][ T1147] hsr_slave_1: left promiscuous mode [ 727.909184][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.927101][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.943455][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.951340][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.982079][ T1147] veth1_macvtap: left promiscuous mode [ 727.989922][ T1147] veth0_macvtap: left promiscuous mode [ 728.002633][ T1147] veth1_vlan: left promiscuous mode [ 728.011288][ T1147] veth0_vlan: left promiscuous mode [ 728.026529][ T51] Bluetooth: hci4: command tx timeout [ 728.053550][ T8948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 728.074743][ T8948] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 728.094497][ T8948] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 728.104051][ T8948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.122143][ T8948] usb 5-1: config 0 descriptor?? [ 728.188990][ T1147] pim6reg (unregistering): left allmulticast mode [ 728.558739][ T8948] saitek 0003:06A3:0621.0025: unknown main item tag 0x0 [ 728.584660][ T8948] saitek 0003:06A3:0621.0025: unknown main item tag 0x0 [ 728.599364][ T8948] saitek 0003:06A3:0621.0025: unknown main item tag 0x0 [ 728.617465][ T8948] saitek 0003:06A3:0621.0025: unknown main item tag 0x0 [ 728.628354][ T8948] saitek 0003:06A3:0621.0025: unknown main item tag 0x0 [ 728.645699][ T8948] saitek 0003:06A3:0621.0025: unknown main item tag 0x0 [ 728.660690][ T8948] saitek 0003:06A3:0621.0025: unknown main item tag 0x0 [ 728.677639][ T8948] saitek 0003:06A3:0621.0025: unknown main item tag 0x0 [ 728.698655][ T8948] saitek 0003:06A3:0621.0025: unknown main item tag 0x0 [ 728.715853][ T8948] saitek 0003:06A3:0621.0025: unknown main item tag 0x0 [ 728.769295][T18142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.781500][ T8948] saitek 0003:06A3:0621.0025: hidraw0: USB HID v0.fe Device [HID 06a3:0621] on usb-dummy_hcd.4-1/input0 [ 728.809452][T18142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.951471][ T8948] usb 5-1: USB disconnect, device number 69 [ 729.716160][ T8948] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 729.934292][ T8948] usb 5-1: Using ep0 maxpacket: 32 [ 729.943195][ T8948] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 729.986151][ T8948] usb 5-1: config 0 has no interface number 0 [ 729.992431][ T8948] usb 5-1: config 0 interface 184 has no altsetting 0 [ 730.003906][ T8948] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 730.013958][ T8948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.022490][ T8948] usb 5-1: Product: syz [ 730.027886][ T8948] usb 5-1: Manufacturer: syz [ 730.035165][ T8948] usb 5-1: SerialNumber: syz [ 730.048725][ T1147] IPVS: stop unused estimator thread 0... [ 730.050798][ T8948] usb 5-1: config 0 descriptor?? [ 730.118115][ T51] Bluetooth: hci4: command tx timeout [ 730.491315][T18045] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 730.532740][T18045] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 730.566834][T18045] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 730.593042][T18045] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 730.783119][T18045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.887492][T18045] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.926485][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.933728][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.998999][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.006267][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.681062][T18236] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3623'. [ 731.847837][T18045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.184852][ T51] Bluetooth: hci4: command tx timeout [ 732.316082][T18045] veth0_vlan: entered promiscuous mode [ 732.343250][T18045] veth1_vlan: entered promiscuous mode [ 732.402646][T18045] veth0_macvtap: entered promiscuous mode [ 732.415899][T18045] veth1_macvtap: entered promiscuous mode [ 732.458048][T18045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.489898][T18045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.520924][ T8948] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 732.536609][ T8948] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 732.539071][ T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.562121][ T35] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.569276][ T8948] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 732.616322][ T35] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.623066][ T8948] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 732.641453][ T35] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.658521][ T8948] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 732.677081][T18257] netlink: 18 bytes leftover after parsing attributes in process `syz.4.3628'. [ 732.715393][ T8948] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 732.743044][ T8948] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 732.842220][ T8948] usb 5-1: USB disconnect, device number 70 [ 732.912382][T15921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.934289][T15921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.012820][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.022128][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.057032][T18260] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 733.072061][T18260] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3629'. [ 733.604349][ T5932] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 733.754273][ T5932] usb 6-1: Using ep0 maxpacket: 8 [ 733.763738][ T5932] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 733.773512][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.782212][ T5932] usb 6-1: Product: syz [ 733.789323][ T5932] usb 6-1: Manufacturer: syz [ 733.794062][ T5932] usb 6-1: SerialNumber: syz [ 733.803406][ T5932] usb 6-1: config 0 descriptor?? [ 734.013689][ T5932] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 734.371252][T18292] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3637'. [ 734.383153][T18292] netlink: 'syz.4.3637': attribute type 10 has an invalid length. [ 734.393686][T18292] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3637'. [ 734.399528][ T5932] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 734.454789][ T5932] usb 6-1: USB disconnect, device number 91 [ 734.505259][T18295] IPVS: set_ctl: invalid protocol: 51 172.20.20.54:20002 [ 735.414253][ T8948] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 735.587568][ T8948] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 735.622972][ T8948] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 735.644806][ T8948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 735.657341][ T8948] usb 6-1: SerialNumber: syz [ 735.899961][T18325] input: syz1 as /devices/virtual/input/input65 [ 736.299088][ T8948] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 736.404450][ T10] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 736.566373][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.577730][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.590018][ T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 736.599973][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.613387][ T10] usb 5-1: config 0 descriptor?? [ 736.698318][ T8948] usb 6-1: USB disconnect, device number 92 [ 736.717514][ T8948] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 737.042215][ T10] hid_parser_main: 28 callbacks suppressed [ 737.042240][ T10] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 737.063590][ T10] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 737.070944][ T10] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 737.078515][ T10] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 737.086968][ T10] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 737.094290][ T10] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 737.106221][ T10] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 737.129196][ T10] cp2112 0003:10C4:EA90.0026: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 737.238401][ T10] cp2112 0003:10C4:EA90.0026: Part Number: 0x00 Device Version: 0x00 [ 737.664891][ T5932] usb 6-1: new full-speed USB device number 93 using dummy_hcd [ 737.818062][ T5932] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 737.826788][ T5932] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.837456][ T5932] usb 6-1: config 0 has no interface number 0 [ 737.843600][ T5932] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 737.855193][ T5932] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8E has invalid maxpacket 32729, setting to 64 [ 737.868839][ T5932] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 737.881975][ T5932] usb 6-1: config 0 interface 52 has no altsetting 0 [ 737.890215][ T5932] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 737.899787][ T5932] usb 6-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 737.908053][ T5932] usb 6-1: Manufacturer: syz [ 737.915405][ T5932] usb 6-1: config 0 descriptor?? [ 737.926078][ T5932] hub 6-1:0.52: bad descriptor, ignoring hub [ 737.932239][ T5932] hub 6-1:0.52: probe with driver hub failed with error -5 [ 738.131687][T18365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.142463][T18365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.359503][ T5932] usb 6-1: Can not set alternate setting to 1, error: -71 [ 738.367085][ T5932] synaptics_usb 6-1:0.52: probe with driver synaptics_usb failed with error -71 [ 738.399364][ T5932] usb 6-1: USB disconnect, device number 93 [ 738.482908][T18369] netlink: zone id is out of range [ 738.488569][T18369] netlink: zone id is out of range [ 738.493868][T18369] netlink: zone id is out of range [ 738.500101][T18369] netlink: zone id is out of range [ 738.505836][T18369] netlink: zone id is out of range [ 738.511363][T18369] netlink: zone id is out of range [ 738.516879][T18369] netlink: zone id is out of range [ 738.522541][T18369] netlink: zone id is out of range [ 738.528869][T18369] netlink: zone id is out of range [ 738.535482][T18369] netlink: zone id is out of range [ 738.932945][T18376] FAULT_INJECTION: forcing a failure. [ 738.932945][T18376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.947572][T18376] CPU: 1 UID: 0 PID: 18376 Comm: syz.5.3656 Tainted: G L syzkaller #0 PREEMPT(full) [ 738.947605][T18376] Tainted: [L]=SOFTLOCKUP [ 738.947613][T18376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 738.947624][T18376] Call Trace: [ 738.947632][T18376] [ 738.947641][T18376] dump_stack_lvl+0xe8/0x150 [ 738.947675][T18376] should_fail_ex+0x412/0x560 [ 738.947714][T18376] _copy_from_user+0x2d/0xb0 [ 738.947738][T18376] get_timespec64+0x96/0x1b0 [ 738.947765][T18376] ? __pfx_get_timespec64+0x10/0x10 [ 738.947801][T18376] __x64_sys_recvmmsg+0x14b/0x250 [ 738.947828][T18376] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 738.947862][T18376] do_syscall_64+0x14d/0xf80 [ 738.947879][T18376] ? trace_irq_disable+0x3b/0x150 [ 738.947901][T18376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.947928][T18376] ? clear_bhb_loop+0x40/0x90 [ 738.947951][T18376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.947966][T18376] RIP: 0033:0x7febde79c799 [ 738.947979][T18376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.947989][T18376] RSP: 002b:00007febdf726028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 738.948004][T18376] RAX: ffffffffffffffda RBX: 00007febdea15fa0 RCX: 00007febde79c799 [ 738.948012][T18376] RDX: 0000000000000001 RSI: 0000200000002180 RDI: 0000000000000004 [ 738.948022][T18376] RBP: 00007febdf726090 R08: 0000200000002200 R09: 0000000000000000 [ 738.948034][T18376] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 738.948044][T18376] R13: 00007febdea16038 R14: 00007febdea15fa0 R15: 00007fff818c6f58 [ 738.948074][T18376] [ 739.265230][ T10] cp2112 0003:10C4:EA90.0026: error setting SMBus config [ 739.348923][ T10] cp2112 0003:10C4:EA90.0026: probe with driver cp2112 failed with error -71 [ 739.429402][ T10] usb 5-1: USB disconnect, device number 71 [ 739.452709][T18386] netlink: 'syz.0.3660': attribute type 142 has an invalid length. [ 739.465596][T18386] netlink: 'syz.0.3660': attribute type 142 has an invalid length. [ 739.475190][T18386] netlink: 'syz.0.3660': attribute type 142 has an invalid length. [ 739.492425][T18386] netlink: 'syz.0.3660': attribute type 142 has an invalid length. [ 739.511372][T18386] netlink: 'syz.0.3660': attribute type 142 has an invalid length. [ 739.534636][T18386] netlink: 'syz.0.3660': attribute type 142 has an invalid length. [ 739.563955][T18386] netlink: 'syz.0.3660': attribute type 142 has an invalid length. [ 739.593377][T18386] netlink: 'syz.0.3660': attribute type 142 has an invalid length. [ 739.612778][T18386] netlink: 'syz.0.3660': attribute type 142 has an invalid length. [ 739.631709][T18386] netlink: 'syz.0.3660': attribute type 142 has an invalid length. [ 739.685888][T18384] could not allocate digest TFM handle [ 739.796130][ T10] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 739.905014][T18384] could not allocate digest TFM handle [ 739.969315][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 739.977924][T18408] FAULT_INJECTION: forcing a failure. [ 739.977924][T18408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.004385][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 740.006870][T18408] CPU: 1 UID: 0 PID: 18408 Comm: syz.6.3666 Tainted: G L syzkaller #0 PREEMPT(full) [ 740.006898][T18408] Tainted: [L]=SOFTLOCKUP [ 740.006905][T18408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 740.006916][T18408] Call Trace: [ 740.006923][T18408] [ 740.006931][T18408] dump_stack_lvl+0xe8/0x150 [ 740.006961][T18408] should_fail_ex+0x412/0x560 [ 740.006986][T18408] _copy_from_user+0x2d/0xb0 [ 740.007009][T18408] ___sys_recvmsg+0x175/0x590 [ 740.007036][T18408] ? __pfx____sys_recvmsg+0x10/0x10 [ 740.007078][T18408] ? __fget_files+0x3a0/0x420 [ 740.007111][T18408] do_recvmmsg+0x334/0x800 [ 740.007139][T18408] ? __pfx_do_recvmmsg+0x10/0x10 [ 740.007170][T18408] ? _copy_from_user+0x94/0xb0 [ 740.007205][T18408] __x64_sys_recvmmsg+0x1b7/0x250 [ 740.007228][T18408] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 740.007259][T18408] do_syscall_64+0x14d/0xf80 [ 740.007277][T18408] ? trace_irq_disable+0x3b/0x150 [ 740.007297][T18408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.007314][T18408] ? clear_bhb_loop+0x40/0x90 [ 740.007336][T18408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.007353][T18408] RIP: 0033:0x7f152819c799 [ 740.007370][T18408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.007384][T18408] RSP: 002b:00007f1528fb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 740.007404][T18408] RAX: ffffffffffffffda RBX: 00007f1528415fa0 RCX: 00007f152819c799 [ 740.007416][T18408] RDX: 0000000000000001 RSI: 0000200000002180 RDI: 0000000000000004 [ 740.007428][T18408] RBP: 00007f1528fb4090 R08: 0000200000002200 R09: 0000000000000000 [ 740.007438][T18408] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 740.007449][T18408] R13: 00007f1528416038 R14: 00007f1528415fa0 R15: 00007ffd5212c088 [ 740.007477][T18408] [ 740.076404][T18384] could not allocate digest TFM handle [ 740.221213][ T10] usb 5-1: config 2 has an invalid interface number: 255 but max is 0 [ 740.229954][ T10] usb 5-1: config 2 has no interface number 0 [ 740.236134][ T10] usb 5-1: config 2 interface 255 has no altsetting 0 [ 740.247365][ T10] usb 5-1: string descriptor 0 read error: -22 [ 740.253833][ T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=4349, bcdDevice=2b.98 [ 740.254034][T18384] could not allocate digest TFM handle [ 740.263423][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.308484][ T10] pl2303 5-1:2.255: required endpoints missing [ 740.530821][ T8948] usb 5-1: USB disconnect, device number 72 [ 740.633452][T18415] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3668'. [ 740.796177][ T5932] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 740.889206][T18433] vlan1: entered promiscuous mode [ 740.894780][T18433] vlan1: entered allmulticast mode [ 740.899955][T18433] veth0_vlan: entered allmulticast mode [ 740.954566][ T5932] usb 6-1: Using ep0 maxpacket: 32 [ 740.967889][ T5932] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 740.977555][ T5932] usb 6-1: config 0 has no interface number 0 [ 740.988916][ T5932] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 741.011539][ T5932] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 741.026622][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.040399][ T5932] usb 6-1: Product: syz [ 741.048484][ T5932] usb 6-1: Manufacturer: syz [ 741.054593][ T5932] usb 6-1: SerialNumber: syz [ 741.065847][ T5932] usb 6-1: config 0 descriptor?? [ 741.085556][ T5932] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 741.114893][ T5932] em28xx 6-1:0.132: Video interface 132 found: [ 741.404392][ T10] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 741.505584][ T5932] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 741.576807][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 741.588231][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 741.605092][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.624453][ T10] usb 5-1: Product: syz [ 741.628967][ T10] usb 5-1: Manufacturer: syz [ 741.644226][ T10] usb 5-1: SerialNumber: syz [ 741.652291][ T10] usb 5-1: config 0 descriptor?? [ 741.684075][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 741.836079][T18446] random: crng reseeded on system resumption [ 742.127517][T18425] dlm: no locking on control device [ 742.138167][ T5932] em28xx 6-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 742.151114][ T5932] em28xx 6-1:0.132: failed to read eeprom (err=-5) [ 742.158961][ T5932] em28xx 6-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 742.224271][ T5932] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 742.244319][ T5932] em28xx 6-1:0.132: analog set to bulk mode. [ 742.254813][ T42] em28xx 6-1:0.132: Registering V4L2 extension [ 742.283632][ T5932] usb 6-1: USB disconnect, device number 94 [ 742.312045][ T5932] em28xx 6-1:0.132: Disconnecting em28xx [ 742.505865][ T42] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 742.524091][ T42] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 742.538913][ T42] em28xx 6-1:0.132: No AC97 audio processor [ 742.555722][ T42] usb 6-1: Decoder not found [ 742.560650][ T42] em28xx 6-1:0.132: failed to create media graph [ 742.568119][ T42] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 742.579366][ T42] em28xx 6-1:0.132: Remote control support is not available for this card. [ 742.588334][ T5932] em28xx 6-1:0.132: Closing input extension [ 742.616029][ T5932] em28xx 6-1:0.132: Freeing device [ 742.885682][ T10] gspca_sonixj: reg_w1 err -71 [ 742.975870][ T10] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 742.995801][ T10] usb 5-1: USB disconnect, device number 73 [ 743.062997][T18458] 8021q: VLANs not supported on ip_vti0 [ 743.094377][ T5932] usb 6-1: new full-speed USB device number 95 using dummy_hcd [ 743.245870][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 743.257070][ T5932] usb 6-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 743.266391][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.276337][ T5932] usb 6-1: config 0 descriptor?? [ 743.283139][T18456] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 743.799597][T18456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.810199][T18456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.827060][ T5929] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 743.994273][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 744.002011][ T5929] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 744.012554][ T5929] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 744.027592][ T5929] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 744.042171][ T5929] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 744.058097][ T5929] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 744.068823][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.077178][ T5929] usb 5-1: Product: syz [ 744.081472][ T5929] usb 5-1: Manufacturer: syz [ 744.086168][ T5929] usb 5-1: SerialNumber: syz [ 744.100294][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 744.114789][ T5929] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input67 [ 744.314345][ T5929] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 744.323006][ T5929] (id 0x00) [ 744.385381][ T5929] rc_core: IR keymap rc-imon-pad not found [ 744.391291][ T5929] Registered IR keymap rc-empty [ 744.398018][ T5929] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 744.409469][ T5929] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 744.526543][ T5929] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 744.549304][ T5929] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input68 [ 744.565322][ T5929] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:74> initialized [ 744.749338][T18464] imon:display_open: display port is already open [ 744.775464][ T5929] usb 5-1: USB disconnect, device number 74 [ 744.968864][T18479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.979788][T18479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.549898][T18490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.561612][T18490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.674247][ T5929] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 745.824562][ T5929] usb 5-1: Using ep0 maxpacket: 8 [ 745.831971][ T5929] usb 5-1: unable to get BOS descriptor or descriptor too short [ 745.841030][ T5929] usb 5-1: config 4 interface 0 has no altsetting 0 [ 745.851675][ T5929] usb 5-1: string descriptor 0 read error: -22 [ 745.858205][ T5929] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 745.867823][ T5929] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 745.884649][ T5929] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 745.898114][ T5929] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 745.910871][ T5929] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 745.918246][ T5929] usb 5-1: media controller created [ 745.934717][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 746.194333][T18494] validate_nla: 23 callbacks suppressed [ 746.194355][T18494] netlink: 'syz.5.3692': attribute type 1 has an invalid length. [ 746.208913][T18494] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3692'. [ 746.224029][T18494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.233343][T18494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.243403][T18494] netdevsim netdevsim5: Firmware load for './file0/file0/..' refused, path contains '..' component [ 746.847911][ T5929] usb 5-1: USB disconnect, device number 75 [ 746.915643][T18497] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3693'. [ 747.073725][T18499] overlayfs: failed to resolve './file0': -2 [ 747.090486][T18501] mkiss: ax0: crc mode is auto. [ 747.238390][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.724413][ T5848] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 747.877713][ T5848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 747.891396][ T5848] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 747.901213][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 747.910040][ T5848] usb 5-1: Product: syz [ 747.914401][ T5848] usb 5-1: Manufacturer: syz [ 747.919172][ T5848] usb 5-1: SerialNumber: syz [ 747.929400][ T5848] usb 5-1: config 0 descriptor?? [ 747.936480][T18512] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 747.947131][ T5848] hub 5-1:0.0: bad descriptor, ignoring hub [ 747.954794][ T5848] hub 5-1:0.0: probe with driver hub failed with error -5 [ 748.256348][T16548] usb 5-1: USB disconnect, device number 76 [ 748.513759][ T5932] usbhid 6-1:0.0: can't add hid device: -32 [ 748.521020][ T5932] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 749.361572][T18532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.372091][T18532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.439968][T18533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.448986][T18533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.493120][T18550] support for the xor transformation has been removed. [ 750.522517][T18552] support for the xor transformation has been removed. [ 751.337136][T18558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.346206][T18558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.414239][ T5932] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 751.574256][ T5932] usb 5-1: Using ep0 maxpacket: 8 [ 751.581327][ T5932] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 751.590694][ T5932] usb 5-1: config 0 has no interface number 0 [ 751.597207][ T5932] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 751.608278][ T5932] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 751.617466][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.631761][ T5932] usb 5-1: config 0 descriptor?? [ 751.648591][ T5932] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 751.840788][ T5932] usb 5-1: USB disconnect, device number 77 [ 751.840858][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 751.856359][T18561] iowarrior 5-1:0.1: Error -19 while submitting URB [ 751.943591][T18569] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3717'. [ 752.405332][ T5932] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 752.508246][T18592] netlink: 212 bytes leftover after parsing attributes in process `syz.5.3724'. [ 752.564242][ T5932] usb 5-1: Using ep0 maxpacket: 8 [ 752.583861][ T5932] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 752.593943][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.607887][ T5932] usb 5-1: Product: syz [ 752.612473][ T5932] usb 5-1: Manufacturer: syz [ 752.617777][ T5932] usb 5-1: SerialNumber: syz [ 752.630088][ T5932] usb 5-1: config 0 descriptor?? [ 752.649685][ T5932] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 752.710910][T18601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.720101][T18601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.427069][T18607] net_ratelimit: 133 callbacks suppressed [ 753.427085][T18607] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 753.501884][T18610] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3730'. [ 753.513931][T18610] netlink: 'syz.5.3730': attribute type 3 has an invalid length. [ 753.523632][T18610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 753.593669][T18612] netlink: 'syz.5.3731': attribute type 33 has an invalid length. [ 753.602147][T18612] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3731'. [ 753.856199][ T5932] gspca_sonixj: reg_w1 err -71 [ 753.944573][ T5932] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 753.967610][ T5932] usb 5-1: USB disconnect, device number 78 [ 754.547760][T18630] netlink: 'syz.0.3738': attribute type 21 has an invalid length. [ 754.557433][T18630] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3738'. [ 754.567702][T18630] netlink: 'syz.0.3738': attribute type 5 has an invalid length. [ 754.576396][T18630] netlink: 'syz.0.3738': attribute type 6 has an invalid length. [ 754.585080][T18630] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3738'. [ 754.686976][ T9] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 754.777014][T18644] netlink: 'syz.0.3742': attribute type 1 has an invalid length. [ 754.850326][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 754.879592][ T9] usb 5-1: config 4 has an invalid interface number: 19 but max is 0 [ 754.888010][ T9] usb 5-1: config 4 has no interface number 0 [ 754.894765][ T9] usb 5-1: config 4 interface 19 has no altsetting 0 [ 754.905445][ T9] usb 5-1: string descriptor 0 read error: -22 [ 754.912015][ T9] usb 5-1: New USB device found, idVendor=04dd, idProduct=8001, bcdDevice=c9.56 [ 754.924687][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.941212][ T9] safe_serial 5-1:4.19: safe_serial converter detected [ 754.948614][ T9] safe_serial 5-1:4.19: probe with driver safe_serial failed with error -22 [ 755.147803][ T9] usb 5-1: USB disconnect, device number 79 [ 755.756756][T18658] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3745'. [ 755.846814][T18662] affs: No valid root block on device nbd4 [ 756.022239][T17232] udevd[17232]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 758.839379][T18662] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 758.927517][T18678] loop5: detected capacity change from 0 to 7 [ 758.941285][T17232] Dev loop5: unable to read RDB block 7 [ 758.964634][T17232] loop5: unable to read partition table [ 758.972550][T17232] loop5: partition table beyond EOD, truncated [ 759.136515][T18678] Dev loop5: unable to read RDB block 7 [ 759.142373][T18678] loop5: unable to read partition table [ 759.150804][T18678] loop5: partition table beyond EOD, truncated [ 759.157162][T18678] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 759.679965][T18704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 759.924399][T16548] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 760.084266][T16548] usb 5-1: Using ep0 maxpacket: 8 [ 760.091215][T16548] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 760.103911][T16548] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 760.113050][T16548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.121193][T16548] usb 5-1: Product: syz [ 760.125398][T16548] usb 5-1: Manufacturer: syz [ 760.129996][T16548] usb 5-1: SerialNumber: syz [ 760.145681][T16548] ch9200 5-1:2.0: probe with driver ch9200 failed with error -22 [ 760.515625][ T8948] usb 5-1: USB disconnect, device number 80 [ 761.077704][T18708] input: syz1 as /devices/virtual/input/input70 [ 761.414258][ T8948] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 761.564255][ T8948] usb 5-1: Using ep0 maxpacket: 8 [ 761.571517][ T8948] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 761.581485][ T8948] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 761.591158][ T8948] usb 5-1: config 0 has no interface number 0 [ 761.597743][ T8948] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 761.609869][ T8948] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 761.621199][ T8948] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 761.633036][ T8948] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 761.642428][ T8948] usb 5-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 761.650679][ T8948] usb 5-1: Product: syz [ 761.655007][ T8948] usb 5-1: Manufacturer: syz [ 761.661741][ T8948] usb 5-1: config 0 descriptor?? [ 761.875103][T18710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.886378][T18710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.905020][ T8948] usb 5-1: USB disconnect, device number 81 [ 762.354341][ T8948] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 762.484307][ T8948] usb 5-1: device descriptor read/64, error -71 [ 762.573862][T18719] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3760'. [ 762.606856][T18719] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3760'. [ 762.724230][ T8948] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 762.864245][ T8948] usb 5-1: device descriptor read/64, error -71 [ 762.974538][ T8948] usb usb5-port1: attempt power cycle [ 763.324286][ T8948] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 763.344757][ T8948] usb 5-1: device descriptor read/8, error -71 [ 763.584508][ T8948] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 763.615003][ T8948] usb 5-1: device descriptor read/8, error -71 [ 763.725331][ T8948] usb usb5-port1: unable to enumerate USB device [ 764.574384][ T5929] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 764.724299][ T5929] usb 5-1: Using ep0 maxpacket: 8 [ 764.731578][ T5929] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 764.740071][ T5929] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 764.750620][ T5929] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 764.761662][ T5929] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 764.771744][ T5929] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 764.784865][ T5929] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 764.793969][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.009775][ T5929] usb 5-1: usb_control_msg returned -32 [ 765.015777][ T5929] usbtmc 5-1:16.0: can't read capabilities [ 765.718776][T18730] tmpfs: Bad value for 'mpol' [ 765.791549][T18730] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 765.930277][ T5932] usb 5-1: USB disconnect, device number 86 [ 766.795627][ T8948] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 766.934295][ T8948] usb 5-1: device descriptor read/64, error -71 [ 767.174312][ T8948] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 767.304313][ T8948] usb 5-1: device descriptor read/64, error -71 [ 767.414638][ T8948] usb usb5-port1: attempt power cycle [ 767.754346][ T8948] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 767.775768][ T8948] usb 5-1: device descriptor read/8, error -71 [ 768.014458][ T8948] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 768.035039][ T8948] usb 5-1: device descriptor read/8, error -71 [ 768.144564][ T8948] usb usb5-port1: unable to enumerate USB device [ 768.967583][T18749] netlink: 'syz.6.3769': attribute type 2 has an invalid length. [ 769.599719][T18766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.610419][T18766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.618974][T18766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.626503][T18766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.364253][T16548] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 770.514255][T16548] usb 5-1: Using ep0 maxpacket: 8 [ 770.522871][T16548] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 770.532203][T16548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.540410][T16548] usb 5-1: Product: syz [ 770.544688][T16548] usb 5-1: Manufacturer: syz [ 770.549351][T16548] usb 5-1: SerialNumber: syz [ 770.557429][T16548] usb 5-1: config 0 descriptor?? [ 770.565291][T16548] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 770.771362][T18778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.783268][T18778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.166116][ T5848] usb 6-1: USB disconnect, device number 95 [ 771.262929][T12977] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 771.272441][T12977] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 771.283994][T12977] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 771.295997][T12977] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 771.310938][T12977] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 771.543471][T18780] chnl_net:caif_netlink_parms(): no params data found [ 771.645424][T18780] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.652842][T18780] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.660668][T18780] bridge_slave_0: entered allmulticast mode [ 771.669307][T18780] bridge_slave_0: entered promiscuous mode [ 771.680067][T18780] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.688295][T18780] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.695760][T18780] bridge_slave_1: entered allmulticast mode [ 771.704428][T18780] bridge_slave_1: entered promiscuous mode [ 771.750696][T18780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.765516][T18780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.810558][T18780] team0: Port device team_slave_0 added [ 771.821750][T18780] team0: Port device team_slave_1 added [ 771.862769][T18780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.870145][T18780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.896263][T18780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.910370][T18780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.918492][T18780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.945971][T18780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.007441][T18780] hsr_slave_0: entered promiscuous mode [ 772.015251][T18780] hsr_slave_1: entered promiscuous mode [ 772.023185][T18780] debugfs: 'hsr0' already exists in 'hsr' [ 772.024302][T16548] gspca_sonixj: i2c_w8 err -71 [ 772.029516][T18780] Cannot create hsr debugfs directory [ 772.114352][T16548] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 772.151556][T16548] usb 5-1: USB disconnect, device number 91 [ 772.360899][T18780] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 772.372128][T18780] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 772.383519][T18780] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 772.398236][T18780] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 772.437896][T18780] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.445283][T18780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 772.453065][T18780] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.460437][T18780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.505715][T15921] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.513882][T15921] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.568762][T18780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.611328][T18780] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.630146][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.637535][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.662768][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.670073][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.033566][T18780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.124532][T16548] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 773.209526][T18820] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.3783'. [ 773.284386][T16548] usb 5-1: Using ep0 maxpacket: 8 [ 773.292055][T16548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 773.306785][T16548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 773.317609][T16548] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 773.328201][T16548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 773.340404][T16548] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 773.352657][T16548] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 773.362321][T16548] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.379869][T16548] usb 5-1: config 0 descriptor?? [ 773.392364][T18808] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 773.400523][ T51] Bluetooth: hci3: command tx timeout [ 773.407906][T18780] veth0_vlan: entered promiscuous mode [ 773.436663][T18780] veth1_vlan: entered promiscuous mode [ 773.508303][T18780] veth0_macvtap: entered promiscuous mode [ 773.523068][T18780] veth1_macvtap: entered promiscuous mode [ 773.560367][T18780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 773.578407][T18780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 773.600160][ T9450] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.611268][ T9450] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.627550][ T9450] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.636562][ T9450] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.873158][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.886401][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.931711][T15921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.943247][T15921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.328627][T18835] fuse: Bad value for 'group_id' [ 774.333891][T18835] fuse: Bad value for 'group_id' [ 775.448422][T18846] tipc: Started in network mode [ 775.453494][T18846] tipc: Node identity ac1414aa, cluster identity 4711 [ 775.461452][T18846] tipc: Enabled bearer , priority 10 [ 775.468384][T12977] Bluetooth: hci3: command tx timeout [ 775.480268][T18846] tipc: Enabled bearer , priority 0 [ 775.531175][T18849] fuse: Bad value for 'group_id' [ 775.538687][T18849] fuse: Bad value for 'group_id' [ 775.546628][ T51] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 775.661127][T18851] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3791'. [ 775.813898][ T10] usb 5-1: USB disconnect, device number 92 [ 776.474759][ T8948] tipc: Node number set to 2886997162 [ 777.114285][T16548] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 777.277249][T16548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 777.287114][T16548] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 777.296891][T16548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 777.306854][T16548] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 777.317072][T16548] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 777.326358][T16548] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.336978][T16548] usb 5-1: config 0 descriptor?? [ 777.545314][ T51] Bluetooth: hci3: command tx timeout [ 777.555689][T16548] hdpvr 5-1:0.0: firmware version 0x0 dated [ 777.562107][T16548] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 777.757405][T18873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.766536][T18873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 777.780053][T16548] hdpvr 5-1:0.0: device init failed [ 777.786863][T16548] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 777.799964][T16548] usb 5-1: USB disconnect, device number 93 [ 778.384465][T18885] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 778.420008][T18887] Invalid source name [ 778.424097][T18887] UBIFS error (pid: 18887): cannot open "./file0", error -22 [ 778.427638][T18887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3802'. [ 778.568688][T18891] input: syz1 as /devices/virtual/input/input72 [ 778.601744][T18889] Invalid source name [ 779.624310][ T51] Bluetooth: hci3: command tx timeout [ 780.421610][T18911] overlay: filesystem on ./file0 not supported as upperdir [ 780.905215][ T10] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 780.943528][T18931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3818'. [ 780.953001][T18932] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3818'. [ 781.064609][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 781.071822][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 781.083196][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 781.096353][ T10] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 781.105898][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.113921][ T10] usb 5-1: Product: syz [ 781.118443][ T10] usb 5-1: Manufacturer: syz [ 781.123278][ T10] usb 5-1: SerialNumber: syz [ 781.134733][ T10] usb 5-1: config 0 descriptor?? [ 781.150711][ T10] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 782.087425][T18945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.097923][T18945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.192116][ T138] usb 5-1: Failed to submit usb control message: -110 [ 782.201338][ T138] usb 5-1: unable to send the bmi data to the device: -110 [ 782.208984][ T138] usb 5-1: unable to get target info from device [ 782.215979][ T138] usb 5-1: could not get target info (-110) [ 782.222237][ T138] usb 5-1: could not probe fw (-110) [ 782.320081][ T8948] usb 5-1: USB disconnect, device number 94 [ 782.868014][T18951] ieee802154 phy1 wpan1: encryption failed: -22 [ 782.990008][T18955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 783.120371][ T1147] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.219779][ T1147] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.375672][T18960] netlink: 'syz.7.3829': attribute type 23 has an invalid length. [ 783.410415][ T1147] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.512521][ T1147] batman_adv: batadv0: Removing interface: netdevsim0 [ 783.524075][ T1147] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.674041][T18968] kAFS: unable to lookup cell '' [ 783.963384][ T1147] bridge_slave_1: left allmulticast mode [ 783.981292][ T1147] bridge_slave_1: left promiscuous mode [ 783.993192][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.041251][ T1147] bridge_slave_0: left allmulticast mode [ 784.069757][ T1147] bridge_slave_0: left promiscuous mode [ 784.099157][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.336328][T18992] netlink: 'syz.4.3835': attribute type 4 has an invalid length. [ 784.531057][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 784.549679][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 784.567328][ T1147] bond0 (unregistering): Released all slaves [ 784.673254][ T1147] tipc: Disabling bearer [ 784.685039][ T1147] tipc: Left network mode [ 785.234789][ T1147] IPVS: stopping backup sync thread 13544 ... [ 785.909360][T19031] netlink: 'syz.6.3843': attribute type 21 has an invalid length. [ 785.918521][T19031] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3843'. [ 786.314889][ T1147] hsr_slave_0: left promiscuous mode [ 786.321287][ T1147] hsr_slave_1: left promiscuous mode [ 786.334656][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 786.342167][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.352310][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 786.362219][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.377342][ T1147] veth1_macvtap: left promiscuous mode [ 786.383069][ T1147] veth0_macvtap: left promiscuous mode [ 786.389568][ T1147] veth1_vlan: left promiscuous mode [ 786.398819][ T1147] veth0_vlan: left promiscuous mode [ 786.806881][ T1147] team_slave_1 (unregistering): left promiscuous mode [ 786.813684][ T1147] team_slave_1 (unregistering): left allmulticast mode [ 786.821722][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 786.839742][ T1147] team_slave_0 (unregistering): left promiscuous mode [ 786.854043][ T1147] team_slave_0 (unregistering): left allmulticast mode [ 786.863033][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 787.473099][T19065] nfs: Unknown parameter 'batadv' [ 787.767119][T19080] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3851'. [ 788.454029][T19102] netlink: 'syz.4.3856': attribute type 4 has an invalid length. [ 790.480455][T19123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 791.696122][ T24] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 791.864777][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 791.873796][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 791.888381][ T24] usb 5-1: config 1 has an invalid descriptor of length 243, skipping remainder of the config [ 791.899208][ T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 174, changing to 7 [ 791.910892][ T24] usb 5-1: config 1 interface 1 has no altsetting 1 [ 791.970868][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 791.980190][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.991559][ T24] usb 5-1: Product: syz [ 791.997427][ T24] usb 5-1: Manufacturer: syz [ 792.002387][ T24] usb 5-1: SerialNumber: syz [ 792.229436][ T24] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 792.237218][ T24] gspca_stv06xx: st6422 sensor detected [ 792.506237][ T24] STV06xx 5-1:1.0: probe with driver STV06xx failed with error -71 [ 792.531459][ T24] usb 5-1: BAAD HEADSET c_chmask mismatch [ 792.629612][ T24] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 792.668936][ T24] usb 5-1: USB disconnect, device number 95 [ 792.689305][T17232] udevd[17232]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 795.994874][T19167] netlink: 'syz.4.3875': attribute type 4 has an invalid length. [ 799.161897][T19202] tmpfs: Unknown parameter 'func' [ 800.293402][T19227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3885'. [ 800.506474][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 800.800767][T19244] netlink: 'syz.7.3888': attribute type 4 has an invalid length. [ 801.954240][ T10] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 802.104298][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 802.112807][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 802.123468][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.131672][ T10] usb 5-1: Product: syz [ 802.135956][ T10] usb 5-1: Manufacturer: syz [ 802.140560][ T10] usb 5-1: SerialNumber: syz [ 802.149015][ T10] usb 5-1: config 0 descriptor?? [ 802.158048][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 803.367707][ T10] gspca_sonixj: reg_w1 err -71 [ 803.444252][ T10] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 803.456230][ T10] usb 5-1: USB disconnect, device number 96 [ 804.234251][ T10] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 804.365353][ T10] usb 5-1: device descriptor read/64, error -71 [ 804.440731][T19289] netlink: 'syz.0.3898': attribute type 4 has an invalid length. [ 804.604302][ T10] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 804.734256][ T10] usb 5-1: device descriptor read/64, error -71 [ 804.845368][ T10] usb usb5-port1: attempt power cycle [ 805.184328][ T10] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 805.215043][ T10] usb 5-1: device descriptor read/8, error -71 [ 805.469966][ T10] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 805.495086][ T10] usb 5-1: device descriptor read/8, error -71 [ 805.605482][ T10] usb usb5-port1: unable to enumerate USB device [ 805.981505][T19299] netlink: 'syz.0.3901': attribute type 4 has an invalid length. [ 806.700814][T19304] netlink: 'syz.6.3903': attribute type 1 has an invalid length. [ 807.919422][T19350] netlink: 'syz.4.3912': attribute type 40 has an invalid length. [ 808.225024][T16548] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 808.374291][T16548] usb 5-1: Using ep0 maxpacket: 32 [ 808.381889][T16548] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 808.390351][T16548] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.400653][T16548] usb 5-1: config 0 has no interface number 0 [ 808.409242][T16548] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 808.418552][T16548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.426644][T16548] usb 5-1: Product: syz [ 808.430961][T16548] usb 5-1: Manufacturer: syz [ 808.435661][T16548] usb 5-1: SerialNumber: syz [ 808.442532][T16548] usb 5-1: config 0 descriptor?? [ 808.449761][T16548] usb 5-1: expecting 3 got 0 endpoints! Bailing out. [ 808.655308][T16548] usb 5-1: USB disconnect, device number 101 [ 808.673126][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.815724][T19379] openvswitch: netlink: Actions may not be safe on all matching packets [ 810.493204][T19400] netlink: 'syz.7.3922': attribute type 4 has an invalid length. [ 816.444756][T19444] netlink: 'syz.0.3937': attribute type 4 has an invalid length. [ 816.779474][ T29] audit: type=1326 audit(1773979807.439:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19463 comm="syz.7.3941" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff71219c799 code=0x0 [ 820.984613][T12977] Bluetooth: hci1: command 0x0406 tx timeout [ 821.916776][T19495] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 822.739659][T19506] netlink: 'syz.0.3953': attribute type 4 has an invalid length. [ 824.773263][T12977] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 824.783877][T12977] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 824.796617][T12977] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 824.810812][T12977] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 824.820180][T12977] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 825.005079][T19509] chnl_net:caif_netlink_parms(): no params data found [ 825.198545][T19509] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.214657][T19509] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.225870][T19509] bridge_slave_0: entered allmulticast mode [ 825.237745][T19509] bridge_slave_0: entered promiscuous mode [ 825.250215][T19509] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.260706][T19509] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.282783][T19509] bridge_slave_1: entered allmulticast mode [ 825.293700][T19509] bridge_slave_1: entered promiscuous mode [ 825.336815][T19509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.350304][T19509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.392456][T19509] team0: Port device team_slave_0 added [ 825.402278][T19509] team0: Port device team_slave_1 added [ 825.433952][T19509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.440967][T19509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.467151][T19509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.481964][T19509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.489751][T19509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.515694][T19509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.566378][T19509] hsr_slave_0: entered promiscuous mode [ 825.575229][T19509] hsr_slave_1: entered promiscuous mode [ 825.581887][T19509] debugfs: 'hsr0' already exists in 'hsr' [ 825.587711][T19509] Cannot create hsr debugfs directory [ 825.875682][T19524] ieee802154 phy1 wpan1: encryption failed: -22 [ 825.886387][T19509] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 825.897268][T19509] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 825.907717][T19509] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 825.919297][T19509] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 825.952410][T19509] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.959566][T19509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.967203][T19509] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.974361][T19509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 826.028905][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.037191][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.073891][T19509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 826.101659][T19509] 8021q: adding VLAN 0 to HW filter on device team0 [ 826.117090][T15919] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.124330][T15919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 826.141014][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.148250][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 826.364731][T19509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.585711][T19509] veth0_vlan: entered promiscuous mode [ 826.605198][T19509] veth1_vlan: entered promiscuous mode [ 826.640587][T19509] veth0_macvtap: entered promiscuous mode [ 826.652646][T19509] veth1_macvtap: entered promiscuous mode [ 826.681564][T19509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 826.703444][T19509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 826.721159][T15919] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.730592][T15919] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.742648][T15919] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.753608][T15919] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.910143][ T51] Bluetooth: hci5: command tx timeout [ 826.968459][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.977067][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.016556][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.025579][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.774349][ T5929] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 828.944482][ T5929] usb 9-1: Using ep0 maxpacket: 32 [ 828.956997][ T5929] usb 9-1: unable to get BOS descriptor or descriptor too short [ 828.969549][ T5929] usb 9-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 828.979718][ T5929] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.988662][ T51] Bluetooth: hci5: command tx timeout [ 828.994870][ T5929] usb 9-1: Product: syz [ 828.999126][ T5929] usb 9-1: Manufacturer: syz [ 829.003748][ T5929] usb 9-1: SerialNumber: syz [ 829.219743][T19557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.229475][T19557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.239618][T19557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.249893][T19557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.261375][T19557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.273214][T19557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.283128][T19557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.292208][T19557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.301947][T19557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.314901][T19557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.347326][ T5929] usb 9-1: BAAD MICROPHONE c_chmask mismatch [ 829.386114][ T5929] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 829.406552][ T5929] usb 9-1: USB disconnect, device number 2 [ 829.437180][T17232] udevd[17232]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 829.883927][T19570] netlink: 'syz.0.3966': attribute type 4 has an invalid length. [ 830.185027][ T5929] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 830.346589][ T5929] usb 9-1: Using ep0 maxpacket: 8 [ 830.359178][ T5929] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 830.369405][ T5929] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.377742][ T5929] usb 9-1: Product: syz [ 830.382165][ T5929] usb 9-1: Manufacturer: syz [ 830.388174][ T5929] usb 9-1: SerialNumber: syz [ 830.395997][ T5929] usb 9-1: config 0 descriptor?? [ 830.403821][ T5929] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 831.065449][ T51] Bluetooth: hci5: command tx timeout [ 831.618369][ T5929] gspca_sonixj: reg_w1 err -71 [ 831.706774][ T5929] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 831.721485][ T5929] usb 9-1: USB disconnect, device number 3 [ 833.144516][ T51] Bluetooth: hci5: command tx timeout [ 833.245416][ T8948] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 833.414470][ T8948] usb 9-1: Using ep0 maxpacket: 8 [ 833.422147][ T8948] usb 9-1: unable to get BOS descriptor or descriptor too short [ 833.431348][ T8948] usb 9-1: config 1 has an invalid descriptor of length 8, skipping remainder of the config [ 833.443864][ T8948] usb 9-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 833.453119][ T8948] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.462979][ T8948] usb 9-1: Product: syz [ 833.469261][ T8948] usb 9-1: Manufacturer: syz [ 833.476115][ T8948] usb 9-1: SerialNumber: syz [ 833.695257][T19603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.704634][T19603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.728798][T19603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.738122][T19603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.753998][ T8948] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 833.761871][ T8948] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 833.781499][ T8948] usb 9-1: USB disconnect, device number 4 [ 834.523043][T19614] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3982'. [ 834.751152][T19619] netlink: 'syz.7.3984': attribute type 4 has an invalid length. [ 835.419137][T19625] netlink: 'syz.6.3987': attribute type 10 has an invalid length. [ 835.446263][T19625] team0: Device vxcan1 is of different type [ 835.954359][ T1237] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 836.104318][ T1237] usb 9-1: Using ep0 maxpacket: 32 [ 836.111731][ T1237] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.124173][ T1237] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.133984][ T1237] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 836.143351][ T1237] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.153565][ T1237] usb 9-1: config 0 descriptor?? [ 836.386889][T19647] comedi comedi0: dt2817: a I/O base address must be specified [ 836.399936][T19647] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.3994'. [ 836.571439][ T1237] koneplus 0003:1E7D:2D51.0027: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.8-1/input0 [ 836.778149][ T1237] koneplus 0003:1E7D:2D51.0027: couldn't init struct koneplus_device [ 836.788453][ T1237] koneplus 0003:1E7D:2D51.0027: couldn't install mouse [ 836.801101][ T1237] koneplus 0003:1E7D:2D51.0027: probe with driver koneplus failed with error -71 [ 836.814258][ T1237] usb 9-1: USB disconnect, device number 5 [ 837.921241][T19676] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4004'. [ 839.134632][T19693] netlink: 'syz.8.4010': attribute type 4 has an invalid length. [ 840.933405][T19701] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 842.374251][ T42] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 842.493933][T19713] input: syz1 as /devices/virtual/input/input73 [ 842.528027][ T42] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 842.539389][ T42] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 842.557161][ T42] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 842.567415][ T42] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 842.589113][ T42] usb 9-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 842.598630][ T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.606707][ T42] usb 9-1: Product: syz [ 842.610889][ T42] usb 9-1: Manufacturer: syz [ 842.615728][ T42] usb 9-1: SerialNumber: syz [ 842.622509][ T42] usb 9-1: config 0 descriptor?? [ 842.635540][ T42] ums-isd200 9-1:0.0: USB Mass Storage device detected [ 842.837485][ T42] scsi host1: usb-storage 9-1:0.0 [ 843.052008][T19708] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 843.059597][T19708] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 844.364284][T19733] netlink: 'syz.7.4024': attribute type 4 has an invalid length. [ 845.171038][ T5929] usb 9-1: USB disconnect, device number 6 [ 845.674353][ T5929] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 845.828234][ T5929] usb 9-1: unable to get BOS descriptor or descriptor too short [ 845.837609][ T5929] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 845.849660][ T5929] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 845.861878][ T5929] usb 9-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 845.872437][ T5929] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.881751][ T5929] usb 9-1: Product: syz [ 845.886195][ T5929] usb 9-1: Manufacturer: syz [ 845.890859][ T5929] usb 9-1: SerialNumber: syz [ 845.902829][ T5929] usb 9-1: selecting invalid altsetting 1 [ 845.910948][ T5929] usb 9-1: unit 6 not found! [ 846.335233][ T5929] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 846.371753][T17232] udevd[17232]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 846.433603][T19739] delete_channel: no stack [ 846.438394][T19739] delete_channel: no stack [ 846.513779][ T5929] usb 9-1: USB disconnect, device number 7 [ 846.584481][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 847.314805][ T9] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 847.488513][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.499887][ T9] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 847.509951][ T9] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 847.525995][ T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4e1, bcdDevice= 0.40 [ 847.535330][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.543352][ T9] usb 9-1: Product: syz [ 847.547796][ T9] usb 9-1: Manufacturer: syz [ 847.552413][ T9] usb 9-1: SerialNumber: syz [ 847.563863][ T9] cdc_mbim 9-1:1.0: skipping garbage [ 847.764573][T19762] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 848.375687][T19762] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 848.585674][ T9] cdc_mbim 9-1:1.0: bind() failure [ 848.593964][ T9] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 848.601368][ T9] cdc_ncm 9-1:1.1: bind() failure [ 848.792430][ T9] usb 9-1: USB disconnect, device number 8 [ 849.584489][ T10] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 849.764281][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 849.779388][ T10] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 849.790696][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.799639][ T10] usb 9-1: Product: syz [ 849.809372][ T10] usb 9-1: Manufacturer: syz [ 849.816367][ T10] usb 9-1: SerialNumber: syz [ 849.828485][ T10] usb 9-1: config 0 descriptor?? [ 849.838789][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 850.241271][ T10] gspca_sonixj: reg_r err -32 [ 850.246683][T19768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.247731][ T10] sonixj 9-1:0.0: probe with driver sonixj failed with error -32 [ 850.260091][T19768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.464737][T19790] netlink: 'syz.7.4044': attribute type 4 has an invalid length. [ 852.355526][ T42] usb 9-1: USB disconnect, device number 9 [ 853.514256][ T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 853.687220][ T9] usb 9-1: config 0 has an invalid interface number: 17 but max is 0 [ 853.696109][ T9] usb 9-1: config 0 has no interface number 0 [ 853.702221][ T9] usb 9-1: config 0 interface 17 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.713636][ T9] usb 9-1: config 0 interface 17 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.724808][ T9] usb 9-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 853.735928][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.747524][ T9] usb 9-1: config 0 descriptor?? [ 854.168270][ T9] uclogic 0003:5543:0522.0028: unknown main item tag 0x0 [ 854.175615][ T9] uclogic 0003:5543:0522.0028: unknown main item tag 0x0 [ 854.182855][ T9] uclogic 0003:5543:0522.0028: unknown main item tag 0x0 [ 854.190743][ T9] uclogic 0003:5543:0522.0028: unknown main item tag 0x0 [ 854.198043][ T9] uclogic 0003:5543:0522.0028: unknown main item tag 0x0 [ 854.210165][ T9] uclogic 0003:5543:0522.0028: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.8-1/input17 [ 854.369481][ T1237] usb 9-1: USB disconnect, device number 10 [ 855.244282][ T5929] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 855.399252][ T5929] usb 9-1: Using ep0 maxpacket: 8 [ 855.408804][ T5929] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 855.418532][ T5929] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.427307][ T5929] usb 9-1: Product: syz [ 855.431523][ T5929] usb 9-1: Manufacturer: syz [ 855.436699][ T5929] usb 9-1: SerialNumber: syz [ 855.445982][ T5929] usb 9-1: config 0 descriptor?? [ 855.454016][ T5929] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 855.961883][T19820] fuse: Unknown parameter '' [ 856.069890][T19818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 856.286660][T19828] netlink: 'syz.6.4057': attribute type 4 has an invalid length. [ 856.689899][ T5929] gspca_sonixj: reg_w1 err -71 [ 856.784349][ T5929] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 856.797544][ T5929] usb 9-1: USB disconnect, device number 11 [ 857.434639][T19841] affs: No valid root block on device nullb0 [ 857.674264][ T5929] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 857.826138][ T5929] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 857.839668][ T5929] usb 9-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 857.849075][ T5929] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.857200][ T5929] usb 9-1: Product: syz [ 857.861479][ T5929] usb 9-1: Manufacturer: syz [ 857.866324][ T5929] usb 9-1: SerialNumber: syz [ 857.879532][ T5929] usb 9-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 858.082716][T19841] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4062'. [ 858.094042][T19841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.104555][T19841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.328102][ T5929] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 858.354686][ T5929] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 858.374543][ T5929] usb 9-1: media controller created [ 858.389106][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 858.561593][ T24] usb 9-1: USB disconnect, device number 12 [ 859.119217][T19845] netlink: 1004 bytes leftover after parsing attributes in process `syz.8.4063'. [ 860.090047][ T29] audit: type=1326 audit(1773979850.749:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19854 comm="syz.8.4066" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7facecb9c799 code=0x0 [ 861.314413][T17705] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 861.474275][T17705] usb 9-1: Using ep0 maxpacket: 16 [ 861.482296][T17705] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.492805][T17705] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 861.503940][T17705] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 861.515656][T17705] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 861.525701][T17705] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 861.539826][T17705] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 861.550463][T17705] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 861.561115][T17705] usb 9-1: Manufacturer: syz [ 861.567992][T17705] usb 9-1: config 0 descriptor?? [ 861.825268][T17705] rc_core: IR keymap rc-hauppauge not found [ 861.831547][T17705] Registered IR keymap rc-empty [ 861.837331][T17705] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 861.864688][T17705] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 861.885441][T17705] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 861.898750][T17705] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input75 [ 861.916354][T17705] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 861.944617][T17705] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 861.964412][T17705] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 861.984408][T17705] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 862.004384][T17705] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 862.024800][T17705] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 862.044361][T17705] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 862.064327][T17705] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 862.084337][T17705] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 862.104445][T17705] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 862.126787][T17705] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 862.137888][T17705] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 862.246561][ T24] usb 9-1: USB disconnect, device number 13 [ 862.370394][T19874] comedi comedi4: bad chanlist[0]=0x0000009c chan=156 range length=2 [ 862.382332][T12977] Bluetooth: hci1: connection err: -111 [ 863.044284][T17705] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 863.204253][T17705] usb 9-1: Using ep0 maxpacket: 32 [ 863.211282][T17705] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 863.225839][T17705] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 863.235318][T17705] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.243336][T17705] usb 9-1: Product: syz [ 863.247748][T17705] usb 9-1: Manufacturer: syz [ 863.252357][T17705] usb 9-1: SerialNumber: syz [ 863.260996][T17705] usb 9-1: config 0 descriptor?? [ 863.272032][T17705] cdc_ether 9-1:0.0: Descriptor too short [ 863.279310][T17705] usb 9-1: unsupported MDLM descriptors [ 863.469403][T19882] netlink: 'syz.0.4074': attribute type 4 has an invalid length. [ 863.479244][ T10] usb 9-1: USB disconnect, device number 14 [ 864.884695][T17705] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 865.044182][T17705] usb 9-1: Using ep0 maxpacket: 8 [ 865.054700][T17705] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 865.067055][T17705] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.076196][T17705] usb 9-1: Product: syz [ 865.080544][T17705] usb 9-1: Manufacturer: syz [ 865.085507][T17705] usb 9-1: SerialNumber: syz [ 865.092668][T17705] usb 9-1: config 0 descriptor?? [ 865.103173][T17705] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 865.919898][T19903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.928878][T19903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.340980][T17705] gspca_sonixj: reg_w1 err -71 [ 866.424884][T17705] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 866.450251][T17705] usb 9-1: USB disconnect, device number 15 [ 866.479382][T19909] openvswitch: netlink: EtherType 80 is less than min 600 [ 867.060075][T19918] netlink: 190972 bytes leftover after parsing attributes in process `syz.8.4089'. [ 867.324453][T19925] 9p: Could not find request transport:  [ 867.332511][T19925] veth1_macvtap: left promiscuous mode [ 867.340274][T19925] macsec0: entered allmulticast mode [ 867.349524][T19925] veth1_macvtap: entered promiscuous mode [ 867.359777][T19925] veth1_macvtap: entered allmulticast mode [ 867.369215][T19925] macsec0: left allmulticast mode [ 867.374495][T19925] veth1_macvtap: left allmulticast mode [ 867.502389][T19932] netlink: 'syz.0.4093': attribute type 4 has an invalid length. [ 867.734343][ T24] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 867.884237][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 867.893319][ T24] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 867.902841][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.911532][ T24] usb 9-1: Product: syz [ 867.915963][ T24] usb 9-1: Manufacturer: syz [ 867.920569][ T24] usb 9-1: SerialNumber: syz [ 867.927796][ T24] usb 9-1: config 0 descriptor?? [ 867.938454][ T24] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 868.053549][T19936] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4096'. [ 868.064423][T19936] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4096'. [ 868.079059][T19936] IPVS: length: 68 != 24 [ 869.280540][T19951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.291038][T19951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.303978][T19951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.314423][T19951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.059466][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.449132][ T9] usb 9-1: USB disconnect, device number 16 [ 870.514050][T19958] fuse: Bad value for 'group_id' [ 870.520324][T19958] fuse: Bad value for 'group_id' [ 870.927806][ T9] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 871.074309][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 871.086667][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.106780][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 871.131148][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 871.147824][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 871.158521][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 871.177631][ T9] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 871.187840][ T9] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 871.196225][ T9] usb 9-1: Manufacturer: syz [ 871.210839][ T9] usb 9-1: config 0 descriptor?? [ 871.542332][ T9] rc_core: IR keymap rc-hauppauge not found [ 871.555855][ T9] Registered IR keymap rc-empty [ 871.569347][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 871.613000][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 871.623123][T19961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.654999][T19961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.668123][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 871.710804][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input77 [ 871.801841][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 871.860799][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 871.892774][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 871.933803][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 871.972310][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 872.010112][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 872.048626][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 872.077744][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 872.108996][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 872.146080][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 872.174696][ T9] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 872.204642][ T9] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 872.306379][T19985] netlink: 'syz.7.4108': attribute type 4 has an invalid length. [ 873.420520][T19988] syzkaller1: entered promiscuous mode [ 873.426345][T19988] syzkaller1: entered allmulticast mode [ 873.521001][ T9] usb 9-1: USB disconnect, device number 17 [ 873.943482][ T9] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 874.090315][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 874.100673][ T9] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 874.110010][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.118083][ T9] usb 9-1: Product: syz [ 874.122796][ T9] usb 9-1: Manufacturer: syz [ 874.127635][ T9] usb 9-1: SerialNumber: syz [ 874.135063][ T9] usb 9-1: config 0 descriptor?? [ 874.145449][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 875.197186][T19981] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 875.602161][ T9] gspca_sonixj: i2c_w8 err -71 [ 875.687074][ T9] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 875.700531][ T9] usb 9-1: USB disconnect, device number 18 [ 875.774929][T20014] tipc: Enabling of bearer rejected, failed to enable media [ 876.114211][T20023] sctp: [Deprecated]: syz.7.4120 (pid 20023) Use of struct sctp_assoc_value in delayed_ack socket option. [ 876.114211][T20023] Use struct sctp_sack_info instead [ 876.251367][T20026] netlink: 'syz.8.4121': attribute type 4 has an invalid length. [ 878.013347][T20046] tmpfs: Bad value for 'mpol' [ 879.589381][ T5932] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 879.775950][ T5932] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 879.805340][ T5932] usb 9-1: config 1 has no interface number 0 [ 879.811612][ T5932] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 879.834860][ T5932] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 879.864138][ T5932] usb 9-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 879.881997][ T5932] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 879.898645][ T5932] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 879.908566][ T5932] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.916780][ T5932] usb 9-1: Product: syz [ 879.921038][ T5932] usb 9-1: Manufacturer: syz [ 879.925894][ T5932] usb 9-1: SerialNumber: syz [ 879.936756][T20057] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 879.947164][ T5932] usb 9-1: Expected 3 endpoints, found: 2 [ 881.135347][T20065] loop4: detected capacity change from 0 to 7 [ 881.150142][T20065] buffer_io_error: 38 callbacks suppressed [ 881.150159][T20065] Buffer I/O error on dev loop4, logical block 0, async page read [ 881.179617][T20065] Buffer I/O error on dev loop4, logical block 0, async page read [ 881.189183][T20065] Buffer I/O error on dev loop4, logical block 0, async page read [ 881.192819][T20066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 881.197764][T20065] Buffer I/O error on dev loop4, logical block 0, async page read [ 881.220624][T20065] Buffer I/O error on dev loop4, logical block 0, async page read [ 881.226135][T20066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.229105][T20065] Buffer I/O error on dev loop4, logical block 0, async page read [ 881.244425][T20065] Buffer I/O error on dev loop4, logical block 0, async page read [ 881.252522][T20065] ldm_validate_partition_table(): Disk read failed. [ 881.261540][T20065] Buffer I/O error on dev loop4, logical block 0, async page read [ 881.267107][T20066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 881.271068][T20065] Buffer I/O error on dev loop4, logical block 0, async page read [ 881.285483][T20065] Buffer I/O error on dev loop4, logical block 0, async page read [ 881.295536][T20065] Dev loop4: unable to read RDB block 0 [ 881.301520][T20065] loop4: unable to read partition table [ 881.310774][T20065] loop4: partition table beyond EOD, truncated [ 881.317473][T20065] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 881.323595][T20066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.462478][ T5209] ldm_validate_partition_table(): Disk read failed. [ 881.472746][ T5209] Dev loop4: unable to read RDB block 0 [ 881.481437][ T5209] loop4: unable to read partition table [ 881.491534][ T5209] loop4: partition table beyond EOD, truncated [ 882.048102][T20084] netlink: 'syz.7.4139': attribute type 4 has an invalid length. [ 882.160791][ T5932] usb 9-1: USB disconnect, device number 19 [ 882.208778][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057ab7800: rx timeout, send abort [ 882.344291][T20092] netlink: 'syz.8.4141': attribute type 1 has an invalid length. [ 882.353266][T20093] netlink: 'syz.8.4141': attribute type 1 has an invalid length. [ 882.685762][ T5929] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 882.702795][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880765ce800: rx timeout, send abort [ 882.715226][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057ab7800: abort rx timeout. Force session deactivation [ 882.844975][ T5929] usb 9-1: Using ep0 maxpacket: 8 [ 882.869418][ T5929] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 882.882173][ T5929] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.891896][ T5929] usb 9-1: Product: syz [ 882.897494][ T5929] usb 9-1: Manufacturer: syz [ 882.902381][ T5929] usb 9-1: SerialNumber: syz [ 882.915361][ T5929] usb 9-1: config 0 descriptor?? [ 882.927950][ T5929] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 883.186986][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057ab4c00: rx timeout, send abort [ 883.195816][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057ab4c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 883.215938][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880765ce800: abort rx timeout. Force session deactivation [ 884.123663][ T5929] gspca_sonixj: reg_w1 err -71 [ 884.207428][ T5929] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 884.218454][ T5929] usb 9-1: USB disconnect, device number 20 [ 884.468329][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029d39c00: rx timeout, send abort [ 884.476857][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888029d39c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 884.519168][T20115] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4150'. [ 884.529287][T20115] fuse: Unknown parameter 'rootmode"00000000000000000100000' [ 885.038501][ T5932] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 885.216740][ T5932] usb 9-1: Using ep0 maxpacket: 32 [ 885.234776][ T5932] usb 9-1: unable to get BOS descriptor or descriptor too short [ 885.259460][ T5932] usb 9-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 885.278983][ T5932] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.295141][ T5932] usb 9-1: Product: syz [ 885.304221][ T5932] usb 9-1: Manufacturer: syz [ 885.313989][ T5932] usb 9-1: SerialNumber: syz [ 886.953794][T20144] netlink: 'syz.0.4160': attribute type 29 has an invalid length. [ 886.967179][T20144] netlink: 'syz.0.4160': attribute type 29 has an invalid length. [ 887.037247][ T5929] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 887.059116][ T5929] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 887.724245][ T5932] usb 9-1: BAAD MICROPHONE c_chmask mismatch [ 887.805461][ T5932] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 887.828608][ T5932] usb 9-1: USB disconnect, device number 21 [ 887.865675][T20161] netlink: 'syz.8.4163': attribute type 4 has an invalid length. [ 887.894604][T17232] udevd[17232]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 890.456174][T20187] netlink: 'syz.0.4172': attribute type 9 has an invalid length. [ 890.464185][T20187] netlink: 'syz.0.4172': attribute type 11 has an invalid length. [ 890.473984][T20187] netlink: 'syz.0.4172': attribute type 12 has an invalid length. [ 890.482384][T20187] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.4172'. [ 890.492214][T20187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4172'. [ 890.556581][T20189] input: syz0 as /devices/virtual/input/input78 [ 891.260860][T20212] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4179'. [ 891.329456][ T9] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 891.419669][T20222] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4180'. [ 891.531684][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 891.546292][ T9] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 891.569049][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.588490][ T9] usb 9-1: Product: syz [ 891.598233][ T9] usb 9-1: Manufacturer: syz [ 891.610635][ T9] usb 9-1: SerialNumber: syz [ 891.625067][ T9] usb 9-1: config 0 descriptor?? [ 891.644110][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 892.668460][T20266] netlink: 'syz.6.4184': attribute type 4 has an invalid length. [ 892.849051][ T9] gspca_sonixj: reg_w1 err -71 [ 892.981570][ T9] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 892.993561][ T9] usb 9-1: USB disconnect, device number 22 [ 893.150698][T12977] Bluetooth: hci2: command 0x0406 tx timeout [ 893.159296][ T5929] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 893.169591][ T5929] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 893.716951][ T42] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 893.869309][ T42] usb 9-1: unable to get BOS descriptor or descriptor too short [ 893.879485][ T42] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 893.893560][ T42] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 893.902936][ T42] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 893.917417][ T42] usb 9-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 893.926955][ T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.934992][ T42] usb 9-1: Product: syz [ 893.939377][ T42] usb 9-1: Manufacturer: syz [ 893.944221][ T42] usb 9-1: SerialNumber: syz [ 893.963807][ T42] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 894.154572][T20292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.164061][T20292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.238607][ T42] usb 9-1: unit 13 not found! [ 894.278061][ T42] usb 9-1: USB disconnect, device number 23 [ 894.331953][T17151] udevd[17151]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 894.408895][T20308] netlink: 336 bytes leftover after parsing attributes in process `syz.0.4187'. [ 895.058952][ T42] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 895.208662][ T42] usb 9-1: Using ep0 maxpacket: 8 [ 895.221708][ T42] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 895.238428][ T42] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 895.252874][ T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.272270][ T42] usb 9-1: config 0 descriptor?? [ 895.286555][ T42] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 895.319222][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 895.327720][ T5929] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 895.342667][ T5929] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 895.707990][T20332] 9p: p9: multiple sources not supported [ 895.714071][T20333] 9p: p9: multiple sources not supported [ 895.796844][ T42] gspca_vc032x: reg_r err -110 [ 895.808324][ T42] vc032x 9-1:0.0: probe with driver vc032x failed with error -110 [ 895.838572][T20337] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 895.947848][T20339] sctp: [Deprecated]: syz.6.4198 (pid 20339) Use of struct sctp_assoc_value in delayed_ack socket option. [ 895.947848][T20339] Use struct sctp_sack_info instead [ 896.213387][T20350] netlink: 'syz.6.4202': attribute type 4 has an invalid length. [ 897.376996][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 897.456795][T12977] Bluetooth: hci4: command 0x0406 tx timeout [ 897.457440][ T5929] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 897.471942][ T5929] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 897.595197][T20354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4204'. [ 897.608675][T20355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4204'. [ 897.832020][ T24] usb 9-1: USB disconnect, device number 24 [ 898.397099][T20379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4210'. [ 898.437819][T20381] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4211'. [ 898.451087][T20381] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4211'. [ 899.252257][T20406] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4220'. [ 899.455811][T20413] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 899.480328][T20413] veth1_macvtap: left promiscuous mode [ 899.485933][T20413] macsec0: entered allmulticast mode [ 899.497554][T20413] veth1_macvtap: entered promiscuous mode [ 899.504077][T20413] veth1_macvtap: entered allmulticast mode [ 899.510420][T20413] macsec0: left allmulticast mode [ 899.515461][T20413] veth1_macvtap: left allmulticast mode [ 899.597992][T12977] Bluetooth: hci3: command 0x0406 tx timeout [ 899.603796][ T5929] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 899.613405][ T5929] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 899.710915][T20426] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4227'. [ 899.720226][T20423] netlink: 'syz.0.4226': attribute type 4 has an invalid length. [ 899.992627][T20444] binder: BC_ATTEMPT_ACQUIRE not supported [ 900.005414][T20444] binder: 20443:20444 ioctl c0306201 2000000001c0 returned -22 [ 900.343906][ T5936] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 900.495165][ T5936] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 900.508132][ T5936] usb 9-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 900.518072][ T5936] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.526308][ T5936] usb 9-1: Product: syz [ 900.530657][ T5936] usb 9-1: Manufacturer: syz [ 900.535339][ T5936] usb 9-1: SerialNumber: syz [ 900.548244][ T5936] usb 9-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 900.753812][ T5936] usb 9-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 900.771375][ T5936] usb 9-1: USB disconnect, device number 25 [ 901.250329][ T5936] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 901.401535][ T5936] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 901.413844][ T5936] usb 9-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 901.423410][ T5936] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.433565][ T5936] usb 9-1: Product: syz [ 901.437818][ T5936] usb 9-1: Manufacturer: syz [ 901.442561][ T5936] usb 9-1: SerialNumber: syz [ 901.475154][ T5936] usb 9-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 901.828175][T12977] Bluetooth: hci5: command 0x0c1a tx timeout [ 901.828982][ T5929] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 901.853871][ T5929] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 902.221924][T20473] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 902.484460][ T5936] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 902.506804][ T5936] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 902.528147][ T5936] usb 9-1: media controller created [ 902.552497][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 903.070465][T20486] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4247'. [ 903.098745][T20486] bridge_slave_1: default FDB implementation only supports local addresses [ 903.169027][T20488] netlink: 'syz.6.4248': attribute type 1 has an invalid length. [ 903.178295][T20488] netlink: 'syz.6.4248': attribute type 2 has an invalid length. [ 903.187194][T20488] netlink: 'syz.6.4248': attribute type 1 has an invalid length. [ 903.621483][ T5929] usb 9-1: USB disconnect, device number 26 [ 903.761350][T20502] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4254'. [ 903.806072][T20503] netlink: 'syz.8.4253': attribute type 4 has an invalid length. [ 904.218758][T20476] syz.7.4244 (20476): drop_caches: 3 [ 906.965134][ T5932] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 906.999671][T20552] Bluetooth: MGMT ver 1.23 [ 907.132106][ T5932] usb 9-1: Using ep0 maxpacket: 32 [ 907.141557][ T5932] usb 9-1: config 4 has an invalid interface number: 228 but max is 0 [ 907.150061][ T5932] usb 9-1: config 4 has no interface number 0 [ 907.156436][ T5932] usb 9-1: too many endpoints for config 4 interface 228 altsetting 12: 129, using maximum allowed: 30 [ 907.167810][ T5932] usb 9-1: config 4 interface 228 altsetting 12 endpoint 0x7 has invalid wMaxPacketSize 0 [ 907.179787][ T5932] usb 9-1: config 4 interface 228 altsetting 12 bulk endpoint 0x7 has invalid maxpacket 0 [ 907.190052][ T5932] usb 9-1: config 4 interface 228 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 907.203524][ T5932] usb 9-1: config 4 interface 228 has no altsetting 0 [ 907.213720][ T5932] usb 9-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 907.223268][ T5932] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.231407][ T5932] usb 9-1: Product: syz [ 907.236098][ T5932] usb 9-1: Manufacturer: syz [ 907.240888][ T5932] usb 9-1: SerialNumber: syz [ 907.514824][ T5932] usb 9-1: USB disconnect, device number 27 [ 907.534160][T17232] udevd[17232]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 908.124241][T20568] netlink: 'syz.8.4273': attribute type 4 has an invalid length. [ 910.561665][T20594] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 910.566634][T20595] netlink: 'syz.0.4282': attribute type 21 has an invalid length. [ 910.589508][T20595] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4282'. [ 910.645924][T20597] netlink: 536 bytes leftover after parsing attributes in process `syz.0.4283'. [ 910.658054][T20597] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4283'. [ 910.851773][T20604] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 910.866306][T20604] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 910.885536][T20604] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 910.898844][T20604] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 910.918313][T20604] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 911.121112][T20615] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 911.257714][T20624] netlink: 'syz.8.4290': attribute type 2 has an invalid length. [ 912.423825][T20650] netlink: 'syz.0.4298': attribute type 4 has an invalid length. [ 912.570224][ T5932] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 912.723576][ T5932] usb 9-1: unable to get BOS descriptor or descriptor too short [ 912.732335][ T5932] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 912.740026][ T5932] usb 9-1: can't read configurations, error -71 [ 913.818151][ T5932] usb 9-1: new full-speed USB device number 29 using dummy_hcd [ 913.981334][ T5932] usb 9-1: config 1 has an invalid interface number: 1 but max is -1 [ 913.989679][ T5932] usb 9-1: config 1 has an invalid descriptor of length 104, skipping remainder of the config [ 914.000193][ T5932] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 914.009171][ T5932] usb 9-1: config 1 has no interface number 0 [ 914.015425][ T5932] usb 9-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 914.031816][ T5932] usb 9-1: New USB device found, idVendor=0625, idProduct=a4a1, bcdDevice= 0.40 [ 914.041310][ T5932] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.049460][ T5932] usb 9-1: Product: syz [ 914.054024][ T5932] usb 9-1: Manufacturer: syz [ 914.058846][ T5932] usb 9-1: SerialNumber: syz [ 914.072142][ T5932] cdc_ncm 9-1:1.1: skipping garbage [ 914.077879][ T5932] cdc_ncm 9-1:1.1: NCM or ECM functional descriptors missing [ 914.085306][ T5932] cdc_ncm 9-1:1.1: bind() failure [ 914.276582][ T5932] usb 9-1: USB disconnect, device number 29 [ 914.601502][T20669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.612104][T20669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.101401][T20675] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4307'. [ 915.112114][T20675] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4307'. [ 915.238189][T20682] F2FS-fs: Conflicting test_dummy_encryption options [ 915.866003][T20711] netlink: 'syz.8.4318': attribute type 4 has an invalid length. [ 917.510038][T20713] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4319'. [ 917.561491][T20715] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4320'. [ 918.271945][ T30] INFO: task syz.5.3744:18652 blocked for more than 143 seconds. [ 918.279767][ T30] Tainted: G L syzkaller #0 [ 918.287697][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 918.296701][ T30] task:syz.5.3744 state:D stack:26376 pid:18652 tgid:18650 ppid:18045 task_flags:0x400040 flags:0x00080002 [ 918.309150][ T30] Call Trace: [ 918.312719][ T30] [ 918.315800][ T30] __schedule+0x1665/0x5590 [ 918.320345][ T30] ? blk_mq_flush_plug_list+0x443/0x570 [ 918.326888][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 918.333059][ T30] ? __blk_flush_plug+0x416/0x4d0 [ 918.338123][ T30] ? __pfx___schedule+0x10/0x10 [ 918.343147][ T30] ? schedule+0x90/0x360 [ 918.347585][ T30] schedule+0x164/0x360 [ 918.353308][ T30] schedule_preempt_disabled+0x13/0x30 [ 918.358856][ T30] rwsem_down_read_slowpath+0x6d9/0x940 [ 918.364608][ T30] ? rwsem_down_read_slowpath+0x596/0x940 [ 918.370436][ T30] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 918.376951][ T30] down_read+0x99/0x2e0 [ 918.381439][ T30] ? collapse_single_pmd+0x1bc4/0x4510 [ 918.387038][ T30] collapse_single_pmd+0x1bd1/0x4510 [ 918.392487][ T30] ? collapse_single_pmd+0x1a9c/0x4510 [ 918.397992][ T30] ? __pfx_collapse_single_pmd+0x10/0x10 [ 918.403813][ T30] ? __pfx_mt_find+0x10/0x10 [ 918.408439][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 918.413759][ T30] ? __thp_vma_allowable_orders+0x893/0x960 [ 918.419699][ T30] madvise_collapse+0x34c/0x820 [ 918.424638][ T30] madvise_vma_behavior+0x10ce/0x44d0 [ 918.430051][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 918.435119][ T30] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 918.441058][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 918.446998][ T30] ? ktime_get+0x45/0x220 [ 918.451729][ T30] ? ktime_get+0x45/0x220 [ 918.456135][ T30] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 918.462626][ T30] ? ktime_get+0x1f5/0x220 [ 918.467101][ T30] ? lapic_next_event+0x11/0x20 [ 918.472342][ T30] ? clockevents_program_event+0x3ba/0x4b0 [ 918.478203][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 918.483585][ T30] ? __pfx_clockevents_program_event+0x10/0x10 [ 918.489794][ T30] ? tick_program_event+0x8f/0x120 [ 918.495041][ T30] ? mas_prev_slot+0xb7b/0xbf0 [ 918.499864][ T30] ? find_vma_prev+0x123/0x1b0 [ 918.504728][ T30] ? __pfx_find_vma_prev+0x10/0x10 [ 918.509878][ T30] ? __pfx___schedule+0x10/0x10 [ 918.514857][ T30] madvise_walk_vmas+0x573/0xae0 [ 918.519862][ T30] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 918.525384][ T30] ? blk_start_plug+0x6e/0x1b0 [ 918.530224][ T30] madvise_do_behavior+0x386/0x540 [ 918.535475][ T30] ? __pfx_madvise_do_behavior+0x10/0x10 [ 918.541233][ T30] ? down_read+0x270/0x2e0 [ 918.545709][ T30] ? madvise_lock+0x146/0x2e0 [ 918.550395][ T30] do_madvise+0x1fa/0x2e0 [ 918.554791][ T30] ? __pfx_do_madvise+0x10/0x10 [ 918.559695][ T30] ? __se_sys_futex+0x3a8/0x450 [ 918.564844][ T30] ? rcu_is_watching+0x15/0xb0 [ 918.569686][ T30] __x64_sys_madvise+0xa6/0xc0 [ 918.574648][ T30] do_syscall_64+0x14d/0xf80 [ 918.579362][ T30] ? trace_irq_disable+0x3b/0x150 [ 918.584486][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.590598][ T30] ? clear_bhb_loop+0x40/0x90 [ 918.595715][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.601896][ T30] RIP: 0033:0x7febde79c799 [ 918.606351][ T30] RSP: 002b:00007febdf705028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 918.614930][ T30] RAX: ffffffffffffffda RBX: 00007febdea16090 RCX: 00007febde79c799 [ 918.622955][ T30] RDX: 0000000000000019 RSI: 0000000000800000 RDI: 0000200000800000 [ 918.630948][ T30] RBP: 00007febde832c99 R08: 0000000000000000 R09: 0000000000000000 [ 918.639011][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 918.647086][ T30] R13: 00007febdea16128 R14: 00007febdea16090 R15: 00007fff818c6f58 [ 918.655345][ T30] [ 918.658425][ T30] [ 918.658425][ T30] Showing all locks held in the system: [ 918.666264][ T30] 1 lock held by khungtaskd/30: [ 918.671417][ T30] #0: ffffffff8eb5d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 918.691133][ T30] 2 locks held by getty/15047: [ 918.697463][ T30] #0: ffff88803781f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 918.709522][ T30] #1: ffffc90004d9b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 918.721487][ T30] 4 locks held by kworker/u8:9/15919: [ 918.727000][ T30] 1 lock held by syz.5.3744/18652: [ 918.732439][ T30] #0: ffff88813fe2ce38 (&mm->mmap_lock){++++}-{4:4}, at: collapse_single_pmd+0x1bd1/0x4510 [ 918.742848][ T30] 1 lock held by syz.4.3915/19358: [ 918.748002][ T30] #0: ffff888037d9e738 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock_killable+0x1d/0x70 [ 918.758179][ T30] 1 lock held by syz.4.3915/19369: [ 918.763330][ T30] #0: ffff888037d9e738 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0x73/0x250 [ 918.772399][ T30] 1 lock held by syz.4.3915/19376: [ 918.777526][ T30] #0: ffff888037d9e738 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0x73/0x250 [ 918.786631][ T30] [ 918.789006][ T30] ============================================= [ 918.789006][ T30] [ 918.800923][ T30] NMI backtrace for cpu 1 [ 918.800946][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 918.800972][ T30] Tainted: [L]=SOFTLOCKUP [ 918.800981][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 918.800992][ T30] Call Trace: [ 918.801000][ T30] [ 918.801009][ T30] dump_stack_lvl+0xe8/0x150 [ 918.801045][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 918.801071][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 918.801101][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 918.801129][ T30] sys_info+0x135/0x170 [ 918.801151][ T30] watchdog+0x1002/0x1060 [ 918.801181][ T30] ? watchdog+0x1da/0x1060 [ 918.801207][ T30] kthread+0x388/0x470 [ 918.801229][ T30] ? __pfx_watchdog+0x10/0x10 [ 918.801249][ T30] ? __pfx_kthread+0x10/0x10 [ 918.801272][ T30] ret_from_fork+0x51e/0xb90 [ 918.801300][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 918.801324][ T30] ? __switch_to+0xc7d/0x1450 [ 918.801351][ T30] ? __pfx_kthread+0x10/0x10 [ 918.801375][ T30] ret_from_fork_asm+0x1a/0x30 [ 918.801407][ T30] [ 918.801415][ T30] Sending NMI from CPU 1 to CPUs 0: [ 918.918340][ C0] NMI backtrace for cpu 0 [ 918.918360][ C0] CPU: 0 UID: 0 PID: 5826 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 918.918382][ C0] Tainted: [L]=SOFTLOCKUP [ 918.918388][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 918.918398][ C0] RIP: 0010:check_preemption_disabled+0x6/0xe0 [ 918.918423][ C0] Code: c7 c6 e0 86 4a 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 <65> 8b 05 a7 11 a4 07 65 8b 0d 9c 11 a4 07 f7 c1 ff ff ff 7f 74 0c [ 918.918437][ C0] RSP: 0018:ffffc900037d7978 EFLAGS: 00000046 [ 918.918453][ C0] RAX: 6a9fa6634f80d171 RBX: 0000000000000206 RCX: 0000000080000201 [ 918.918464][ C0] RDX: 0000000000000001 RSI: ffffffff8e4d2edc RDI: ffffffff8c4a8700 [ 918.918475][ C0] RBP: ffff888037470b78 R08: 0000000000000003 R09: 0000000000000004 [ 918.918486][ C0] R10: dffffc0000000000 R11: fffff520006faf2c R12: 0000000000000001 [ 918.918496][ C0] R13: 0000000000000001 R14: ffff888031a401e8 R15: ffff888037470000 [ 918.918507][ C0] FS: 000055555f58d540(0000) GS:ffff888124de1000(0000) knlGS:0000000000000000 [ 918.918521][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 918.918531][ C0] CR2: 00007f29bade99b8 CR3: 000000007717e000 CR4: 00000000003526f0 [ 918.918554][ C0] Call Trace: [ 918.918560][ C0] [ 918.918568][ C0] lock_release+0x259/0x3d0 [ 918.918592][ C0] ? tcp_recvmsg+0x1e4/0x7e0 [ 918.918612][ C0] ? tcp_recvmsg+0x1e4/0x7e0 [ 918.918629][ C0] _raw_spin_unlock_bh+0x1b/0x40 [ 918.918651][ C0] tcp_recvmsg+0x1e4/0x7e0 [ 918.918671][ C0] ? __pfx_tcp_recvmsg+0x10/0x10 [ 918.918690][ C0] ? sock_rps_record_flow+0x19/0x350 [ 918.918707][ C0] ? inet_recvmsg+0xb3/0x120 [ 918.918721][ C0] ? __pfx_inet_recvmsg+0x10/0x10 [ 918.918737][ C0] sock_recvmsg_nosec+0xee/0x140 [ 918.918759][ C0] sock_read_iter+0x296/0x360 [ 918.918778][ C0] ? __pfx_sock_read_iter+0x10/0x10 [ 918.918800][ C0] ? bpf_lsm_file_permission+0x9/0x20 [ 918.918815][ C0] ? security_file_permission+0x75/0x260 [ 918.918835][ C0] vfs_read+0x582/0xa70 [ 918.918855][ C0] ? debug_object_free+0x2d7/0x490 [ 918.918873][ C0] ? __pfx_vfs_read+0x10/0x10 [ 918.918896][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 918.918910][ C0] ? irqentry_exit+0x61a/0x700 [ 918.918926][ C0] ksys_read+0x150/0x270 [ 918.918941][ C0] ? __pfx_ksys_read+0x10/0x10 [ 918.918957][ C0] do_syscall_64+0x14d/0xf80 [ 918.918972][ C0] ? trace_irq_disable+0x3b/0x150 [ 918.918990][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.919005][ C0] ? clear_bhb_loop+0x40/0x90 [ 918.919021][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.919036][ C0] RIP: 0033:0x7f2090357917 [ 918.919049][ C0] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 918.919062][ C0] RSP: 002b:00007fff527cba80 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 918.919076][ C0] RAX: ffffffffffffffda RBX: 000055555f58d540 RCX: 00007f2090357917 [ 918.919087][ C0] RDX: 0000000000000004 RSI: 00007fff527cbadc RDI: 0000000000000003 [ 918.919097][ C0] RBP: 00007fff527cbf80 R08: 0000000000000000 R09: 0000000000000000 [ 918.919106][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 918.919115][ C0] R13: 00007fff527cbadc R14: 00007fff527cbb70 R15: 0000000000000000 [ 918.919131][ C0] [ 919.258121][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 919.265053][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 919.275727][ T30] Tainted: [L]=SOFTLOCKUP [ 919.280044][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 919.290289][ T30] Call Trace: [ 919.293619][ T30] [ 919.296572][ T30] vpanic+0x56c/0xa60 [ 919.300658][ T30] ? __pfx___schedule+0x10/0x10 [ 919.305514][ T30] ? __pfx_vpanic+0x10/0x10 [ 919.310025][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 919.316176][ T30] panic+0xc5/0xd0 [ 919.319913][ T30] ? __pfx_panic+0x10/0x10 [ 919.324322][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 919.329694][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 919.335858][ T30] watchdog+0x105b/0x1060 [ 919.340233][ T30] ? watchdog+0x1da/0x1060 [ 919.344684][ T30] kthread+0x388/0x470 [ 919.348975][ T30] ? __pfx_watchdog+0x10/0x10 [ 919.353873][ T30] ? __pfx_kthread+0x10/0x10 [ 919.358525][ T30] ret_from_fork+0x51e/0xb90 [ 919.363157][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 919.368286][ T30] ? __switch_to+0xc7d/0x1450 [ 919.373004][ T30] ? __pfx_kthread+0x10/0x10 [ 919.377703][ T30] ret_from_fork_asm+0x1a/0x30 [ 919.382483][ T30] [ 919.386155][ T30] Kernel Offset: disabled [ 919.390546][ T30] Rebooting in 86400 seconds..