last executing test programs: 19m34.401839798s ago: executing program 32 (id=906): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000001040), 0x420105, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x8, 0x1000020d}) r1 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x9, {"a2e3ad08ed6b52f99cfbf4c087f71e9b3d0963ff7fc6e5539b9b3b208b9b441b4552101b080d29558f0e1ac6e7049b3468959b189a242a9b4bf3988f7ef319520700ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000000040), 0x4) connect$llc(r3, &(0x7f0000000300)={0x1a, 0x0, 0x1, 0x1, 0x7d, 0x4, @remote}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fff, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfdfffffd, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7ff7, 0x0, 0x5, 0xb, 0x3, 0x5, 0x405, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3e, 0xd9, 0x3, 0x20000006, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1002, 0x8, 0x7, 0x953a, 0x5, 0x6, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x3, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x149, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x1, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0x226, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0xf43, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="0201"], 0x70}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r4, 0x5708e000) 15m10.072121232s ago: executing program 33 (id=2077): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FITHAW(r0, 0xc0045878) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x1a) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_ext_features={{0x1004, 0x1}, {0xf2}}}, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x2ac, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x80}, 0x2000d040) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r2, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xfffffffffffffe00}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x855}, 0x40) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x51) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mknodat$null(r1, &(0x7f0000000680)='./file0\x00', 0x76a4f2ffd9439181, 0x103) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000006c0)=0x1, &(0x7f0000000700)=0x2) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000740)=0x2, 0x4) getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f0000000780)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000007c0)=0x2c) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000800)={0x0, r1, 'id1\x00'}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r7, 0xc02054a5, &(0x7f0000000880)={0x1, r1, 'id1\x00'}) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x11) r9 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000900)={{{@in=@multicast2, @in6=@loopback, 0x4e21, 0xd76c, 0x4e21, 0xd3, 0x2, 0x0, 0x20, 0xff, r4, r9}, {0x7fffffff, 0x0, 0x3, 0x1, 0x3, 0x7, 0x7f, 0xfffffffffffffffb}, {0xbbe, 0x27, 0x3, 0x4}, 0x8, 0x6e6bbb, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x4d5, 0x33}, 0x2, @in6=@loopback, 0x3502, 0x0, 0x3, 0x2, 0x4, 0x7, 0x6}}, 0xe8) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000a00), &(0x7f0000000a40), 0x2, 0x2) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000ac0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r10, 0xc400941b, &(0x7f0000000ec0)={r11, 0x7, 0x2}) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@local, @in6=@private2}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f00000013c0)=0xe8) ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) sendmsg$NL80211_CMD_DEL_STATION(r8, &(0x7f0000001680)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001640)={&(0x7f00000014c0)={0x14c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7, 0xe7}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x70, 0xac, "cd405a08cf9ead8de862889e30704928627b2d60a89b1adcd063a9ce1db585d8227ec067fe353a4df373c6bd65b3ffaedcaf24a5a84690b8b8599240c153ba68918d5d9fa7816758c2cdbb506b061c54c9fde6e220d136bde61bebb9d72c16a950ba6635971dc4c0dbc9e373"}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x23}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x8d, 0xac, "175e2495e3c95712e3df22dd9d4562dc0254142aede4c8bc1af7f93ceae3f2b7f107739c6bbc646834c02ae2da22ccd77b0d4839b299e55342b742942e2ec291bb5114020dccfb13e9d415ebbb8602dcc20e7b3956df9be52e49bcad1dd44034465bacf02b1f7f3574c314aa38086a9a0d71933d50125e7b68b063bc17581eba1089f4b8020affe2b5"}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4004001}, 0x4) 13m57.253359422s ago: executing program 34 (id=2524): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 9m17.066642711s ago: executing program 35 (id=3799): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000f060102000c0b0000000000021b000106000b00000000000500010007"], 0x24}}, 0x840) 8m40.780504901s ago: executing program 36 (id=4025): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x604880, 0x0) fadvise64(r0, 0x94, 0x6e, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x604880, 0x0) (async) fadvise64(r0, 0x94, 0x6e, 0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async) 4m22.577526938s ago: executing program 37 (id=4983): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x80800) close_range(0xffffffffffffffff, r0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x0, @empty, 'sit0\x00'}}, 0x1e) recvmmsg(r1, &(0x7f0000000280)=[{{&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/20, 0x14}], 0x1, &(0x7f0000000200)=""/128, 0x80}, 0x80000001}], 0x1, 0x100, &(0x7f00000002c0)) ioctl$sock_ifreq(r1, 0x8916, &(0x7f0000000340)={'veth1_to_hsr\x00', @ifru_data=&(0x7f0000000300)="1296d1e3e3904ee98c3bcae60e52febbab8f780e27418867452ae9fb4a34e68e"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0xc}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x6, 0x7, 0x591221e0, 0x8f6c, {{0x7, 0x4, 0x1, 0x37, 0x1c, 0x66, 0x0, 0x7, 0x4, 0x0, @loopback, @multicast2, {[@ra={0x94, 0x4}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x607, 0x10, 0x8, 0x9, {{0x17, 0x4, 0x3, 0x3, 0x5c, 0x66, 0x0, 0x3, 0x4, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x18, 0xf0, 0x0, 0x1, [0x1, 0x7fff, 0x6a, 0xc77, 0x6]}, @timestamp_prespec={0x44, 0x2c, 0xcd, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}, {@local, 0x10}, {@empty, 0x3}, {@loopback, 0x80}, {@rand_addr=0x64010102, 0x8}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000680)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x5, 0x7, 0x20, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000780)={'ip6gre0\x00', 0x0, 0x29, 0xa, 0xb7, 0x7, 0x20, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x10, 0x7fff}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000840)={'erspan0\x00', 0x0, 0x1, 0x8, 0xde, 0x7, {{0x63, 0x4, 0x3, 0x13, 0x18c, 0x68, 0x0, 0x5, 0x29, 0x0, @private=0xa010100, @rand_addr=0x64010102, {[@lsrr={0x83, 0x1b, 0xe, [@rand_addr=0x64010100, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback, @remote]}, @cipso={0x86, 0x46, 0x3, [{0x6, 0x11, "b30f96e6aed3b7314a8ef9e0e8c370"}, {0x1, 0x3, '~'}, {0x5, 0xa, "8a858ccdbab08e81"}, {0x5, 0xb, "e70993eba2e2936f5f"}, {0x5, 0xe, "a9ecc256efb12b0092b70297"}, {0x5, 0x9, "7c6e5f066cbaa8"}]}, @lsrr={0x83, 0x2b, 0x86, [@rand_addr=0x64010100, @multicast1, @local, @empty, @multicast2, @multicast1, @multicast1, @private=0xa010101, @empty, @local]}, @timestamp={0x44, 0xc, 0x41, 0x0, 0x8, [0x6, 0x1ff]}, @end, @rr={0x7, 0x27, 0xbc, [@multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast2, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast2, @local, @multicast1]}, @timestamp_prespec={0x44, 0x2c, 0xf0, 0x3, 0xa, [{@rand_addr=0x64010102, 0x6903}, {@private=0xa010102, 0xa2}, {@local, 0xffff}, {@local, 0x5}, {@empty, 0x3ff}]}, @timestamp={0x44, 0x20, 0xf7, 0x0, 0x5, [0x4, 0x9f, 0x4a9, 0xa000000, 0xc, 0xd2e, 0x9]}, @cipso={0x86, 0x57, 0x1, [{0x1, 0xc, "f08aaeda950743fcb177"}, {0x2, 0x4, "06dd"}, {0x7, 0x10, "2098079007c0248d73ca5a002f7f"}, {0x6, 0x4, '\n^'}, {0x7, 0xa, "80e13c7eaa30505a"}, {0x6, 0xe, "035b7763fdb36cdc1676dd9b"}, {0x1, 0x9, "065b51cbc07225"}, {0x1, 0xc, "eede1f3e6a9a5b662656"}]}, @timestamp_addr={0x44, 0x14, 0xa4, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000a40)={@initdev, @dev, 0x0}, &(0x7f0000000a80)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b00)={0x11, 0x0, 0x0}, &(0x7f0000000b40)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000b80)=0x0, &(0x7f0000000bc0)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000cc0)={'gre0\x00', &(0x7f0000000c00)={'erspan0\x00', 0x0, 0x1, 0x7800, 0x7b4, 0x5, {{0x1d, 0x4, 0x0, 0x13, 0x74, 0x66, 0x0, 0x34, 0x2f, 0x0, @local, @broadcast, {[@ssrr={0x89, 0xf, 0x4c, [@multicast2, @local, @rand_addr=0x64010100]}, @generic={0x82, 0x6, 'H74['}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0x88, [@dev={0xac, 0x14, 0x14, 0x25}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @generic={0x94, 0xf, "6d6d837a64b03d73845222311f"}, @generic={0x44, 0x8, "4275b081aed7"}, @noop, @lsrr={0x83, 0x23, 0xf9, [@multicast2, @local, @broadcast, @local, @private=0xa010102, @local, @multicast2, @rand_addr=0x64010101]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d40)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000001000)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000d80)={0x230, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x40090f0}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000001040)={0x8, 'wlan1\x00', {'geneve0\x00'}, 0x81}) r17 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r17, 0x84, 0x8, &(0x7f0000001080), &(0x7f00000010c0)=0x4) r18 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001100), 0x101442, 0x0) recvmsg(r18, &(0x7f0000002780)={&(0x7f0000001140)=@rc={0x1f, @none}, 0x80, &(0x7f00000026c0)=[{&(0x7f00000011c0)=""/56, 0x38}, {&(0x7f0000001200)=""/180, 0xb4}, {&(0x7f00000012c0)=""/134, 0x86}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/225, 0xe1}, {&(0x7f0000002480)=""/11, 0xb}, {&(0x7f00000024c0)=""/107, 0x6b}, {&(0x7f0000002540)=""/166, 0xa6}, {&(0x7f0000002600)=""/131, 0x83}], 0x9}, 0x2000) bind$inet6(r18, &(0x7f00000027c0)={0xa, 0x4e24, 0x74, @loopback, 0x3}, 0x1c) read$alg(r18, &(0x7f0000002800)=""/226, 0xe2) 4m16.350657534s ago: executing program 8 (id=5009): bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x28011, r0, 0x2c39000) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x28011, r0, 0x2c39000) (async) 4m16.048417225s ago: executing program 8 (id=5011): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x10, r0, 0x8e62b000) socketpair(0x22, 0x2, 0x11, &(0x7f0000000000)) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x1, 0x6, 0x8000000, @vifc_lcl_addr=@loopback, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x0, 0x7ffffffb}]}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) ptrace(0x10, r2) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) r6 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)='uid', &(0x7f0000000100)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000100)={0x65, 0xfe, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000200)=0x1ff, 0x4) shutdown(r5, 0x1) recvmmsg(r5, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x60, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000004c0), 0x440002, 0x0) write$UHID_INPUT(r7, &(0x7f0000001a40)={0x8, {"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", 0x1000}}, 0x1006) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x1000000, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000064f800b3000040"]) open(&(0x7f0000000000)='./file0\x00', 0x202140, 0x1c4) 4m14.884335681s ago: executing program 8 (id=5015): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4b4, 0x7b1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x8, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000080)={0x0, 0xacf, 0x2, 0x3, 0x2d8}, &(0x7f0000000100), &(0x7f0000000140)) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000002c0)={0x0, 0x11, 0x5, {0x5, 0x23, "ff7dbd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000e38f04"]) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) syz_usb_connect(0x5, 0x3ad, &(0x7f0000000b40)={{0x12, 0x1, 0x110, 0xcf, 0xe7, 0xc8, 0x40, 0x19d2, 0xff86, 0xd22b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x39b, 0x1, 0x1, 0x13, 0x40, 0x3, [{{0x9, 0x4, 0xcc, 0x77, 0x10, 0xff, 0xff, 0xff, 0x8, [], [{{0x9, 0x5, 0xf, 0x0, 0x20, 0x1, 0x36, 0x2, [@generic={0x76, 0xb, "cc401942d7daee71cc17bf90a5592cd389b84b6989e6677cd11363cc756d976af66be83e17b71e64724ac6e0b628c4b51fee8bbf8c965e487194a33c6346dc426f6a7595dd5ccbf64fdf9fb0336ed7083c1b73d41432a58b9d06e935a9bddf592006128433585ba577b1e49beb3edc5f7ab2a229"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x3, 0xf}}, {{0x9, 0x5, 0xa, 0xc, 0x40, 0xf5, 0xf, 0xc, [@generic={0x12, 0x31, "3349b5452ce9049def65e94c0ab08da3"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x9}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x8, 0x3, 0x3}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x4, 0x9, 0xa}}, {{0x9, 0x5, 0x4, 0x8, 0x3ff, 0xf4, 0x0, 0x6f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x5}]}}, {{0x9, 0x5, 0x4, 0xc, 0x400, 0x5, 0xf, 0xf8}}, {{0x9, 0x5, 0x8, 0x1, 0x20, 0x2, 0x3, 0x9}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x8, 0x2, 0xe}}, {{0x9, 0x5, 0x0, 0x12, 0x608, 0xf8, 0x1, 0x3, [@generic={0xda, 0x23, "2ececfa06c7d7c928c0defcb9154393774266ca73c6baeb79adfa2c14325cc6f1b5140a4912755e571ca25fbcac1d21c052f4ceab23258d4f05b790f73edc5ee7e6e701879acbe20e5529a54de46d8025d177b45f16a87d0d038be806d56ca428dc21b8b7a93c4477fcff96f642c072d6b8f242d3a0a07128dd3bc8bbb8b22f95578af45c5b1cfc364e995f9b0143b42524973e24b9b5a0c9b89af80ec260cf1ae13735596effce4c125df8e1836c76c155c4b35d1af2dedcea8d38de74e26ff5cfe16bb51c850b2bc980f8327c5a8203761a6fc996b0655"}, @generic={0x5f, 0xa, "64e7be0cb071fac9fc3cbec0b6d466c49031a481d1ce30e7c33410ad2674cfd6c5ffb7e63a4284b59768d974eccbcad8e3deee3c0272c3309166274de2ad417984f88f6c4495412017ce23ecc848e40c9fe2a8743e8c8b15b4acdda34a"}]}}, {{0x9, 0x5, 0x6f3bea6f05e2d687, 0x3, 0x20, 0x8, 0x80}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x9, 0x40, 0xb1, [@generic={0xd2, 0xe, "fdd3620dcae2a86e482b97b7b2ca8abb191f44aa43e772bbe12008182ab324e872492b44c31e18ed5828e0477a5374b1caaf6017b826bbc789813a34c561b8a03f701ccd9218f73f2b134c5309156ccda76f0c7371f638f93a7a7530e2e78f2980c702edb1b14cdabb7ba6fed0775fba19ffa51ae193279bb5b2206cb7706acb5e9d7a3b73f896d7239a63909f478f72857bebad43d3a623db56b019093fb038352f01d8a90fe97918096b48c5ba0c6c9e9a8abecbbd4fb224bfd172731f357c70396ecfdab8e77360abae3028f34a68"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x8}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x81, 0xa2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x6bdf6e89711056c7, 0xc3, 0x4}]}}, {{0x9, 0x5, 0x1, 0x0, 0xf0, 0xff, 0x2, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x6}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x7, 0x5, 0x2, [@generic={0x43, 0x24, "384d0b5876452a27eaf68451692c72fbb1d18f0c5dda91ae85ed38d6e1bae8af0c222583a5cc6df178ee6d8fce8392a7fe0b2358df73663340cee7d07097d5fe72"}]}}, {{0x9, 0x5, 0x0, 0x9, 0x200, 0xb, 0x97, 0x5}}]}}]}}]}}, &(0x7f0000001440)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x587c8e5e7bd3a78e, 0x1, 0x1, 0xe0, 0xff, 0x6}, 0x7e, &(0x7f0000000f00)={0x5, 0xf, 0x7e, 0x6, [@generic={0x2d, 0x10, 0x2, "af51728ab353710b2e71f92c498c9afa3ef501d9fae803ee105ad2d60aaee4e006138d024e009136e354"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x70, 0x4, 0xa, 0x5, 0xc}, @ssp_cap={0x18, 0x10, 0xa, 0x40, 0x3, 0x1, 0xf, 0x6, [0x30, 0xff30, 0xffc0c0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc3f481bba3287bc5, 0x5, 0x8, 0xed4, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "eed7fef3546876a03a2a96d86ccbcece"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0x9, 0x4}]}, 0x9, [{0xd2, &(0x7f0000000f80)=@string={0xd2, 0x3, "d6750aa322dc70ceb80e2aea51841de25037b0cf6cf94da364abad5c4414a4cab806c45a1f7696234b3870069696d3b76838e6ea5f02a13421bc62658aa82f9f820b96c8e6ec7514f9a3723c53b22fa5f94689a0045c4dca5f85ccd746d7834741419a3ddec571a4263558f735eec0c7a1d1ec647af299d934ce642a92dabc9c5c662d6b0ddb0be222311388da16c4ee53df3f7fdbd7c334abaf2d261ee117452cab3af7f469b742759916e7dacbb6d5770b6edf720842a84978239b45db479018e80e2f5067c92f0a3e4ade341e2c30"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x40b}}, {0x3, &(0x7f0000001140)=@string={0x3, 0x3, 'O'}}, {0xfb, &(0x7f0000001180)=@string={0xfb, 0x3, "0bbaa236475c7d5322396af49e8038ea730dbb26d8d58c9e491076ddcc2fc1e446f9ceea17890fb19c9fdf9a8127828ff7667708458a59ecdc9f157de19dab13076f1f73bb9d07c06bd1327da87486756051061e7f1b5ef8d0e5de909e82abff874bd7c21faa65d306aec4f5808bf47dddb0a916a5e106ec0b1d3056bd45d33a5976a23f618ef17597bc9281fb129e113a2b8540d585210ad36017f0c48d18b19e3561166efbec65b5f93bc16dba1dd87b552e3f1112ba18fa96867637e82e195114fdc02eeddd9c114c9ac994bb6eea221758d651a77e149954dedd0a213a73412451449307ea6bc95a90d045fe8165dc050c4dcabd1ee88a"}}, {0xb8, &(0x7f0000001280)=@string={0xb8, 0x3, "d05d0d0e1e99bda38ba0bd8daa5027c50692bda4d330ce56b38d91b1b0b1f126fc00efd55f5318f84c9283052575b8c3335f1b4c56a240bbd12b819407760d06ae324fe7373305b87931eacff47df482d7d6a9e0dcea4289d209537eb5ca0586c56eade15e6fb9a57602dee02d7baa84bd817592effa9e90781de23098167a9d6d45b58e80160ff3846a97b979756a62108b401ed0c1b6f8b13cae07c32918ceca064a2116e44277b943c735c6a199f42c9abc34fe48"}}, {0x86, &(0x7f0000001340)=@string={0x86, 0x3, "27358f749d60161e04f6329b5edc199ec66ecd4ebb2f705beb52dc869f9103d16a44d0b755830fbc0e7bd2c9eb80b3e2fe7e71b7c6be97da6e905e209fe90d9ddce36ae70aedd5451b85e8248ef1ca98b745f29e3087fc084806130275e6013ad474841cdd9b7e9e2c83463811fffd06b54cf58d38b614e9fd04afbbe22856d1cee35a94"}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x411}}]}) r5 = openat(0xffffffffffffffff, &(0x7f0000001540)='./file0\x00', 0x2880, 0x140) write$char_usb(r5, &(0x7f0000001580)="94cd1db51a681a3dc7c81b9c13a24ae837ce1c2b12", 0x15) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4c00}, 0x0) recvfrom$rxrpc(r4, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) r6 = syz_usb_connect$cdc_ecm(0x4, 0xac, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x1, 0xf, 0x10, 0xf, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x23, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xfffffff9, 0x5, 0xc35f, 0xc1}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x8}, @ncm={0x6, 0x24, 0x1a, 0x5, 0x4}, @mdlm_detail={0x4b, 0x24, 0x13, 0x2a, "52c4ac7be4267ac3a1f72b1fbfa3c34ea8220894c597b7e82f0f03bc8e52fedc1c77cd833f949797d88a20680d0fe3164999a9e0159947e3e9cfc8c321fe81914d322029666e69"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x7ff, 0x5, 0xfd, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x0, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x80, 0x1}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x2, 0x6, 0x8, 0x8, 0x3}, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x4, 0xd, 0x1}]}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41d}}, {0xed, &(0x7f0000000400)=@string={0xed, 0x3, "3d44658f36b575e8f0f6ee5908ec57e48d18e1354e5db7479fab00dc10a128bb9f07615595088cc3dfef4728b5606d06742467743336830bdd588c6bd105e7b3325e03aa0b6fdf59a3a79b1e824fdd2253c6d5376e8f3803d378bfd6c36510d5d944dde033d210c86c8e9d460102b55b961b10d45b64772ad889f3aabffd3861c8f15bd506ded664318c3210c89c04500aaf8d2537e2f3d2d3951202b55b7b06266681c14dc4edba937a10656aef646d54aa8ac39c04ad1383fc26d37b12de307ec1f80fa1effd87837215b3276559d4bc3c24a980665780394662a684fdcfccfb2a2b255d5541ad7fda14"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x500a}}, {0xd3, &(0x7f0000000500)=@string={0xd3, 0x3, "b9cac318c4b2639cd58796a644bc439bb8d9e11df5d57ced7218ddf00077f8fe74f9849ca14e7866ea37a53660e0b113a1ed0a0fe3c0ff06361c7f5b700e6b60d8a1f0c3cab108fb8151f50b79b28da6d6a567ffd33d79a5130625f28bea754c48676cb7d2d40c48eeee9bcd8a16af723cd45ea620b7d9c36b551f639a85c0c106ad95b2c097ad5ceac5515e7e9fb0d56b134ca639db4582fcbdda55d895749a6a9e76aeee52f43f1facb24ee9b390a2bf7fc5dca29c58340037ecc939478fe830b67c1696b18044cb12000ce3ea867bab"}}]}) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000880)={{0x12, 0x1, 0x311, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x39, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x3, 0xee, {0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0x224}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x1, 0x40}}}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x200, 0x5, 0x0, 0x81, 0x8, 0x6}, 0x8, &(0x7f0000000900)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x3a, &(0x7f0000000940)=@string={0x3a, 0x3, "194cda7b330a977fedebda03ffbd5127ca06e3ef82cdd55cb3f6bb553b27aa0342b4b2624578108cea8873eef168786b5a1dadd7fbf72929"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x427}}, {0xc4, &(0x7f0000000a00)=@string={0xc4, 0x3, "816f2fc8795a915e2ceb8983230ec058c218ea421a3c2133d74a8773bcc10b182ee1a4ef67b62b5f4ce70cd5985fb047fdb8f51698f8bff4d9512de9a643f38681dd5562f9f2cefa4a0094bbd412bf82b7f0997f679672836f89738378dea39ca785808df5112b44d6d7a9a272c3808e6557c5e06d0774c3fc15e6c7d437cd7578c7094b74f758d45b81eea57d1e1331499a6584000e23d907830e12a26ee0ba42d2506ec40c2b596f0be9652fcdec9f27dc100eec71d52b4737d3b08a1c7707a438"}}]}) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x24) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000001500)={0x4, 0x0, 0xffff1000, 0x1000, &(0x7f00003b4000/0x1000)=nil}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000700)={0x14, &(0x7f0000000600)={0x0, 0xe, 0x94, {0x94, 0x23, "40a5c5f0363a6be3dcfe2757b561486b6d69154d0ac71c4587177e2c86760a4c63d7b90b93b2bd8026bca9b4cc199f67252a217d4f998ac833e692b7db2989e3fbfff9798c628dccb323ae2c44d30e6f5f6ce28ca64f5e7a2fcf41ecc1546d9514a27e61c20a7e9482947e404d7d538c53bc664736b6001e9d0b7f941bcc858375763e657334ccbe6337f179ab02be4f5cae"}}, &(0x7f00000006c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000840)={0x1c, &(0x7f0000000740)={0x40, 0xd, 0x49, "fd522194ea649411bf6afbdb55ca927075a208c062bc57cbc582e614e30cee1e2afec6471687e4700db3dc40800a49f71a558a70778ffdcf0615bfeafe32f882995562721c99110dc6"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x9}}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x22052, r4, 0x93771000) 4m12.440920478s ago: executing program 8 (id=5024): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x8, 0x0, &(0x7f0000000040)) r2 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902180101040000030904"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)={0x20, 0x5, 0x2, "8414"}, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28011, r0, 0x0) 4m10.088688353s ago: executing program 8 (id=5026): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001d80)={0x1c, 0x3, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x82}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000002) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x8c}}, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r3, 0x6f000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, 0x20) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r6) r7 = syz_clone(0xa00200, 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r8) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = syz_open_procfs(r7, &(0x7f0000000040)='stat\x00') pread64(r9, &(0x7f0000000140)=""/15, 0xf, 0x4) sendfile(r1, r1, 0x0, 0x7ffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 4m8.701098635s ago: executing program 8 (id=5030): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) close_range(r5, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xac) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000080), 0x10) listen(r6, 0x0) listen(r6, 0x5) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 3m52.387401266s ago: executing program 38 (id=5030): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) close_range(r5, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xac) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000080), 0x10) listen(r6, 0x0) listen(r6, 0x5) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 2m58.792807608s ago: executing program 6 (id=5271): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x4040, 0x80, 0x6}, 0x18) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x48) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 2m58.64844661s ago: executing program 6 (id=5273): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x22020600) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @local}, 0x2}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r6, &(0x7f0000000080)={0x0, 0xb2, &(0x7f0000001180)={0x0}, 0x1, 0x0, 0x0, 0x4040011}, 0x24048810) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000002c0)={0x3, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981", 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @pic={0x4, 0x7, 0x60, 0x6, 0x7, 0x3, 0x9, 0x7, 0x8, 0x92, 0xeb, 0x6, 0x7, 0x6, 0x4, 0x5}}) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) personality(0x4000009) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000340)={r9}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r8, 0x7dfff000) 2m58.432232326s ago: executing program 6 (id=5275): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x93b0, 0x3000, 0x3, 0x1a3}, 0x0, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x0) bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14142323460608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r5, 0x5708e000) r6 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000000c0)={0x1, 0xb, 0x0, "e97e32e744844206e7136b6fbe7f704bd6d35d47be1970788862a991329890c1"}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000200)={0x42, 0x0, 0x1}, 0x10) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0xc, 0x9}, 0x2) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x1, 0x2}, 0xe) 2m55.114928444s ago: executing program 6 (id=5291): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) recvmmsg(r1, &(0x7f0000001580)=[{{&(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000000280)=""/57, 0x39}, {&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000300)=""/31, 0x1f}], 0x4}, 0x5}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/201, 0xc9}], 0x1, &(0x7f00000004c0)=""/167, 0xa7}, 0x6}, {{&(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000600)=""/208, 0xd0}, {&(0x7f0000000700)=""/99, 0x63}, {&(0x7f0000000780)=""/158, 0x9e}, {&(0x7f0000000840)=""/169, 0xa9}], 0x4, &(0x7f0000000940)=""/107, 0x6b}, 0xad20}, {{&(0x7f00000009c0)=@phonet, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000a40)=""/41, 0x29}, {&(0x7f0000000a80)=""/11, 0xb}, {&(0x7f0000000ac0)=""/175, 0xaf}, {&(0x7f0000001700)=""/22, 0x16}, {&(0x7f0000002780)=""/215, 0xdf}, {&(0x7f0000000b80)=""/201, 0xc9}], 0x6, &(0x7f0000000e40)=""/115, 0x73}, 0x6}, {{&(0x7f0000000ec0)=@l2, 0x80, &(0x7f0000001480)=[{&(0x7f0000000f40)=""/155, 0x9b}, {&(0x7f0000001000)=""/14, 0xe}, {&(0x7f0000001040)=""/134, 0x86}, {&(0x7f0000001180)=""/126, 0x7e}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000001200)=""/77, 0x4d}, {&(0x7f0000001100)}, {&(0x7f0000001280)=""/23, 0x17}, {&(0x7f00000012c0)=""/218, 0xda}, {&(0x7f00000013c0)=""/164, 0xa4}], 0xa, &(0x7f0000001540)=""/37, 0x25}, 0x7e}], 0x5, 0x40000000, &(0x7f00000016c0)={0x77359400}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000000)) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) sendfile(r3, r0, 0x0, 0x7fffefff) sendfile(r0, r0, 0x0, 0x7ffff000) ioprio_set$uid(0x3, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x10000000000000, 0x41000000}], 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140)={{}, {0x77359400}}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000006442, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r5, 0x3f, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x0, r4, 0x0, 0xfe00}]) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000001100), 0x101080, 0x0) close_range(r6, r1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2m53.722541841s ago: executing program 6 (id=5293): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104e380102030109020600010000100009045902019b1e2a0009058202000200000083f149ae17363bca9a2f8c7319893949fac76062ff7c13acefa96ac0fe5a64d1a2cc5cf2c7adf391f0003f18c9959b9665c993adb57efef5528a342fcd3cd12afbdf3b09956d9d8b2925964948"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x20, 0x5, 0xd7, {0xd7, 0x0, "1409ec87d91c4a8a46be413c7b44ad12b7324ed0251e5850ebc2675f7671ba8e04adcb4dee59917265afecd61b8b2b721951fccf35cc29f03ebb2d37f8001ccfb3fb233623f842e68a4383a13686263710e6852a42550709cc5b08a1d91fcc5ffe77190816d3324c52977e9413f1f6069994a59664c9dfb21d93c4e8513fc984313236e333336c90efa407101923684f559f6878a417e33dcdabe0ee40572bd86e2df06f36897303965acfc212db7935a8e962cba77d829107a1163c24bcf65ddebc3c2bfa42b0c3a3b9c58d6244022f371d75bafb"}}, &(0x7f0000000600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x1c, &(0x7f0000000680)={0x40, 0xc, 0x1c, "ed8002791684e67f54bbefad5a65c503816e3851de517ea5a6ae18c1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000700)={0x0, 0x8, 0x1}}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="044b04"], 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r2, 0x2, 0x4, 0x7}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}, @NFTA_SET_KEY_TYPE={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}, 0x1, 0x0, 0x0, 0x54}, 0x8000) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000200)="bad004b84b8cef2e0f72e20e0fc75fdebaf80c66b88e02f08266effaa7fc0c0c0000ef0fc7290fbb1a0f01c90f72d9f7f0831f00660f2ea60018", 0x3a}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000340)={0x20000002}) close(0x3) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="3f9de42cba8aae9bcd2985bde3d2db0d1fa1450942c8e2e7e9412bb13121d8ec46e5772c213c056917f4c11897bc812f63d3bb7c1b54b3742458c330c4c1db2002f5b2feefdc0c85d740fd6dbf043ec40ddf13f2024bb4ab2b2083be07522ff4f5ada6b7195185304e8c1e682035154e8629f4f82edb214dc2e14e73282c8d4520a74b19c335e0b2a9fdff3c125ff384537218e1c97a413a6aac5f79589a06e8cdbde26de7c8b0a3ef0c0fbdfa26a912200175f2648029ad7f7aa68171b648f0da3287af348088ba83"}, {&(0x7f00000000c0)="20a066ae13f5f51a43ec0b1cad5fea84c2cab09cf2507d8b1826980703ed442a13b895e9dc68abc4c61e65b92921642c672d63de848a9d3b829e768588ed358959288180e3a329da3362f7d7bf4a8476db3241101025b2ac36e772f56a549d3ff3987a4c1f08370a65ed532b22d6d52462448412ee21c5ffef0dbf3ce9d9"}, {&(0x7f0000000280)="1f46297f5b10b672a60420b8610d2238dafd92970459655e33e858a541bc8e1e49b8ec49c9fa12a894de9518fc3ec782b5acb3972a557f2393f877acedc18f5f2981acb5222f0824029035128c9ce062d75a577653d0dc0cd2fb7243c2176d88d92395154a33be250de00d88421a8c6ea2c385223e0d"}, {&(0x7f0000000300)="c991ca16111d6d813fbab46250770ef7c1c3ff1e5171af470980aecb2a16aec5d56b691b43fb5fe1c6efd311162da1e64523be7ed70351cd1b081f7a380a007717cea1d6108b6a94145b52c07964625d1e5cb2cdb70f7543de2997562d0bb0a07304dd904621d73c2afa0cbaa51ba47341bfce8d1f953a3b41f0a526fc48f9bc47982ad8469eea0fd506d52a2d4d6096033e3c90f8d34eb4e885c76487ca402141d24a3d1ff0f413e71d33dd0d9b2e411bd19ad1f3edb0f635fed2c1f61b4eadfdf68ada15d58303e4108652a770d4d6081dcf6f1d86503a4984a267211ee43087"}, {&(0x7f0000000040)="fa5be5a09c67378946d327c07e2792"}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa500, 0x0) sendfile(r8, r8, 0x0, 0x7ffff000) 2m52.687838381s ago: executing program 9 (id=5297): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x20, &(0x7f0000002100)={[{0x19, 0x4e00, "55d053afb4461e9cb98a2729fb82eb09832f9a23899d0f7eab"}]}) 2m51.096137687s ago: executing program 9 (id=5302): set_mempolicy(0x8006, &(0x7f0000000080)=0xffffffffffffffff, 0x9) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x5708e000) 2m51.032328761s ago: executing program 9 (id=5303): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x502b00, 0x0) r1 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000080)='/dev/rnullb0\x00', &(0x7f00000000c0)="abb6fb9ae8fe34c81b816066aa144357c513a3acb55720a65b2b9e426ec70a91529954b65e90b8188487b7d8f2753f0d5cee2368fb1b04f5d57f525437b731f4cd07d95dc35167c265bc05c88941a915549070a4c5a8f24ef58e7c33b0fd4fd32f6dfe4c8fcdd9184e04e911fa6e39e9d390911a4e8332170aca735a98bc6dc6ae045976125241e58b3e62c5d05db50e6bbdf411cea44960270b1e21", 0x9c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0x6c3ca000) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) 2m50.76017375s ago: executing program 9 (id=5306): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/stat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/83, 0x53}], 0x1, 0xf, 0x8000) read$rfkill(r0, &(0x7f0000000000), 0x8) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) fadvise64(r1, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x5708e000) 2m50.672858369s ago: executing program 9 (id=5307): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000440)={0xffffffc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @random="d6df00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="00040300000020"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000500)={0x20, 0x3, 0x9a, {0x9a, 0x11, "c0ba70948f2b86ce3f5be63c15d63090897d518b29304c746d7c505aed883a2d80364caba483f19349a5d4de9ffeb992fd219de2976591cd4455c2e5961b7a6a4c1724f86584788ccc09608dfe73f2082cd84ddc24915aac0643252a6c38866bd3fab2c1ee73827dff4608b95aa36d012af6103117d09e396c8fb350238587210a38da3be7e5839927fb81ea6106e93621019ea7c0a69ec0"}}, &(0x7f00000005c0)={0x0, 0x3, 0xa2, @string={0xa2, 0x3, "73ce7868fe5c19f12a781f52b712639d795271c6bf9d6894c9b3bde318f902bd8ce2b5b962183df1604100073774b17fefe420b0ccc16df2eb7df44d66b1b8c72726dae14f9360dbf3034d18a23b587ed0e5514a9125a7bd991c42d34fc5b784b59a82cdfa6d858e8e4743fa5e5f9ee4c2ef3d46b4021932c34250e82efdeec94ee39a9383ac3ace700e00dc043181a3163d1380a3912b6ec56fb3cabe1bc150"}}}, &(0x7f0000000780)={0x34, &(0x7f0000000680)={0x20, 0x17, 0xe9, "d70a20a42187e1743a7fa911483e768302d792cd1a5a18cebd065bdae64fa1f9f397ddf3c7a9807c72b6ed6eea5c095b79e2fd84c6ba83a920cd8488ece76f106b3aa562a27e8bb48f68db2e725bb95bac5d147b494898d63578f5a5a80f20b4d45059948b4adc6905a5aac7feefd647bb2261308ce7864609208ee9d8d22859a729a849e034b0c023901a79a928919fd4a87e9f94748aff348351766721c9e94908911dbcd504d59a149fbde8f93c46de68fbe525001e33b0e3c6c202b1ce08e7cc01fdca9147edac85f083273be24c1ce7a2077c30d8201ee4cea3b8a2466123cc56e3161f796538"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000200)={0x20, 0x0, 0x7, {0x5, "7b164a7e49"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x5}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2m50.406266122s ago: executing program 6 (id=5308): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x5, 0x1, "cec4e41bf16eeb841ce960ebc4a1ae0f19679e"}) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000040)={0x40c, "5ef30a5d3351ad04ab5bcbca816f9cf2348ba99a5ed4db78bc26916feeab5e65"}) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'multiq3\x00', [0x4f24, 0x9, 0x100002, 0x405, 0x1, 0xcc7, 0x0, 0x5c952399, 0x4, 0x3ff, 0x802, 0x1600, 0x8, 0x1, 0x4005, 0xe1cb, 0x6, 0x4, 0x3, 0x6, 0x317, 0xfffffff9, 0x0, 0xfffffff5, 0x10001, 0x8, 0x3c, 0x8, 0x4, 0x8000004, 0xfffffffd]}) syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000100)={0x23, &(0x7f0000000080)=""/35}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000180)='squashfs\x00', 0x208002, 0x0) 2m47.39215448s ago: executing program 9 (id=5315): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x46342, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$getflags(r1, 0xb) sendfile(r0, r0, 0x0, 0x7ffff000) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x8, 0xfffffffc}, 0x1c) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff}) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) syz_emit_vhci(&(0x7f0000001480)=ANY=[@ANYBLOB="040e04076d0c"], 0x7) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, 0x0, 0x200, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r7, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000140)=0xffffbdfb) set_mempolicy(0x8006, 0x0, 0x5) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)) shutdown(0xffffffffffffffff, 0x0) open_by_handle_at(r5, &(0x7f0000000280)=@reiserfs_6={0x18, 0x6, {0x5, 0xbaa, 0x9, 0x9, 0x1ff, 0x44}}, 0x400) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000001080)=0x9) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x4010, r0, 0x2000) 2m33.354192799s ago: executing program 39 (id=5308): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x5, 0x1, "cec4e41bf16eeb841ce960ebc4a1ae0f19679e"}) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000040)={0x40c, "5ef30a5d3351ad04ab5bcbca816f9cf2348ba99a5ed4db78bc26916feeab5e65"}) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'multiq3\x00', [0x4f24, 0x9, 0x100002, 0x405, 0x1, 0xcc7, 0x0, 0x5c952399, 0x4, 0x3ff, 0x802, 0x1600, 0x8, 0x1, 0x4005, 0xe1cb, 0x6, 0x4, 0x3, 0x6, 0x317, 0xfffffff9, 0x0, 0xfffffff5, 0x10001, 0x8, 0x3c, 0x8, 0x4, 0x8000004, 0xfffffffd]}) syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000100)={0x23, &(0x7f0000000080)=""/35}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000180)='squashfs\x00', 0x208002, 0x0) 2m31.06374712s ago: executing program 40 (id=5315): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x46342, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$getflags(r1, 0xb) sendfile(r0, r0, 0x0, 0x7ffff000) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x8, 0xfffffffc}, 0x1c) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff}) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) syz_emit_vhci(&(0x7f0000001480)=ANY=[@ANYBLOB="040e04076d0c"], 0x7) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, 0x0, 0x200, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r7, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000140)=0xffffbdfb) set_mempolicy(0x8006, 0x0, 0x5) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)) shutdown(0xffffffffffffffff, 0x0) open_by_handle_at(r5, &(0x7f0000000280)=@reiserfs_6={0x18, 0x6, {0x5, 0xbaa, 0x9, 0x9, 0x1ff, 0x44}}, 0x400) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000001080)=0x9) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x4010, r0, 0x2000) 2m15.647596798s ago: executing program 3 (id=5368): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848390000005e140602000000000e0027", 0x23}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x22052, r0, 0x93771000) (async, rerun: 32) r2 = userfaultfd(0x1) (rerun: 32) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000749000/0x3000)=nil, 0x3000}, 0x4}) 2m14.436458676s ago: executing program 3 (id=5371): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) (async, rerun: 64) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (rerun: 64) openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='cpuacct.usage_all\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000140)={'virt_wifi0\x00', @remote}) (async, rerun: 32) mknodat(r2, &(0x7f00000000c0)='./cgroup\x00', 0x40, 0x5) (rerun: 32) 2m13.35466818s ago: executing program 3 (id=5376): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffd, 0x6, 0x400}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@mcast1, 0x1b, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="30000000120001000000000000000000100000000c00ffc300000000000000000d0003"], 0x30}], 0x1}, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000091aeeaceeff0f781dd606e8407a509e0b55915c3ed9daaaa8f9a03ccaa707e56c37f6269d0fb57d7d3f040119889da8d362686e1d71b1ea0f33c500fcea630b31511b053412cd001c08f8dd5d7675bedd683944e3df5f9f57908b03fc59b1b70422ae1043bde42d9727ae06c9601899008c608a523810243f26b4d992796a795f8e091b4a19e3f921b09d877a173fe1b07284936", @ANYRES16=r5, @ANYBLOB="010329bd7000fcdbdf2524000000"], 0x14}}, 0x0) clock_gettime(0x0, &(0x7f0000002e00)) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffd, 0x6, 0x400}, 0x10) (async) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24) (async) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) (async) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@mcast1, 0x1b, r1}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="30000000120001000000000000000000100000000c00ffc300000000000000000d0003"], 0x30}], 0x1}, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000091aeeaceeff0f781dd606e8407a509e0b55915c3ed9daaaa8f9a03ccaa707e56c37f6269d0fb57d7d3f040119889da8d362686e1d71b1ea0f33c500fcea630b31511b053412cd001c08f8dd5d7675bedd683944e3df5f9f57908b03fc59b1b70422ae1043bde42d9727ae06c9601899008c608a523810243f26b4d992796a795f8e091b4a19e3f921b09d877a173fe1b07284936", @ANYRES16=r5, @ANYBLOB="010329bd7000fcdbdf2524000000"], 0x14}}, 0x0) (async) clock_gettime(0x0, &(0x7f0000002e00)) (async) 2m12.953929942s ago: executing program 3 (id=5378): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x44001, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000040)) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f00000000c0)={{0x2, @addr=0x3}, 0x8, 0x8, 0xfffffffffffffffb}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7, {0xfffffff7, 0x100, 0x7fff, 0x8}}) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000140)={{0x4, @name="90f3d8b93e95509a9f2b672c6b4be6b557f22c263217b8558b72f3899bb90cc3"}, 0x8, 0x4, 0x5}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000180)={0x6, 0x4, 0x3, 0x1, 0x9, 0x2, 0xa}) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x9, @vbi={0x8, 0x7b1, 0x0, 0x50323234, [0x800, 0x13e], [0x2ec8, 0x3], 0x13a}}) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000300)={0xa, @sdr={0x20493859}}) r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000400)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000440)={'full', 0x20, 0x2, 0x20, 0xdd20}, 0x2f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000004c0)={0x6, &(0x7f0000000480)=[{0x130, 0x6, 0x9, 0x3}, {0x9f, 0x7, 0x9}, {0xff, 0x45, 0x5, 0x3}, {0xaf, 0xe, 0x5, 0x2}, {0x3, 0xb, 0x3, 0x424}, {0xba1, 0x4, 0xfe, 0x5}]}) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000500)={0xfffffff7, "9947dfe28d9d487130e091f4a9340774fa485569ad6796153a5ea7fee3ce7f9a", 0x10, 0xfffff000, 0x0, 0x1, 0x1}) r4 = syz_open_dev$sndpcmp(&(0x7f0000000580), 0x84a, 0x4000) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f00000005c0)={0x0, 0x0, 0xfff, 0x8, 0xe, 0x7fffffff, 0x9, 0x200, 0x80000001, 0x1, 0x3, 0x5}) write$cgroup_pressure(r3, &(0x7f0000000680)={'full', 0x20, 0x7fffffffffffffff, 0x20, 0x7}, 0x2f) openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x40) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa}}, './file0\x00'}) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000ec0)={0xa, 0x0, [{0xdddd0000, 0x86, &(0x7f00000007c0)=""/134}, {0x8000000, 0xde, &(0x7f0000000880)=""/222}, {0xffff1000, 0xa5, &(0x7f0000000980)=""/165}, {0x2000, 0x45, &(0x7f0000000a40)=""/69}, {0xf000, 0xc8, &(0x7f0000000ac0)=""/200}, {0xffff1000, 0x82, &(0x7f0000000bc0)=""/130}, {0xeeee8000, 0x80, &(0x7f0000000c80)=""/128}, {0x10000, 0x46, &(0x7f0000000d00)=""/70}, {0xeeee0000, 0x84, &(0x7f0000000d80)=""/132}, {0x109000, 0x46, &(0x7f0000000e40)=""/70}]}) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000001040)={0x1, 0x45f4c279}, 0x8) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000001080)={0x3, 0x101, 0x1, 0x31, 0x1, 0x0, [{0xfa, 0x8000, 0x4, '\x00', 0x2000}]}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001140)={'wlan0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001180)={r6, 0x1, r0, 0x1, 0x80000}) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000011c0), 0x10402, 0x0) ioctl$RTC_PLL_GET(r7, 0x80207011, &(0x7f0000001200)) 2m12.648843485s ago: executing program 3 (id=5380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0x1, 0x4) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000100)) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'wg2\x00', 0x1000}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 2m12.317228257s ago: executing program 3 (id=5383): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101440) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) read$alg(r1, &(0x7f0000000040)=""/4096, 0x1000) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000001040), &(0x7f0000001080)=0x4) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000001100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001140)={'vxcan0\x00', 0x0}) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x78, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) readahead(r1, 0x8, 0x8080000000000000) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000001280)={'\x00', 0x3, 0x5be4, 0xdca3, 0x10, 0x1ff, 0xffffffffffffffff}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000001300)={'\x00', 0xd, 0x3, 0x7, 0x80000001, 0x98, r4}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000001380), 0x4) r6 = syz_open_dev$I2C(&(0x7f00000013c0), 0x7, 0x600600) ioctl$I2C_FUNCS(r6, 0x705, &(0x7f0000001400)=0x5) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000001440)={0xa4, 0x400, 0x1, 0x5ff, 0x3, 0x0, [{0x3, 0x330e, 0x1b, '\x00', 0x2104}, {0x9, 0x6, 0x9c13, '\x00', 0x1003}, {0xb45e, 0x6, 0x81, '\x00', 0x2208}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x484200, 0x0) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000001580)) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r8, 0x4068aea3, &(0x7f00000015c0)) r9 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001740)={0x0, &(0x7f0000001640)=[@code={0xa, 0x6e, {"420f300f758f03000000c4617c5bbd53dc0000b9630001c0b8d4d00000ba000000000f3066b897008ec866b85d000f00d8430f01cac744240055000000c744240207740000ff1c2466baf80cb87b100d86ef66bafc0cec660f38825b98"}}, @cpuid={0x14, 0x18, {0x3, 0xefd4}}, @wr_crn={0x46, 0x20, {0x3, 0x100000001}}, @uexit={0x0, 0x18, 0x92da}, @wrmsr={0x1e, 0x20, {0xbf4, 0x3}}], 0xde}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r9, 0x4068aea3, &(0x7f0000001780)) r10 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r10, 0x40189429, &(0x7f0000001800)={0x0, 0x7, 0x1}) r11 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000001840)={{{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@empty}}, &(0x7f0000001940)=0xe8) quotactl_fd$Q_GETQUOTA(r6, 0xffffffff00000e03, r12, &(0x7f0000001980)) utimensat(r11, &(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)={{0x77359400}, {0x77359400}}, 0x100) ioctl$BLKROSET(r11, 0x125d, &(0x7f0000001a80)=0x9) 2m10.763311491s ago: executing program 7 (id=5386): r0 = socket$nl_rdma(0x10, 0x3, 0x14) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x2634, 0x44, 0x107, 0xfffffffc, 0x4, {0x1, 0x7c}, [@nested={0x2620, 0x8b, 0x0, 0x1, [@nested={0x4, 0xf}, @nested={0x30, 0x11f, 0x0, 0x1, [@typed={0xc, 0x118, 0x0, 0x0, @u64=0xcad}, @generic, @nested={0x4, 0x93}, @nested={0x4, 0x3b}, @nested={0x4, 0x82}, @typed={0x12, 0xd8, 0x0, 0x0, @str='memory.events\x00'}]}, @typed={0xa, 0x9, 0x0, 0x0, @str='btrfs\x00'}, @nested={0x211, 0xc6, 0x0, 0x1, [@generic="edbe7afad459cf3a9a21045eef05da51a00be9e5f9698674d5532815f295908d1533bc25e47f8f9e958a11dfdb620c450c147f04f8f8a7e53b29f8ad6e260175863da4a36ad34e675c6accdccab489380b4c9a5fe584b67c08867bad7a7ec93057b74be6e179cb9fddba9f7b46750f53350740375ac4cdbcc176417f7d14ff370a7e6bb6bfe8fefcf50a955a8f7ca75c9edb834aef830145c444618191c64026e0b4d988b1b074372afdc1e0e24e789b125a5416", @generic="481647a4fb24cdc38167b2ba1f99602980b299429c603130165c8aaa52a2ab904a8407e9b9f62a2d857b28523254885f1194012837c9b7e6ddfa0c403dea07662d380d276e5dd0b858c386930cd3", @generic="f43fd26f84d0c28c3a07b25538b9643ca6ace145145b3b30c68ce35eda6579bffd7aa045c4969811a1dd6206386d41f1cdce57d42c899fdc79234c25aa8a50f084825902de233385fe0c1584d43a75078f1bdaefdcad299a5d22b6cc44674039ac3d096da22b7003e7e7", @generic="a8ceccae9cae96cd08d4a2650d5fc3e1456e293f106cb450111198bd43e18884859b2c057dead46d9fac5c6fc957853d28cda3bfdf9abbe41ae3bba1ee4666f4832c568c5f2f5505029dfbdcef1698b4294f2c9847c9f83c55c7c1d8d663ae0301129e53973558592e3c941892090fe8595893b80e5189e63c685068c4e6be62c06f951d1ee0e89ced8c0985664b0fb7bbc352b043c2d84a4ce12287dbf2116870"]}, @typed={0xc, 0xde, 0x0, 0x0, @u64=0x81}, @nested={0x11f9, 0x34, 0x0, 0x1, [@nested={0x158, 0x3e, 0x0, 0x1, [@nested={0x152, 0x32, 0x0, 0x1, [@generic="da1faddc2a0ad378b963a1b62020b5a890dac2cc31fe924536a2c695e7322d4891dc5413c984f532dd7c92a844d034316234a34f7a56b3c3", @generic="c6aa6c9a092e6ceee3b40b7a8721a255", @nested={0x4, 0x88}, @nested={0x4, 0x4a}, @nested={0x4, 0x40}, @generic="4c31644a8ab0fe8c316a77155adec124f40c401935698475d935b127b5dd5619fee7415c8879d01341c8d4801517beaa879584167f68792fe55e0178a2f142d9429f38685309afbfccfa76b0fd04d0d7a5a8220b8e5a76ca1e3d79f79a2c3dbe993aa2a817d153ee3b1079a4e991863ab67846556ae91ead03f05ab4b28a6819d893d60bbcf2d86c146db7685c462b24e7454c8683beeb01bce811a65e634c3017f10993684fef1d089e3ef676853fda81243f771232a1166971dfe9498c3ba4d6638087f5a67a8772168972b9b678c570e4fda6277e9b75bd6ad08ee28d005aa76e5c9ee7028625b2bc0a4dd3c87a670e966156403e", @nested={0x4, 0x14c}]}, @generic]}, @nested={0x4, 0x71}, @generic="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", @generic="20b48efd2897418894f50291bc57bd780265292d70a7bb459262b7312a075ba061a9b6bc2e180a7fbb9236474cc4b9add5d1a637b01e3b1747f1f2eb14c6ab0d8de22204bed9a083dd2341d20a0a798a25a72075b9f961a31154e4b3eb136acd2a1ac5fbbdc707e54e9eded5ec8548ee8cb25f7ec9c6282882fd1e65fcef61072751d7f8a846f85c76be531dce", @nested={0x4, 0xe8}, @typed={0x8, 0x5a, 0x0, 0x0, @fd=r1}]}, @nested={0x11be, 0x6e, 0x0, 0x1, [@typed={0x14, 0xa5, 0x0, 0x0, @ipv6=@private2}, @generic="a674fa7aa348dd2dc8c36fe6da5f455879a53569126a0832f417da94dcc203fc6e20d772537c4da0c7794fe75b7599394fe90fa861f963ae807b3bad7665a5481d734c58203eca59a700b50607df1a59ae4d0868042c5a082f9dbd78bc4cf02e67ee8c72ed12f59c598c5edf81c31e2847167a3ef7359d16fd669bf702bc9d8fd49bfa35430ce2d8f89317a444b8643a19a9ad26908dcdc26dcffa4cf28aed97b45b8f6e68620b301a4d96e911fd34725a83277831cfe04595ee6261edf9b29fd0954fdc63", @nested={0x4, 0x11b}, @generic="96862468ce60b2d1fa2cbb4dcdaa4404c48f0b61a0775ef80083bb27068ccf542af4bc97c0772663b3c31b25c8b33ee93d40aade3e2959788c391ffbdd9e2af7ca392e61ab9bb98a9276708892b71a496381647bb79f4baaaa55a254adc25c81f212eb352c6babd66f5cfd1354a0c8a3835d76a4dc632494a84c88698e13e437afd2d6055dda76798f7c909b853bb9b744904a2ff3fcac5fbf56edc7f9840a6b23cf85b0e413210099c420f6dd7d84b86b13d4033ccac4c7db3e4f7f1699f6b9e1c363c170d6212a582dd9ae66cbd6016b9f93f2f6", @generic="b69284eda4c8de63ea0eca0cc2ed4866a169cc8f6ab9a647e02506a0867d450d9e7935eba48ae55bfbeaf08e24f0589b8164f4190e1dcaf24e21abcb89441aac329e3e10328095576e91b926279c3526ffe5d25a05db79559c19806ef63e40ed8bdb4518442db02e4b4568fbb636d2a070e9afdd4efa6cf096da39096f151a0bb3c81483ddf06b4991801126a81806c09c770dc36aabe4218e004f5f5b0f61bc59e104651d86be3f156261ff2811b12d155e2b4e10020d5fdbf7af03ce214a5d53eec2e8152a7022caae997c230bd6413b825ae935195b7cbfa01c26785d62095c0f5e5a45c68c2c1a65778284b705713d40e4979d8ae64fd91f8dbc68708b27313847325cb4d43e0697f99b2293ae56330282b25493555050fc0466654f4c27e76487f5d78033e43f16c21d9eec183d105a16c5bf40851a9e07ccc986b707fddf3ac92e33b8cbf183dbee6e39583f669ebd8bd6c48d1004bfd19de94074331f37fd1944b48903f1866bf9c604e5a1a2db848ee5e9d97c8c91f64755967817b3b767b5fb9d36cf0376ba42086a22e615386f15e12d21f42fd89de2b19d07110643589e134f3aff0f154b980fd7827215807407cc195b6ffb80bf419f29828a3d66355909ec3af9d79809585a9f87abdcd4c377559f2f74d3a42e2a501c6fb58196ddd607ac929a4e8faad548912334d2665922b2fb0e69108a900953e6a84cadbdc5aa72aa82c19521b025ea97dfea1aa4c2d3cd6e166b19cf51c6ed98cef36dad20c97b365eff7920d6ade87a874fe5ec085b64725c399ff81319ffe762b4f37c5fda2d5fb6f967de02c83d9fa7e2602bb8e82ffa09b9369016cee55e16cff5f822aa2f9fa2f0fa138add5fd789dad488048d84fd5ad1e4168d0c7f4349f33f1b10703370ce34777682846b45ef139918ab80c31868291e242186cc4c84ce19b3767f4762c37963c092c3094ed32d11ec15b2a4efc98f9b2896b98e4e186ffdf1c68d4bfac989bb41e9bbf7d6fb23fb261613a803582a8fb2d212c86fb9925fa5e84754450a790554b554d269222f52f8a4a041b391b3294fdf0a3058f3e08db46bbf3f38b94d7f72ec90326597d5610be914ba74b8e19c8dd0b3f30be23c3e0966aae9f7df3836c768ceeaf86f0f2eef070aff9592dbbe193cfc2546dc90abf44a63a12afe8953046f959db6ecd3f13460f778b74505d3866bbf31ae2bce149873eb45e4cf48bfcd8ab2f0790d6d03f77bd4ffc3f4f341f717f043af23b1c23910f96505313e10fad9aaaa6c5c87039a32d62f73f5e9d37f434b0b234dedf3d3e1d9b37be459acf9128fbf248cea6dd73e4d43d572c839355e7b047e81f2650e0659662ef2ba1506215cbd74efbb4b827fab762476551bb1893e516fedafda62db11b0dfd35ba14af4da7ceb56cfcbcebbca7576393a52a23667f2da7a2973aa97b7f07bb2a0c974e7efe2b2ca096102bb37d89ba8b4ce3eb38cb9b5f0d43c9765f200f56e907aa6e62a537ab7bf110281bb4a196cb3dc64f2b9ea5aadf0a60bc60fb69130e16b68ee858e497aaff70517fc5eaf940e13e40ec37c46039a91b7ded2a2fa78db2783ac565710984573d66c405a5b50e8181194774bbf6c7a1a23c1f70b5ec26d1317a5ff6acafe089dcb94746cc13fd1372314d8910d20500362745f35e56d5cc7d54880ebb306ae18acbc11d4bd351ae9c3c7f8eed6f481e38f826eece6c56ddbc313be528d58567a699c8a57c0ffd6d0a313a19f07672fd65cf2b31b4558eecb9d36f583418387c785e29f291808f280c2d0c02701ba6f83424e032c38f09cfae46640b5c5078b15885c3ca6b90a4dc85f2e763dfb22c8fa278f0631a12463f6b7faab62b5d8ebfb52aa0df65820fd424cb9af9a0c0d1664f949d5005492710892b8c4220d8900e84aac08c248455a304a731ede822a086362c4573517fd138100744129141c64a67bcb98475adb1568f7379f62394dd74fd9815538399486b080df7f6fbacf9a6a212ec08d9e3a80865014cb45475baafde82f369f6a4a92d5a7b9b28f7ee112846359ec167beb40e33294792f16821b468b9802f5a305f5e87376b871fb43f7795f648131e0d90665f2b3566d763f1b8f8a63019089ff0fd0aa4dbd0efb8e6bc908322126102e2b6e0fe94218d12e765ba95f961b0e72b5eb93528fe5b3eb2746c18f92d89f0029d259606abe37b76c9a1be2c36a99732054eabcebea2db66d4a7ad2052aa8f740157ff54c1a5064b24dd7635beccab4c1483726359bf1dcd8e51fc3be4c3a8ee4143ff9aa9f9d36fcaa80029c8474e80ece173a55d1a98b8b0a1f9a9df2decccb52358c2ef619e858fb0c6dcb8db6eb55bb4f228a1a19f95fd9d094cb6fa4ed70eaa23ac9d91daa75a63131e552bd7fa5e975d6a215c0f652b014e48de534795e76e46a35f8921972c96236fbe78f5612c48f89ec8ac85cf5f2b3cbf25d468b1d067deac178dd765d1b3a5670dff34eed1e0af21e206c7edce624ffcfc3cf5a3633e582dfcb2e4b92cd3e686807936cf501b78fd4f51f7f462317ba335350285b79b38b4065da34cfb7c9307b789d0ddcece517b3f8178d31d636a639846a6f44c3678c5cf3525c8cca3d2ded4a8397c3dd4c74798d9ed72c3830768d74f5bc358318f84e3755605f1b3323f0f73cd789c97a7fae6fa6284b8507bca9568fc2b16dfd8d7750f37186b39925cc3f1741c3834de0efe3ce04e4aaa6196424aeb42da274febd9727305e5822a695200215f502a3675cd6631d93c0533af32d9717aff05c93b4243fc85ab4756b1aa5e247fa5eeb25934914f7c0ed95fa7e56c2a5bf0afc2fec26d89fabce7308032cf1cc3c9ee5fc597b4778e17f49fae30e1974d53d32d638657b167bc5155a9e3a0e622fdeec97125eac41d0f6272b7ee3f2d450289531beea773ac6d1bb19b0d7584611cfef6cfc3ca8d1ae2e1b4a625c52a472cea03b842937321dbc3a3836c3837a40ef11259a5881bd2695fd5f54fe78af06d2c68e8d4bbb1532d697c6929be6aba8c8d5a8dd01227da721aac5fb8ff865a9e229e53de52713c36767cb2742caaf179c29e878a50661bc00859f5074365757437999fb3f488152bb0e01062fd96ffc65c8aa99ae7400157e1ce1f3cfaee72a34fc4e06f90c60c714c2f0be6815a5e6c72ab2645db0cbd37a4f125ef872ae9a30eb191bac326cf3cc5b6188344118610e2c8649051f37787c633e78a71962b7ded8afd67626bd1f13b02f4ca08ebf5e4a13d4ebf85ccdc790a9a340d2b36cd91348228fa4771f0a322d22120e390499e0b282bb86466c2c799dad77f662764c8eb9b0e4dab206ece8858b2a56ab3fc27dc1be5bf1a7141841bb0afb061dbaad2572f0f1c9a4148a64fe6566e86b6eb0bd629a83adcb01384a91cb19e2c341245b53160eb736f2347051263e999dd4528efadcde547359e9fa0ea14f92b20f727f2885dbca01932bfa2e73e9d40cfa34a3b7f326991774b982329b75fbeb0ef2145d16e1ef0fd31c48a10dd82fa738b0a5b4aabeac2258e5cfd06b464d2bc713e355a20358cf367e6ca01b51753a3532e810dafdeab1161799e5c08636e86fbad50cea1e71357d909b22f85e7abd0f655a4535853993ba7d724da45ce3b83eafbbdec8f92bc1b7823cfcc448221aaecbc439dc6ca39c370c9f2cab78d5b3f90e950f9ea89426f23ba082a0da69c39e14328b132c2b52948536e3689a44ca807df453f924d60823d92e9c5a440a684d989abc844f9d0a740ab1907d4859bdbb9746ee2185fbe791d3f36341a27228d41014c85052b689e42050bbb482903d0fa3f2c97e051687901524324564d20cf3fe83a5c3dd5d87272928598371628312ccfb32453fe1ae4a4a5049c4365ba694d7c8bd3b18046cb7f5c60e9c9dd195501bd98af190e5c0e6c04d9af8ae10fc42633dccce470ab98b37040cf08f88cc9178ac810c1a456b03d2259aecef5fa5e5d48380a69892724bfcad7c15c80d61e84361a94c2f929a5bce40620b0d72899e06da6d4326aaf69432d14e5abcbbd1b5dfb7de55899f108f036801b5e0baee14073b1c59a3c7cc9e6e9edffa48f4cc7a7dede1618a52e872a735652f09290329cb91c93ef281a4cfb383d1dc2df8774261e1bd4c29c6bc15a637d4a28b825e569b49c8aaa8cc67140b70a0db3805e97563cac4ac2a05bd76cca5dce50a2dd0ff8c65b12570ad2b9fd2d12e2e4b818dba187074968c8271128c278dc06bdcd133cf2e95b5f20ae3e694db1c63a6fa9dcbf02adfcbf34ef6a12847ec4c353aa5e8df15b66846033faae0ceeee98a60206fc28cc3a798499de5856677f6c59c820135309fa7a631ba258604c110e7db6e98f931996295a7668e939dba55457046128df70c67f951eb802b9faca95938399c825b7c709bf5e17501d2eca0cff6f0039df092dc3f3ab62728e92987ebc929a8ea14253acad9455d3991973d75060331d5c322679b1e0d66e4f4dac213c267b3e4aa59c369b439260baf481aff48a742069abe2aefc5fec9b5d2e34d783f7b6cebabe7703ecebea2b58d117b44fca4fea8eeddf1d77d9942acaf0e7629d5ae4df4e05ed6fb78d005cd6e2c7338b4ce2655d5f4c33397f67cc41ca4d61929986879bd4f1bb1da9cb6daf81dbed6cfcfaedfb87b31827c3317f1e3fb6fdd734949dba994bb7fce9355ce121352bc97531ef3674fa1052070c70ddfeae95948ae4ffc6776df89557b0476d0c8f76c8e6f4561b76db266025f5b55a23a5826dbc061eb18e99d4db938accdc5975aba567b9dd94e29c47b558119790dc27c299c8869b01efcac21ab3e884dc3d518e691aefd2c6bbabdcd3d24410ab6a7604bd7ef47937e0f51fa367adba74600e7349d606d8d51ed7f6d60496bf75a0904d5d0fd86fae5ef47c900540232b688c407665483a807048b380b6c2d4194885a6f107621eb894f6844c0ef407812df189f2dfe79debd1e51579f4784899e4a5a6baff6300812221e8aefac9cb499bf2f59777f34b24167f7e719efa7267bd356c3bf453379a464a6363ff300bccdc9059dad73d6ae8cce0468aa6d6527fc415fd449516c8e68fddc237733fdee9b9f56c52a7b7d7e921d68e96c3c10e092346ff20a595f70408260005da387a242ef7092ccc4a077a28030a08c63187abcae22bbdac53d299df6c20d183a077ff1048818ac9dbd994fc6a2dedbd0c58c0ed4bdf4552aa82fc6cd506533ccb8dfc50bedd091e97c3fa0e608a3e5b6a57b53f059206e3ae2c80ac289754ed54a3de4fad9fbc5d49b768cc12f827f287dec5b3d738d300f3f97cd42cf657d68a6bfd8d2fe6073424be40ef0eb865127d43452d4f3da07e0e2233781880591c65233d1b949a213f2fdcac63c12e389b9616e97e6386fd5e46adf99b2a6c5a6bca43537f6185267bded2157953c23d0819fb0cb44f3db4bfb67b70c62ca7c39af3bd453707a14a370a641832b307319f4f71a9272b97f5e93f53bceadce4386221608fe500a3fc2b83918eb7104dd3474946b9db2cde3dc159f490b5d00fe34e2312b8e0e6bb90ef8b9a4793efbe27edf48e669da5dd0c6fb9a240f2f4ff75ae046965506404c639b8b5f9c783452c48e225b191d32c891f3d594293d34c1db92836a13aeaaaf9c0b1430f2cf3ddff6674f5800602476832e84ba7338e3dac1087541c17424053c2e3baa528b0f0c8abf725c66391dd550bad6caf460eb21002dce1b353908903b746e3411b7eee84efcbead3dd58e1aa099ede3ba0e0612388beb17f7", @typed={0x8, 0x134, 0x0, 0x0, @fd=r0}]}]}]}, 0x2634}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x140e, 0x2, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x8002}, 0xc090) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000200)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r3}) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) 2m10.50885531s ago: executing program 7 (id=5387): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1d) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x22020600) (async) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x6}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) personality(0x5400004) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r3, 0x7dfff000) 2m9.955834568s ago: executing program 7 (id=5391): userfaultfd(0x80001) (async) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00008d5000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) (async) mremap(&(0x7f00008d5000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000)={[0x390]}, 0x0, &(0x7f0000000080)={r2, r3+10000000}, 0x8) 2m9.49292029s ago: executing program 7 (id=5393): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private=0xa010102, 0x4e23, 0x7, 0x4e21, 0x10, 0xa, 0x80, 0x20, 0x2b}, {0x4, 0x2, 0x9, 0x3, 0x6, 0x5c8, 0x9, 0x80000001}, {0x1, 0x2, 0x3, 0x5}, 0x5, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@broadcast, 0x4d5, 0x33}, 0xa, @in6=@mcast2, 0x0, 0x2, 0x2, 0x5, 0x7ae8, 0xe46, 0xfffff800}}, 0xe8) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x231, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x2da}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0xfc, 0xb}}}}}]}}]}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r4, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}], 0x1}}], 0x1, 0x4048841) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES8=r2, @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0xa0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) 2m6.028598847s ago: executing program 7 (id=5399): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x247) chdir(&(0x7f00000000c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c82010000c0001000501"], 0x15) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000240)=@md0, r2, &(0x7f0000000400)) getdents64(r1, &(0x7f0000000080)=""/29, 0x1d) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r3 = gettid() ptrace$poke(0x1, r3, &(0x7f0000000040), 0x4) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x12, r4, 0x8ee4a000) memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 2m5.638760033s ago: executing program 7 (id=5400): madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x12) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x1, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4008810}, 0x240000d0) (async) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000040)={0x1, 0x102, 0x0, {0x1, 0x3, 0x7fff, 0x4}}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48041}, 0x40840) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd4, r8, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x48d}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1f}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfb}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x66}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x44000000) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800"], 0xfc}, 0x1, 0x0, 0x0, 0x8004}, 0x884) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mount(&(0x7f0000000100)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) (async) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendto(r0, &(0x7f00000004c0)="603205218da261127a7f539385310daeca6081391eb57bf4353c7917c3", 0x1d, 0x20000020, &(0x7f0000000500)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80) (async) ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f0000000400)={'ipvlan0\x00', 0x86b1}) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000000780)=0x3ff, 0x4) 1m55.960696217s ago: executing program 41 (id=5383): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101440) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) read$alg(r1, &(0x7f0000000040)=""/4096, 0x1000) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000001040), &(0x7f0000001080)=0x4) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000001100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001140)={'vxcan0\x00', 0x0}) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x78, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) readahead(r1, 0x8, 0x8080000000000000) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000001280)={'\x00', 0x3, 0x5be4, 0xdca3, 0x10, 0x1ff, 0xffffffffffffffff}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000001300)={'\x00', 0xd, 0x3, 0x7, 0x80000001, 0x98, r4}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000001380), 0x4) r6 = syz_open_dev$I2C(&(0x7f00000013c0), 0x7, 0x600600) ioctl$I2C_FUNCS(r6, 0x705, &(0x7f0000001400)=0x5) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000001440)={0xa4, 0x400, 0x1, 0x5ff, 0x3, 0x0, [{0x3, 0x330e, 0x1b, '\x00', 0x2104}, {0x9, 0x6, 0x9c13, '\x00', 0x1003}, {0xb45e, 0x6, 0x81, '\x00', 0x2208}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x484200, 0x0) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000001580)) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r8, 0x4068aea3, &(0x7f00000015c0)) r9 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001740)={0x0, &(0x7f0000001640)=[@code={0xa, 0x6e, {"420f300f758f03000000c4617c5bbd53dc0000b9630001c0b8d4d00000ba000000000f3066b897008ec866b85d000f00d8430f01cac744240055000000c744240207740000ff1c2466baf80cb87b100d86ef66bafc0cec660f38825b98"}}, @cpuid={0x14, 0x18, {0x3, 0xefd4}}, @wr_crn={0x46, 0x20, {0x3, 0x100000001}}, @uexit={0x0, 0x18, 0x92da}, @wrmsr={0x1e, 0x20, {0xbf4, 0x3}}], 0xde}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r9, 0x4068aea3, &(0x7f0000001780)) r10 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r10, 0x40189429, &(0x7f0000001800)={0x0, 0x7, 0x1}) r11 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000001840)={{{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@empty}}, &(0x7f0000001940)=0xe8) quotactl_fd$Q_GETQUOTA(r6, 0xffffffff00000e03, r12, &(0x7f0000001980)) utimensat(r11, &(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)={{0x77359400}, {0x77359400}}, 0x100) ioctl$BLKROSET(r11, 0x125d, &(0x7f0000001a80)=0x9) 1m49.196212116s ago: executing program 42 (id=5400): madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x12) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x1, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4008810}, 0x240000d0) (async) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000040)={0x1, 0x102, 0x0, {0x1, 0x3, 0x7fff, 0x4}}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48041}, 0x40840) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd4, r8, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x48d}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1f}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfb}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x66}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x44000000) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800"], 0xfc}, 0x1, 0x0, 0x0, 0x8004}, 0x884) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mount(&(0x7f0000000100)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) (async) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendto(r0, &(0x7f00000004c0)="603205218da261127a7f539385310daeca6081391eb57bf4353c7917c3", 0x1d, 0x20000020, &(0x7f0000000500)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80) (async) ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f0000000400)={'ipvlan0\x00', 0x86b1}) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000000780)=0x3ff, 0x4) 49.421048832s ago: executing program 5 (id=5546): r0 = socket$caif_stream(0x25, 0x1, 0x3) listen(r0, 0x80000001) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) 49.060632152s ago: executing program 5 (id=5548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000000000008900000008000300", @ANYRES32=r3, @ANYBLOB="04001d80"], 0x20}}, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f0000000000)) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r4, 0x93771000) socket$nl_xfrm(0x10, 0x3, 0x6) 47.832768221s ago: executing program 5 (id=5553): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) (async) set_mempolicy(0x4003, &(0x7f0000000200)=0x8000000007, 0x5fff) (async) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1c580, 0x0) dup(r1) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000100)=@v={0x93, 0x0, 0x90, 0x0, @generic}) (async) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bind$bt_rfcomm(r2, &(0x7f0000000200)={0x1f, @any, 0x9}, 0xa) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x7fffffff, 0x7fff, 0xfffffff8, 0xf}, {0x1, 0x2, 0x2, 0x37a, 0x2007}]}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x22052, r0, 0x93774000) 46.465791594s ago: executing program 5 (id=5559): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) syz_usb_connect(0x2, 0x4f, &(0x7f0000000080)={{0x12, 0x1, 0x351, 0x29, 0xfb, 0xf0, 0x40, 0x738, 0x4540, 0xc6ce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x2, 0x2, 0x6, 0x10, 0x78, [{{0x9, 0x4, 0xd4, 0x9, 0x1, 0x78, 0x6d, 0x3d, 0x40, [], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x9, 0x4, 0x2}}]}}, {{0x9, 0x4, 0xe2, 0x0, 0x2, 0xb2, 0x26, 0x18, 0xbb, [], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x7c, 0x9e, 0x9, [@generic={0x7, 0x5, "85e371932d"}]}}, {{0x9, 0x5, 0x7, 0xb, 0x0, 0x9, 0x73, 0x3}}]}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$cdc_ncm(0x1, 0x89, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x2, 0x1, 0x4, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "98379814"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0x5, 0x8}, {0x6, 0x24, 0x1a, 0x80, 0x5}, [@acm={0x4, 0x24, 0x2, 0x3}, @dmm={0x7, 0x24, 0x14, 0xdbaa, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x8001, 0x9, 0x0, 0x3, 0x89, 0xfd}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x81, 0x10, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x3, 0x10, 0x21}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x81, 0x5, 0x3}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x2, 0xaa, 0x2, 0x8, 0xff}, 0xca, &(0x7f0000000280)={0x5, 0xf, 0xca, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0xc, 0x9, 0xff, 0x5, 0x5}, @generic={0xa2, 0x10, 0xb, "fb5e6693757a48dce84bf632c09c19ea6b6bc3fc0115226436ef7469f4024de84c18b6dae8506ddacdf189531aba37137ab4188fd9d9a3e8db6fff8dff53d905e0f01aca019c46bfff724b01c94eb69cca16140e4e5fda7ec564f093eb1d54119f69a1f7065170b16d79a22ca278daa5135a460187b0cecb3fda136acb20c3f693a5ce092c914f4c8858929abb663e0e9ae6a1cdc084ecba194ee6c37c08ff"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xe, 0xf, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1, 0x7, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x3, 0x8, 0x72ca}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x446}}]}) syz_usb_disconnect(r1) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) preadv(r0, &(0x7f0000000100), 0x0, 0xffeffff8, 0x1007) 42.952828309s ago: executing program 5 (id=5567): accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) (async) r0 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000000c0)={0x1, 0x2000006, 0x52, &(0x7f0000000100)=""/82}) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) fadvise64(r1, 0x94, 0x6e, 0x5) (async) fadvise64(r1, 0x94, 0x6e, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x17ed4000) 41.891983057s ago: executing program 5 (id=5575): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) fsetxattr$security_ima(r0, &(0x7f0000003240), &(0x7f0000003280)=@v2={0x6, 0x3, 0x12, 0xfffffbff, 0x2, "4efb"}, 0xb, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, 0xffffffffffffffff, 0x8e62b000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'pcl730\x00', [0x4f27, 0x5, 0xffffffff, 0xbcc8, 0x101, 0x8, 0xf, 0x7, 0xa, 0x0, 0xefb, 0x1, 0x6, 0x1, 0x6, 0x101, 0x80000000, 0x1a449, 0x84, 0x40000007, 0xef2, 0xd, 0x2, 0x20001e58, 0x5, 0xe6c, 0xf03, 0x8, 0x200006, 0x0, 0x2]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000002b00), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000040)={0x20, r4, 0x401, 0x70b529, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x6, 0x6, 0xd51df4994cc05469, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x24000000) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000001240)={0xfe, "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"}) 25.519911202s ago: executing program 43 (id=5575): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) fsetxattr$security_ima(r0, &(0x7f0000003240), &(0x7f0000003280)=@v2={0x6, 0x3, 0x12, 0xfffffbff, 0x2, "4efb"}, 0xb, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, 0xffffffffffffffff, 0x8e62b000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'pcl730\x00', [0x4f27, 0x5, 0xffffffff, 0xbcc8, 0x101, 0x8, 0xf, 0x7, 0xa, 0x0, 0xefb, 0x1, 0x6, 0x1, 0x6, 0x101, 0x80000000, 0x1a449, 0x84, 0x40000007, 0xef2, 0xd, 0x2, 0x20001e58, 0x5, 0xe6c, 0xf03, 0x8, 0x200006, 0x0, 0x2]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000002b00), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000040)={0x20, r4, 0x401, 0x70b529, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x6, 0x6, 0xd51df4994cc05469, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x24000000) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000001240)={0xfe, "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"}) 5.55659842s ago: executing program 0 (id=5662): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000fc0)=ANY=[@ANYBLOB="d40f00003300000126bd7000fddbdf258c0ffb80870f"], 0xfd4}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) (async) ioctl(r2, 0x8b21, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async, rerun: 64) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async, rerun: 64) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x800448d4, &(0x7f00000002c0)={0x0, 0x2, '\x00', 0x0, 0x59}) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xb0, 0xf5, 0xb, 0x40, 0x1199, 0x68aa, 0x31f3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa0, 0x1, 0x80, 0xf, [{{0x9, 0x4, 0x13, 0x4, 0x0, 0xff, 0xff, 0xff}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r7, 0x5) (async) r8 = socket$netlink(0x10, 0x3, 0x5) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000200590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000180)=0xc) (rerun: 32) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000001c0)=r9) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (rerun: 32) 3.796394487s ago: executing program 0 (id=5668): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000200)={0x0, 0x33424752, 0x0, @stepwise}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000240), 0x1, 0x2) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000280), &(0x7f00000002c0)={'L+', 0x4}, 0x16, 0x1) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) socket$alg(0x26, 0x5, 0x700) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r3, 0x8e62b000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r6, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd4, 0x4e}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x72}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7}, @NL80211_ATTR_BSS_CTS_PROT={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xc3}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3b}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x40400c4) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000001240)={0xfe, "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"}) syz_open_dev$vim2m(&(0x7f00000001c0), 0x3ff, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000200)={0x0, 0x33424752, 0x0, @stepwise}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) (async) syz_open_dev$vbi(&(0x7f0000000240), 0x1, 0x2) (async) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000280), &(0x7f00000002c0)={'L+', 0x4}, 0x16, 0x1) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) socket$alg(0x26, 0x5, 0x700) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r3, 0x8e62b000) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r6, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd4, 0x4e}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x72}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7}, @NL80211_ATTR_BSS_CTS_PROT={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xc3}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3b}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x40400c4) (async) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000001240)={0xfe, "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"}) (async) 3.795783391s ago: executing program 2 (id=5669): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) ioprio_set$pid(0x1, r0, 0x4000) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) (async, rerun: 64) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011"], 0x1c}], 0x1, 0x0, 0x0, 0x4000045}, 0x300) (async, rerun: 32) r4 = socket$inet(0x2b, 0x801, 0x0) (rerun: 32) splice(r4, 0x0, r2, 0x0, 0x39000, 0x9) (async) sendfile(r1, r2, 0x0, 0x5) 3.692093069s ago: executing program 4 (id=5670): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x22052, r0, 0xa4717000) 3.630577894s ago: executing program 1 (id=5671): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) 3.432664681s ago: executing program 4 (id=5672): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000500)={0x2c, &(0x7f0000000080)={0x40, 0x4, 0x5, {0x5, 0xb, "d90f79"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x20, 0xc, 0xc, {0xc, 0x7, "3ca8106242df6f3e8fc6"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x0, 0x14, 0xcf, "1a9ea63ad868e98020f5844cb9ad5e577d268bd19b550f7f4df7df781b349d0202afa3b1f6165b7540263a958848ab62295dff84293d90df595ae883913866326171bf757199410aea8074e9ecd0bea87700b2202368b9dec22324ce1ab8fceae2b25cc81593cdb3053477ad35fe272c3b566a6157041d081ed8d338f3d9e467886c9a111edf1c1f915bea31b3a1b9f44946f4002f7ad2f216399fd2a6a2931f85003a54f2c0b0999b87586cfe5b37718cd0e3803b60be39999060621ddae8ce614fbbbdcc0b4f092d0970cd14f9c4"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xd6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x400, 0x7, 0x5, 0x101, 0xbe, 0x5, 0xf680, 0x6, 0x9, 0xf000, 0x9, 0xf800}}, &(0x7f0000000400)={0x20, 0x85, 0x4, 0xffff}, &(0x7f0000000440)={0x20, 0x83, 0x2}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0x995c}, &(0x7f00000004c0)={0x20, 0x89, 0x2}}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x200006, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000100)) epoll_create1(0x0) 3.253258213s ago: executing program 1 (id=5673): r0 = socket$unix(0x1, 0x5, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x1) ioctl$USBDEVFS_CONTROL(r3, 0x80045510, &(0x7f0000000000)={0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103001) ioctl$SG_IO(r4, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffb, 0xa6, 0x5, @buffer={0x0, 0xfffffffffffffdc3, 0x0}, &(0x7f00000003c0)="9418e7b73e84a77c955430af53963c8373258d1dc3813b4aec05ae99b9edfc5076b674e46aa74a6ebff99651bc24647f0e15d3ec373b213aa85bd9f6d5fb7eff4fb3b7bc43f12d8c9eb41520198b123147445023d137e18e19dec9bde05f9913c5cf99c3828ae99e54a5631e4c5e9590d4efe357a2646cfd56cb56f8cf375e24d58fb83467247cc385210b43437dadc3bec8d71ba86c7c0536dad58a69a0ab31de1aa9a86860", 0x0, 0x3, 0x10000, 0x1f, 0x0}) mkdir(&(0x7f0000000140)='./control\x00', 0x191) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000000)='./control\x00', 0x40000000) r6 = inotify_init1(0x800) inotify_add_watch(r6, &(0x7f0000000080)='./control\x00', 0x20) splice(r1, 0x0, r2, &(0x7f00000002c0), 0x6, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c", 0x7}], 0x1}, 0xff00) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0702230c"], 0xa) r7 = openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r9, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) tkill(r8, 0xf) wait4(r8, 0x0, 0x2, 0x0) tkill(r8, 0x3) r10 = syz_open_dev$vim2m(&(0x7f0000000540), 0x6214, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000000)={0x50, 0x2, 0x0, "e4c696ec0684248256350606000000ca38c8fd83c0915c00"}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) setsockopt$sock_int(r0, 0x1, 0x54, &(0x7f0000000040)=0x80, 0x4) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r11, 0x29, 0x39, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x2}, 0x8) 3.169273179s ago: executing program 0 (id=5674): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x22020600) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x100000, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x5}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x8, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x0, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0x9}, {0x10, 0x19, 0x40, '\x00', 0xcf}, {0x64, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x5, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) personality(0x5400004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000001180)=0x5, 0x4) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r3, 0x7dfff000) 2.620814992s ago: executing program 0 (id=5675): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x181003) (async) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x181003) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000000)={0x1, 0x0, 0x1, 0x61d}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r4, 0x3b87, &(0x7f0000000080)={0x18, 0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 2.527291154s ago: executing program 1 (id=5676): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xac) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000078000000060a010400000000000000000500400008000b4000000000500004804c0001800b00010074756e6e656c00003c00028008000340000000000800014000000000080001400000000108000340000000f50800014000000000080001400000000008000140000000000900010073797a3000000000140000001100010000000000000000000000000a000000"], 0xec}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 2.465069318s ago: executing program 2 (id=5677): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000bf1000/0x4000)=nil, 0x4000}}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvfrom(r1, 0x0, 0x0, 0x2, 0x0, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (rerun: 32) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022d00010000000009040000035883b200090589"], 0x0) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) (async) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async, rerun: 64) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) (rerun: 64) listen(r6, 0x70ba380e) (async) setreuid(0x0, r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x4000010, r2, 0xeaf2a000) 2.048901013s ago: executing program 1 (id=5678): keyctl$describe(0x6, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext2\x00', 0x2a20809, 0x0) 2.047319188s ago: executing program 2 (id=5679): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x20, 0x70bd2b, 0x40000002, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xffff36f9}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x200000d1}, 0x2000c000) (async) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x20, 0x70bd2b, 0x40000002, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xffff36f9}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x200000d1}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="bfff000047fd1f240240585a33d59d24668d30ef8a34b19c0252100d6dd79459ebea0bd86ea1e723ddc937c23c4c759347f427351460a680bd856f497d8577dea6d81af5f910f99f8a0cbe973f95ecf55aba5b1dbc7f070144c6b32fa33cbd0b382a81a5ed326b0702e6615b3a2ae1edcd6fa9f51db9c5854b1ef891bef0eddcbd75f5d705b6d8952f86fb719c001bd9ea544384e88576b06dcfcd2604a25e8e9d47c6a177e0b605ce701988a50b62d3e5c137827ca780a5daf21ac3ac319ef579001c3dba43c3f6", @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB], 0x28}, 0x1, 0x6c00}, 0x0) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) (async) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) 1.666962954s ago: executing program 1 (id=5680): openat$kvm(0xffffffffffffff9c, 0x0, 0x406800, 0x0) r0 = gettid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x2]}]}, 0x6c}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000)=0x59cc, 0x4) unshare(0x26000400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') recvmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x40, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000377000/0x1000)=nil, 0x1000, 0x3000003, 0x4000010, r4, 0xa4717000) 1.666602998s ago: executing program 2 (id=5681): gettid() r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) fadvise64(r0, 0x94, 0x6e, 0x5) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') pread64(r1, &(0x7f0000001600)=""/4103, 0x1007, 0x97) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040c1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 1.465220006s ago: executing program 0 (id=5682): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x22052, r0, 0x373a0000) 1.244762004s ago: executing program 4 (id=5683): r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001340)={{0x9, 0x0, 0x0, 0x0, 'syz0\x00', 0x2}, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 'syz1\x00', 0x0}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000005340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000540)=""/6, 0x6}, {&(0x7f0000000580)=""/31, 0x1f}, {&(0x7f0000000740)=""/158, 0x9e}, {&(0x7f00000005c0)=""/43, 0x2b}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000800)=""/93, 0x5d}], 0x6}, 0x7}], 0x1, 0x40010020, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000000000070000040"]) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x20, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x19\xed'}]}]}, 0x20}}, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000001380)={0x6}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) 627.789927ms ago: executing program 2 (id=5684): r0 = syz_open_dev$vivid(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000100)={0x0, @sliced={0x6, [0x2515, 0x4, 0x101, 0x100, 0x200, 0x3, 0x6, 0x3, 0x2, 0x1, 0x4, 0x8, 0x4, 0x8, 0x7, 0x1, 0x8, 0xc, 0xfdd8, 0x0, 0x7, 0x7, 0x0, 0x5, 0xa43b, 0x9, 0x9, 0x7, 0x4, 0x8, 0x5, 0x800, 0xffff, 0x2, 0x3, 0x9, 0x2, 0x2, 0x9, 0x0, 0x8, 0xfff, 0x1000, 0xfff7, 0x5, 0x6, 0x1, 0x7ff], 0x6}}) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000000)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) 564.686963ms ago: executing program 4 (id=5685): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0xfff, 0x8, 0xffffffff80000001}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={r2, 0x78, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x3, @remote, 0x7f}, @in6={0xa, 0x4e23, 0x800, @dev={0xfe, 0x80, '\x00', 0x3f}, 0xe}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e23, @private=0xa010100}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000200)={0x4, 0x80000000, 0x7ff, {0x3, 0x67}, 0xb, 0x6}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000200)={0x4, 0x80000000, 0x7ff, {0x3, 0x67}, 0xb, 0x6}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000280)={r3, 0x1}, &(0x7f00000002c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000280)={r3, 0x1}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r4, @in6={{0xa, 0x4e22, 0x9b7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfb2d}}, 0x3, 0x9, 0x3, 0x2, 0x9b, 0x335, 0x2}, &(0x7f00000003c0)=0x9c) ioctl$KVM_RESET_DIRTY_RINGS(r0, 0xaec7) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000400)={r1}) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000400)={r1}) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) (async) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) recvmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000440)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/201, 0xc9}, {&(0x7f00000005c0)=""/91, 0x5b}], 0x2, &(0x7f0000000680)=""/109, 0x6d}, 0x2140) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x40000, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000780)={r3, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000007c0)={r5, 0x4}, 0x8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0xa, 0x4, 0x6, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000940)={0x0, r7, 0xd, 0x800, 0x2, 0xffffff37, 0xe, 0x8, 0x101}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/asound/seq/clients\x00', 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000a00)={0x0, 0x0}) sendmsg$nl_generic(r8, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10c, 0x16, 0x400, 0x70bd29, 0x25dfdbfc, {0x13}, [@typed={0x8, 0x3d, 0x0, 0x0, @pid=r9}, @typed={0xb6, 0x117, 0x0, 0x0, @binary="14c64dcb81991ebfa639aba6e533b17048b3d95ae1f56238260f2336422faa0f17519a1697bc08b1fe1170fb9c47e1553d6ebeb905e4f35f460c49f2e2b1e019d31b486027deb645bb18affe99093024c22061efc9ab7727a7cbddb5f9dd7059489cac34b3d4989643dd56e87af6a6836450c0d976cf3537732ceec993023ce8112fbd83e6388b1971825616c35f1d707c783aeaf73e9a253e65718926bef8071df581600006d5530a4887ffd9ac52a0a5f8"}, @typed={0x4, 0xf5}, @generic="2af15ef5a0f06f505d9dda0f9a31e974b66105de8807acb4af93b1711ced58edae74be49a1696fb83265d2a5c152c81502f9"]}, 0x10c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004040) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000c00)={r4, 0x221}, &(0x7f0000000c40)=0x8) setsockopt$MRT6_TABLE(r6, 0x29, 0xcf, &(0x7f0000000c80)=0xfe, 0x4) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) (async) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x81, 0x6f}}}}, [@NL80211_ATTR_USE_RRM={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc050}, 0x8040) (async) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x81, 0x6f}}}}, [@NL80211_ATTR_USE_RRM={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc050}, 0x8040) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000e00)={r5, @in={{0x2, 0x4e21, @private=0xa010102}}, 0x3, 0x1ff}, &(0x7f0000000ec0)=0x90) preadv(r0, &(0x7f0000001100)=[{&(0x7f0000000f00)=""/26, 0x1a}, {&(0x7f0000000f40)=""/216, 0xd8}, {&(0x7f0000001040)=""/80, 0x50}, {&(0x7f00000010c0)=""/46, 0x2e}], 0x4, 0x81, 0x9a2) (async) preadv(r0, &(0x7f0000001100)=[{&(0x7f0000000f00)=""/26, 0x1a}, {&(0x7f0000000f40)=""/216, 0xd8}, {&(0x7f0000001040)=""/80, 0x50}, {&(0x7f00000010c0)=""/46, 0x2e}], 0x4, 0x81, 0x9a2) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000001140)={r11, 0x16, "8dad73179ae4aeaa2d0c74fd136843631f2d2ede1bd4"}, &(0x7f0000001180)=0x1e) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000011c0)=@assoc_id=r12, 0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000001200), 0x101000, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000001200), 0x101000, 0x0) 404.85364ms ago: executing program 1 (id=5686): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000319021508fd070100e56a0102030109022400010c0a40060904000702a35fc30309050803200006020409050302"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 331.281106ms ago: executing program 2 (id=5687): creat(&(0x7f0000001380)='./file0\x00', 0x12c) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x40000000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) 290.978298ms ago: executing program 4 (id=5688): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x2ac, 0x1, 0x2}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af83, &(0x7f0000000040)=0x1c) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x10000, 0x4, {0x1, @win={{}, 0x0, 0x9, 0x0, 0x0, 0x0}}}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x93771000) 374.807µs ago: executing program 0 (id=5689): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) (async) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000140)) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x7, 0x3, 0x1c, 0x5, 0x3, 0x7, 0x2, 0xf9, 0x3, 0x2, 0x10, 0x8}, {0x0, 0x80, 0x45, 0xc4, 0x4, 0x7, 0x6, 0x3, 0x7, 0x1, 0x0, 0x7d, 0x2}, {0x9, 0x1b, 0x1, 0x19, 0x2, 0xd, 0x8, 0x8, 0xff, 0x6, 0x56, 0x3, 0x100}]}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x1, 0x40, 0x0, 0xffffffffffffffff, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x1, 0x7fffffff, 0x100000000004, 0x0, 0x0, 0x0, 0x7fffffff], 0x80a0000}) (async) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) io_setup(0x7, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x3, 0x8e, 0xfff8}, 0x1d, [0x7ffe, 0xc95a, 0xfffff001, 0x5, 0x80, 0x4000022, 0x2, 0x7f, 0x6, 0x3f, 0x39cc191a, 0x5f, 0x9, 0x5, 0x7, 0xffffff01, 0xa6, 0x3, 0x1, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x200007, 0xe660, 0x4, 0x7, 0x104, 0x7fff, 0xfee1, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3c, 0x8f, 0x6, 0x10000008, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x105, 0x4, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x8, 0x9, 0x6, 0x3, 0x1, 0x4, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x40000004, 0x1, 0x8000, 0x400c, 0x400, 0x5, 0x800, 0x5, 0xfb, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x7, 0xe24, 0x4, 0x9, 0x0, 0x800, 0x6, 0xb, 0x8000, 0x0, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x408, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x2, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x800f38, 0x5, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x101, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa1, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x444, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x1, 0xb, 0x5, 0xd38, 0x6, 0x6, 0x0, 0x7, 0xce7, 0x1f7, 0x2, 0x80f58, 0x5, 0x80000001, 0x101, 0x10000, 0x3ff, 0x7ffe, 0x8, 0x200a620, 0x4, 0x5, 0x1, 0x2, 0x800014c, 0x60a3, 0xe, 0x6, 0x1, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x2, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x10001, 0x8, 0x7ff, 0x2, 0x3, 0x4, 0x4, 0x100005, 0xdd81, 0x1, 0x40200, 0xffbf243e, 0xfff]}, 0x45c) (async) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000180), &(0x7f0000000240)=0x4) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000", 0xffffffffffffffff}) (async, rerun: 32) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 32) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca3710c0000cdc67c5e3126628168", r7}) (async) ioctl$SW_SYNC_IOC_INC(r8, 0x40045701, &(0x7f0000000280)=0x1) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0)=r5, 0x12) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) setresgid(0xee00, 0xee01, 0x0) syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=5690): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xd83ba000) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x02\x00', 0x1) renameat2(r1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) syz_usb_connect(0x5, 0x4f, &(0x7f0000000080)=ANY=[], 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001ac0)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) kernel console output (not intermixed with test programs): mitek 0003:1EA7:0907.0034: hidraw0: USB HID v0.00 Device [HID 1ea7:0907] on usb-dummy_hcd.3-1/input0 [ 1252.727153][T25361] /dev/rnullb0: Can't open blockdev [ 1252.769558][ T5939] usb 4-1: USB disconnect, device number 46 [ 1252.936022][T25393] fido_id[25393]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1253.469664][T25416] netlink: 'syz.3.5231': attribute type 1 has an invalid length. [ 1253.493977][T25416] netlink: 216 bytes leftover after parsing attributes in process `syz.3.5231'. [ 1253.590530][T25416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1253.624419][T25416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.687120][T25416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1253.718211][T25416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.764042][T25424] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1253.802569][ T5939] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1254.612846][T25440] delete_channel: no stack [ 1254.955741][ T5939] usb 4-1: device descriptor read/64, error -71 [ 1255.172021][T25460] /dev/rnullb0: Can't open blockdev [ 1255.224465][ T5939] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1255.396603][ T5939] usb 4-1: Using ep0 maxpacket: 8 [ 1255.414754][ T5939] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1255.435888][ T5939] usb 4-1: config 11 has an invalid interface number: 244 but max is 0 [ 1255.461476][ T5939] usb 4-1: config 11 has no interface number 0 [ 1255.470048][ T5939] usb 4-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1255.480075][ T5939] usb 4-1: config 11 interface 244 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1255.512242][ T5939] usb 4-1: config 11 interface 244 has no altsetting 0 [ 1255.531172][ T5939] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 1255.544303][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.557658][ T5939] usb 4-1: Product: syz [ 1255.571328][ T5939] usb 4-1: Manufacturer: syz [ 1255.581353][ T5939] usb 4-1: SerialNumber: syz [ 1255.598417][T20197] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 1255.785034][T20197] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1255.793517][T20197] usb 7-1: config 0 has no interface number 0 [ 1255.799775][T20197] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1255.816492][T20197] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1255.825989][T20197] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.838141][T25444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.860650][T25444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1255.888433][T20197] usb 7-1: config 0 descriptor?? [ 1255.944474][T20197] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1256.050049][T25484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.060540][T25484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.263368][ T5939] peak_usb 4-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 1256.290275][ T5939] peak_usb 4-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 1256.370488][ T6916] usb 7-1: USB disconnect, device number 28 [ 1256.370921][ T5939] peak_usb 4-1:11.244: probe with driver peak_usb failed with error -71 [ 1256.419242][ T5939] usb 4-1: USB disconnect, device number 48 [ 1257.308550][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5080 ms [ 1257.316689][ C0] lec:lec_tx_timeout: lec0 [ 1257.910249][T25522] /dev/rnullb0: Can't open blockdev [ 1258.287954][T25533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5251'. [ 1258.314538][T25536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5251'. [ 1258.340787][T25533] ubi: mtd0 is already attached to ubi31 [ 1258.398111][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880579c2c00: rx timeout, send abort [ 1258.458176][T25540] /dev/rnullb0: Can't open blockdev [ 1258.581307][T24313] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1258.731333][T24313] usb 7-1: device descriptor read/64, error -71 [ 1258.813395][T25552] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5257'. [ 1258.829596][T25552] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5257'. [ 1258.842496][T25552] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5257'. [ 1258.854971][ T6916] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1258.934487][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880579c2800: rx timeout, send abort [ 1258.943077][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880579c2c00: abort rx timeout. Force session deactivation [ 1259.022454][ T6916] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1259.027300][T24313] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1259.043646][ T6916] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1259.088423][ T6916] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1259.114003][ T6916] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1259.142150][ T6916] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1259.158375][ T6916] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1259.177548][ T6916] usb 4-1: Product: syz [ 1259.187358][ T6916] usb 4-1: Manufacturer: syz [ 1259.213299][ T6916] cdc_wdm 4-1:1.0: skipping garbage [ 1259.222396][T24313] usb 7-1: device descriptor read/64, error -71 [ 1259.228522][ T6916] cdc_wdm 4-1:1.0: skipping garbage [ 1259.237768][ T6916] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1259.257523][ T6916] cdc_wdm 4-1:1.0: Unknown control protocol [ 1259.352450][T24313] usb usb7-port1: attempt power cycle [ 1259.435744][ T6916] usb 4-1: USB disconnect, device number 49 [ 1259.477277][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880579c2800: abort rx timeout. Force session deactivation [ 1259.751094][T24313] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1259.794010][T24313] usb 7-1: device descriptor read/8, error -71 [ 1259.986518][ T6916] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1260.037121][T25565] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1260.069275][T24313] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1260.127416][T24313] usb 7-1: device descriptor read/8, error -71 [ 1260.150960][T25578] /dev/rnullb0: Can't open blockdev [ 1260.187696][ T6916] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1260.203531][ T6916] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.237310][ T6916] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1260.249224][T24313] usb usb7-port1: unable to enumerate USB device [ 1260.267456][ T6916] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1260.329408][ T6916] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1260.353093][ T6916] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1260.368472][ T6916] usb 4-1: Product: syz [ 1260.372765][ T6916] usb 4-1: Manufacturer: syz [ 1260.399080][ T6916] cdc_wdm 4-1:1.0: skipping garbage [ 1260.405092][ T6916] cdc_wdm 4-1:1.0: skipping garbage [ 1260.435807][ T6916] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1260.478228][ T6916] cdc_wdm 4-1:1.0: Unknown control protocol [ 1260.908565][T25602] netlink: 196 bytes leftover after parsing attributes in process `syz.9.5266'. [ 1261.147723][T25619] /dev/rnullb0: Can't open blockdev [ 1261.266831][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1261.268530][ T6916] usb 4-1: USB disconnect, device number 50 [ 1261.273809][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1261.285542][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1261.859105][T25637] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1261.935836][T25640] /dev/rnullb0: Can't open blockdev [ 1262.116890][T25647] /dev/rnullb0: Can't open blockdev [ 1262.266918][T25655] netlink: 'syz.9.5277': attribute type 4 has an invalid length. [ 1262.274990][T25655] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5277'. [ 1262.430660][ T5939] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1262.606569][ T5939] usb 7-1: device descriptor read/64, error -71 [ 1262.640056][T25664] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1262.879406][ T5939] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1262.952405][T25671] syzkaller1: entered promiscuous mode [ 1262.962812][T25671] syzkaller1: entered allmulticast mode [ 1263.051349][ T5939] usb 7-1: device descriptor read/64, error -71 [ 1263.178529][ T5939] usb usb7-port1: attempt power cycle [ 1263.563302][ T5939] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1263.584901][ T5939] usb 7-1: device descriptor read/8, error -71 [ 1263.792569][ T6916] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 1263.851583][ T5939] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1263.895137][ T5939] usb 7-1: device descriptor read/8, error -71 [ 1263.993705][ T6916] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1264.015301][ T6916] usb 4-1: config 0 has no interface number 0 [ 1264.021675][ T6916] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1264.024990][ T5939] usb usb7-port1: unable to enumerate USB device [ 1264.058208][ T6916] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1264.076201][ T6916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.111310][ T6916] usb 4-1: config 0 descriptor?? [ 1264.167164][ T6916] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1264.430533][T25696] program syz.9.5285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1264.557161][ T6916] usb 4-1: USB disconnect, device number 51 [ 1265.374436][T20197] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1265.545947][T20197] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 1265.841209][ T5858] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 1265.883245][T20197] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1265.896070][T20197] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1265.915220][T20197] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1265.924428][T20197] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1265.935688][T20197] usb 10-1: Product: syz [ 1265.943701][T20197] usb 10-1: Manufacturer: syz [ 1265.954569][T20197] usb 10-1: SerialNumber: syz [ 1266.018992][ T5858] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1266.039584][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.060487][ T5858] usb 4-1: config 0 descriptor?? [ 1266.238769][T20197] usb 10-1: config 0 descriptor?? [ 1266.281071][T20197] hub 10-1:0.0: bad descriptor, ignoring hub [ 1266.287134][T20197] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1266.304780][T20197] usb 10-1: selecting invalid altsetting 0 [ 1266.512471][ T5858] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1266.533624][ T5858] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 1266.555973][ T5858] asix 4-1:0.0: probe with driver asix failed with error -32 [ 1267.005229][ T6916] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1267.005757][T18960] usb 10-1: USB disconnect, device number 25 [ 1267.085131][T25742] /dev/rnullb0: Can't open blockdev [ 1267.213749][ T6916] usb 7-1: Using ep0 maxpacket: 32 [ 1267.300076][ T6916] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1267.659716][T25748] netlink: 'syz.9.5296': attribute type 13 has an invalid length. [ 1267.677303][T25748] /dev/rnullb0: Can't open blockdev [ 1268.031563][T18960] usb 10-1: new low-speed USB device number 26 using dummy_hcd [ 1268.074253][ T6916] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1268.083450][ T6916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.133225][ T6916] usb 7-1: Product: syz [ 1268.137469][ T6916] usb 7-1: Manufacturer: syz [ 1268.149150][ T6916] usb 7-1: SerialNumber: syz [ 1268.165521][ T6916] usb 7-1: config 0 descriptor?? [ 1268.229122][T18960] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1268.239668][T18960] usb 10-1: config 0 has no interface number 0 [ 1268.248883][T18960] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1268.260322][T18960] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1268.277268][T18960] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.299918][T18960] usb 10-1: config 0 descriptor?? [ 1268.324444][T18960] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1268.746639][T18960] usb 10-1: USB disconnect, device number 26 [ 1268.826956][T18689] usb 4-1: USB disconnect, device number 52 [ 1269.968915][T20197] usb 10-1: new low-speed USB device number 27 using dummy_hcd [ 1269.996256][ T5912] usb 7-1: USB disconnect, device number 37 [ 1270.116857][T25789] /dev/rnullb0: Can't open blockdev [ 1270.154253][T20197] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1270.163642][T20197] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.188912][T20197] usb 10-1: config 0 descriptor?? [ 1270.223148][T18689] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1270.385510][T18689] usb 4-1: config 89 interface 0 has no altsetting 0 [ 1270.411335][T18689] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1270.438532][T18689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.446597][T18689] usb 4-1: Product: syz [ 1270.456622][T18689] usb 4-1: Manufacturer: syz [ 1270.461658][T18689] usb 4-1: SerialNumber: syz [ 1270.653338][T20197] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1270.668728][T20197] asix 10-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 1270.681111][T20197] asix 10-1:0.0: probe with driver asix failed with error -32 [ 1270.922325][T18689] usblp 4-1:89.0: usblp0: USB Unidirectional printer dev 53 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1271.838474][T25800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1271.854866][T25800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.917274][T25817] /dev/rnullb0: Can't open blockdev [ 1272.967290][ C0] usblp0: nonzero write bulk status received: -71 [ 1272.969226][T24312] usb 4-1: USB disconnect, device number 53 [ 1273.022560][T20197] usb 10-1: USB disconnect, device number 27 [ 1273.082920][T25799] usblp0: removed [ 1273.402636][T25839] No control pipe specified [ 1273.504625][T25844] /dev/rnullb0: Can't open blockdev [ 1273.877832][T25846] /dev/rnullb0: Can't open blockdev [ 1274.649030][T20197] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1274.833061][T20197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1274.844074][T20197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1274.854685][T20197] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1274.864223][T20197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.883366][T20197] usb 4-1: config 0 descriptor?? [ 1277.627539][T20197] usbhid 4-1:0.0: can't add hid device: -71 [ 1277.653407][T20197] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1277.683279][T20197] usb 4-1: USB disconnect, device number 54 [ 1278.860684][T25897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1278.895947][T25897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1279.118252][T14954] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1279.301702][T14954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1279.320713][T14954] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1279.354151][T14954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1279.379828][T14954] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1279.395511][T14954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.403561][T14954] usb 4-1: Product: syz [ 1279.428035][T14954] usb 4-1: Manufacturer: syz [ 1279.432697][T14954] usb 4-1: SerialNumber: syz [ 1279.462138][T14954] usb 4-1: config 0 descriptor?? [ 1279.468112][T25896] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1279.491947][T25896] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1279.514489][T14954] usb 4-1: ucan: probing device on interface #0 [ 1279.802392][T14954] usb 4-1: ucan: could not read protocol version, ret=-71 [ 1279.811852][T14954] usb 4-1: ucan: probe failed; try to update the device firmware [ 1279.848063][T14954] usb 4-1: USB disconnect, device number 55 [ 1281.020888][T14954] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 1281.184573][T14954] usb 4-1: device descriptor read/64, error -71 [ 1281.458884][T14954] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 1281.608960][T14954] usb 4-1: device descriptor read/64, error -71 [ 1281.728605][T14954] usb usb4-port1: attempt power cycle [ 1282.128224][T14954] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 1282.178461][T14954] usb 4-1: device descriptor read/8, error -71 [ 1282.485495][T14954] usb 4-1: new low-speed USB device number 59 using dummy_hcd [ 1282.522119][T14954] usb 4-1: device descriptor read/8, error -71 [ 1282.656621][T14954] usb usb4-port1: unable to enumerate USB device [ 1283.851383][T19050] lec:lec_start_xmit: lec0:No lecd attached [ 1284.252799][T26000] /dev/rnullb0: Can't open blockdev [ 1284.374858][ T30] audit: type=1400 audit(6046175797.926:272): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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program syz.3.5334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1286.248475][T14954] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 1286.438080][T14954] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1286.456350][T14954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.484256][T14954] usb 4-1: config 0 descriptor?? [ 1286.963799][T14954] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1286.975854][T14954] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 1286.992357][T14954] asix 4-1:0.0: probe with driver asix failed with error -32 [ 1287.482900][T12823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1287.498813][T12823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1287.516357][T12823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1287.531738][T12823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1287.539782][T12823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1287.991943][T26025] chnl_net:caif_netlink_parms(): no params data found [ 1288.142750][T26025] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.150117][T26025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.158582][T26025] bridge_slave_0: entered allmulticast mode [ 1288.168202][T26025] bridge_slave_0: entered promiscuous mode [ 1288.179796][T26025] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.188070][T26025] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.196071][T26025] bridge_slave_1: entered allmulticast mode [ 1288.204263][T26025] bridge_slave_1: entered promiscuous mode [ 1288.260413][T26025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1288.274802][T26025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1288.330350][T26025] team0: Port device team_slave_0 added [ 1288.340982][T26025] team0: Port device team_slave_1 added [ 1288.401516][T26025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1288.408772][T26025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.436109][T26025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1288.461035][T26025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1288.469392][T26025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.496015][T26025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1288.607144][T26025] hsr_slave_0: entered promiscuous mode [ 1288.620401][T26025] hsr_slave_1: entered promiscuous mode [ 1288.631923][T26025] debugfs: 'hsr0' already exists in 'hsr' [ 1288.651316][T26025] Cannot create hsr debugfs directory [ 1289.305721][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms [ 1289.313805][ C0] lec:lec_tx_timeout: lec0 [ 1289.333087][ T5956] usb 4-1: USB disconnect, device number 60 [ 1289.629730][T26046] /dev/rnullb0: Can't open blockdev [ 1289.733784][ T5880] Bluetooth: hci4: command tx timeout [ 1289.881805][T26049] syzkaller1: entered promiscuous mode [ 1289.914135][T26049] syzkaller1: entered allmulticast mode [ 1290.457791][T12823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1290.472643][T12823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1290.482886][T12823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1290.493712][T12823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1290.501627][T26064] loop2: detected capacity change from 0 to 7 [ 1290.511526][T12823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1290.618755][T26064] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 1290.657546][T26064] loop2: partition table partially beyond EOD, truncated [ 1290.704389][T26064] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 1291.585615][T26025] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1291.675521][T26025] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1291.790775][T26025] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1291.886566][T26065] chnl_net:caif_netlink_parms(): no params data found [ 1291.939303][T21712] udevd[21712]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1291.957454][ T5880] Bluetooth: hci4: command tx timeout [ 1291.978482][T26025] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1292.472551][T26065] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.494697][T26065] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.502077][T26065] bridge_slave_0: entered allmulticast mode [ 1292.546340][T26065] bridge_slave_0: entered promiscuous mode [ 1292.586800][T26065] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.602369][T26065] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.621237][T26065] bridge_slave_1: entered allmulticast mode [ 1292.629303][T26065] bridge_slave_1: entered promiscuous mode [ 1292.728584][ T5880] Bluetooth: hci5: command tx timeout [ 1292.796345][T26065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1292.852776][T26065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1292.876424][ T9] usb 4-1: new low-speed USB device number 61 using dummy_hcd [ 1293.051729][T26065] team0: Port device team_slave_0 added [ 1293.081638][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1293.089730][ T9] usb 4-1: config 0 has no interface number 0 [ 1293.109524][T26065] team0: Port device team_slave_1 added [ 1293.118464][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1293.140603][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1293.174103][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.203143][ T9] usb 4-1: config 0 descriptor?? [ 1293.244359][ T9] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1293.303795][T26065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.329547][T26065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1293.390261][T26065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.406566][T26025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1293.415757][T26065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1293.437620][T26065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1293.484636][T26065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1293.664777][T20197] usb 4-1: USB disconnect, device number 61 [ 1293.666344][T26025] 8021q: adding VLAN 0 to HW filter on device team0 [ 1293.724301][T26065] hsr_slave_0: entered promiscuous mode [ 1293.731429][T26065] hsr_slave_1: entered promiscuous mode [ 1293.755180][T26065] debugfs: 'hsr0' already exists in 'hsr' [ 1293.761157][T26065] Cannot create hsr debugfs directory [ 1293.832099][T19094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.839347][T19094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1293.922705][T19097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.929950][T19097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.191572][ T5880] Bluetooth: hci4: command tx timeout [ 1294.651304][T18960] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1294.811693][T18960] usb 4-1: Using ep0 maxpacket: 16 [ 1294.841416][T18960] usb 4-1: config 1 has an invalid interface number: 214 but max is 0 [ 1294.866355][T18960] usb 4-1: config 1 has no interface number 0 [ 1294.886276][T18960] usb 4-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1294.924203][T18960] usb 4-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 1294.943425][T18960] usb 4-1: config 1 interface 214 has no altsetting 0 [ 1294.963170][ T5880] Bluetooth: hci5: command tx timeout [ 1294.965065][T18960] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 1294.994150][T18960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.036817][T26025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1295.037171][T18960] usb 4-1: Product: syz [ 1295.084654][T18960] usb 4-1: Manufacturer: syz [ 1295.097555][T18960] usb 4-1: SerialNumber: syz [ 1295.117280][T26129] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1295.137220][T26129] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1295.160968][T18960] ums-alauda 4-1:1.214: USB Mass Storage device detected [ 1295.209941][T18960] scsi host1: usb-storage 4-1:1.214 [ 1295.734648][T26025] veth0_vlan: entered promiscuous mode [ 1295.781673][T26025] veth1_vlan: entered promiscuous mode [ 1296.031834][T26025] veth0_macvtap: entered promiscuous mode [ 1296.098122][T26025] veth1_macvtap: entered promiscuous mode [ 1296.121728][T26065] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1296.207241][T26065] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1296.239365][T26065] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1296.323450][T26065] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1296.354759][ T3497] scsi 1:0:0:0: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 1296.404819][ T5880] Bluetooth: hci4: command tx timeout [ 1296.427824][ T3497] scsi 1:0:0:1: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 1296.443466][T26025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1296.485597][T26025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1296.595582][ T3542] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.640151][ T3497] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 1296.653109][T19097] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.715599][T19097] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.754206][ T3497] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 1296.767659][T19097] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.802298][T26164] /dev/rnullb0: Can't open blockdev [ 1297.176547][ T5880] Bluetooth: hci5: command tx timeout [ 1297.391377][T19094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1297.472576][T19094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1297.498644][T26065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1297.615259][T26065] 8021q: adding VLAN 0 to HW filter on device team0 [ 1297.729726][ T9] usb 4-1: USB disconnect, device number 62 [ 1297.753013][T19095] sd 1:0:0:0: [sdb] Media removed, stopped polling [ 1297.783724][ T79] sd 1:0:0:1: [sdc] Media removed, stopped polling [ 1297.785639][T19097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1297.806690][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.813982][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1297.864961][T19097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1297.899824][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.907081][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1298.018037][ T79] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 1298.036289][T21712] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 1298.058931][T19095] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 1298.209884][T26065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1298.362128][T26179] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 1298.491740][T26181] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1298.508894][T21713] udevd[21713]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 1299.007058][T21713] udevd[21713]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 1299.237078][T21712] udevd[21712]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 1299.301128][T26065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1299.397919][ T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1299.407202][ T5880] Bluetooth: hci5: command tx timeout [ 1299.600829][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1299.649210][ T9] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1299.689611][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.718493][ T9] usb 4-1: Product: syz [ 1299.722728][ T9] usb 4-1: Manufacturer: syz [ 1299.727356][ T9] usb 4-1: SerialNumber: syz [ 1299.764496][ T9] usb 4-1: config 0 descriptor?? [ 1300.205007][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1300.221578][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1300.257294][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1300.283229][ T9] usb 4-1: media controller created [ 1300.324045][T26065] veth0_vlan: entered promiscuous mode [ 1300.349024][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1300.398590][T26065] veth1_vlan: entered promiscuous mode [ 1300.432420][T26173] /dev/rnullb0: Can't open blockdev [ 1300.470704][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 1300.501312][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1300.509279][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1300.554160][T26065] veth0_macvtap: entered promiscuous mode [ 1300.583691][ T9] usb 4-1: USB disconnect, device number 63 [ 1300.597843][T26065] veth1_macvtap: entered promiscuous mode [ 1300.690875][T26065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1300.748368][T26065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1300.769312][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1300.853554][T19097] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.882959][T19097] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.920311][T19097] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.974307][ T3497] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.296728][T25713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1301.324884][T25713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1301.417465][T25713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1301.448722][T25713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1301.504131][T14954] usb 4-1: new low-speed USB device number 64 using dummy_hcd [ 1301.688950][T14954] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1301.717685][T14954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.745716][T14954] usb 4-1: config 0 descriptor?? [ 1302.219012][T14954] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1302.269435][T14954] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 1302.277821][T26239] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 1302.302242][T14954] asix 4-1:0.0: probe with driver asix failed with error -32 [ 1302.549943][T26245] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1304.083248][T26285] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5365'. [ 1304.120150][T26285] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5365'. [ 1304.497618][T18960] usb 4-1: USB disconnect, device number 64 [ 1304.687179][T26300] /dev/rnullb0: Can't open blockdev [ 1304.799233][T18689] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1304.831428][T26303] netlink: 'syz.3.5368': attribute type 39 has an invalid length. [ 1304.989615][T18689] usb 1-1: device descriptor read/64, error -71 [ 1305.256658][T18689] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1305.427422][T18689] usb 1-1: device descriptor read/64, error -71 [ 1305.558721][T18689] usb usb1-port1: attempt power cycle [ 1305.961770][T18689] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1306.026712][T18689] usb 1-1: device descriptor read/8, error -71 [ 1306.148985][T26325] /dev/rnullb0: Can't open blockdev [ 1306.201184][T26325] /dev/rnullb0: Can't open blockdev [ 1306.284811][T26325] XFS (rnullb0): Invalid superblock magic number [ 1306.322774][T18689] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1306.368863][T18689] usb 1-1: device descriptor read/8, error -71 [ 1306.380866][T26338] /dev/rnullb0: Can't open blockdev [ 1306.486544][T18689] usb usb1-port1: unable to enumerate USB device [ 1306.937935][T26325] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/rnullb0": -EINTR [ 1307.300044][T18960] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 1307.504874][T18960] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1307.538551][T18960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.556818][T18960] usb 5-1: config 0 descriptor?? [ 1308.138531][T26382] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1308.239579][T18960] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1308.273489][T18960] asix 5-1:0.0: probe with driver asix failed with error -32 [ 1308.837494][ T5858] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1309.033023][ T5858] usb 1-1: Using ep0 maxpacket: 32 [ 1309.074163][ T5858] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 1309.118245][ T5858] usb 1-1: config 0 has no interface number 0 [ 1309.354627][ T5858] usb 1-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=a8.3c [ 1309.372706][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.380793][ T5858] usb 1-1: Product: syz [ 1309.393366][ T5858] usb 1-1: Manufacturer: syz [ 1309.398145][ T5858] usb 1-1: SerialNumber: syz [ 1309.413842][ T5858] usb 1-1: config 0 descriptor?? [ 1309.656941][ T5858] mos7840 1-1:0.186: required endpoints missing [ 1309.983379][T18960] usb 1-1: USB disconnect, device number 101 [ 1310.141904][T26420] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1310.291501][T20197] usb 5-1: USB disconnect, device number 21 [ 1310.730649][T26443] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5392'. [ 1311.156996][T26455] vxfs: WRONG superblock magic 00000000 at 1 [ 1311.190308][T26455] vxfs: WRONG superblock magic 00000000 at 8 [ 1311.200079][T26455] vxfs: can't find superblock. [ 1311.574390][T20197] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1311.802764][T20197] usb 1-1: Using ep0 maxpacket: 16 [ 1311.833804][T20197] usb 1-1: config 0 has an invalid descriptor of length 253, skipping remainder of the config [ 1311.863820][T20197] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1311.902941][T20197] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1311.906289][T18960] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 1311.948861][T20197] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1311.958586][T20197] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1312.014220][T20197] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1312.042740][T20197] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1312.062526][T20197] usb 1-1: Manufacturer: syz [ 1312.100057][T20197] usb 1-1: config 0 descriptor?? [ 1312.111798][T18960] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1312.121285][T18960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.143665][T18960] usb 5-1: config 0 descriptor?? [ 1312.507403][T20197] rc_core: IR keymap rc-hauppauge not found [ 1312.513378][T20197] Registered IR keymap rc-empty [ 1312.547282][T20197] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1312.606552][T20197] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1312.670083][T20197] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1312.718924][T20197] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input79 [ 1312.767074][T20197] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1312.774650][ C0] mceusb 1-1:0.0: short-range (0x2) receiver active [ 1312.800521][T18960] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1312.818177][T20197] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1312.850694][T18960] asix 5-1:0.0: probe with driver asix failed with error -32 [ 1312.869469][T20197] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1312.895099][T20197] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1312.932523][T26476] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1312.964599][T20197] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1313.013768][T20197] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1313.060670][T20197] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1313.092406][T20197] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1313.124113][T20197] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1313.178080][T20197] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1313.223984][T20197] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1313.257220][T20197] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x2 active) [ 1313.709177][T18960] usb 1-1: USB disconnect, device number 102 [ 1314.285561][T12823] Bluetooth: hci0: command 0x0406 tx timeout [ 1314.547014][ T5880] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1315.037916][T18960] usb 5-1: USB disconnect, device number 22 [ 1315.540568][T18960] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1315.783131][T18960] usb 5-1: Using ep0 maxpacket: 8 [ 1315.827410][T18960] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1315.851940][T18960] usb 5-1: config 16 has an invalid descriptor of length 9, skipping remainder of the config [ 1315.871907][T18960] usb 5-1: config 16 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1315.923329][T18960] usb 5-1: config 16 interface 0 has no altsetting 0 [ 1315.959331][T18960] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=1a.35 [ 1315.990024][T18960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.998099][T18960] usb 5-1: Product: syz [ 1316.027713][T18960] usb 5-1: Manufacturer: syz [ 1316.043969][T18960] usb 5-1: SerialNumber: syz [ 1316.407816][T26523] FAT-fs (rnullb0): bogus number of reserved sectors [ 1316.414564][T26523] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1317.315651][T18960] usb 5-1: ucan: probing device on interface #0 [ 1317.343784][T18960] usb 5-1: ucan: invalid EP count (0) [ 1317.354598][T18960] usb 5-1: ucan: probe failed; try to update the device firmware [ 1317.400686][T18960] usb 5-1: USB disconnect, device number 23 [ 1317.542552][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1317.551946][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 1318.611496][ T30] audit: type=1800 audit(6046176085.954:273): pid=26554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5409" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1319.184823][ T5858] usb 1-1: new low-speed USB device number 103 using dummy_hcd [ 1319.507405][ T5858] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1319.516918][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.550600][ T5858] usb 1-1: config 0 descriptor?? [ 1320.210814][ T5858] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1320.237751][ T5858] asix 1-1:0.0: probe with driver asix failed with error -32 [ 1321.205992][T26611] kvm: user requested TSC rate below hardware speed [ 1321.246042][T26611] omfs: Invalid superblock (0) [ 1322.187472][ T6916] usb 1-1: USB disconnect, device number 103 [ 1322.614443][ T6916] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1322.774853][ T6916] usb 1-1: device descriptor read/64, error -71 [ 1323.031081][ T6916] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1323.203911][ T6916] usb 1-1: device descriptor read/64, error -71 [ 1323.323370][ T6916] usb usb1-port1: attempt power cycle [ 1323.511865][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5580 ms [ 1323.519979][ C0] lec:lec_tx_timeout: lec0 [ 1323.714950][ T6916] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1323.763232][ T6916] usb 1-1: device descriptor read/8, error -71 [ 1324.058911][ T6916] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1324.107246][T26652] sp0: Synchronizing with TNC [ 1324.123153][ T6916] usb 1-1: device descriptor read/8, error -71 [ 1324.239441][T26652] sp0: Synchronizing with TNC [ 1324.250502][ T6916] usb usb1-port1: unable to enumerate USB device [ 1325.221581][ T5880] Bluetooth: hci1: command 0x0406 tx timeout [ 1325.243028][T20197] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1325.445823][T20197] usb 5-1: Using ep0 maxpacket: 16 [ 1325.473930][T20197] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1325.483142][ T5880] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1325.506278][T20197] usb 5-1: config 13 has an invalid interface number: 50 but max is 0 [ 1325.514966][ T5880] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1325.524526][T20197] usb 5-1: config 13 has no interface number 0 [ 1325.531426][T20197] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 1325.541653][T20197] usb 5-1: config 13 interface 50 has no altsetting 0 [ 1325.548658][ T5880] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1325.566043][T20197] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1325.576487][T20197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.584542][T20197] usb 5-1: Product: syz [ 1325.590870][T20197] usb 5-1: Manufacturer: syz [ 1325.595739][T20197] usb 5-1: SerialNumber: syz [ 1325.600461][ T5880] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1325.613096][T26667] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1325.632770][ T5880] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1325.856546][T26667] random: crng reseeded on system resumption [ 1326.016311][T26683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1326.056557][T26683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1326.279681][T18689] usb 1-1: new low-speed USB device number 108 using dummy_hcd [ 1326.495300][T18689] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1326.516117][T18689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.569875][T18689] usb 1-1: config 0 descriptor?? [ 1326.612128][T26672] chnl_net:caif_netlink_parms(): no params data found [ 1327.274799][T18689] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1327.329796][T18689] asix 1-1:0.0: probe with driver asix failed with error -32 [ 1327.831373][T26672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.862553][T26672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.877457][T12823] Bluetooth: hci6: command tx timeout [ 1327.893452][T26672] bridge_slave_0: entered allmulticast mode [ 1327.902255][T26672] bridge_slave_0: entered promiscuous mode [ 1327.912310][T26672] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.920142][T26672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.928536][T26672] bridge_slave_1: entered allmulticast mode [ 1327.937013][T26672] bridge_slave_1: entered promiscuous mode [ 1327.995709][T26672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1328.015871][T26672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1328.206210][T26672] team0: Port device team_slave_0 added [ 1328.239646][T26672] team0: Port device team_slave_1 added [ 1328.389940][T26672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1328.431887][T26672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1328.520591][T26672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1328.562885][T26672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1328.608875][T26672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1328.728943][T26672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1328.865852][T20197] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1328.883822][T20197] usb 5-1: MIDIStreaming interface descriptor not found [ 1329.008390][T20197] usb 5-1: USB disconnect, device number 24 [ 1329.089876][T26672] hsr_slave_0: entered promiscuous mode [ 1329.177066][T26672] hsr_slave_1: entered promiscuous mode [ 1329.190832][T26672] debugfs: 'hsr0' already exists in 'hsr' [ 1329.207944][ T5858] usb 1-1: USB disconnect, device number 108 [ 1329.214134][T26672] Cannot create hsr debugfs directory [ 1329.234015][T21765] udevd[21765]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1329.842148][T26722] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 1329.873514][T26722] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 1330.094804][T12823] Bluetooth: hci6: command tx timeout [ 1330.233588][T18689] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1330.427058][T18689] usb 1-1: Using ep0 maxpacket: 32 [ 1330.456736][T18689] usb 1-1: config 0 has an invalid interface number: 202 but max is 0 [ 1330.470540][T18689] usb 1-1: config 0 has no interface number 0 [ 1330.497099][T18689] usb 1-1: config 0 interface 202 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1330.510845][ T5858] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 1330.535620][T18689] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1330.556105][T18689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.588579][T18689] usb 1-1: Product: syz [ 1330.592819][T18689] usb 1-1: Manufacturer: syz [ 1330.640548][T18689] usb 1-1: SerialNumber: syz [ 1330.674900][T18689] usb 1-1: config 0 descriptor?? [ 1330.694854][ T5858] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.723801][ T5858] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1330.755612][T18689] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1330.805269][ T5858] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1330.825133][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1330.852507][ T5858] usb 5-1: SerialNumber: syz [ 1330.938326][ T5858] usb 5-1: 0:2 : does not exist [ 1331.104240][T26726] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:21 [ 1331.113508][T26726] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20004 [ 1331.897612][T19095] usb 1-1: Failed to submit usb control message: -110 [ 1331.953001][ T5858] usb 5-1: USB disconnect, device number 25 [ 1331.959759][T19095] usb 1-1: unable to send the bmi data to the device: -110 [ 1332.043322][T19095] usb 1-1: unable to get target info from device [ 1332.077153][T19095] usb 1-1: could not get target info (-110) [ 1332.108438][T19095] usb 1-1: could not probe fw (-110) [ 1332.316257][T12823] Bluetooth: hci6: command tx timeout [ 1332.810153][T26747] /dev/rnullb0: Can't open blockdev [ 1333.428912][ T5880] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1333.457323][ T5880] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1333.466498][ T5880] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1333.484610][ T5880] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1333.484769][T24313] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 1333.494235][ T5880] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1333.853072][T24313] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1333.865665][T24313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.921477][T24313] usb 5-1: config 0 descriptor?? [ 1334.523957][T20506] usb 1-1: USB disconnect, device number 109 [ 1334.538776][ T5880] Bluetooth: hci6: command tx timeout [ 1334.578251][T24313] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1334.610505][T24313] asix 5-1:0.0: probe with driver asix failed with error -32 [ 1335.027360][T25713] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.495762][T25713] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.667419][T26774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.787068][T26774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.834396][ T5880] Bluetooth: hci7: command tx timeout [ 1335.908024][T18689] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1336.040222][T25713] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.099554][T18689] usb 1-1: Using ep0 maxpacket: 16 [ 1336.142126][T18689] usb 1-1: config 1 has an invalid descriptor of length 229, skipping remainder of the config [ 1336.186314][T18689] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1336.213470][T18689] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1336.296837][T18689] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1336.312424][T18689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.331672][T18689] usb 1-1: Product: syz [ 1336.343755][T18689] usb 1-1: Manufacturer: syz [ 1336.348631][T18689] usb 1-1: SerialNumber: syz [ 1336.429345][T18960] usb 5-1: USB disconnect, device number 26 [ 1336.614747][T25713] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.836053][T18689] usb 1-1: 0:2 : does not exist [ 1336.889015][T26672] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1336.972808][T18689] usb 1-1: USB disconnect, device number 110 [ 1336.994709][T26672] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1337.101909][T21712] udevd[21712]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1337.270012][T26796] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1337.327790][T26672] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1337.577222][T26672] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1337.957688][T26752] chnl_net:caif_netlink_parms(): no params data found [ 1338.043673][ T5880] Bluetooth: hci7: command tx timeout [ 1338.300465][T20506] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 1338.388292][T25713] bridge_slave_1: left allmulticast mode [ 1338.394008][T25713] bridge_slave_1: left promiscuous mode [ 1338.516420][T25713] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.549709][T25713] bridge_slave_0: left allmulticast mode [ 1338.555517][T25713] bridge_slave_0: left promiscuous mode [ 1338.584296][T25713] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.418701][T20197] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 1339.628002][T20197] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1339.646225][T20197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.690982][T20197] usb 5-1: config 0 descriptor?? [ 1340.266210][ T5880] Bluetooth: hci7: command tx timeout [ 1340.363547][T20197] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1340.384153][T20197] asix 5-1:0.0: probe with driver asix failed with error -32 [ 1341.260585][T18960] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1341.463150][T18960] usb 1-1: device descriptor read/64, error -71 [ 1341.516815][T25713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1341.570298][T25713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1341.613752][T25713] bond0 (unregistering): Released all slaves [ 1341.652783][ T5880] Bluetooth: hci3: command 0x0406 tx timeout [ 1341.751066][T18960] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1341.911430][T18960] usb 1-1: device descriptor read/64, error -71 [ 1342.093518][T18960] usb usb1-port1: attempt power cycle [ 1342.470358][ T6916] usb 5-1: USB disconnect, device number 27 [ 1342.488444][T12823] Bluetooth: hci7: command tx timeout [ 1342.499391][T18960] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1342.531797][T18960] usb 1-1: device descriptor read/8, error -71 [ 1342.659064][T26752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.682029][T26752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.706182][T26752] bridge_slave_0: entered allmulticast mode [ 1342.736769][T26752] bridge_slave_0: entered promiscuous mode [ 1342.798770][T18960] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1342.860059][T26752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.873917][T18960] usb 1-1: device descriptor read/8, error -71 [ 1342.906538][T26752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.914023][T26752] bridge_slave_1: entered allmulticast mode [ 1342.981939][T26752] bridge_slave_1: entered promiscuous mode [ 1343.007931][T18960] usb usb1-port1: unable to enumerate USB device [ 1343.148001][T26854] 9pnet_fd: Insufficient options for proto=fd [ 1343.329515][T26752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1343.380997][T26752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1343.418015][T18960] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1343.568129][T25713] hsr_slave_0: left promiscuous mode [ 1343.589036][T18960] usb 5-1: Using ep0 maxpacket: 32 [ 1343.590695][T25713] hsr_slave_1: left promiscuous mode [ 1343.621866][T25713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1343.629665][T25713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1343.633062][T18960] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 1343.664187][T18960] usb 5-1: can't read configurations, error -22 [ 1343.670694][T25713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1343.695708][T25713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1343.778846][T25713] veth1_macvtap: left promiscuous mode [ 1343.806318][T25713] veth0_macvtap: left promiscuous mode [ 1343.812370][T25713] veth1_vlan: left promiscuous mode [ 1343.834663][T18960] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1343.850418][T25713] veth0_vlan: left promiscuous mode [ 1344.031602][T18960] usb 5-1: Using ep0 maxpacket: 32 [ 1344.051436][T18960] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 1344.068313][T18960] usb 5-1: can't read configurations, error -22 [ 1344.089356][T18960] usb usb5-port1: attempt power cycle [ 1344.486126][T18960] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1344.543284][T18960] usb 5-1: Using ep0 maxpacket: 32 [ 1344.572621][T18960] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 1344.580754][T18960] usb 5-1: can't read configurations, error -22 [ 1344.764212][T18960] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1344.829661][T18960] usb 5-1: Using ep0 maxpacket: 32 [ 1344.851725][T18960] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 1344.859747][T18960] usb 5-1: can't read configurations, error -22 [ 1344.898857][T18960] usb usb5-port1: unable to enumerate USB device [ 1346.849597][T25713] team0 (unregistering): Port device team_slave_1 removed [ 1347.149308][T25713] team0 (unregistering): Port device team_slave_0 removed [ 1350.027463][T26752] team0: Port device team_slave_0 added [ 1350.102213][T26752] team0: Port device team_slave_1 added [ 1350.345821][T26752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1350.397266][T26752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1350.491333][T26752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1350.512714][T18689] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1350.555703][T26752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1350.578099][T26752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1350.610679][ T6916] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1350.672981][T26752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1350.694541][T18689] usb 1-1: device descriptor read/64, error -71 [ 1350.741058][T26672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1350.780207][ T6916] usb 5-1: Using ep0 maxpacket: 32 [ 1350.792935][ T6916] usb 5-1: config 0 has an invalid interface number: 202 but max is 0 [ 1350.816226][ T6916] usb 5-1: config 0 has no interface number 0 [ 1350.827047][ T6916] usb 5-1: config 0 interface 202 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1350.897495][ T6916] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1350.907174][ T6916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.950785][ T6916] usb 5-1: Product: syz [ 1350.952857][T18689] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1350.955517][ T6916] usb 5-1: Manufacturer: syz [ 1351.009123][ T6916] usb 5-1: SerialNumber: syz [ 1351.043007][ T6916] usb 5-1: config 0 descriptor?? [ 1351.099977][T26752] hsr_slave_0: entered promiscuous mode [ 1351.118556][T26752] hsr_slave_1: entered promiscuous mode [ 1351.126076][ T6916] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1351.132812][T18689] usb 1-1: device descriptor read/64, error -71 [ 1351.144854][T26752] debugfs: 'hsr0' already exists in 'hsr' [ 1351.170684][T26752] Cannot create hsr debugfs directory [ 1351.250559][T18689] usb usb1-port1: attempt power cycle [ 1351.554547][T26672] 8021q: adding VLAN 0 to HW filter on device team0 [ 1351.635738][T18689] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1351.700288][T18689] usb 1-1: device descriptor read/8, error -71 [ 1351.727503][T19098] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.734789][T19098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1351.809008][T19097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.816318][T19097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1351.955467][T18689] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1352.031242][T18689] usb 1-1: device descriptor read/8, error -71 [ 1352.158815][T18689] usb usb1-port1: unable to enumerate USB device [ 1352.331706][T19095] usb 5-1: Failed to submit usb control message: -110 [ 1352.338951][T19095] usb 5-1: unable to send the bmi data to the device: -110 [ 1352.382577][T19095] usb 5-1: unable to get target info from device [ 1352.388989][T19095] usb 5-1: could not get target info (-110) [ 1352.435906][T19095] usb 5-1: could not probe fw (-110) [ 1354.254503][T26672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1354.317354][T14954] usb 1-1: new low-speed USB device number 120 using dummy_hcd [ 1354.535317][T14954] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1354.557652][T14954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.606158][T14954] usb 1-1: config 0 descriptor?? [ 1355.004877][T18689] usb 5-1: USB disconnect, device number 32 [ 1355.343710][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1355.396162][T14954] asix 1-1:0.0: probe with driver asix failed with error -61 [ 1355.471569][T26884] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5455'. [ 1355.473754][T26752] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1355.543390][T26884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5455'. [ 1355.568896][T26752] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1355.593050][T26886] exFAT-fs (rnullb0): invalid boot record signature [ 1355.635133][T26752] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1355.663769][T26886] exFAT-fs (rnullb0): failed to read boot sector [ 1355.670153][T26886] exFAT-fs (rnullb0): failed to recognize exfat type [ 1355.700251][T26752] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1356.128701][T26672] veth0_vlan: entered promiscuous mode [ 1356.210624][T26672] veth1_vlan: entered promiscuous mode [ 1356.402644][T26752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1356.442192][T26672] veth0_macvtap: entered promiscuous mode [ 1356.489934][T26672] veth1_macvtap: entered promiscuous mode [ 1356.566053][T26752] 8021q: adding VLAN 0 to HW filter on device team0 [ 1356.604871][T19097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.612237][T19097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1356.665177][T26672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1356.693750][T26672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1356.713987][T25713] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.721312][T25713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1356.792406][ T79] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.839485][ T79] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.896969][ T79] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.938261][ T79] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.373113][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1357.380983][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1357.417932][T24313] usb 1-1: USB disconnect, device number 120 [ 1357.592907][T19095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1357.627817][T19095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1358.292037][T18689] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1358.498676][T18689] usb 6-1: Using ep0 maxpacket: 32 [ 1358.533689][T18689] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1358.592848][T18689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.666519][T18689] usb 6-1: config 0 descriptor?? [ 1358.715507][T18689] as10x_usb: device has been detected [ 1358.757984][T18689] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1358.875488][T26752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1358.907854][T18689] usb 6-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 1359.164904][T26752] veth0_vlan: entered promiscuous mode [ 1359.180597][T18689] as10x_usb: error during firmware upload part1 [ 1359.209993][T18689] Registered device nBox DVB-T Dongle [ 1359.214298][T18689] usb 6-1: USB disconnect, device number 60 [ 1359.279131][T26752] veth1_vlan: entered promiscuous mode [ 1359.389947][T18689] Unregistered device nBox DVB-T Dongle [ 1359.400236][T18689] as10x_usb: device has been disconnected [ 1359.489226][T26752] veth0_macvtap: entered promiscuous mode [ 1359.533065][T26752] veth1_macvtap: entered promiscuous mode [ 1359.614463][T26752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1359.661550][T26752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1359.757011][T19095] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.787459][T19095] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.842232][T19098] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.932579][T25713] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.322152][T19098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1360.406990][T19098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1360.558209][T19098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1360.566103][T19098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1360.919725][T24313] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 1361.157765][T24313] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1361.210889][T26952] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1361.219346][T24313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.272032][T24313] usb 5-1: config 0 descriptor?? [ 1361.472853][T26952] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1361.732337][T26959] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 1362.020656][T24313] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1362.054736][T24313] asix 5-1:0.0: probe with driver asix failed with error -61 [ 1363.163862][T24313] usb 6-1: new low-speed USB device number 61 using dummy_hcd [ 1363.420172][T24313] usb 6-1: Invalid ep0 maxpacket: 64 [ 1363.602928][T24313] usb 6-1: new low-speed USB device number 62 using dummy_hcd [ 1363.793970][T24313] usb 6-1: Invalid ep0 maxpacket: 64 [ 1363.805357][T24313] usb usb6-port1: attempt power cycle [ 1363.932566][ T5858] usb 5-1: USB disconnect, device number 33 [ 1363.951936][T26988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5471'. [ 1364.253654][T24313] usb 6-1: new low-speed USB device number 63 using dummy_hcd [ 1364.329098][T24313] usb 6-1: Invalid ep0 maxpacket: 64 [ 1364.499313][T24313] usb 6-1: new low-speed USB device number 64 using dummy_hcd [ 1364.638112][T24313] usb 6-1: Invalid ep0 maxpacket: 64 [ 1364.649104][T24313] usb usb6-port1: unable to enumerate USB device [ 1365.876717][T27016] program syz.4.5476 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1366.807252][ T6916] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 1367.002634][ T6916] usb 2-1: config 65 has an invalid interface number: 95 but max is 0 [ 1367.053257][ T6916] usb 2-1: config 65 has no interface number 0 [ 1367.076545][ T6916] usb 2-1: string descriptor 0 read error: -22 [ 1367.113249][ T6916] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 1367.120491][ T5858] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 1367.127647][ T6916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.163091][ T6916] usbtest 2-1:65.95: Linux gadget zero [ 1367.168745][ T6916] usbtest 2-1:65.95: low-speed {control in/out} tests (+alt) [ 1367.325476][ T5858] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1367.346361][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.403567][ T5858] usb 5-1: config 0 descriptor?? [ 1367.429220][ T6916] usb 2-1: USB disconnect, device number 37 [ 1368.091794][ T5858] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1368.175589][ T5858] asix 5-1:0.0: probe with driver asix failed with error -61 [ 1368.335745][T27056] Malformed UNC in devname [ 1368.335745][T27056] [ 1368.345130][T27056] CIFS: VFS: Malformed UNC in devname [ 1369.651445][ T6916] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 1369.943422][ T6916] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1369.991212][ T6916] usb 2-1: config 0 has no interface number 0 [ 1370.034310][ T6916] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1370.076742][ T6916] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1370.085852][ T6916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.152730][ T6916] usb 2-1: config 0 descriptor?? [ 1370.216398][ T6916] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1370.278771][T18689] usb 5-1: USB disconnect, device number 34 [ 1370.702313][ T6916] usb 2-1: USB disconnect, device number 38 [ 1371.401652][T18689] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1371.604803][T18689] usb 5-1: Using ep0 maxpacket: 16 [ 1371.628070][T27103] Mount JFS Failure: -22 [ 1371.630131][T18689] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 1371.680538][T18689] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1371.708904][T27103] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1371.738682][T18689] usb 5-1: config 0 has no interface number 0 [ 1371.856412][T18689] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 1371.867280][T18689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.885714][T18689] usb 5-1: Product: syz [ 1371.890151][T18689] usb 5-1: Manufacturer: syz [ 1371.900633][T18689] usb 5-1: SerialNumber: syz [ 1371.921549][T18689] usb 5-1: config 0 descriptor?? [ 1372.144128][T27096] hfs: can't find a HFS filesystem on dev rnullb0 [ 1372.247646][T18689] usb 5-1: USB disconnect, device number 35 [ 1372.324018][T27109] ntfs3(loop1): try to read out of volume at offset 0x0 [ 1372.686059][T27115] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1372.879326][T27118] omfs: Invalid superblock (0) [ 1373.774099][T18689] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 1373.837830][T20506] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 1374.011036][T18689] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1374.019126][T18689] usb 5-1: config 0 has no interface number 0 [ 1374.036545][T20506] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1374.062146][T18689] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1374.083304][T20506] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1374.104876][T18689] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1374.114237][T18689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.159208][T20506] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1374.200294][T20506] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.209534][T18689] usb 5-1: config 0 descriptor?? [ 1374.245504][T20506] usb 6-1: config 0 descriptor?? [ 1374.276320][T18689] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1374.695885][T20197] usb 5-1: USB disconnect, device number 36 [ 1374.791541][T20506] savu 0003:1E7D:2D5A.0035: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1375.439893][T27161] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5503'. [ 1375.482935][T27161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5503'. [ 1375.652764][T26943] Set syz1 is full, maxelem 65536 reached [ 1375.899962][T20506] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1376.062690][T20506] usb 2-1: device descriptor read/64, error -71 [ 1376.317319][T20506] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1376.498419][T20506] usb 2-1: device descriptor read/64, error -71 [ 1376.616266][T20506] usb usb2-port1: attempt power cycle [ 1376.987370][ T6916] usb 6-1: USB disconnect, device number 65 [ 1377.022641][T20506] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1377.069217][T20506] usb 2-1: device descriptor read/8, error -71 [ 1377.354240][T20506] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1377.428860][T20506] usb 2-1: device descriptor read/8, error -71 [ 1377.547663][T20506] usb usb2-port1: unable to enumerate USB device [ 1377.759417][ T6916] usb 6-1: new low-speed USB device number 66 using dummy_hcd [ 1377.982419][ T6916] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1378.017922][ T6916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.070550][ T6916] usb 6-1: config 0 descriptor?? [ 1378.452092][T26389] blktrace: Concurrent blktraces are not allowed on nbd3 [ 1378.785456][ T6916] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1378.835584][ T6916] asix 6-1:0.0: probe with driver asix failed with error -61 [ 1378.951581][T27187] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1379.212443][ T6916] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 1379.389893][ T6916] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1379.400915][ T6916] usb 2-1: config 0 has no interface number 0 [ 1379.418447][ T6916] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1379.473327][ T6916] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1379.541416][ T6916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.587505][ T6916] usb 2-1: config 0 descriptor?? [ 1379.634431][ T6916] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1379.931051][T27225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.981975][T27225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.177682][ T3497] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.277212][T27209] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1380.440040][ T3497] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.538278][T27232] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1380.545040][T27232] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1380.600580][T27232] vhci_hcd vhci_hcd.0: Device attached [ 1380.682625][ T3497] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.749436][T18689] usb 6-1: USB disconnect, device number 66 [ 1380.794109][T24313] vhci_hcd: vhci_device speed not set [ 1380.885933][ T3497] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.890815][T24313] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 1381.321089][T27233] vhci_hcd: connection reset by peer [ 1381.336031][T19098] vhci_hcd: stop threads [ 1381.365347][ T3497] bridge_slave_1: left allmulticast mode [ 1381.365951][T19098] vhci_hcd: release socket [ 1381.381823][ T3497] bridge_slave_1: left promiscuous mode [ 1381.395668][T19098] vhci_hcd: disconnect device [ 1381.427365][ T3497] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.499384][ T3497] bridge_slave_0: left allmulticast mode [ 1381.505273][ T3497] bridge_slave_0: left promiscuous mode [ 1381.538639][ T6916] usb 2-1: USB disconnect, device number 43 [ 1381.550073][ T3497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.061786][T27267] /dev/rnullb0: Can't open blockdev [ 1382.227446][T27270] /dev/rnullb0: Can't open blockdev [ 1382.447318][T27272] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5521'. [ 1382.928356][ T3497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1382.950189][ T3497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1382.962479][ T3497] bond0 (unregistering): Released all slaves [ 1383.192623][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1383.203195][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 1383.524592][T27288] vxfs: WRONG superblock magic 00000000 at 1 [ 1383.557229][T27288] vxfs: WRONG superblock magic 00000000 at 8 [ 1383.590645][T27288] vxfs: can't find superblock. [ 1383.858153][ T3497] hsr_slave_0: left promiscuous mode [ 1383.875130][ T3497] hsr_slave_1: left promiscuous mode [ 1383.894219][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1383.903210][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1383.923878][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1383.925250][T18960] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1383.942582][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1384.023359][ T3497] veth1_macvtap: left promiscuous mode [ 1384.040894][ T3497] veth0_macvtap: left promiscuous mode [ 1384.051400][ T3497] veth1_vlan: left promiscuous mode [ 1384.062497][ T3497] veth0_vlan: left promiscuous mode [ 1384.128110][T18960] usb 6-1: Using ep0 maxpacket: 16 [ 1384.152425][T18960] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1384.192985][T27306] XFS (rnullb0): Invalid superblock magic number [ 1384.196674][T18960] usb 6-1: config 0 has no interface number 0 [ 1384.270294][T18960] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1384.342970][T18960] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1384.373496][T18960] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1384.414026][T18960] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1384.445648][T18960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.501736][T18960] usb 6-1: Product: syz [ 1384.512356][T18960] usb 6-1: Manufacturer: syz [ 1384.533305][T18960] usb 6-1: SerialNumber: syz [ 1384.551920][T18960] usb 6-1: config 0 descriptor?? [ 1384.597261][T27293] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1384.607165][T27293] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1384.840831][T27293] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1384.854531][T27293] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1385.015092][ T30] audit: type=1400 audit(6046176148.107:274): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=27326 comm="syz.4.5532" [ 1385.484472][ T5858] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 1385.646048][ T5858] usb 5-1: too many configurations: 82, using maximum allowed: 8 [ 1385.658106][ T5858] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1385.676841][ T5858] usb 5-1: can't read configurations, error -61 [ 1385.828003][ T5858] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 1386.013049][ T5858] usb 5-1: too many configurations: 82, using maximum allowed: 8 [ 1386.039720][ T5858] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1386.059094][ T5858] usb 5-1: can't read configurations, error -61 [ 1386.076305][ T5858] usb usb5-port1: attempt power cycle [ 1386.420902][T24313] vhci_hcd: vhci_device speed not set [ 1386.467377][ T5858] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 1386.504289][ T5858] usb 5-1: too many configurations: 82, using maximum allowed: 8 [ 1386.527575][ T5858] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1386.542137][ T5858] usb 5-1: can't read configurations, error -61 [ 1386.693721][ T5858] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 1386.736736][ T5858] usb 5-1: too many configurations: 82, using maximum allowed: 8 [ 1386.752999][ T5858] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1386.770884][ T5858] usb 5-1: can't read configurations, error -61 [ 1386.801240][ T5858] usb usb5-port1: unable to enumerate USB device [ 1386.934427][T18960] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 1386.983506][T18960] usb 6-1: USB disconnect, device number 67 [ 1387.045415][ T3497] team0 (unregistering): Port device team_slave_1 removed [ 1387.326783][ T3497] team0 (unregistering): Port device team_slave_0 removed [ 1387.515483][T27368] /dev/rnullb0: Can't open blockdev [ 1387.553690][T27368] cgroup2: Unknown parameter 'memory' [ 1387.733493][T27370] /dev/rnullb0: Can't open blockdev [ 1388.016680][T18960] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 1388.224465][T18960] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1388.235758][T18960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.263045][T18960] usb 6-1: Product: syz [ 1388.267421][T18960] usb 6-1: Manufacturer: syz [ 1388.289124][T18960] usb 6-1: SerialNumber: syz [ 1388.297826][T18960] usb 6-1: config 0 descriptor?? [ 1388.525910][T18960] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1388.641897][T27372] /dev/rnullb0: Can't open blockdev [ 1388.648131][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5090 ms [ 1388.648167][ C0] lec:lec_tx_timeout: lec0 [ 1388.745842][T27370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1388.766326][T27370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1389.337775][T27297] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1389.884835][T27390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5541'. [ 1389.951261][T18960] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1390.185946][ T5858] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1390.320301][T27396] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5543'. [ 1390.351521][T18960] usb 6-1: USB disconnect, device number 68 [ 1390.368118][ T5858] usb 1-1: Using ep0 maxpacket: 8 [ 1390.385488][ T5858] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1390.426106][ T5858] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1390.449877][ T5858] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1390.495785][ T5858] usb 1-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 1390.542254][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.570061][ T5858] usb 1-1: config 0 descriptor?? [ 1391.161853][T27412] /dev/rnullb0: Can't open blockdev [ 1392.516017][T18960] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1393.112192][T27446] ./cgroup: Can't lookup blockdev [ 1393.144305][ T5858] usbhid 1-1:0.0: can't add hid device: -71 [ 1393.200614][ T5858] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1393.263591][ T5858] usb 1-1: USB disconnect, device number 121 [ 1394.118711][T24313] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1394.278340][T24313] usb 1-1: device descriptor read/64, error -71 [ 1394.320981][T20197] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 1394.381405][T27477] blktrace: Concurrent blktraces are not allowed on rnullb0 [ 1394.545556][T24313] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1394.566186][T20197] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1394.614266][T20197] usb 6-1: not running at top speed; connect to a high speed hub [ 1394.657829][T20197] usb 6-1: config 2 has an invalid interface number: 212 but max is 1 [ 1394.705485][T20197] usb 6-1: config 2 has an invalid interface number: 226 but max is 1 [ 1394.716140][T24313] usb 1-1: device descriptor read/64, error -71 [ 1394.736875][T20197] usb 6-1: config 2 has no interface number 0 [ 1394.754142][T20197] usb 6-1: config 2 has no interface number 1 [ 1394.769851][T20197] usb 6-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1394.791184][T20506] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 1394.799738][T20197] usb 6-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1394.841005][T24313] usb usb1-port1: attempt power cycle [ 1394.847127][T20197] usb 6-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 1394.893291][T20197] usb 6-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1394.931209][T20197] usb 6-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1394.962046][T20506] usb 5-1: device descriptor read/64, error -71 [ 1394.990738][T20197] usb 6-1: config 2 interface 212 has no altsetting 0 [ 1395.009334][T20197] usb 6-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1395.034177][T20197] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.058091][T20197] usb 6-1: Product: syz [ 1395.062344][T20197] usb 6-1: Manufacturer: syz [ 1395.081732][T20197] usb 6-1: SerialNumber: syz [ 1395.250490][T24313] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1395.250739][T20506] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 1395.325690][T24313] usb 1-1: device descriptor read/8, error -71 [ 1395.333124][T27468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.357741][T27468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.474868][T20506] usb 5-1: device descriptor read/64, error -71 [ 1395.581712][T24313] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1395.614477][T20506] usb usb5-port1: attempt power cycle [ 1395.643332][T24313] usb 1-1: device descriptor read/8, error -71 [ 1395.781929][T24313] usb usb1-port1: unable to enumerate USB device [ 1396.014572][T20506] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 1396.042047][T20506] usb 5-1: device descriptor read/8, error -71 [ 1396.318824][T20506] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 1396.384820][T20506] usb 5-1: device descriptor read/8, error -71 [ 1396.506975][T20506] usb usb5-port1: unable to enumerate USB device [ 1397.431431][T20197] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:2.226/input/input82 [ 1397.542708][T20197] usb 6-1: USB disconnect, device number 69 [ 1398.372635][T27542] /dev/rnullb0: Can't open blockdev [ 1398.745583][T27556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1398.782299][T27556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1398.811452][T27556] overlayfs: missing 'lowerdir' [ 1398.828901][T27557] overlayfs: missing 'lowerdir' [ 1398.855704][T27557] netlink: 'syz.1.5576': attribute type 21 has an invalid length. [ 1398.864957][T27557] netlink: 388 bytes leftover after parsing attributes in process `syz.1.5576'. [ 1398.926426][T20197] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1398.979804][T24313] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1399.101992][T20197] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1399.111782][T20197] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1399.130329][T24313] usb 2-1: device descriptor read/64, error -71 [ 1399.132479][T20197] usb 1-1: Product: syz [ 1399.157353][T20197] usb 1-1: Manufacturer: syz [ 1399.177589][T20197] usb 1-1: SerialNumber: syz [ 1399.210508][T20197] usb 1-1: config 0 descriptor?? [ 1399.231697][T20197] ch341 1-1:0.0: ch341-uart converter detected [ 1399.396368][T24313] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1399.556343][T24313] usb 2-1: device descriptor read/64, error -71 [ 1399.685654][T24313] usb usb2-port1: attempt power cycle [ 1400.005163][ T5858] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 1400.090619][T24313] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1400.112571][T24313] usb 2-1: device descriptor read/8, error -71 [ 1400.165472][ T5858] usb 5-1: device descriptor read/64, error -71 [ 1400.311627][T20197] usb 1-1: ch341-uart converter now attached to ttyUSB0 [ 1400.379723][T24313] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1400.422667][T24313] usb 2-1: device descriptor read/8, error -71 [ 1400.443337][ T5858] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 1400.536121][T27547] netlink: 'syz.0.5574': attribute type 1 has an invalid length. [ 1400.541376][T24313] usb usb2-port1: unable to enumerate USB device [ 1400.592893][ T5858] usb 5-1: device descriptor read/64, error -71 [ 1400.711011][ T5858] usb usb5-port1: attempt power cycle [ 1401.095131][ T5858] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 1401.138592][ T5858] usb 5-1: device descriptor read/8, error -71 [ 1401.404826][ T5858] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1401.437635][ T5858] usb 5-1: device descriptor read/8, error -71 [ 1401.565586][ T5858] usb usb5-port1: unable to enumerate USB device [ 1402.062331][T20197] usb 1-1: USB disconnect, device number 126 [ 1402.105830][T20197] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 1402.144420][T20197] ch341 1-1:0.0: device disconnected [ 1402.937070][T27614] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1403.190679][T27620] netlink: 'syz.4.5582': attribute type 1 has an invalid length. [ 1403.235920][T27625] /dev/rnullb0: Can't open blockdev [ 1403.960245][ T5858] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1404.184559][ T5858] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1404.198561][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.225632][ T5858] usb 1-1: Product: syz [ 1404.236324][ T5858] usb 1-1: Manufacturer: syz [ 1404.241085][ T5858] usb 1-1: SerialNumber: syz [ 1404.269776][ T5858] usb 1-1: config 0 descriptor?? [ 1404.368728][T12823] Bluetooth: hci2: urb ffff88805e912c00 submission failed (2) [ 1404.504330][T27644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5585'. [ 1404.714893][T20197] usb 1-1: USB disconnect, device number 127 [ 1405.503586][T27674] loop9: detected capacity change from 0 to 7 [ 1405.514526][T27676] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5590'. [ 1405.541115][T27674] buffer_io_error: 10 callbacks suppressed [ 1405.541136][T27674] Buffer I/O error on dev loop9, logical block 0, async page read [ 1405.562195][T27676] /dev/rnullb0: Can't open blockdev [ 1405.583964][T27674] Buffer I/O error on dev loop9, logical block 0, async page read [ 1405.591987][T27674] Buffer I/O error on dev loop9, logical block 0, async page read [ 1405.632794][T27674] Buffer I/O error on dev loop9, logical block 0, async page read [ 1405.657471][T20197] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1405.668521][T27674] Buffer I/O error on dev loop9, logical block 0, async page read [ 1405.698256][T27674] Buffer I/O error on dev loop9, logical block 0, async page read [ 1405.739986][T27674] Buffer I/O error on dev loop9, logical block 0, async page read [ 1405.801204][T27674] ldm_validate_partition_table(): Disk read failed. [ 1405.816508][T27674] Buffer I/O error on dev loop9, logical block 0, async page read [ 1405.860963][T20197] usb 1-1: Using ep0 maxpacket: 16 [ 1405.876641][T27674] Buffer I/O error on dev loop9, logical block 0, async page read [ 1405.885187][T20197] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1405.908961][T20197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.922501][T27674] Buffer I/O error on dev loop9, logical block 0, async page read [ 1405.943781][T20197] usb 1-1: Product: syz [ 1405.956816][T20197] usb 1-1: Manufacturer: syz [ 1405.961502][T20197] usb 1-1: SerialNumber: syz [ 1405.992443][T20197] usb 1-1: config 0 descriptor?? [ 1405.998989][T27674] Dev loop9: unable to read RDB block 0 [ 1406.021047][T20197] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1406.055078][T27674] loop9: unable to read partition table [ 1406.061241][T27674] loop9: partition table beyond EOD, truncated [ 1406.089217][T27674] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1406.089217][T27674] ) failed (rc=-5) [ 1406.224814][T20197] gp8psk: usb in 128 operation failed. [ 1406.246501][T20197] gp8psk: usb in 137 operation failed. [ 1406.252026][T20197] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1406.384990][T20197] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1406.394331][T20197] usb 1-1: media controller created [ 1406.442188][T20197] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1406.474670][T20197] gp8psk_fe: Frontend revision 1 attached [ 1406.484164][T20197] usb 1-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 1406.498011][T20197] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1406.854309][T20506] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 1406.890140][T20197] gp8psk: usb in 137 operation failed. [ 1406.902281][T20197] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1406.937222][T20197] gp8psk: found Genpix USB device pID = 201 (hex) [ 1406.979027][T20197] usb 1-1: USB disconnect, device number 2 [ 1407.003907][T20506] usb 5-1: device descriptor read/64, error -71 [ 1407.279176][T20197] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1407.291376][T20506] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 1407.464235][T20506] usb 5-1: device descriptor read/64, error -71 [ 1407.592381][T20506] usb usb5-port1: attempt power cycle [ 1407.892125][T14954] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1407.991102][T20506] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 1408.019913][T20506] usb 5-1: device descriptor read/8, error -71 [ 1408.085020][T14954] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.106219][T14954] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1408.143110][T14954] usb 1-1: config 2 interface 0 has no altsetting 0 [ 1408.189869][T14954] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1408.220650][T14954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.250892][T14954] usb 1-1: Product: syz [ 1408.260514][T14954] usb 1-1: Manufacturer: syz [ 1408.274024][T14954] usb 1-1: SerialNumber: syz [ 1408.281655][T20506] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 1408.323012][T20506] usb 5-1: device descriptor read/8, error -71 [ 1408.458106][T20506] usb usb5-port1: unable to enumerate USB device [ 1410.191152][T27748] /dev/rnullb0: Can't open blockdev [ 1410.750302][T27757] /dev/rnullb0: Can't open blockdev [ 1410.899928][T14954] usb 1-1: USB disconnect, device number 3 [ 1411.040395][T27762] syz.1.5604: attempt to access beyond end of device [ 1411.040395][T27762] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1411.096873][T27762] exFAT-fs (nbd1): unable to read boot sector [ 1411.116316][T27762] exFAT-fs (nbd1): failed to read boot sector [ 1411.149359][T27762] exFAT-fs (nbd1): failed to recognize exfat type [ 1411.343286][T14954] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 1411.540913][T14954] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1411.565426][T14954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.596171][T14954] usb 1-1: config 0 descriptor?? [ 1412.616310][T27795] /dev/rnullb0: Can't open blockdev [ 1414.412481][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1414.425248][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading RX_CTL register: ffffffe0 [ 1414.464924][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1414.495517][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading Medium Status register: ffffffe0 [ 1414.794197][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1414.853853][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1414.904033][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1414.961950][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1415.001772][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1415.046923][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1415.096885][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1415.131020][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1415.166941][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1415.215144][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1415.266741][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1415.309996][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1415.346856][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1415.393496][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1415.434027][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1415.474682][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1415.516027][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1415.537290][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1415.561682][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1415.599315][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1415.651486][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1415.690870][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1415.733905][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1415.767551][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1415.803382][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1415.870623][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1415.901569][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1415.973730][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1416.009854][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1416.029268][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1416.059322][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1416.076877][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1416.096716][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1416.109830][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1416.133581][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1416.160438][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1416.183803][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1416.246304][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1416.256404][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1416.323025][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1416.363855][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1416.398388][T27857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1416.406416][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1416.420511][T27857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1416.428052][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1416.449607][T27857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1416.449627][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1416.502698][T27857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1416.520541][T27857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1416.577388][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1416.589150][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1416.605923][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1416.630820][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1416.652716][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1416.674377][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1416.694852][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1416.748467][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1416.770122][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1416.780198][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1416.857298][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1416.907080][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1416.981488][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1417.060516][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1417.122486][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1417.161089][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1417.240186][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1417.314946][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1417.325113][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1417.431918][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1417.483851][T27877] netlink: 'syz.4.5621': attribute type 10 has an invalid length. [ 1417.501426][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1417.523099][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1417.534530][T27877] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5621'. [ 1417.575122][T27877] team0: entered promiscuous mode [ 1417.581822][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1417.600165][T27877] team_slave_0: entered promiscuous mode [ 1417.606130][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1417.615191][T27877] team_slave_1: entered promiscuous mode [ 1417.639982][T27877] team0: entered allmulticast mode [ 1417.648606][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1417.667336][T27877] team_slave_0: entered allmulticast mode [ 1417.673225][T27877] team_slave_1: entered allmulticast mode [ 1417.679523][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1417.711212][T27877] bridge0: port 3(team0) entered blocking state [ 1417.723762][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1417.744551][T27877] bridge0: port 3(team0) entered disabled state [ 1417.750987][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1417.777861][T27877] bridge0: port 3(team0) entered blocking state [ 1417.784320][T27877] bridge0: port 3(team0) entered forwarding state [ 1417.795604][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1417.827838][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1417.848912][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1417.877527][T27855] chnl_net:caif_netlink_parms(): no params data found [ 1417.895679][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1417.935593][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1417.977054][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1418.032198][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1418.062652][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1418.093548][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1418.142807][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1418.169633][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1418.181871][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1418.203164][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1418.227552][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1418.241226][T12823] Bluetooth: hci4: command 0x0406 tx timeout [ 1418.248841][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1418.263897][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1418.304604][T14954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Could not register MDIO bus (err -5) [ 1418.326073][T14954] asix 1-1:0.0: probe with driver asix failed with error -5 [ 1418.360092][T14954] usb 1-1: USB disconnect, device number 4 [ 1418.371003][T27855] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.380435][T27855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.391875][T27855] bridge_slave_0: entered allmulticast mode [ 1418.426330][T27855] bridge_slave_0: entered promiscuous mode [ 1418.440239][T27855] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.458096][T27855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.476430][T27855] bridge_slave_1: entered allmulticast mode [ 1418.492377][T27855] bridge_slave_1: entered promiscuous mode [ 1418.613585][T27855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1418.656281][T27855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1418.682626][ T9] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 1418.709585][T14954] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1418.747835][T12823] Bluetooth: hci2: command tx timeout [ 1418.886118][T27855] team0: Port device team_slave_0 added [ 1418.901944][ T9] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1418.920210][T27855] team0: Port device team_slave_1 added [ 1418.939468][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.971925][ T9] usb 5-1: config 0 descriptor?? [ 1419.081251][T27855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1419.112326][T27855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1419.161261][T27855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1419.202800][T27855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1419.217854][T14954] usb 1-1: device descriptor read/64, error -71 [ 1419.234195][T27855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1419.292312][T27855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1419.483922][T14954] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1419.555977][T27855] hsr_slave_0: entered promiscuous mode [ 1419.586958][T27855] hsr_slave_1: entered promiscuous mode [ 1419.613140][T27855] debugfs: 'hsr0' already exists in 'hsr' [ 1419.633256][T27855] Cannot create hsr debugfs directory [ 1419.708277][T14954] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1419.751537][T14954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1419.786042][T14954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1419.825703][T14954] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1419.900430][T14954] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1419.921758][T14954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.969329][T14954] usb 1-1: config 0 descriptor?? [ 1419.975638][T27897] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1420.439525][T14954] plantronics 0003:047F:FFFF.0036: reserved main item tag 0xd [ 1420.528902][T14954] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1420.741597][ T5858] usb 1-1: USB disconnect, device number 6 [ 1420.974742][ T5880] Bluetooth: hci2: command tx timeout [ 1421.002982][T27910] fido_id[27910]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1422.227003][ T9] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1422.242164][ T9] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1422.296130][ T9] asix 5-1:0.0: probe with driver asix failed with error -71 [ 1422.336187][ T9] usb 5-1: USB disconnect, device number 53 [ 1422.589058][T27933] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 1422.639883][T27933] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 1422.800194][ T30] audit: type=1326 audit(6046176183.456:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27931 comm="syz.1.5628" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e8018ebe9 code=0x0 [ 1423.010122][T27855] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1423.053164][T27855] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1423.122823][T27855] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1423.189796][T12823] Bluetooth: hci2: command tx timeout [ 1423.201367][T27855] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1423.235352][T27951] XFS (rnullb0): Invalid superblock magic number [ 1423.394523][ T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1423.586734][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1423.602647][ T9] usb 5-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1423.640069][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1423.663998][ T9] usb 5-1: Product: syz [ 1423.668943][ T9] usb 5-1: Manufacturer: syz [ 1423.688739][ T9] usb 5-1: SerialNumber: syz [ 1423.694765][T12823] Bluetooth: hci5: command 0x0406 tx timeout [ 1423.712356][T27855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1423.748459][ T9] usb 5-1: config 0 descriptor?? [ 1423.769693][ T9] usbtest 5-1:0.0: FX2 device [ 1423.774447][ T9] usbtest 5-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1423.876723][T27855] 8021q: adding VLAN 0 to HW filter on device team0 [ 1423.962578][T19095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1423.969811][T19095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1424.007275][T19095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1424.014568][T19095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1424.247560][T27855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1425.159874][T27855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1425.406209][T27855] veth0_vlan: entered promiscuous mode [ 1425.413467][ T5880] Bluetooth: hci2: command tx timeout [ 1425.459881][T27855] veth1_vlan: entered promiscuous mode [ 1425.511332][ T6916] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1425.653802][T27855] veth0_macvtap: entered promiscuous mode [ 1425.699855][T27855] veth1_macvtap: entered promiscuous mode [ 1425.829855][T27855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1425.905460][T27855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1426.018279][ T3497] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.051703][T25713] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.081853][ T6916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1426.116812][T25713] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.129860][ T6916] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1426.151201][T25713] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.168204][ T6916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.210464][ T6916] usb 1-1: config 0 descriptor?? [ 1426.301340][ T6916] pwc: Askey VC010 type 2 USB webcam detected. [ 1426.474104][ T5858] usb 5-1: USB disconnect, device number 54 [ 1426.553333][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.591666][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.700319][ T6916] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1426.731044][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.736544][ T6916] pwc: recv_control_msg error -32 req 02 val 2700 [ 1426.761517][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.776563][ T6916] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1426.803987][ T6916] pwc: recv_control_msg error -32 req 04 val 1000 [ 1426.846071][ T6916] pwc: recv_control_msg error -32 req 04 val 1300 [ 1426.897250][ T6916] pwc: recv_control_msg error -32 req 04 val 1400 [ 1426.934359][ T6916] pwc: recv_control_msg error -32 req 02 val 2000 [ 1426.962178][ T6916] pwc: recv_control_msg error -32 req 02 val 2100 [ 1426.976405][T28006] /dev/rnullb0: Can't open blockdev [ 1427.021274][ T6916] pwc: recv_control_msg error -32 req 04 val 1500 [ 1427.049583][ T6916] pwc: recv_control_msg error -32 req 02 val 2500 [ 1427.082603][ T6916] pwc: recv_control_msg error -32 req 02 val 2400 [ 1427.104165][ T6916] pwc: recv_control_msg error -32 req 02 val 2600 [ 1427.140119][ T6916] pwc: recv_control_msg error -32 req 02 val 2900 [ 1427.172326][ T6916] pwc: recv_control_msg error -32 req 02 val 2800 [ 1427.241297][T24312] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1427.283136][T28013] netlink: 'syz.1.5639': attribute type 64 has an invalid length. [ 1427.318925][T28013] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5639'. [ 1427.401384][T24312] usb 5-1: device descriptor read/64, error -71 [ 1427.465436][ T5858] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1427.657787][T24312] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1427.704194][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1427.728725][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1427.761964][ T5858] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1427.818824][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.850540][T24312] usb 5-1: device descriptor read/64, error -71 [ 1427.874689][ T5858] usb 3-1: config 0 descriptor?? [ 1427.883861][T28009] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1427.968296][T24312] usb usb5-port1: attempt power cycle [ 1428.494466][T24312] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1428.544984][T24312] usb 5-1: device descriptor read/8, error -71 [ 1428.593357][ T6916] pwc: recv_control_msg error -71 req 04 val 1200 [ 1428.634797][ T6916] pwc: Registered as video103. [ 1428.685849][ T6916] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input84 [ 1428.762625][ T6916] usb 1-1: USB disconnect, device number 7 [ 1428.802599][T24312] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1428.879821][T24312] usb 5-1: device descriptor read/8, error -71 [ 1429.015571][T24312] usb usb5-port1: unable to enumerate USB device [ 1429.595508][T28039] unknown channel width for channel at 909000KHz? [ 1430.223613][ T5858] usbhid 3-1:0.0: can't add hid device: -71 [ 1430.229723][ T5858] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1430.334162][ T5858] usb 3-1: USB disconnect, device number 9 [ 1431.547115][ T5858] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1431.732494][ T5858] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1431.749943][ T5858] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1431.790373][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.836383][ T5858] usb 3-1: config 0 descriptor?? [ 1432.456861][ T5858] (null): keene_cmd_main failed (-110) [ 1432.511694][ T5858] video4linux radio48: keene_cmd_main failed (-32) [ 1432.550382][ T5858] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 1432.586675][T28094] /dev/rnullb0: Can't open blockdev [ 1432.588642][T28093] /dev/rnullb0: Can't open blockdev [ 1432.904446][T28101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5656'. [ 1433.087650][T28106] /dev/rnullb0: Can't open blockdev [ 1433.465215][T28114] /dev/rnullb0: Can't open blockdev [ 1433.556460][T24312] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1433.739998][T24312] usb 2-1: Using ep0 maxpacket: 8 [ 1433.768210][T24312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1433.806526][T24312] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1433.825496][T24312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.176244][T24312] usb 2-1: config 0 descriptor?? [ 1434.248568][ T9] usb 3-1: USB disconnect, device number 10 [ 1434.409489][T24312] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1434.672526][T18960] usb 2-1: USB disconnect, device number 49 [ 1434.903702][T28132] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1436.526658][T28146] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 1436.953174][T28185] /dev/rnullb0: Can't open blockdev [ 1437.280961][ T5880] Bluetooth: hci7: unexpected event for opcode 0x0c23 [ 1437.354569][T18960] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1437.417159][T28194] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1437.576577][T18960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1437.603387][T18960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1437.665990][T18960] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1437.701432][T18960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.756173][T18960] usb 5-1: config 0 descriptor?? [ 1438.017464][T28207] /dev/rnullb0: Can't open blockdev [ 1438.051664][T28207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5676'. [ 1438.218021][T18960] sony 0003:054C:0268.0037: item fetching failed at offset 4/5 [ 1438.249479][T18960] sony 0003:054C:0268.0037: parse failed [ 1438.255322][T18960] sony 0003:054C:0268.0037: probe with driver sony failed with error -22 [ 1438.411974][T28190] /dev/rnullb0: Can't open blockdev [ 1438.475146][T20506] usb 5-1: USB disconnect, device number 59 [ 1438.509644][T28220] /dev/rnullb0: Can't open blockdev [ 1438.546571][T28218] /dev/rnullb0: Can't open blockdev [ 1439.382723][T28236] netlink: 'syz.4.5683': attribute type 1 has an invalid length. [ 1439.449373][T28236] /dev/rnullb0: Can't open blockdev [ 1439.959652][T28243] /dev/rnullb0: Can't open blockdev [ 1440.543737][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1440.621704][ T31] INFO: task syz.9.5315:25830 blocked for more than 143 seconds. [ 1440.648700][ T31] Not tainted 6.16.0-next-20250808-syzkaller #0 [ 1440.672108][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1440.704080][ T31] task:syz.9.5315 state:D stack:27288 pid:25830 tgid:25828 ppid:23927 task_flags:0x400140 flags:0x00004004 [ 1440.716704][ T31] Call Trace: [ 1440.720314][ T31] [ 1440.723556][ T31] __schedule+0x1798/0x4cc0 [ 1440.725440][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1440.743201][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1440.746987][ T31] ? __lock_acquire+0xab9/0xd20 [ 1440.767231][ T31] ? __lock_acquire+0xab9/0xd20 [ 1440.772891][ T31] ? __pfx___schedule+0x10/0x10 [ 1440.786850][ T31] ? schedule+0x91/0x360 [ 1440.791487][T18960] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1440.800276][ T9] usb 2-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1440.811846][ T31] schedule+0x165/0x360 [ 1440.817201][ T31] schedule_preempt_disabled+0x13/0x30 [ 1440.823442][ T31] __mutex_lock+0x7e6/0x1360 [ 1440.828369][ T31] ? __mutex_lock+0x5b6/0x1360 [ 1440.834205][ T31] ? comedi_open+0xc0/0x590 [ 1440.839218][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1440.843138][ T9] usb 2-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0 [ 1440.845304][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 1440.859522][ T31] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 1440.865771][ T31] ? comedi_open+0x8b/0x590 [ 1440.870605][ T31] comedi_open+0xc0/0x590 [ 1440.878821][ T9] usb 2-1: config 12 interface 0 has no altsetting 0 [ 1440.899718][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1440.903719][ T9] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1440.905443][ T31] chrdev_open+0x4c9/0x5e0 [ 1440.926930][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1440.928191][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.932729][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1440.949662][T18960] usb 5-1: device descriptor read/64, error -71 [ 1440.963332][ T9] usb 2-1: Product: syz [ 1440.965754][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1440.968028][ T9] usb 2-1: Manufacturer: syz [ 1440.968051][ T9] usb 2-1: SerialNumber: syz [ 1440.991153][ T31] do_dentry_open+0x950/0x13f0 [ 1441.000905][ T31] vfs_open+0x3b/0x340 [ 1441.024123][ T31] ? path_openat+0x2ecd/0x3830 [ 1441.034635][ T31] path_openat+0x2ee5/0x3830 [ 1441.055419][ T31] ? arch_stack_walk+0xfc/0x150 [ 1441.072070][ T31] ? stack_depot_save_flags+0x40/0x860 [ 1441.082980][ T31] ? __pfx_path_openat+0x10/0x10 [ 1441.088016][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.096485][ T31] do_filp_open+0x1fa/0x410 [ 1441.114110][ T31] ? __lock_acquire+0xab9/0xd20 [ 1441.127996][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1441.153775][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1441.171284][ T31] ? alloc_fd+0x64c/0x6c0 [ 1441.181010][ T31] do_sys_openat2+0x121/0x1c0 [ 1441.191420][ T31] ? __se_sys_futex+0x36f/0x400 [ 1441.197916][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1441.203356][ T31] ? rcu_is_watching+0x15/0xb0 [ 1441.216931][T18960] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1441.231694][ T31] __x64_sys_openat+0x138/0x170 [ 1441.247506][ T31] do_syscall_64+0xfa/0x3b0 [ 1441.273349][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1441.281205][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1441.287336][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.297366][ T9] usb 2-1: selecting invalid altsetting 0 [ 1441.311432][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1441.334324][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.343497][ T31] RIP: 0033:0x7f5e06f8ebe9 [ 1441.355427][ T31] RSP: 002b:00007f5e07e2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1441.372467][ T31] RAX: ffffffffffffffda RBX: 00007f5e071b6090 RCX: 00007f5e06f8ebe9 [ 1441.382807][ T31] RDX: 0000000000002000 RSI: 0000200000000040 RDI: 00000000ffffff9c [ 1441.397139][T18960] usb 5-1: device descriptor read/64, error -71 [ 1441.413729][ T31] RBP: 00007f5e07011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1441.423915][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1441.443918][ T31] R13: 00007f5e071b6128 R14: 00007f5e071b6090 R15: 00007ffec7a9e608 [ 1441.469403][ T31] [ 1441.481086][ T31] [ 1441.481086][ T31] Showing all locks held in the system: [ 1441.493312][ T9] snd-usb-audio 2-1:12.0: probe with driver snd-usb-audio failed with error -12 [ 1441.513596][ T31] 5 locks held by kworker/0:0/9: [ 1441.543537][T18960] usb usb5-port1: attempt power cycle [ 1441.570429][ T31] 1 lock held by khungtaskd/31: [ 1441.574253][ T9] usb 2-1: USB disconnect, device number 50 [ 1441.575348][ T31] #0: ffffffff8e539ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1441.656394][ T31] 4 locks held by udevd/5236: [ 1441.663559][ T31] 2 locks held by getty/5627: [ 1441.689354][ T31] #0: ffff888033a160a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1441.717494][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1441.735933][ T31] 6 locks held by kworker/1:7/18960: [ 1441.743976][ T31] #0: ffff888022285548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1441.757198][T27701] udevd[27701]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1441.768163][ T31] #1: ffffc9000b6c7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1441.793120][ T31] #2: ffff888144389198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1441.810352][ T31] #3: ffff888028565518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 1441.848070][ T31] #4: ffff888027b6be68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 1441.874304][ T31] #5: ffffffff8f1f44d0 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x163/0x1750 [ 1441.906024][ T31] 2 locks held by syz.6.5308/25788: [ 1441.918591][ T31] 1 lock held by syz.9.5315/25830: [ 1441.925750][ T31] #0: ffff88814c55b8f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_open+0xc0/0x590 [ 1441.942175][ T31] 1 lock held by syz.5.5575/27549: [ 1441.952839][ T31] #0: ffff88814c55b8f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_open+0xc0/0x590 [ 1441.962484][T18960] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1441.982995][ T31] 1 lock held by rm/28277: [ 1441.995843][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1442.007714][T18960] usb 5-1: device descriptor read/8, error -71 [ 1442.023185][ T31] [ 1442.025572][ T31] ============================================= [ 1442.025572][ T31] [ 1442.036684][ T31] NMI backtrace for cpu 1 [ 1442.036707][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) [ 1442.036732][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1442.036746][ T31] Call Trace: [ 1442.036756][ T31] [ 1442.036765][ T31] dump_stack_lvl+0x189/0x250 [ 1442.036808][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1442.036853][ T31] ? __pfx__printk+0x10/0x10 [ 1442.036900][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1442.036932][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1442.036964][ T31] ? __pfx__printk+0x10/0x10 [ 1442.037002][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1442.037033][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1442.037064][ T31] watchdog+0xf60/0xfa0 [ 1442.037094][ T31] ? watchdog+0x1e2/0xfa0 [ 1442.037124][ T31] kthread+0x711/0x8a0 [ 1442.037149][ T31] ? __pfx_watchdog+0x10/0x10 [ 1442.037172][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.037195][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1442.037226][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1442.037255][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.037277][ T31] ret_from_fork+0x3f9/0x770 [ 1442.037310][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1442.037345][ T31] ? __switch_to_asm+0x39/0x70 [ 1442.037365][ T31] ? __switch_to_asm+0x33/0x70 [ 1442.037385][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.037408][ T31] ret_from_fork_asm+0x1a/0x30 [ 1442.037446][ T31] [ 1442.037456][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1442.197988][ C0] NMI backtrace for cpu 0 [ 1442.198008][ C0] CPU: 0 UID: 0 PID: 5853 Comm: syz-executor Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) [ 1442.198033][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1442.198045][ C0] RIP: 0010:sock_read_iter+0x91/0x2f0 [ 1442.198075][ C0] Code: f1 f1 f1 41 c7 44 1f 11 f3 f3 f3 f3 66 41 c7 44 1f 15 f3 f3 41 c6 44 1f 17 f3 e8 2a ef 5e f8 4c 89 e0 48 c1 e8 03 80 3c 18 00 <74> 08 4c 89 e7 e8 55 5b c2 f8 48 8d 5c 24 40 4d 8b 2c 24 49 8d 7d [ 1442.198092][ C0] RSP: 0018:ffffc9000404fb60 EFLAGS: 00000246 [ 1442.198110][ C0] RAX: 1ffff92000809fa4 RBX: dffffc0000000000 RCX: ffff888031a35a00 [ 1442.198125][ C0] RDX: 0000000000000000 RSI: ffffc9000404fd70 RDI: ffffc9000404fd20 [ 1442.198139][ C0] RBP: ffffc9000404fc90 R08: ffffc9000404fd7f R09: 0000000000000000 [ 1442.198153][ C0] R10: ffffc9000404fd70 R11: ffffffff89611410 R12: ffffc9000404fd20 [ 1442.198168][ C0] R13: 0000000000000000 R14: 1ffff92000809fa0 R15: 1ffff92000809f70 [ 1442.198182][ C0] FS: 000055555f52b500(0000) GS:ffff8881257db000(0000) knlGS:0000000000000000 [ 1442.198199][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1442.198212][ C0] CR2: 00007ffda7aa4ca8 CR3: 00000000779d2000 CR4: 00000000003526f0 [ 1442.198229][ C0] DR0: 000000000000000a DR1: 0000000000000002 DR2: 0000000000000003 [ 1442.198241][ C0] DR3: 0000000080000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1442.198254][ C0] Call Trace: [ 1442.198262][ C0] [ 1442.198272][ C0] ? __pfx_sock_read_iter+0x10/0x10 [ 1442.198295][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1442.198324][ C0] ? common_file_perm+0x1b5/0x230 [ 1442.198353][ C0] ? bpf_lsm_file_permission+0x9/0x20 [ 1442.198382][ C0] ? security_file_permission+0x75/0x290 [ 1442.198408][ C0] vfs_read+0x55a/0xa30 [ 1442.198435][ C0] ? __pfx_vfs_read+0x10/0x10 [ 1442.198460][ C0] ? __rseq_handle_notify_resume+0x37e/0x11f0 [ 1442.198493][ C0] ksys_read+0x145/0x250 [ 1442.198516][ C0] ? __pfx_ksys_read+0x10/0x10 [ 1442.198536][ C0] ? rcu_is_watching+0x15/0xb0 [ 1442.198569][ C0] ? do_syscall_64+0xbe/0x3b0 [ 1442.198588][ C0] do_syscall_64+0xfa/0x3b0 [ 1442.198605][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.198624][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1442.198643][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1442.198665][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.198683][ C0] RIP: 0033:0x7fa53f38d5bd [ 1442.198699][ C0] Code: a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b5 e8 a8 48 00 00 0f 1f 84 00 00 00 00 00 80 3d a1 af 1f 00 00 74 17 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 5b c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec [ 1442.198715][ C0] RSP: 002b:00007fffcd561438 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1442.198733][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa53f38d5bd [ 1442.198746][ C0] RDX: 0000000000000004 RSI: 00007fffcd56144c RDI: 0000000000000003 [ 1442.198758][ C0] RBP: 0000000000000000 R08: 0000000031ffd875 R09: 7fffffffffffffff [ 1442.198771][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffcd561860 [ 1442.198783][ C0] R13: 0000000000000004 R14: 00007fffcd56144c R15: 00007fffcd5614e0 [ 1442.198807][ C0] [ 1442.213945][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1442.213973][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) [ 1442.214006][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1442.214024][ T31] Call Trace: [ 1442.214035][ T31] [ 1442.214047][ T31] dump_stack_lvl+0x99/0x250 [ 1442.214092][ T31] ? __asan_memcpy+0x40/0x70 [ 1442.214130][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1442.214170][ T31] ? __pfx__printk+0x10/0x10 [ 1442.214221][ T31] vpanic+0x281/0x750 [ 1442.214256][ T31] ? __pfx_vpanic+0x10/0x10 [ 1442.214284][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 1442.214311][ T31] ? preempt_schedule+0xae/0xc0 [ 1442.214349][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1442.214393][ T31] panic+0xb9/0xc0 [ 1442.214422][ T31] ? __pfx_panic+0x10/0x10 [ 1442.214455][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1442.214493][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1442.214529][ T31] watchdog+0xf9f/0xfa0 [ 1442.214639][ T31] ? watchdog+0x1e2/0xfa0 [ 1442.214687][ T31] kthread+0x711/0x8a0 [ 1442.214717][ T31] ? __pfx_watchdog+0x10/0x10 [ 1442.214744][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.214771][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1442.214818][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1442.214854][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.214879][ T31] ret_from_fork+0x3f9/0x770 [ 1442.214919][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1442.214959][ T31] ? __switch_to_asm+0x39/0x70 [ 1442.214985][ T31] ? __switch_to_asm+0x33/0x70 [ 1442.215011][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.215035][ T31] ret_from_fork_asm+0x1a/0x30 [ 1442.215080][ T31] [ 1442.671280][ T31] Kernel Offset: disabled [ 1442.675636][ T31] Rebooting in 86400 seconds..