last executing test programs: 18m40.51845835s ago: executing program 32 (id=1312): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x182804, 0x0) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r5, &(0x7f00000006c0)=[{&(0x7f0000000100)="89e7ee", 0x3}, {&(0x7f0000000440)="9c74dfbf77572856c888a8", 0xb}, {&(0x7f0000000280)="1b0ec1e3e1ea", 0x6}], 0x3) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) write$UHID_INPUT(r2, &(0x7f0000001980)={0xc, {"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", 0x5c1}}, 0x505) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) 18m10.281914322s ago: executing program 33 (id=1400): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) close(0x3) socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0xbf43, @remote, 0x10001}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x6, 0x9) close(0x3) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="c46b0ecd6524", 0x6}], 0x1, 0x7f, 0xf85c) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009003610ef171e7206de010203010902120001000000000904"], 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x5dc0, 0x48502) syz_open_dev$usbfs(&(0x7f0000000380), 0x2fb8, 0xc0002) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={0x0}) r2 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000002c0)={0x103, 0x35315258, 0x140, 0xb4, 0x2, @stepwise={{0xda7f, 0x8}, {0x0, 0x1}, {0x7, 0x1}}}) socket$packet(0x11, 0x3, 0x300) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000c00)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x18) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@offload={0xc, 0x1c, {r6, 0x4}}]}, 0xc4}}, 0x0) 14m21.762031116s ago: executing program 34 (id=2581): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) close(0xffffffffffffffff) r3 = getpid() syz_pidfd_open(r3, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1100000004000000000000000004000000ff000000000000"], 0x325100) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, 0x0, &(0x7f00000001c0)) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000002c0)={0xb, @pix_mp={0x6dc, 0xdaf1, 0x59555956, 0xd, 0x1, [{0x1, 0x1}, {0x3, 0xa}, {0x4, 0x3fe}, {0xc061, 0x5}, {0xfffffff8, 0x1}, {0x1}, {0x4, 0x7}, {0x3, 0x400}], 0x0, 0x9b, 0x0, 0x0, 0x5}}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f00000012c0)={&(0x7f0000000200)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@rdma_args={0x48, 0x114, 0x1, {{0xff}, {0x0}, 0x0, 0x100000, 0x0, 0x1}}], 0x48, 0x4804}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r6) sendmsg$NLBL_MGMT_C_REMOVE(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008011}, 0x10) writev(r0, &(0x7f0000000280)=[{&(0x7f00000003c0)="e1cc8fbe7a24a44b589393be0cf74b1e89aa9de424f59afb83dd2caefbd4203f231c94ab6115be0fce06bff17ca46ba7c169066702b8e674b153dd5421a4d2f78c985fc5ff5549c487e9e8a6848c5f0e966d8192c7715d205af4a265d5a20d20ae904240de53a19deb7e9b93ec17a5bbc13b036031a1395d2ff1ddf93b3d58cbd92c73ae4fad46c34afe5f995b99e2bd5a880105b4d2917a7f116bc24d84dcbbafbd8e51a515b6d5ec2afbc5f081cebcb437ca68b35107bdaf2bffacc40f29e09e32448477965a63eb2544fb468a79229c2df703463b74bb302eee419b7215d0ffb9899b54212dbf5ca9c4339a1a1ba13edbe1a683b2ce", 0xf7}, {&(0x7f00000005c0)="7bef73f42162daa1ffb7bf15c8977be5276b42e4c66f6d205c0e178d149d18585b7f4ab787b4cd975f3bf63e90eccd1e5eb2c71f12f35abb26725bc01fa2f0f32edf4ca642469b410c6a39e9554b1efecbd4cfecf819f160393fbdfda04cf1571e1b371acbb4194059d35231fa14672bc374e40d71fcff8c9330a4c9c91074ad6010a1bf2c762ecff6b319b30503ec45fa0251b290643b1f38", 0x99}, {&(0x7f0000000800)="85638ae0debeb53201514599857aa39ce565db2c5694baa1e444460635d8fe8d0344b78a1dea79a2dd8c7ee29884994951f4760e07019e763aeaf6aeb758d88d1d5918c9be876ec2aacf2f9358ad9b647e787303716b07054fb51dc9c32e11c2aae8c370295f77e5ef958e43da17dba246497bcde46d2fd61089d4de2bf2b49db9", 0x81}], 0x3) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="02002cbd7000fddbdf2506000000080007006401010214000500fe80000000000000000000000000003108000700e0000001080002000000000008000800ac1414bb08000c000300000008000c000300000008000700ac1414bb08000800ac1414bb"], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) 12m39.818788123s ago: executing program 35 (id=2726): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) rmdir(&(0x7f0000000100)='./file0\x00') syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001736e7202d15390500000000030109021b00020000000009040005004c55de000904"], 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x20, 0x1, 0x0, "9611e6d6ffc88885163200000000000000000300000000000000010083df00"}) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x3f, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0xffffffffffffffc1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_connect(0x5, 0xca, &(0x7f0000000b80)={{0x12, 0x1, 0x110, 0xe5, 0xd1, 0xfe, 0xff, 0x5c6, 0x9010, 0x3c0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb8, 0x1, 0x1, 0x0, 0x30, 0x81, [{{0x9, 0x4, 0x5, 0x1, 0x3, 0x43, 0x73, 0x91, 0x2, [@uac_as={[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x40, 0x9, 0x5}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0x40, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0xde}]}], [{{0x9, 0x5, 0x80, 0x10, 0x8, 0x2, 0x81, 0x6, [@generic={0x3b, 0x3, "055caebf40b574d31b8c9b2e32188c7a1ee2304a8c04374224d8cf18e11b6825ee52353ff08d1df67baa35c4e0e0431baf7fef22dad5357959"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x9, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x8000}, @generic={0x14, 0x2, "564f4da5484cb0f21bc98464ac1f3cd0ab4f"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0x7, 0x8, 0x2}}]}}]}}]}}, 0x0) syz_usb_ep_write(r4, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x50, 0xf2, 0xb7, 0x68, 0x8, 0x5e3, 0x503, 0xe559, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x5, 0x94, 0xf0, 0x7, [{{0x9, 0x4, 0xc5, 0x9, 0x0, 0xff, 0x76, 0xef, 0x8}}, {{0x9, 0x4, 0xae, 0x7f, 0x0, 0x3, 0xc7, 0x2, 0x8}}]}}]}}, 0x0) preadv(r1, &(0x7f000000e2c0)=[{&(0x7f000000bf80)=""/147, 0x93}], 0x1, 0x4000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f00000000c0)=0xe8) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000001c0)='asymmetric\x00', &(0x7f00000003c0)=@secondary) keyctl$link(0x8, r6, r6) r7 = getuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000400, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',version=9p2000.L,access=client,access=', @ANYRESDEC=r5, @ANYBLOB=',mmap,access=client,nodevmap,uid>', @ANYRESDEC=r7, @ANYBLOB="2c6170707261695f747970653d696d617369672c6d61736b3d4d41595f524541442c7375626a5f726f6c653d21247b2d297b5ad02d2c000000"]) 12m37.655509953s ago: executing program 36 (id=2784): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4080) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r2, 0x2, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000040) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f002, 0x6}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000002ac0), 0x0, 0x0) read$hidraw(r5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000080)=0x80, 0x4) 9m15.244906905s ago: executing program 37 (id=3772): r0 = socket$packet(0x11, 0xa, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x1a, r6, 0x1, 0x1, 0x6, @broadcast}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = fsopen(&(0x7f0000000200)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0xe}], 0x1) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r10) move_mount(r10, 0x0, 0xffffffffffffff9c, 0x0, 0x45) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x204001, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x1000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r10, 0x53bec000) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@private1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000800)=0xe8) r12 = getgid() r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$VIDIOC_EXPBUF(r10, 0xc0405610, &(0x7f0000000840)={0xb, 0xfffffff7, 0x1, 0x800, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000880)={0x0}, &(0x7f0000000b00)=0xc) statx(r10, &(0x7f0000000b40)='./file0\x00', 0x6000, 0x8, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=0x0) sendmmsg$unix(r4, &(0x7f0000000e00)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000380)="e5d968689f580f52429d62395a179b4bef8d4bea3fe0a460e972727c1a6aa7e5f52807f16f000b85dd971fef4aa8cfcdb6484b0d7eccf17ce28ee55f4dc2c42832ba3ef2313354a33dc5dfa16ddaa4c8987e9b64f9e0edc9063e76bc44e570bf34e92778888cf71a045535f89910fc395d8b35ea9e846a98cf22714f96dee8077580e00ffb2bcf609a92c30d24e27b8eae2cc61b705c904776adae29434cc1ddead4f1a4b662220ccebb7e3abffc07d029f0bb78a7e7e8d2", 0xb8}, {&(0x7f0000000440)="6c7bf78334332551d2e7d9a2692be61d2c99c3e8e8f86585cac79e5bb517159982f16266d1dc53d62a3fbda3577163f062bf3458cc8a19007b13634cfafdf6371f837a8a4c3e7c6d3904767640f7dbb5651177b589d0189787b8a70a7548912d481e9c", 0x63}], 0x2, &(0x7f0000000640)=[@rights={{0x20, 0x1, 0x1, [r3, r0, r7, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40, 0x20000000}}, {{&(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000740)="38d5a67ba07ca49d027b855794ed3f34ab47acf8afa572d6f13b36136a4821637b62c1022063fd850e5b847c18", 0x2d}], 0x1, &(0x7f0000000d40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r11, r12}}}, @rights={{0x34, 0x1, 0x1, [r8, r3, r5, r8, r1, r0, r13, r14, r1]}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @rights={{0x20, 0x1, 0x1, [r5, r4, r7, r3]}}], 0x98}}], 0x2, 0x4010) 6m43.080597756s ago: executing program 0 (id=4607): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) (async) memfd_create(&(0x7f0000000280)='nl80211\x00', 0x6) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 6m42.592019073s ago: executing program 0 (id=4609): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) (async, rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="41000000010001", 0x7) (async) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000480)={0x0, "d53c0eb582cba9f1bc16e9ca85647283ccf9e9b7cfa617c953f8334fb77453e9d63eafb578307ceb8c0de24e1a2799fbe25a20bdffddd2b9708a52e314708472", 0x3d}, 0x48, r0) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xfffffffffffffffe) (async) socketpair(0x26, 0x80000, 0x5, &(0x7f0000000600)) (async) r4 = socket(0x10, 0x3, 0x0) fsopen(0x0, 0x0) (async, rerun: 32) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001e00010a"], 0x14}}, 0x0) (async, rerun: 32) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x4, 0x9e, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x78, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x2, 0x1, 0x1, 0x80, 0x58, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x62ce, 0x7fff, 0x9}, {0x6, 0x24, 0x1a, 0x5, 0x26}, [@country_functional={0x8, 0x24, 0x7, 0x5, 0x800, [0x4]}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x100, 0xf2, 0x4, 0x1, 0x81}, @mbim={0xc, 0x24, 0x1b, 0x6, 0xfff7, 0xd6, 0x57, 0x8c1b, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0xb4, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x46, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x1d7, 0x3, 0x7, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0x5, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x8, 0x9}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x2, 0x1, 0x9, 0x8, 0x2}, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x4, 0x40, 0xeb}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1c09}}]}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async) splice(r4, 0x0, r6, 0x0, 0x8002, 0x0) (async) r7 = dup(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100006e40b740e1092151c1400102030109021200010000800000000000003cac2400"], 0x0) (async, rerun: 32) r8 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) (rerun: 32) shmat(r8, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$tun(r7, &(0x7f0000000500)={@void, @val={0x1, 0x81, 0xfff7, 0x0, 0xf, 0x2d}, @eth={@broadcast, @local, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0x34a3}, {0xb3d}, {0x5}, {0x8e0c}, {0x800}], @llc={@llc={0xff, 0xff, "231b", "6704120e0baab60cd297dd70821b1d4f09941971b57684853fbe108e872f244de01260f214127bc80462cec8be5586dc7c787948394ec9224af3a105b923c0d43c98c7f83daaf7322adb493045efcc0416add6ee07f0bcede154684bd0721638e30cb5bc2a68989b95d19cacdd9f3cdcf143aff58a624d08ecb57c22a654939775086dc639c3893429190fc80479408c83809d02a94322d4201ef3f89c337941ef3c9096810eb2f948227964330fd6daef4ec9"}}}}}}}, 0xe7) (async) shmctl$IPC_INFO(r8, 0x3, &(0x7f0000001180)=""/4096) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000100)={0x0, 0x6000}) (async) clock_gettime(0x0, 0x0) (async, rerun: 32) recvmmsg(r5, 0x0, 0x0, 0x52418e567e5a9d8b, 0x0) (rerun: 32) 6m42.498455571s ago: executing program 0 (id=4611): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4880) (async) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) syz_open_procfs(r1, &(0x7f0000000240)='smaps\x00') (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000440)=0x20) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000000c0)={{0x0, 0xcaea}, 0x100, './cgroup\x00'}) 6m42.336621892s ago: executing program 0 (id=4614): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x882, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) write$midi(r0, 0x0, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext3\x00', 0x400, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0xfffffffc) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x404800, 0x10, 0x26}, 0x18) 6m42.241386355s ago: executing program 0 (id=4615): creat(&(0x7f0000000080)='./file0\x00', 0x2) (async) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0xca}, 0x1c) (async) getpeername(r0, 0x0, &(0x7f0000000180)) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 6m41.180235459s ago: executing program 0 (id=4620): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020008008000140ffffff0600000000000000e405000500020000000500010006000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00007c7000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r5 = msgget$private(0x0, 0x790) msgrcv(r5, 0x0, 0x0, 0x0, 0x0) msgrcv(r5, 0x0, 0x0, 0x1, 0x3000) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000200)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x0, 0x4e8, 0x0, 0xfffffffffffffffb, 0x5, 0x8, 0x1, 0x7, 0x7}) msgsnd(r5, &(0x7f0000001180)={0x0, "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"}, 0x1008, 0x800) r6 = semget$private(0x0, 0x7, 0x3c0) semop(r6, &(0x7f00000005c0)=[{0x3, 0xa0ea, 0x1000}], 0x1) semctl$IPC_RMID(r6, 0x0, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0x0, &(0x7f0000000300)) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), &(0x7f0000000600)={0x0, 0xfb, 0x10d, 0x1, 0xb, "bd1c2c2eb41fcdb9fe8e56f254161a2e", "84c284520962c4d5d06b81ab0240d411ae0f980cc263b377cbe5c2cccc713f6e7f81bd440911fd396eaacf0a1d18c5b5111b359760d1b696801093c2bb21d56282773b0c3f8ed7f15f94ad139f3094bb9508f007c42a4e7d5f87ea586f4987468cc2a396f1a4c279cc656784722215a14747631c98c9b8f9018a9ae8c67488a931cc0a9ac4a4d94c0da0b1606b7f48784d0cb7f2b5f299994251661e8b86c8af5c9591f0a559688364b1a21f30cee806e32a9160ceae103d84caffdc0efc37f087ec56299390a5f7bf49f9f62054ddeaf1007d6cd35f5553c0364ebca7a7929ddab2fe65906bd3a34a14811580be3734c1cc435c9c176977"}, 0x10d, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x12, r7, 0x99b33000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 6m40.832081682s ago: executing program 38 (id=4620): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020008008000140ffffff0600000000000000e405000500020000000500010006000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00007c7000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r5 = msgget$private(0x0, 0x790) msgrcv(r5, 0x0, 0x0, 0x0, 0x0) msgrcv(r5, 0x0, 0x0, 0x1, 0x3000) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000200)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x0, 0x4e8, 0x0, 0xfffffffffffffffb, 0x5, 0x8, 0x1, 0x7, 0x7}) msgsnd(r5, &(0x7f0000001180)={0x0, "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"}, 0x1008, 0x800) r6 = semget$private(0x0, 0x7, 0x3c0) semop(r6, &(0x7f00000005c0)=[{0x3, 0xa0ea, 0x1000}], 0x1) semctl$IPC_RMID(r6, 0x0, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0x0, &(0x7f0000000300)) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), &(0x7f0000000600)={0x0, 0xfb, 0x10d, 0x1, 0xb, "bd1c2c2eb41fcdb9fe8e56f254161a2e", "84c284520962c4d5d06b81ab0240d411ae0f980cc263b377cbe5c2cccc713f6e7f81bd440911fd396eaacf0a1d18c5b5111b359760d1b696801093c2bb21d56282773b0c3f8ed7f15f94ad139f3094bb9508f007c42a4e7d5f87ea586f4987468cc2a396f1a4c279cc656784722215a14747631c98c9b8f9018a9ae8c67488a931cc0a9ac4a4d94c0da0b1606b7f48784d0cb7f2b5f299994251661e8b86c8af5c9591f0a559688364b1a21f30cee806e32a9160ceae103d84caffdc0efc37f087ec56299390a5f7bf49f9f62054ddeaf1007d6cd35f5553c0364ebca7a7929ddab2fe65906bd3a34a14811580be3734c1cc435c9c176977"}, 0x10d, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x12, r7, 0x99b33000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 2m52.400068371s ago: executing program 7 (id=5901): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @mcast1, 0x4}, 0x1c) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) fchdir(r0) mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x400408, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2a000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x134) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x8004, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6fb1000000000000003030303030303030303030303032303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f00000013c0)={{}, 0x0, 0x14, @unused=[0x7fffffffffffffff, 0x7c6839d2, 0x1eb2, 0x4], @subvolid=0x21b1746d}) 2m51.571237518s ago: executing program 7 (id=5903): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="4af802592c1f925d64d89014c25fd9aeaa6e2336cb7b8327a039fb5f3669fe0465936af17c0d64e9bf98ff3403ceed78640a517eb16ef5", 0x37) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvmsg(r0, &(0x7f0000000280)={&(0x7f0000000040)=@qipcrtr, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000000100)=""/186, 0xba}, {&(0x7f00000001c0)=""/26, 0x1a}], 0x3, &(0x7f0000000240)=""/19, 0x13}, 0x42) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xa6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r2) r3 = dup2(r2, r0) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder-control\x00', 0x802, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f00000004c0)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r5, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8881}, 0x8880) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x8010, r3, 0xa0ab1000) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) r7 = accept4(r6, &(0x7f0000000640)=@x25, &(0x7f00000006c0)=0x80, 0x80800) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x56}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r8}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x13, 0x13, [{0x12}, {0xd}, {0x6c, 0x1}, {0x1}, {0x6, 0x1}, {0x6, 0x1}, {0x6, 0x1}, {0x6c}, {0x48}, {0x16}, {0xc}, {0x18, 0x1}, {0xc}, {0x6c, 0x1}, {0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000880)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f00000008c0)=0x1ff) r10 = accept(r7, &(0x7f0000000900)=@xdp, &(0x7f0000000980)=0x80) ioctl$EVIOCGEFFECTS(r9, 0x80044584, &(0x7f00000009c0)=""/251) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) r12 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400800, 0x0) sendfile(r11, r12, &(0x7f0000000b00)=0xfff, 0xb409) sendmsg$BATADV_CMD_GET_GATEWAYS(r10, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x802}, 0x40085) r13 = syz_usb_connect(0x3, 0xcc1, &(0x7f0000000c40)={{0x12, 0x1, 0x310, 0xc3, 0x4f, 0xf1, 0x8, 0x108c, 0x168, 0xfa6c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcaf, 0x3, 0x7, 0xb, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0xdc, 0x7, 0x95, 0x90, 0xf5, 0x6, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "e8"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x8001, 0x800, 0x9}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x0, 0xde, 0x4, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x5, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x5, 0xee, 0x3, 0x8, 0xf3}, @country_functional={0x10, 0x24, 0x7, 0x2e, 0x1, [0x1000, 0x2, 0xae69, 0x6, 0x1664]}]}], [{{0x9, 0x5, 0xf, 0x0, 0x40, 0x18, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xd9, 0x40}]}}, {{0x9, 0x5, 0x8d, 0x1, 0x7ff, 0x1, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x7}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x9, 0xff, 0xa, [@generic={0x25, 0x11, "95fcf89854115b39ed3681ae6d87c742a415e900cb943354e8cce7902fefcb62347586"}, @generic={0xc4, 0xe, "ae5e84704916b96668924951241790ab9243521f070b65592ab2d06913b1e56621c20b70ff1b7345f3907dfcdb425b0c5c3ca270a9cf10ce9cac8f579852e4041c01bab67cfe7423ab5c62118459165bc7cb03970870d83741d4ca92eb8b9d5cd45626baceee8d128795b04e4a21c384204e6271eda6865544fe53f1c6b463f750fad4bee1b734946db9843a3c0afe4b1ce9b7d8ccc83084041acb6cee184cc8aa23daa95d0d172828fe9294844494b66b56e26cfbba53df64e2e5ece977372d8f6e"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x3ff, 0x9, 0xff, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8b, 0x3ff}]}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0x7f, 0x7, 0xd4, [@generic={0x96, 0x22, "246fb003820dbff58fe4f13ebec8c85dd733c19fd52e1e679658db4bbd4fa171228843cee10606668e5f9781f5f2d8e6a704a13fa358a374db4fd070657d0166c778b5169e10d91a814695e4e83caea1843d81ae6f2d100c53aed131c28c14156e91528a8450f31be1b896b805fac9aa88fe7ddd9140ba974b491945edeb69a839b531ee2275ae5b12e0f16d3d4bde19a611ca27"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x3ff, 0x7, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x75a}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x2, 0x2, 0x9, [@generic={0xa5, 0x22, "516d8bb1307e9eca2e2f4d8863f3620ec70f0e9ca5f69e9444dff47149777f5ea79cda223470b739010b4b9006bcc3c15fbcfaf5773d517906006cdd46d7fe55d32916eb4f2687cb17208317f80b398cee1b457f3f3cbe1bf13e08914c0f96eb90c76f34206e9222906c8867c0f22b857fb1c1be81a208a154e85722e678cdfeab4a6f6c19afeb73a16b5b25e40a3de1e11da2d720feb9506e81f93ece345ae0ee169a"}]}}]}}, {{0x9, 0x4, 0xea, 0x80, 0xe, 0x3d, 0xdb, 0xb, 0x2, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "3718270b"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x19303333, 0x101, 0xfffb}, [@obex={0x5}, @obex={0x5, 0x24, 0x15, 0x7f}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffe, 0xff, 0x6}, @obex={0x5, 0x24, 0x15, 0x7}, @mdlm_detail={0x73, 0x24, 0x13, 0x10, "c2a3020fb53bdef5cba3c31bb749a63be4c3dfbfecf90094f71a1882afad8be13408c79c016e2dd0a5cb106cff36b3e4ee910b29a43e8040993e0d7cb069bc6138def27a0e50c73fc0439400b71dba00cea8d1a81e90ec576cb8c421a7f0a39fede0398bd801f0f0592dbea6aecd46"}]}], [{{0x9, 0x5, 0xb, 0x0, 0x400, 0x8, 0x6d, 0x3, [@generic={0xb8, 0x25, "761fc3837a9adf5c23b99591270b5a2881924dcb1f54d6adbea9addb15a887530dfce494a99af8e591a31511fcf2c4df8fa5e60416c9e744c402f2c1fa62e1e89838317401804f6081d2fba5d7953233fbc1d48223d0a0399b3050e61b6804b6053cad8297b86a630e1d11fbb4433093dfd9d91ea47ed0746dc9b56fc4f17bae4732a4aaedee1a1658666483e90648fe5852b7416726889d2f5f4b6354e7ccaddc3d4bec096117237618f8ba088a46b2fe276f734cc0"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x10, 0xb, 0xb3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x3}]}}, {{0x9, 0x5, 0xf, 0x14, 0x20, 0x8, 0x63, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x7ba5}, @generic={0x86, 0x10, "f36dbde7583515f61ec99ce0f6f319949c008e5f367397c22613f85cd2b010fcb1dcab4d4e51f7dc9041fc5cf726e5957eebe2f8eda92e0b0d65c8d7cb5c622251c96824bb6666db7b269495b2cc78f21ee42be9a73c3ebad4e85132d796153e69c676463991a53637e00f1a8406c1ef29e16d383c03871ba823ed7f1bdf7caa70afebf2"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x39, 0x9, 0x6, [@generic={0xd9, 0x0, "720fa474b83a58b2c9ea4f5141973d63c1fd1903efb6a16b27999d44b426871a8f8dbd72b8ec9beb87a94addac6a35001ff731d75867280ea14e46f7c4604778975b5ea8a29e50e12132394bbe3762cf1c8d0c92af50801ebc1d0661593d4dda4e3c4e1bd850121db861b8901c79f374cbf175ffdedb9dc5d3b80d0e79bb006369836c5a0a429b72d19f2fc8e93054004ad68d8403810e161139ad18417fdcc9b712a3ed73e4b52f4dadfcce555f4b6d1f3ba691a5905882c3ca30ff7023837fd6da132c3977fed7a1f8eb48bae006b80adcb4f11938f5"}, @generic={0xfa, 0x31, "b6d973d39b84e433afad5d6d894034623bd8f78d848692d84fe26bdcb9e74355251dadc11fc436ff7ceda8dbc6356704df17d7928e7b0039b105802bb677ca356cc20d616debbb647ea97385a6a6cb4afe328747c5fcfe9e9913f61c979de54a05ac4527a1d70aa3bbe5796d63d8aac3ea1dd560b312c35c108b34f390efe3ebe339b7bf61fb3c869eadb109ed283037d9e0a33a3ae81b06134a0522cb5963d4c9feb2a53d3a0c446133c98c7dfdc493b41244df701eb2094657838542af0b7771172ff29e5dd09ab83bad29cd20ed7870ff2fbe2a4d8bd722ec350632e34c7d1509ff3299ab392d58102301a497334a977833adc43d3529"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x20, 0xb, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x65, 0x1}]}}, {{0x9, 0x5, 0xa, 0x3, 0x0, 0x3, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x10}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x4f, 0x4, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x5}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x4, 0x1, 0x0, [@generic={0xcf, 0x3b, "ddef57d5410e820b6dc8c7ac4e4a967b60a98f84a5c522abd7c149067eff117549ff00111d327a5f9796b41be48db807d8a8fa79b2b72f6e9497bc1e42ebd75ce5c6c91a7bfce51a66e26838229db214b3d683aa149f6e343c89cfc576fe4fea56fa7487abcb833b7c21ef188b7cbecf32db41bede7c9c4d7224a9c1a32375d1445515d10f99cad2fe494bcb2dddac241d45d870d7263c84080f5f281d87513be2bbeb9b33e048d4cd7a57f01826de19f289b250c784f522563e720c8b50c519281c7ba52691fdff5d9909b941"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x0, 0x1, 0xc0, 0xb8, [@generic={0x2d, 0xe, "fba22f5a007025fe456b801f5f6c21be2665f5154bbe85bddf757c9d08df2f37b24247a96ae68833b18173"}, @generic={0xc5, 0x11, "bffcabbb391db9aa33ca9d9b2f3ef34ca9f8fa54ac6a101fff7dfef5673be506afec11e149a8f79d017643491cd392d7e297f74deb3eebd6c3b8b14683bab25193cff70faa8917af0a97885063b786139922c54fb9f4f80c5e31051bbc33bebad810957efb25882523f975a923e38423c8fc0a5ddb535a1a5daa89ab16583591e0ccd27785c9ec9f36b7ae4bd8eaec0bf1a7766f5be1b9b97ce63233f060c13b2ca46824a02f43433cb96255cf9072b5f24be282ab3b959085ee1d0d9770108f3f8019"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x200, 0x9, 0xe, 0xfa, [@generic={0x66, 0xb, "fae4a14aea6c11d569056d9e5b8723b4e8fe9d44e8fc0aae467fd9afb7b80f2f897774a5aeea7262f087a9609c389f5aad8bee7a747b1e5c1ae47c631cfd3c98904c426f79177905d2adb3d026974e724384c6548a9b598330e28dc84be87b5b687dd3f1"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x80, 0x6, 0x5, [@generic={0x4d, 0x23, "fc6cdbe0eb51409ef55ac48ac6ec5cea9abd718e29dec5714af8df52e1045656cb2261dcc46026e2833187540bdb247c24343f8dbcfb775a62cf8063846bfdd0c8def5e48558154b522d28"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x3ff, 0xe, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x40}]}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0x5, 0x6, 0x7d, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x9}]}}, {{0x9, 0x5, 0x4, 0x4, 0x5ff, 0x4d, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1c2, 0x4, 0x9}]}}]}}, {{0x9, 0x4, 0x3f, 0xfb, 0xa, 0x54, 0x7a, 0xa2, 0x7, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "3885fc"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8, 0x100, 0x4}, {0x6, 0x24, 0x1a, 0xfbb3, 0x1b}, [@mdlm_detail={0x4, 0x24, 0x13, 0xfc}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x101, 0x0, 0x1b, 0x5, 0x4}, @country_functional={0x10, 0x24, 0x7, 0x4, 0x8, [0x8, 0x8000, 0x1, 0x10, 0x6]}, @mdlm={0x15, 0x24, 0x12, 0x2ca}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x5, 0xb5, 0x2, 0xffff}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}]}, @uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x52, 0x4, 0x1, 0xf, "e35d2c7fad2da55fde"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x7, 0x1001}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x1, 0x0, 0x22, "4a3b9cc9b0e5d9"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xd, 0x7f, 0xff, "4cf7"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x8, 0x2, "eed04b46"}]}], [{{0x9, 0x5, 0xa, 0xc, 0x200, 0x78, 0xd, 0x6b, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x1}]}}, {{0x9, 0x5, 0x80, 0x2, 0x20, 0x6, 0x5, 0x6, [@generic={0x4, 0x3, "cf1b"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x3ff, 0x3, 0x4, 0x4, [@generic={0x54, 0x21, "5a3beffadd35d50fdda2caedf71d7e9fa48e3e8ea8ef6960d66098dd6ff49236591293e27150fb680615033f4edec82f4b37b5ad20a681311210e27742a309c3d36e0e744f937d204a90c1e9c32eb1a21a23"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0xb3, 0x8, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x8}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x3, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xb, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xff5f}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x62, 0x4, 0x4, [@generic={0x27, 0x12, "0d5ff4975e77be3cbd114b6afb4e8c12ea6c924de5d446ecde6669794ab48dbc518abf78c3"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x8, 0x78, 0x1, [@generic={0x73, 0x22, "315aae3874ee99b794fc4a18a47f28703aacfce6fd819705ad8252df07005de0f6f828b14bce3e92652d84372d6c8f5b6aaa2dab562597377f412ac21e130ce51a69f6dcc1465a8582c6ab2b25b94d8b68b25964061d8f432e09e78f3e41bf9c7769ea90d14deab2f5ac5d4e17e116db18"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xfa, 0x1}]}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x4, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x2, 0x8, 0x6, [@generic={0x33, 0x6, "64e7c3c2311e9dfce5bd223c7e3751e3d60cef5baf88402933f8bc48b4e9286ecccf8da3d9ece2927645efda518a248c2a"}, @generic={0x8b, 0x10, "51732d523a452e408e8dce339a3a6cbb6d2499f6646103453eb9b0533aa49656b0eedd3d65eb3596ed02a2113bed0e7d7b3c0bcc7dcf8c1de3f0ae32ef82b1eb7b576cf214bd4c0de0be463680b1b4854a403bb3225fa38e46d866aac2f9b617e03317d01b2f840841b8fa507c23974a9f8af1c2a70b45a2c1697bedf0d28533937000ea37a6e37fa5"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x400, 0x4, 0xbe, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0xfff2}]}}]}}]}}]}}, &(0x7f0000001d40)={0xa, &(0x7f0000001940)={0xa, 0x6, 0x200, 0x0, 0x1, 0x5, 0x40, 0x1}, 0xf, &(0x7f0000001980)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xb1, 0x7, 0x7}]}, 0x9, [{0x63, &(0x7f00000019c0)=@string={0x63, 0x3, "a01bcc790832d6b59ac6542caf49e29e27e0ad7b97db02fccfa2a462870a9d15b15484ec2be94cbab5bb157fb72839f1cafe6692ca66438d3af0df92e274801d3ee3fcdf730e437d64ec4010f0f56ee60947f7db0d880228c9d5059b314a2af491"}}, {0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x22, &(0x7f0000001a80)=@string={0x22, 0x3, "7122b252e456c9c49a88d1ca500a2b329221abfd5a90bc85919575529cfc5cb8"}}, {0xaa, &(0x7f0000001ac0)=@string={0xaa, 0x3, "75ea696bcee65f1b4b9a9aa5988ac46d5c7c03a78c96fb9f6be697e5a5a36040263edb8b17c60d8d7964507bf7301e27c5a8d28adea217eea4008908787c257b468035a7a7aa99f0b5f4c2e05f2c2165e119c45cae58deffda1426d95b9707dcde3f8cb84200243ad2a3f85fb8d506f907a09a093618cea4b849cf1294d51237ea2726c67fb33dcb63f55297ab124eecc719f00ab6b96bf38a8a3cf8d69c1fd0bf873d1f20537ace"}}, {0x4, &(0x7f0000001b80)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000001bc0)=@lang_id={0x4, 0x3, 0x411}}, {0xd, &(0x7f0000001c00)=@string={0xd, 0x3, "01d7bff6051f61300510c7"}}, {0x89, &(0x7f0000001c40)=@string={0x89, 0x3, "8b6d4142ddb8d1a7ae348aebd3480d8d3594bedc3dcc5f2bb58a0e878fdfc6f9770c2d189f1283b3ed5fbd1f612655e27e797ffd408cdd1e0d7817ef6f4e08927253bc891cad113d551755d8984a0cf915bec5c60e9350bd79bedb3d77ac88b0ce4ff5efe80a2e2f452e5203cd49212ed92f897a6a36d5af8ba01f11fc4fb50a83e1c5337bf584"}}, {0x4, &(0x7f0000001d00)=@lang_id={0x4, 0x3, 0x80c}}]}) syz_usb_disconnect(r13) r14 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001e00), 0x345403, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r14, 0x40096100, &(0x7f0000001e40)={{}, 0x8}) 2m50.645309803s ago: executing program 3 (id=5909): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = syz_io_uring_setup(0x4722, &(0x7f0000000000)={0x0, 0xb1c1, 0x2000, 0x1, 0x29f}, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00007fd000/0x4000)=nil, 0x4000, 0x200000c, 0x100010, r1, 0x8000000) 2m49.969383605s ago: executing program 3 (id=5916): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x13, r0, 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x5, 0x3a, '{&:@[', 0x3a, '', 0x3a, './file0'}, 0x2c) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r2, 0x2000) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x13, r0, 0x0) (async) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x5, 0x3a, '{&:@[', 0x3a, '', 0x3a, './file0'}, 0x2c) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r2, 0x2000) (async) 2m49.90346486s ago: executing program 9 (id=5917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000001c0)={@remote, 0x0}, &(0x7f0000000200)=0x14) bind$packet(r1, &(0x7f0000000240)={0x11, 0x6, r2, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000003010104000000000000000002000000240001801400018008000100e000283d223c000108000200e000747c5d7b18ccdaf70100"], 0x38}}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) 2m49.736263161s ago: executing program 9 (id=5918): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000040)=""/117, 0x1108000, 0x1000, 0xbb28}, 0x20) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) 2m49.696567074s ago: executing program 9 (id=5919): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_G_PHYS_ADDR(r0, 0x80026101, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc004ae0a, &(0x7f0000000000)) (async) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc004ae0a, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 2m49.51596697s ago: executing program 9 (id=5921): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00', @random}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000000)={'syzkaller0\x00', @random="110000000002"}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'team0\x00', {0x2, 0x4e21, @empty}}) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) (async) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e24, 0x10, @private2={0xfc, 0x2, '\x00', 0x3}, 0x80000001}}, 0x1, 0x2}, 0x90) 2m49.351997033s ago: executing program 8 (id=5922): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2001000010003b620000000000000000fe8000000000000000000000000000bbac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000108001d000000000008001e000000000014000e"], 0x120}}, 0x0) (async) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff05000500", 0x2c}, {&(0x7f00000019c0)="06bb", 0x2}], 0x2}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r3) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108804400208024000100000000000100000000000000fdffff01000000000000000000000000000000001400040003000000ac1414bb00000000000000000600050000000000000100802400020073e591ec06154031d3954ac0e16752e72640f08b5281a8461d17d26d12f2bbb6060005000021000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228c00098028000080060001000a0000001400020020010000000000000000000002000001050003000000000088000080060001000a000000140002002001000000f800000000000000000002050003000000001003800080060001008c0e000008000200ac1414aa05000300000000001c000080060001000200000008000200ac1414bb0500030000000000200004000e00000000000000fe800000000000000000000000000000000000009c0000802400020073961633df6dc9cb418b15afd0bae7b90f1e6cfed8bb423cf9285c474163154908000a00010000002400010000000000000000000000000000000000000000000000000000000000000000004800098028000080060001000a00000014000200fe8000000000000000000000000000bb05000300000000001c000080060001000200000008000200000000000500030000000000080005000100000008000100", @ANYRES32=r5], 0x22c}}, 0x0) (async) read$FUSE(r1, &(0x7f0000001a00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@migrate={0x5c, 0x21, 0x100, 0x70bd29, 0x25dfdbff, {{@in6=@mcast2, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x4e22, 0x4, 0x4e24, 0x0, 0x0, 0x40, 0x80, 0x87, r5, r6}, 0x6e6bb0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8480}, 0x8000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) 2m49.265535495s ago: executing program 9 (id=5923): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xb9) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x1010, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @vbi={0x0, 0x0, 0x30314752}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xb9) (async) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x1010, 0xffffffffffffffff, 0x0) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x6, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @vbi={0x0, 0x0, 0x30314752}}) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) 2m49.116140413s ago: executing program 8 (id=5924): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x22, 0x0, "42c99d16bed82f36a03fdc8c947d5bcec7615222d1fe5a9a59bd90ac5abf8ce35792898dd28a379bb8a7192f4359010907c81ca13a6ef8f266d1228cff930f5506989e524d267b743f686a44296443b2"}, 0xd8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 2m49.105594515s ago: executing program 9 (id=5925): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r2, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) close(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) sendfile(r0, r0, 0x0, 0x7ffff000) 2m49.072320916s ago: executing program 3 (id=5926): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4880) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) r4 = syz_open_dev$audion(&(0x7f0000000200), 0x0, 0xd05707699211acc3) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000240)=0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000002400)={"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"}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000440)=0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000000c0)={{0x0, 0xcaea}, 0x100, './cgroup\x00'}) 2m48.775999401s ago: executing program 8 (id=5927): openat$nvram(0xffffff9c, &(0x7f0000000000), 0x2ce40, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000300)={0x0, 0x0, 0x3}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, r2, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x48881}, 0x4000) (async) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x0, 0x0) 2m48.616172375s ago: executing program 8 (id=5928): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000040)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000100)={0xa0, 0xffffffffffffffda, r2, {{0x1, 0x2, 0x100000001, 0x80, 0x3, 0x4, {0x4, 0x9062, 0x3, 0x4, 0x80000001, 0xf171, 0x1000, 0x8, 0x4, 0x4000, 0xee9, r3, r4, 0x5, 0x6}}}}, 0xa0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 2m48.499485524s ago: executing program 8 (id=5929): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) vmsplice(r0, &(0x7f0000000280)=[{&(0x7f0000000100)="6ce298bbf0f89aa0990b8a56b8d513a91cf598046d7435b88ab38096", 0x1c}], 0x1, 0x2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -9'], 0x2d, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000180), &(0x7f0000000000)="285d8122fa691cdf4d53bd49e8d58cfb95fa644e854043bf1f6d089b1ffa797d21957bd981eaf97c96220fb401950ba213c771d7d6bcf149ee5e3a1114d7d5b66f8c8afe3d8c88878e8bfa21ca341d4d641dcb144fbf0000000400"/113, 0x71, r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mmap(&(0x7f0000a69000/0x4000)=nil, 0x4000, 0x3000002, 0x22052, r0, 0x2000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) vmsplice(r0, &(0x7f0000000280)=[{&(0x7f0000000100)="6ce298bbf0f89aa0990b8a56b8d513a91cf598046d7435b88ab38096", 0x1c}], 0x1, 0x2) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -9'], 0x2d, 0xfffffffffffffff9) (async) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) (async) add_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000180), &(0x7f0000000000)="285d8122fa691cdf4d53bd49e8d58cfb95fa644e854043bf1f6d089b1ffa797d21957bd981eaf97c96220fb401950ba213c771d7d6bcf149ee5e3a1114d7d5b66f8c8afe3d8c88878e8bfa21ca341d4d641dcb144fbf0000000400"/113, 0x71, r1) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) (async) mmap(&(0x7f0000a69000/0x4000)=nil, 0x4000, 0x3000002, 0x22052, r0, 0x2000) (async) 2m48.410572492s ago: executing program 7 (id=5930): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x4, 0x2, 'none\x00', 0x0, 0xfffffff8, 0x2}, 0x2c) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) (async) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='vfat\x00', 0x222c080, 0x0) 2m48.247826247s ago: executing program 8 (id=5931): ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000180)) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x9b, &(0x7f0000000080)=ANY=[]) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) sendfile(r0, r0, 0x0, 0x7ffff000) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000180)) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x9b, &(0x7f0000000080)=ANY=[]) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) (async) sendfile(r0, r0, 0x0, 0x7ffff000) (async) 2m48.233364859s ago: executing program 7 (id=5932): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x8001, 0x2000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000040)={0x401, [0xf, 0xab5, 0x9], [{0x8, 0x2, 0x0, 0x0, 0x1}, {0x9d, 0xa, 0x1}, {0x7, 0x5, 0x0, 0x1}, {0x2, 0x49b6, 0x1, 0x1, 0x1}, {0x8, 0x7, 0x1, 0x0, 0x1, 0x1}, {0x216, 0x8, 0x0, 0x1, 0x1}, {0x10001, 0x9, 0x1, 0x0, 0x0, 0x1}, {0x80000000, 0x8, 0x1, 0x0, 0x1}, {0x6, 0xffffffff, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xffff, 0x0, 0x1, 0x0, 0x1}, {0xa, 0x2, 0x1, 0x0, 0x1, 0x1}, {0x9, 0x7, 0x0, 0x1, 0x1}], 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000400)={0x4, 0x0, [{0x8b2, 0x0, 0x8000}, {0x660, 0x0, 0x6}, {0x64a, 0x0, 0x1}, {0x922, 0x0, 0x4d}]}) sendmsg$inet6(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0xa, 0x4e23, 0x3000000, @mcast2, 0x3}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000340)="82df3935", 0x4}], 0x1}, 0xc004) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xe) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000500)={0x74, r9, 0x300, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4d}, @val={0x8, 0x3, r10}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dba2a971b5b4febf2e46ba8b3e58ccd39b717a7e98101831"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x74}, 0x1, 0x0, 0x0, 0x8050}, 0x240048c0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000080)={r7, 0x3, 0x2}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r5, 0x2000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 2m48.109012612s ago: executing program 3 (id=5933): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) pwritev(r0, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x0, 0xfffffffe) 2m47.932049499s ago: executing program 3 (id=5934): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) clock_gettime(0x0, &(0x7f0000006880)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006680)=[{{&(0x7f0000000100)=@phonet, 0x80, &(0x7f0000002400)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/205, 0xcd}, {&(0x7f0000002280)=""/155, 0x9b}, {&(0x7f0000002340)=""/179, 0xb3}, {&(0x7f0000000080)}], 0x6, &(0x7f0000002480)=""/4096, 0x1000}, 0xffff}, {{&(0x7f0000003480)=@x25={0x9, @remote}, 0x80, &(0x7f0000003700)=[{&(0x7f0000003500)=""/154, 0x9a}, {&(0x7f00000035c0)=""/132, 0x84}, {&(0x7f0000003680)=""/103, 0x67}], 0x3, &(0x7f0000003740)=""/171, 0xab}, 0x2}, {{&(0x7f0000003800)=@isdn, 0x80, &(0x7f0000003980)=[{&(0x7f0000003880)=""/227, 0xe3}], 0x1}, 0x10001}, {{&(0x7f00000039c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003a40)=""/193, 0xc1}, {&(0x7f0000003b40)=""/95, 0x5f}], 0x2, &(0x7f0000003c00)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000004c00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000004c80)}, 0x8}, {{&(0x7f0000004cc0)=@hci, 0x80, &(0x7f0000006100)=[{&(0x7f0000004d40)=""/196, 0xc4}, {&(0x7f0000004e40)=""/224, 0xe0}, {&(0x7f0000004f40)=""/21, 0x15}, {&(0x7f0000004f80)=""/62, 0x3e}, {&(0x7f0000004fc0)=""/197, 0xc5}, {&(0x7f00000050c0)=""/11, 0xb}, {&(0x7f0000005100)=""/4096, 0x1000}], 0x7, &(0x7f0000006180)=""/249, 0xf9}, 0x5}, {{&(0x7f0000006280)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000006480)=[{&(0x7f0000006300)=""/19, 0x13}, {&(0x7f0000006340)=""/114, 0x72}, {&(0x7f00000063c0)=""/69, 0x45}, {&(0x7f0000006440)=""/24, 0x18}], 0x4}, 0xa}, {{&(0x7f00000064c0)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000006600)=[{&(0x7f0000006540)=""/156, 0x9c}], 0x1, &(0x7f0000006640)=""/43, 0x2b}, 0x9}], 0x8, 0x10001, &(0x7f00000068c0)={r0, r1+10000000}) 2m47.712130879s ago: executing program 3 (id=5935): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$tcp_congestion(r2, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 64) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000000000000:0000,user_id=', @ANYBLOB="ba1aebc8780cc316f93318270971141546fbda05f831fd9227e1f6d2398647c4e536e0cb1804f2544a75596b7370c317ddb76832fae0aacd0f36751c695ffd6cbca03ff6455cc01147dadfb4a868b6b14c711b0005138d5024fe3792fc618509b12f5e0efc6db029f17d68a92413b437a2", @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) (async, rerun: 64) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async, rerun: 64) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @private2, 0xffffffff}}, 0x0, 0x300}, 0x90) (async) close_range(r5, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r3, &(0x7f000000a300)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x90, 0x0, 0x0, {0x1, 0x100000000000000, 0x0, 0x0, 0x0, 0xf2c9, {0x0, 0x0, 0x200, 0x7fffffff, 0x80000000000000, 0xffffffffffffffff, 0x0, 0x3, 0x102, 0x2000, 0x0, 0x0, 0x0, 0x2000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) (async) write$FUSE_INIT(r3, &(0x7f0000000e00)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x23072d}}, 0x50) (async) setxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x0, 0x8}]}) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r0, 0x45809000) (async, rerun: 64) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000140)={0x0, 0x0}) (rerun: 64) 2m47.267264998s ago: executing program 7 (id=5936): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) sendfile(r1, r0, 0x0, 0x8) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) epoll_create1(0x0) (async) sendfile(r1, r0, 0x0, 0x8) (async) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) (async) 2m47.051608318s ago: executing program 7 (id=5937): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x18, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x20000328) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x35) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@volatile}]}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'vlan1\x00', &(0x7f0000000540)=@ethtool_cmd={0x18, 0x9d, 0x408e, 0x12, 0xf8, 0x2, 0x4, 0x8, 0x2, 0xa, 0x3, 0x1, 0xb, 0xf9, 0x66, 0x3, [0x5, 0x7]}}) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) 2m33.973423004s ago: executing program 39 (id=5925): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r2, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) close(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) sendfile(r0, r0, 0x0, 0x7ffff000) 2m32.94455136s ago: executing program 40 (id=5931): ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000180)) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x9b, &(0x7f0000000080)=ANY=[]) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) sendfile(r0, r0, 0x0, 0x7ffff000) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000180)) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x9b, &(0x7f0000000080)=ANY=[]) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) (async) sendfile(r0, r0, 0x0, 0x7ffff000) (async) 2m31.912879187s ago: executing program 41 (id=5935): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$tcp_congestion(r2, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 64) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000000000000:0000,user_id=', @ANYBLOB="ba1aebc8780cc316f93318270971141546fbda05f831fd9227e1f6d2398647c4e536e0cb1804f2544a75596b7370c317ddb76832fae0aacd0f36751c695ffd6cbca03ff6455cc01147dadfb4a868b6b14c711b0005138d5024fe3792fc618509b12f5e0efc6db029f17d68a92413b437a2", @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) (async, rerun: 64) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async, rerun: 64) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @private2, 0xffffffff}}, 0x0, 0x300}, 0x90) (async) close_range(r5, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r3, &(0x7f000000a300)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x90, 0x0, 0x0, {0x1, 0x100000000000000, 0x0, 0x0, 0x0, 0xf2c9, {0x0, 0x0, 0x200, 0x7fffffff, 0x80000000000000, 0xffffffffffffffff, 0x0, 0x3, 0x102, 0x2000, 0x0, 0x0, 0x0, 0x2000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) (async) write$FUSE_INIT(r3, &(0x7f0000000e00)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x23072d}}, 0x50) (async) setxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x0, 0x8}]}) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r0, 0x45809000) (async, rerun: 64) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000140)={0x0, 0x0}) (rerun: 64) 2m31.854674786s ago: executing program 42 (id=5937): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x18, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x20000328) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x35) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@volatile}]}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'vlan1\x00', &(0x7f0000000540)=@ethtool_cmd={0x18, 0x9d, 0x408e, 0x12, 0xf8, 0x2, 0x4, 0x8, 0x2, 0xa, 0x3, 0x1, 0xb, 0xf9, 0x66, 0x3, [0x5, 0x7]}}) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) 51.738950022s ago: executing program 6 (id=6233): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000008000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="660f3882b106000f0175000fba729a00660f5c80000066b9630001c00f32660f3a215a0f090f7802f0836d6d1a0f20d86635200000000f22d866b99c08000066b80070000066ba000000000f30", 0x4d}], 0x1, 0x8, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r4, 0x5) accept(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000100)="50ce", 0xfffd, 0xffe4, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KVM_RUN(r3, 0xae80, 0x0) lsm_list_modules(0x0, &(0x7f0000001200)=0x50, 0x0) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f00000001c0)) r6 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r6, 0x29, 0x7, 0x0, &(0x7f0000000dc0)) 50.772646498s ago: executing program 6 (id=6235): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={{}, 0x3, 0x1, 0x7fffffff}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$getregset(0x4205, r1, 0x6, &(0x7f0000000080)={&(0x7f0000000480)=""/135, 0x87}) (async) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001e0021002bbd7000000000000a000000050000000000000008000880"], 0x24}}, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async, rerun: 32) listen(r2, 0x8) (rerun: 32) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000000c0)={0x7, 0x3ff, 0x2, 0x6, 0x591b, 0xbd14, 0x5, 0xbef}, &(0x7f0000000100)=0x20) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r4 = socket(0x2, 0x80805, 0x0) (async) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000000c0)={r6, 0x2}, &(0x7f0000000100)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={r6, 0x6c, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x101}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) fadvise64(r7, 0x1000, 0x1, 0x2) (async) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r8, 0x8008af00, 0xffffffffffffffff) (async) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x3000001, 0x2010, r8, 0x45809000) (async) r9 = getpgrp(0xffffffffffffffff) r10 = syz_open_procfs(r9, &(0x7f0000000040)='stat\x00') pread64(r10, &(0x7f0000000140)=""/15, 0xf, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) (async, rerun: 32) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) 50.379931316s ago: executing program 6 (id=6237): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x2, 0x1, 0x2, 0x6, 0x2, 0x7}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x2, 0x1, 0x2, 0x6, 0x2, 0x7}, 0x20) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl(r0, 0x8b32, &(0x7f0000000040)) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) (async) 50.009858854s ago: executing program 6 (id=6240): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r1, 0x2000) 49.465870298s ago: executing program 6 (id=6243): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffff20}) userfaultfd(0x80000) 48.962986779s ago: executing program 6 (id=6246): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x80000) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f00000001c0)=""/237, 0xed}, {&(0x7f00000002c0)=""/81, 0x51}, {&(0x7f0000000340)=""/145, 0x91}], 0x4, 0x5ae6e560, 0x0) r1 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x28, 0x5}, 0x8) r2 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x60) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) 48.535704038s ago: executing program 43 (id=6246): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x80000) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f00000001c0)=""/237, 0xed}, {&(0x7f00000002c0)=""/81, 0x51}, {&(0x7f0000000340)=""/145, 0x91}], 0x4, 0x5ae6e560, 0x0) r1 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x28, 0x5}, 0x8) r2 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x60) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) 8.420172079s ago: executing program 2 (id=6392): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2a000, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x6) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x8004, &(0x7f0000000600)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}}) sendfile(r1, r0, 0x0, 0xfffc) 8.344908174s ago: executing program 2 (id=6393): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x40002, 0x2, {0xd, @pix_mp={0x0, 0x3, 0x20303159, 0x0, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x1}], 0x10, 0x0, 0x0, 0x2}}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xe, 0xfffffff3, 0x9, 0x80, 0x2, 0x2, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5e, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x245, 0x3, 0xe, 0x0, 0x71, 0xd12d, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0xffd, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xbe000000, 0x4009, 0x2, 0x7f, 0x9, 0x6, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xfff, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10001, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x4, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffd, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x6, 0x5, 0x1, 0x2, 0x14c, 0x800060a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xfffe, 0x3, 0x6, 0x7, 0x9602, 0xb, 0x2, 0x4, 0x4f8f, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r1, 0x45809000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) fchown(r2, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x406, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x8, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000140)={0x2c, &(0x7f00000001c0)={0x20, 0x2, 0x8, {0x8, 0x11, "6f3ccd75d90d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) mq_timedsend(r2, &(0x7f0000000180)="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", 0xff, 0x9, &(0x7f00000000c0)={r4, r5+10000000}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000380)) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r8, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) setuid(0xee00) r9 = shmget$private(0x0, 0x4000, 0x808, &(0x7f0000007000/0x4000)=nil) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r12 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r12, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) shmctl$SHM_LOCK(r9, 0xb) 8.063975563s ago: executing program 4 (id=6395): r0 = socket(0x1, 0x5, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r3 = dup(r2) dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x803}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000380)=ANY=[]) ioctl$sock_SIOCETHTOOL(r0, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x0, 0x200, 0x2, 0x7, 0x9, 0x0, 0x5, 0x9, 0x2, 0xca1, 0x8, 0x1, 0x6, 0xff, 0x9, 0x3, 0x7, 0x7, 0xb, 0x64, 0x1000, 0xc}}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143342, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x11, 0xffffffffffffffff, 0x1325a000) r6 = open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x81100) sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0xf, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x54}, 0x20000001) r7 = eventfd2(0x8, 0x87158005edcaebd) syz_clone(0x4200011, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000040)="05000000010000", 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x3e00, 0x0) r9 = eventfd(0x9) io_submit(r5, 0x40, &(0x7f0000000180)=[0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7, r4, &(0x7f0000000000)="ac4162b4e0b08be7bd5fc00865a5f27a72e6bd464fcf12312a7b6d7fd00c94feb3fc6e10f9d64d428cf0494cb1cbc305cdfecfcf65eac88eb78f3d8693fb01e91ea1108ab49bc561e36cb5db3b051080fc8c45894d67299ab02071921cf2b6cc991d758fa40edc198e64347ce1fbe4f8513f5a18a717c660b235fb5f8c533ff167093f36f4562cb08fab865298c212463a0ffd8c62f309c3405698a237a7978f63fa1f5f558bae5a8bdb5ca63c21c44f90ac15b494ad5248b7252cd063f326", 0x0, 0x3, 0x0, 0x5, r7}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x8b, r4, &(0x7f0000000100)="e338be507b8e38ef095a91a09a635c0271729b5e935a0ce7ee4fdf7bfed2207b9ee266a4aba47331bb8cd7112632f41ad9a0266fcff1f9d5d2c0", 0x0, 0xffffffff, 0x0, 0x0, r9}]) write$eventfd(r9, &(0x7f0000000340)=0xe8, 0x8) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) r13 = dup(r12) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000020001c0"]) 7.335229088s ago: executing program 4 (id=6399): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x103840, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(r0, &(0x7f0000000000), 0x8, 0x80000) 6.483960039s ago: executing program 5 (id=6403): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143342, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x20100, 0x0) ioctl$COMEDI_CHANINFO(r2, 0x80306403, &(0x7f0000000380)={0x2000007, &(0x7f0000001180), &(0x7f0000000340), &(0x7f00000386c0)}) r3 = signalfd(r2, &(0x7f0000000100)={[0x3ff]}, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8100, r5}, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000180)={0x1, 0x14, 0x4, 0xfffd, 0x6c, 0x40, &(0x7f0000000480)="c9ea87d1c0e550f1a28fbc590fe3489fc3b1fa4828b551545d337b76b362d12de25d965d8ebc69c08ff64b72f94c9fde5b730f488f9a6f961aead38ece4e5a72e772805d1e5192819db1d15a6571e6c30246899c933f27eb61a36c978d828f5b691493d08ade579aa4dd7053"}) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000080)="bc5d", 0x2, r6) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r7}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r10, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000140)={0x2, 0x0, [{}, {}]}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r13) sendmsg$IEEE802154_LLSEC_SETPARAMS(r13, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010028bd7000ffdbdf2524f8000005002a00030000000a0001007770616e31"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x8, 0x1, 0x2, 0x2}}, 0x26) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000036640)={{0x0, 0x0, 0x80}}) 6.440731767s ago: executing program 2 (id=6404): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f00000004c0)={0x0, 0x7, 0x1, [0x9, 0x3, 0x100000000, 0x0, 0x8000000000000000], [0xff, 0xfffffffffffffff7, 0x2, 0x40, 0x40, 0xe1, 0xf3f3, 0x2, 0xffffffffffffffff, 0xe9, 0x4, 0x1, 0x628d2496, 0x1ff, 0x7, 0xee, 0x2, 0x23, 0x401, 0x5, 0x3, 0x6, 0x7, 0x5, 0x200, 0x0, 0x4, 0x5, 0x8, 0x9, 0x0, 0x2, 0x76, 0x0, 0xfffffffffffffff6, 0x1, 0x5, 0xd, 0x7, 0xe83, 0xa8, 0x7, 0x100, 0x6, 0x4, 0x6, 0xe4, 0x81, 0xa, 0x101, 0x2, 0x7, 0x5, 0x1, 0x8, 0x4, 0x5, 0x1, 0x304, 0x7, 0x80, 0x5, 0x6, 0x1ff, 0x4, 0x5, 0xffff, 0x0, 0xfffffffffffffff9, 0x3, 0x2, 0x2, 0x1, 0x8, 0x8, 0x8, 0x5, 0x100000001, 0xef39, 0x7, 0x204000000000000, 0x42, 0xffff, 0x2c5, 0x5, 0x8, 0x4, 0x4, 0x6, 0x2, 0x2, 0xff, 0x8001, 0xe, 0x2e, 0x4, 0x23b, 0x0, 0x100, 0x8, 0x1, 0x1, 0xeb9a377, 0xffffffffffff7fff, 0xffff, 0xc, 0x1, 0x1, 0x0, 0x7ff, 0x4, 0x400, 0xffffffffffffff42, 0x80000001, 0x1, 0x5, 0x4, 0x6, 0x7fffffff, 0xf, 0x5]}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0xa, r4, 0x0, r3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x12, r0, 0x4580c000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, 0x0, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'gretap0\x00', 0x1}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff133a, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x7}, {}, {0xfffffffe}, {0x0, 0xfffffffc}, {}, {0x8000}], 0x8}) setsockopt$sock_int(r5, 0x1, 0x24, &(0x7f0000000080)=0x80, 0x4) 6.437507174s ago: executing program 4 (id=6405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffd, @rand_addr, 0x4}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0xffffffff}, 0x1c) shutdown(r3, 0x1) splice(r3, 0x0, r2, 0x0, 0x400000107ffff000, 0x4) r4 = socket$tipc(0x1e, 0x5, 0x0) syz_clone(0x10002000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2, 0x1}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b29, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="900000000101010800000000000000000a00000164000e8006000340000400002c00018014000300000000000000000000000000000000001400040000000000f9ff000000000000000000012c000180140003002001000000000000000000000000000214000400fe8000000000000000000000000000bb08001a4000000008100002800c0002800500010011000000"], 0x90}, 0x1, 0x0, 0x0, 0x4080}, 0x2000c050) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000000307011400000000000000000100000499151f0c00064000000000000000090c0003400000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x18c97be5bd8f1b16) r6 = creat(&(0x7f0000001380)='./file0\x00', 0x40) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000200), 0x4) r7 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000480)='name', &(0x7f0000000ac0)='\xf0\xdd\x0e\xbd\x00', 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r8, 0x5410, &(0x7f0000000100)) mount(&(0x7f0000000040)=@md0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x158893, 0x0) 6.108093144s ago: executing program 4 (id=6407): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendto$netrom(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) syz_open_dev$video(0x0, 0x7ff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') statx(r2, 0x0, 0x1000, 0x10, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x1000000d}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x3) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) (async) sendto$netrom(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) (async) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) (async) syz_open_dev$video(0x0, 0x7ff, 0x0) (async) syz_open_procfs(0xffffffffffffffff, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') (async) statx(r2, 0x0, 0x1000, 0x10, 0x0) (async) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) epoll_create(0x2) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x1000000d}) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) 5.848922763s ago: executing program 2 (id=6409): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x10000000000000, 0x0, 0x0, 0x800007}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x40000}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2a}}, {{@in=@remote, 0x0, 0x2b}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3507, 0x5}]}]}, 0x17c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) mmap(&(0x7f0000828000/0xc000)=nil, 0xc000, 0x2000009, 0x110, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 5.793801878s ago: executing program 4 (id=6411): syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x285) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @mcast2, 0x7}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x18, 0x0, &(0x7f0000000040)) bind$bt_sco(r2, &(0x7f00000001c0), 0x8) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000440)=0x1, &(0x7f00000007c0)=0x4) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) 5.233938039s ago: executing program 5 (id=6413): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x22020600) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00'}) write$tun(r3, &(0x7f0000000200)=ANY=[], 0xfdef) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x6, 0x8, 0x42474752, 0x9, 0x6, 0x2, 0x6, 0xa6e, 0x0, 0x4, 0x1, 0x7}}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0)="cd", 0x1, 0x20000000, 0x0, 0x0) pipe(0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r6 = dup2(r5, r5) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x5, 0x0, 0x419}}}, 0x7) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x6, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0x12, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1, '\x00', 0x2}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x7}, {0x8, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}}) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) personality(0x5400004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000340)={r8}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r7, 0x7dfff000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r9, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000001000000280000000400000000000000100006000000000020"], 0x24, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 4.748559714s ago: executing program 5 (id=6416): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030005000500070000000000080009"], 0x5c}, 0x1, 0x6c}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_int(r3, 0x1, 0x29, 0x0, &(0x7f0000000040)) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x412000, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) getpid() r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000049e9b31ce93ee9070c000000290495b9585dde83000000000b09007a15b3"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r6, @ANYBLOB="000429bd7000fde8df253b00000008000300", @ANYRES32=r8, @ANYBLOB="0a00cd006e00ff0304000000040087001000cd0000000700f8000200000207000400870008002201940200000800a0000900000008002201270100000800a10003000000080027000200000008002600251700000800220161000000050019010600000004006c0004008e000800cd00ee00050004008700"], 0x94}}, 0x4000010) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r12, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000000)="0f01c40f080f01980c95660f65f4e705dbc40fde1fb8b2000f00d06766c7442400552600006766c7442402caf800006766c744240600000000670f011424baa10066ed", 0x43}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$HIDIOCGUSAGES(r9, 0xd01c4813, &(0x7f00000029c0)={{0x1, 0x1, 0x9, 0x0, 0x2, 0x1240000}, 0x1f6, [0xe6, 0x10, 0x9, 0x8, 0x0, 0x2, 0x0, 0x8, 0x4, 0x7, 0x2, 0x8, 0x2, 0x6, 0xb3, 0x401, 0x11ad, 0xffff, 0x4, 0x54a, 0xfffffff9, 0x7, 0x721, 0x10000, 0x3bd8, 0x6, 0xc, 0x3, 0xffffffff, 0x9, 0x101, 0x4, 0xd251, 0x8, 0x7, 0x78, 0x274, 0x1, 0x10000, 0x9, 0x171, 0x1, 0x400, 0x5, 0x8, 0x0, 0xd, 0x8, 0x2, 0x40, 0x9, 0x0, 0x5, 0xfffff001, 0x4, 0x7fff, 0xfffffff7, 0x10001, 0x7, 0x8, 0xc27, 0xbbc6, 0x9, 0xfff00000, 0x6, 0x740, 0x9, 0x6, 0x5, 0x8, 0x3, 0x10, 0x1, 0x42c8, 0xc01f, 0x1000, 0x5, 0x1, 0x8, 0xfffffffd, 0x4, 0x38, 0x0, 0x7, 0x4, 0x8, 0x2, 0x2, 0x2, 0x3, 0xffff, 0x10, 0x3, 0x0, 0x0, 0x9, 0x6, 0x3, 0x4, 0xc, 0x1, 0xfffff968, 0xa, 0x7, 0xffffff00, 0x4, 0x5, 0x5, 0x8, 0x671c, 0x0, 0x2, 0x6, 0x4, 0x8, 0x5, 0x6, 0x3, 0x4, 0x400005, 0x4, 0x2000337d, 0x7, 0x5, 0x0, 0x3ff, 0xfffffff9, 0x66f, 0x8, 0x7fffffff, 0x7, 0x6b45, 0x2, 0x80, 0x3, 0x7f, 0x7, 0x699, 0x7, 0xf0000, 0x5, 0x400, 0x9, 0x40, 0x8, 0xffffffff, 0x4, 0x8, 0x4, 0x382, 0x9b72, 0x8b55, 0x1, 0x4, 0x2, 0x6, 0x4a2, 0x9, 0x8000, 0xd5, 0x2, 0xff, 0xe, 0x6, 0x7ff, 0xffffff2b, 0x5, 0x2, 0x1, 0xfd, 0x42e, 0x5, 0x7, 0x8, 0x2, 0x80000001, 0xfffffffc, 0xf64, 0x0, 0x400, 0x0, 0x6, 0x7, 0x7fffffff, 0x1, 0x0, 0x6, 0xfffffffc, 0x1, 0x7fffffff, 0x80, 0x800, 0x6, 0x6, 0x3, 0x2, 0xffff79f7, 0x0, 0x1, 0x1, 0x9, 0x6, 0x7, 0x644, 0xf67, 0x10, 0x80000001, 0x7, 0x5, 0x6, 0x9, 0x8, 0x9f2, 0x1, 0x67, 0x3ff, 0x0, 0x1, 0x1, 0xa7c, 0x68cf0, 0x6, 0x80, 0x0, 0x9, 0x1, 0xa0, 0x80000000, 0x5, 0x1493, 0xe813, 0x4, 0x2, 0x4, 0x8001, 0x80a, 0x1, 0x2, 0x1, 0x6, 0x1, 0xe39, 0x3, 0x1, 0xff, 0x0, 0x80000001, 0x1, 0xffff, 0x4, 0x7, 0x3, 0xdc9, 0x7c, 0xffff, 0x1, 0x7fffffff, 0xb4, 0x245, 0x9, 0x3, 0x81, 0xc81, 0x7, 0x8, 0x7, 0x7, 0x7, 0x8, 0x7fff, 0x1, 0x238, 0x5, 0x7, 0xfffffffc, 0x3ff, 0x8, 0x6, 0x3, 0x9, 0x0, 0x8, 0x5, 0x2, 0x5, 0x3, 0x3, 0x0, 0xff, 0x900000, 0x3, 0x5, 0x40, 0xc08, 0x9, 0x0, 0x543, 0x2, 0xd, 0x80000001, 0x8, 0x101, 0xffff, 0x9, 0xe, 0x1, 0x7, 0xffffffff, 0x1ff, 0x4, 0x8, 0x9, 0x4, 0xfff, 0x5, 0x0, 0x3, 0xd2, 0x9, 0xfffffffa, 0x9, 0x9, 0x6, 0x5, 0xc, 0x51, 0x3, 0x2, 0xffffffff, 0x3, 0x3, 0x6, 0x8000, 0x30000000, 0x9, 0xd, 0x1000, 0x84b, 0x101, 0xffff8001, 0x8001, 0x558f, 0x80, 0x2f2, 0x10, 0x9, 0x7, 0x4, 0xf2, 0x34, 0xa, 0xde, 0xd, 0xfffffffd, 0x8, 0xd6c, 0x8, 0x1, 0x6, 0x80, 0x6, 0xfffffffc, 0x8, 0x4, 0x18000, 0xaf0, 0xffff, 0xa, 0x4, 0x10800, 0x8000, 0x400, 0x3, 0xff, 0x4, 0x5, 0x7, 0xc8, 0x6, 0x2, 0xffffffff, 0x2, 0x15, 0x3, 0x6, 0x9, 0x2, 0x9, 0x3, 0x8, 0x10000, 0xfffff001, 0x7fff, 0x7, 0x3, 0x8, 0x3, 0x5, 0x0, 0x5, 0x1, 0x94, 0x10, 0x2, 0x5, 0x9, 0x80, 0x948, 0x7, 0x93, 0x3, 0x4, 0xe, 0x800, 0xaf5, 0x10000, 0x5, 0x5c, 0x3, 0x917, 0x6, 0x1, 0xa, 0x5, 0x6, 0x8, 0xb, 0x8, 0x7, 0xfffffff7, 0x4, 0x7f, 0x6, 0x9, 0x0, 0x7, 0x1, 0x6, 0x7fffffff, 0x4, 0x3, 0x0, 0xfffffffc, 0xfffffffd, 0x0, 0x8, 0xc1, 0xffffffff, 0x4, 0x5edb, 0x2, 0x0, 0xffff, 0x100, 0x8, 0x7, 0x4, 0x0, 0x9, 0x6, 0xf4c6, 0x9, 0xfb47, 0x2, 0x7ff, 0xfffffff7, 0x4ea, 0x4, 0x1, 0x100, 0xa, 0x7fffffff, 0x8, 0x4, 0x6bf, 0x2, 0xa, 0x8000000, 0x1, 0x2, 0x23, 0xfff, 0xfffffc01, 0x3, 0x4, 0x757f, 0x101, 0x2, 0x6aa, 0xfffffffb, 0xfffffffe, 0x2, 0x1, 0x0, 0x80000001, 0x6, 0x6, 0x30c1, 0x3, 0x687f, 0x942, 0x9, 0x9, 0xbd5b, 0x5, 0x2, 0x8, 0x6, 0x7, 0x5, 0xffff8000, 0xfd3, 0x1, 0x9, 0x6, 0x2, 0xc, 0x3, 0x6, 0x5, 0x4, 0xa, 0xec0d, 0x1, 0x40, 0x138e, 0x400, 0x3, 0x80, 0x1, 0x4, 0xfffffff8, 0x5, 0x81, 0x7, 0x7, 0x1ff, 0x6, 0xff, 0x6, 0x9, 0x6, 0x1, 0x5, 0x9, 0x0, 0x2, 0x9, 0x118, 0x80, 0xfffffff2, 0x7fff, 0x789, 0x5, 0x7ff, 0x9, 0x7, 0x6, 0x1ff, 0x7, 0x1706, 0x9, 0x2, 0xbe6, 0xefe, 0x8, 0x6, 0x8, 0x9, 0x0, 0x0, 0xfffff001, 0x5, 0x6, 0x9, 0x8000, 0x2, 0x2, 0x31eb, 0x9, 0x4, 0x3ff, 0xdb, 0x3, 0x40, 0x7d, 0x83d1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x3, 0x8, 0x1000, 0x2, 0x5, 0x20000000, 0x7, 0x35cc, 0x2f, 0x0, 0xf, 0x2, 0x4, 0x5, 0x8, 0x0, 0xe, 0x9, 0x80b, 0xfffffffd, 0x7f, 0xfffffff9, 0x6, 0x1, 0x7, 0x3, 0x29d, 0x9, 0xff, 0xcf43, 0x7fff, 0x7, 0x1, 0xfff2, 0x4, 0x7fff, 0x3, 0x4, 0x6, 0x8000000, 0x1, 0x3, 0x4, 0x10, 0x3, 0x3, 0x0, 0x2, 0x8, 0x800, 0x2, 0x8, 0x10000, 0x4, 0xffff, 0x0, 0x8, 0x0, 0xff, 0x2, 0x6, 0x4, 0x3, 0x0, 0x8, 0x71d6e2a8, 0x80000000, 0x28, 0x7ff, 0x0, 0x5533, 0x6, 0x1, 0xfffffffc, 0x3, 0xb, 0x80000000, 0x4, 0x2, 0x7, 0x2, 0x8, 0x0, 0xd7d, 0x4, 0x1, 0x3, 0x547b, 0x0, 0xa, 0x7, 0x6, 0x80, 0xcbd, 0xff, 0x7, 0x1, 0xa, 0x5, 0x1, 0x6, 0x3, 0x290d, 0xe, 0x1, 0xf, 0x4, 0x4e, 0x100, 0x0, 0xf, 0x5, 0xd7d, 0xce3, 0x7, 0x7, 0xc, 0x7, 0x3, 0xb, 0x7fff, 0xffff1303, 0x9, 0x7bc7, 0x0, 0x4, 0x100, 0x1, 0x5, 0x2, 0x1, 0x100, 0x5, 0x8001, 0x4, 0xd, 0x1, 0x1, 0xce, 0x1, 0x0, 0x3, 0x5, 0x2, 0x3, 0x100, 0x7, 0x83, 0x0, 0x86, 0xb, 0x4, 0xbc, 0xffffff00, 0x5, 0xffffffff, 0x40, 0x7, 0x1, 0x2, 0xfffffffb, 0x800, 0x0, 0x9, 0x200, 0xffffff8b, 0x5, 0x40, 0x200, 0xfffffffc, 0x101, 0x3, 0x5, 0x2, 0x8b9, 0x7, 0x6, 0x10000, 0x6, 0x1ff, 0xb3, 0x10000, 0x0, 0x9, 0x9, 0x7, 0x9, 0x6, 0x0, 0x5, 0xd, 0x4, 0x1, 0x8000, 0x10000, 0x10001, 0xfffffffa, 0x7, 0x4, 0x1000, 0x8, 0xeb, 0x3, 0xb, 0x8000, 0x9, 0xfffff089, 0x5, 0x8000, 0xd15, 0x466, 0x7, 0x1, 0x0, 0x3, 0x4, 0xfff, 0xe46, 0x1, 0xf, 0x2, 0x80, 0xffffffff, 0x7ff, 0x81, 0x1, 0x5, 0x6, 0x7ff, 0x7, 0x3, 0x5, 0x372, 0x0, 0xa, 0x5, 0x0, 0x2, 0x200, 0x3, 0x9, 0xd, 0x8, 0x0, 0x9, 0xfffffbff, 0xe, 0x10, 0x5b4839a7, 0x3, 0xffffff81, 0x8, 0x3, 0x3, 0x7ff, 0x7, 0x80000001, 0x3, 0x0, 0x9, 0x4, 0x1, 0x3, 0x9, 0x1, 0xc, 0x3, 0x1, 0x5, 0x4, 0xa, 0x3, 0x10000, 0x51, 0x3, 0xf, 0x989, 0x0, 0x8001, 0x5, 0x8, 0x9, 0x1, 0x4, 0xf3b, 0xb000, 0x1, 0x3, 0xf2, 0xa403, 0x5c, 0x7, 0x8, 0x3, 0x5, 0x2027, 0x4, 0x7f, 0x4, 0xfffeffff, 0x3, 0xfffffffb, 0x8, 0x7fffffff, 0x80, 0x2, 0x80, 0x7, 0x80, 0x3, 0x8, 0x621, 0xffffffff, 0x83b0, 0x0, 0x2, 0x0, 0xd6, 0x6, 0x2, 0x1, 0x8, 0x6, 0xe, 0x7, 0x4, 0xfffffff8, 0x7, 0x6, 0x33, 0x7ff, 0x3, 0x66e, 0x7979, 0x5, 0x7, 0x800, 0xc6d, 0x7, 0x4, 0x8, 0x2, 0x5, 0xffffffff, 0x542, 0x8, 0x4b6, 0x5, 0x3, 0x7, 0xfffffff8, 0x101, 0xbc7a, 0xfffffff8, 0x7, 0x8, 0x153f09f7, 0x101, 0x94, 0xb, 0x85, 0x3, 0x7fff, 0xff, 0x1, 0x85, 0x9, 0x6, 0xfffffffe, 0x0, 0x8, 0x4, 0x6, 0x1, 0x7, 0x4, 0x2, 0x5, 0x8, 0x32, 0x1, 0x5, 0x0, 0x6, 0xfffffffd, 0xe8f7, 0x30, 0x5f8, 0x0, 0x7, 0x101, 0xa56, 0x80, 0xfdb, 0x2, 0x1, 0x10001, 0xffffbb89, 0x5, 0x80000001, 0x9, 0x2, 0x0, 0x9, 0xa730, 0xff, 0x7, 0x7f, 0x2, 0x2, 0x6, 0x8, 0x7, 0x6, 0x3, 0x8, 0x2, 0x6, 0x4eadde99, 0x0, 0x9, 0x7049dc3a, 0x6, 0x4, 0x1ff, 0x3, 0x3, 0x70, 0x6, 0x6, 0x6, 0x3]}) 4.583839851s ago: executing program 2 (id=6417): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet(0x2, 0xa, 0x9) (async) socket$inet(0x2, 0xa, 0x9) socket$inet6(0xa, 0x800000000000002, 0x0) (async) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040001) (async) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040001) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)={0x1}) (async) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)={0x1}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, r2, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac09, 0xfac05, 0xfac08, 0xfac00]}]]}, 0x38}}, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r8) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r10, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, r2, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x10, 0x71}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040080}, 0x4) dup(r9) (async) r12 = dup(r9) write$6lowpan_enable(r12, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) 2.594012387s ago: executing program 4 (id=6422): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b"], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x24, 0x1e, 0x21, 0x0, 0x25dfdbfc, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x8, 0x9, 0x0, 0x1, [@nested={0x38, 0x3f}]}]}, 0x24}}, 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$getflags(r1, 0xb) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 2.51596222s ago: executing program 2 (id=6423): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x301000, 0x4) write$FUSE_STATFS(r0, &(0x7f0000000200)={0x60, 0x0, 0x0, {{0x9, 0x5, 0x5, 0x2, 0x400069a, 0xae, 0x2400000, 0x800}}}, 0xfffffec2) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) write$FUSE_STATFS(r1, &(0x7f0000000200)={0x60, 0x0, 0x0, {{0x9, 0x5, 0xfffffffffffffff7, 0x5, 0x400069a, 0x4, 0x2400000, 0x800}}}, 0x60) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea000905", @ANYBLOB="a6d627c0bc16"], 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000080)=0x8, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r6, 0x40187013, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x17, 0x9, 0x4f}) ioctl$EVIOCGPROP(r5, 0x80404509, 0x0) ioctl$KDSKBMODE(r5, 0x4b45, &(0x7f0000000000)) 2.464283135s ago: executing program 5 (id=6424): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x3fffffff) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) pwritev(r1, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x0, 0xfffffffe) 2.303857656s ago: executing program 5 (id=6425): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) syz_io_uring_setup(0x588b, &(0x7f0000000040)={0x0, 0xd9a1, 0x10000, 0x2, 0x1e6}, 0x0, 0x0) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@v2={0x3, 0x1, 0x8, 0x9, 0x4e, "d7fd4f2993da3f99feda1180cb46d34db29ca03daffb4a4a60a98c08c4257efc004c7ad8be824716ff5a6d8dabb8305fdeb7a8022b9ee07f2d6a5ff0d227848f4d7edd2d8fa4104ef1b11cf129d5"}, 0x57, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3}) r1 = socket$isdn_base(0x22, 0x3, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x0, 0xfffffffe}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) close(r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000003c0)={0x0, @multicast2, @private}, &(0x7f0000000400)=0xc) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400070000000900020073797a3100000000050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) unshare(0x2c020400) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40000, 0x0) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000080)={0x8000001, 0x0, 0x0, 0x1, 0x5}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/19}, 0x2000, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="54000000090601080000000000000000050015ff0900020073797a310000000005000100070000002c000780060004404e21000005000700ff0000000c002ebf6ec6d655e8e101010c00028008000140e0000002b554a504928c59055a26822ce8490628d744a920aace57dbf2999c424423"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read(r9, &(0x7f00000019c0)=""/4097, 0x1001) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETGEN(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) 1.324207072s ago: executing program 1 (id=6426): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000440)=0x1) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) 1.259325914s ago: executing program 5 (id=6427): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x5319) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000140)='reiserfs\x00', 0x2807402, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'bind'}}}]}) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)={0x44, r3, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfffffffe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}]}, 0x44}}, 0x20000804) symlink(&(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='./cgroup/file0\x00') 1.085133125s ago: executing program 1 (id=6428): mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x202c41) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)=0xe1ee) 932.107391ms ago: executing program 1 (id=6429): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000440)=0x3, 0x4) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSFF(r3, 0x402c4580, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="106ad5bcb8ff60c633bd700000000000"], 0x10}, 0x1, 0x0, 0x0, 0x40880}, 0x24044055) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) 560.043773ms ago: executing program 1 (id=6430): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000580)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0xb9, @local, 0x6, 0x2}, 0x20) unshare(0x22020600) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) close(r5) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}}) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) personality(0x5400004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r7, 0xc0305616, &(0x7f00000000c0)={0x0, @reserved}) mmap(&(0x7f00004aa000/0x3000)=nil, 0x3000, 0x2000000, 0x10010, r7, 0xe3f86000) r8 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000340)={r8}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r6, 0x7dfff000) 182.617897ms ago: executing program 1 (id=6431): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) lgetxattr(&(0x7f0000000080)='./file2\x00', &(0x7f0000000100)=@random={'osx.', '(.%.\x00'}, &(0x7f0000000140)=""/196, 0xc4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005b80)={{{@in=@multicast2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x5, 0x0, 0x0, 0x1}}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0xe8) renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file2\x00', 0x1) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) 0s ago: executing program 1 (id=6432): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r2 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x8000}) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x4000, 0x2000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x5ed, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x4, 0x4e20, 0xbbda, 0x2, 0x80, 0x80, 0x5c}, {0x400, 0x7, 0xe064, 0x9, 0x2, 0x1d, 0x7fffffffffffffff, 0xfffffffffffffff5}, {0x9ae4, 0x8206, 0x5, 0x5}, 0x0, 0x6e6bb0, 0x2, 0x1, 0x3, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x24}, 0xa, @in6=@private0, 0x3500, 0x0, 0x1, 0xfa, 0x9, 0x401, 0x2}}, 0xe8) mprotect(&(0x7f000021f000/0x4000)=nil, 0x4000, 0x4) mremap(&(0x7f0000b50000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) kernel console output (not intermixed with test programs): ying later): interface not active [ 1263.887476][T28441] hsr_slave_0: entered promiscuous mode [ 1263.902646][T28441] hsr_slave_1: entered promiscuous mode [ 1263.909608][T28441] debugfs: 'hsr0' already exists in 'hsr' [ 1263.917691][T28455] Bluetooth: hci7: command tx timeout [ 1263.927003][T28441] Cannot create hsr debugfs directory [ 1263.988382][ T3013] hsr_slave_0: left promiscuous mode [ 1264.001976][ T3013] hsr_slave_1: left promiscuous mode [ 1264.019050][ T3013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1264.035077][ T3013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1264.047534][ T3013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1264.058396][ T3013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1264.070932][ T3013] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1264.082224][T28455] Bluetooth: hci8: command tx timeout [ 1264.091749][ T3013] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1264.139180][ T3013] veth1_macvtap: left promiscuous mode [ 1264.156304][ T3013] veth0_macvtap: left promiscuous mode [ 1264.163182][ T3013] veth1_vlan: left promiscuous mode [ 1264.168547][ T3013] veth0_vlan: left promiscuous mode [ 1264.312670][T28455] Bluetooth: hci6: command tx timeout [ 1265.992486][T28455] Bluetooth: hci7: command tx timeout [ 1266.152286][T28455] Bluetooth: hci8: command tx timeout [ 1266.571427][ T3013] team0 (unregistering): Port device team_slave_1 removed [ 1266.805433][ T3013] team0 (unregistering): Port device team_slave_0 removed [ 1269.924947][T28451] hsr_slave_0: entered promiscuous mode [ 1269.931514][T28451] hsr_slave_1: entered promiscuous mode [ 1270.081742][T28456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.101657][T28456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.109851][T28456] bridge_slave_0: entered allmulticast mode [ 1270.117977][T28456] bridge_slave_0: entered promiscuous mode [ 1270.131352][T28456] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.139675][T28456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.147315][T28456] bridge_slave_1: entered allmulticast mode [ 1270.169997][T28456] bridge_slave_1: entered promiscuous mode [ 1270.380736][T28456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1270.656975][T28456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1271.169742][T28456] team0: Port device team_slave_0 added [ 1271.178951][T28456] team0: Port device team_slave_1 added [ 1271.205375][ T3013] IPVS: stop unused estimator thread 0... [ 1271.427535][T28456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1271.436072][T28456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1271.462849][T28456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1271.491224][T28456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1271.499350][T28456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1271.526573][T28456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1271.835669][T28456] hsr_slave_0: entered promiscuous mode [ 1271.849591][T28456] hsr_slave_1: entered promiscuous mode [ 1271.857862][T28456] debugfs: 'hsr0' already exists in 'hsr' [ 1271.870948][T28456] Cannot create hsr debugfs directory [ 1271.967220][ T3013] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.137738][ T3013] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.355758][ T3013] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.400256][T28446] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1272.419213][T28446] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1272.445161][T28446] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1272.525803][ T3013] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.684814][T28446] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1273.740977][T28446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1273.823400][T28446] 8021q: adding VLAN 0 to HW filter on device team0 [ 1273.906047][T27933] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.913302][T27933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1273.933075][T17352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.940321][T17352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1274.283721][ T3013] bridge_slave_1: left allmulticast mode [ 1274.289511][ T3013] bridge_slave_1: left promiscuous mode [ 1274.297057][ T3013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.310904][ T3013] bridge_slave_0: left allmulticast mode [ 1274.318161][ T3013] bridge_slave_0: left promiscuous mode [ 1274.325139][ T3013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.349559][ T3013] bridge_slave_1: left allmulticast mode [ 1274.359259][ T3013] bridge_slave_1: left promiscuous mode [ 1274.365675][ T3013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.393758][ T3013] bridge_slave_0: left allmulticast mode [ 1274.399553][ T3013] bridge_slave_0: left promiscuous mode [ 1274.426960][ T3013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.321045][ T3013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1276.375133][ T3013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1276.414290][ T3013] bond0 (unregistering): Released all slaves [ 1278.148830][ T3013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1278.205393][ T3013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1278.244132][ T3013] bond0 (unregistering): Released all slaves [ 1278.335677][T28446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1278.380755][ T3013] tipc: Left network mode [ 1279.237477][T28446] veth0_vlan: entered promiscuous mode [ 1279.370808][T28441] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1279.391581][T28446] veth1_vlan: entered promiscuous mode [ 1279.487056][T28451] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.528299][T28441] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1279.597967][T28441] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1279.628672][T28441] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1279.731582][T28451] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.925384][T28451] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.064621][T28451] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.092403][T28446] veth0_macvtap: entered promiscuous mode [ 1280.104536][T28446] veth1_macvtap: entered promiscuous mode [ 1280.255870][T28446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1280.368032][T28446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1280.524629][T17351] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.539291][T27932] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.576480][T27932] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.588031][T27932] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.650137][T28441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1280.841061][T28441] 8021q: adding VLAN 0 to HW filter on device team0 [ 1280.911323][T28451] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1280.939668][T28451] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1280.960050][T28451] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1281.290775][T28451] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1281.308034][T17352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1281.315245][T17352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1281.367755][T17352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.374983][T17352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1281.913792][T15427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1281.932356][T15427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.340265][T17351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1282.374115][T17351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.572547][T28451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1282.897395][T13567] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1282.914404][T28451] 8021q: adding VLAN 0 to HW filter on device team0 [ 1282.975795][T28456] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1282.998301][T27932] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.005509][T27932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1283.023472][T28456] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1283.051605][T28456] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1283.068683][T28456] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1283.087700][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.094889][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1283.108746][T13567] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1283.118112][T13567] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.139457][T13567] usb 6-1: Product: syz [ 1283.144856][T13567] usb 6-1: Manufacturer: syz [ 1283.149470][T13567] usb 6-1: SerialNumber: syz [ 1283.159856][T13567] usb 6-1: config 0 descriptor?? [ 1283.168830][T13567] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1283.226102][T28441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1283.560180][T28441] veth0_vlan: entered promiscuous mode [ 1283.645141][T28441] veth1_vlan: entered promiscuous mode [ 1283.765998][T28456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1283.845974][T28441] veth0_macvtap: entered promiscuous mode [ 1283.919020][T28441] veth1_macvtap: entered promiscuous mode [ 1283.938445][T28451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1284.023451][T28456] 8021q: adding VLAN 0 to HW filter on device team0 [ 1284.067352][T17352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.074579][T17352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1284.130243][T28441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1284.169085][T17352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.176355][T17352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1284.200551][T28441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1284.288743][T27932] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.412048][T27932] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.420848][T27932] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.534783][T27932] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.561637][ T3013] hsr_slave_0: left promiscuous mode [ 1284.578225][ T3013] hsr_slave_1: left promiscuous mode [ 1284.593871][ T3013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1284.609765][ T3013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1284.620116][ T3013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1284.635294][ T3013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1284.657094][ T3013] hsr_slave_0: left promiscuous mode [ 1284.665859][ T3013] hsr_slave_1: left promiscuous mode [ 1284.671755][ T3013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1284.680125][ T3013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1284.689407][ T3013] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1284.697691][ T3013] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1284.730042][ T3013] veth1_macvtap: left promiscuous mode [ 1284.735899][ T3013] veth0_macvtap: left promiscuous mode [ 1284.741491][ T3013] veth1_vlan: left promiscuous mode [ 1284.746891][ T3013] veth0_vlan: left promiscuous mode [ 1285.365355][T13567] usb 6-1: USB disconnect, device number 65 [ 1285.787210][T28712] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1285.797233][T28712] VFS: Can't find a romfs filesystem on dev rnullb0. [ 1285.797233][T28712] [ 1285.856862][T28715] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5944'. [ 1285.936924][T28716] netlink: 'syz.5.5944': attribute type 10 has an invalid length. [ 1285.944918][T28715] netlink: 'syz.5.5944': attribute type 10 has an invalid length. [ 1285.952932][T28715] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5944'. [ 1285.961948][T28716] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5944'. [ 1287.094587][ T3013] team0 (unregistering): Port device team_slave_1 removed [ 1287.304718][ T3013] team0 (unregistering): Port device team_slave_0 removed [ 1292.426280][ T3013] team0 (unregistering): Port device team_slave_1 removed [ 1292.646313][ T3013] team0 (unregistering): Port device team_slave_0 removed [ 1294.225397][ T3013] batadv0 (unregistering): left allmulticast mode [ 1295.488439][T28715] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1295.495657][T28715] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1295.526938][T28715] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1295.758779][T28451] veth0_vlan: entered promiscuous mode [ 1295.810994][T17351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.816727][T28451] veth1_vlan: entered promiscuous mode [ 1295.852388][T17351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.001456][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.011525][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.160089][T28451] veth0_macvtap: entered promiscuous mode [ 1296.206233][T28451] veth1_macvtap: entered promiscuous mode [ 1296.297471][T28451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1296.298958][T28725] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 1296.334402][T28451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1296.359800][T28725] UDF-fs: Scanning with blocksize 4096 failed [ 1296.383057][T28456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1296.418418][T27933] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.456166][T27933] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.484941][ T37] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.596126][ T37] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.823240][T20805] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1296.961546][T16347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.992050][T16347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1297.027141][T20805] usb 2-1: Using ep0 maxpacket: 8 [ 1297.045540][T27932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1297.075400][T20805] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1297.088995][T27932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1297.097703][T20805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.120958][T20805] usb 2-1: Product: syz [ 1297.125603][T20805] usb 2-1: Manufacturer: syz [ 1297.130892][T20805] usb 2-1: SerialNumber: syz [ 1297.144939][T20805] usb 2-1: config 0 descriptor?? [ 1297.285855][T28745] cgroup: No subsys list or none specified [ 1297.307419][T28745] netlink: 'syz.5.5949': attribute type 1 has an invalid length. [ 1297.319613][T28456] veth0_vlan: entered promiscuous mode [ 1297.357588][T28456] veth1_vlan: entered promiscuous mode [ 1297.359347][T20805] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1297.465704][T28456] veth0_macvtap: entered promiscuous mode [ 1297.467037][T20805] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1297.523398][T28456] veth1_macvtap: entered promiscuous mode [ 1297.570801][T20805] usb 2-1: USB disconnect, device number 15 [ 1297.609305][T28456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1297.653498][T28456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1297.690380][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.709984][T28761] Mount JFS Failure: -22 [ 1297.736311][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.751345][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.779589][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.072491][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1298.080384][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1298.225828][ T3013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1298.248132][ T3013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.462090][ T5909] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1299.632717][ T5909] usb 6-1: Using ep0 maxpacket: 32 [ 1299.640207][ T5909] usb 6-1: config 0 has an invalid descriptor of length 22, skipping remainder of the config [ 1299.661854][ T5909] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1299.698212][ T5909] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1299.723300][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.745228][ T5909] usb 6-1: Product: syz [ 1299.751042][ T5909] usb 6-1: Manufacturer: syz [ 1299.768054][ T5909] usb 6-1: SerialNumber: syz [ 1299.792715][ T5909] usb 6-1: config 0 descriptor?? [ 1300.010137][T28801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1300.039619][T28801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1300.066007][T28801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1300.095769][T28801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1300.119665][T28801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1300.141204][T28801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1300.188279][T28801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1300.227343][T28801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1300.240715][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.249771][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.333154][T28801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1300.381550][T28801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1300.881414][T20805] usb 6-1: USB disconnect, device number 66 [ 1301.033864][ T5909] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1301.106999][T28849] XFS (rnullb0): Invalid superblock magic number [ 1301.207114][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 1301.246857][ T5909] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.278093][ T5909] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1301.309252][ T5909] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1301.323439][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.355386][ T5909] usb 2-1: Product: syz [ 1301.364165][ T5909] usb 2-1: Manufacturer: syz [ 1301.368903][ T5909] usb 2-1: SerialNumber: syz [ 1301.594537][ T5909] usb 2-1: 0:2 : does not exist [ 1301.936536][T28884] NILFS (rnullb0): couldn't find nilfs on the device [ 1302.003409][T28842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.024707][T28842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.053166][T28843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.065400][T28843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.104882][T28646] usb 2-1: USB disconnect, device number 16 [ 1302.595484][T28906] Mount JFS Failure: -22 [ 1302.606347][T28906] Mount JFS Failure: -22 [ 1302.731234][T28911] netlink: 'syz.6.5978': attribute type 4 has an invalid length. [ 1302.740122][T28911] netlink: 17 bytes leftover after parsing attributes in process `syz.6.5978'. [ 1303.090171][ T30] audit: type=1326 audit(1751941323.211:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28918 comm="syz.6.5979" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4dfcf8e929 code=0x0 [ 1304.139447][T28941] dlm: non-version read from control device 8224 [ 1304.449041][T28949] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5983'. [ 1304.568570][T28951] hpfs: Bad magic ... probably not HPFS [ 1305.028982][T28967] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1305.044989][T28967] overlayfs: failed to set xattr on upper [ 1305.050768][T28967] overlayfs: ...falling back to redirect_dir=nofollow. [ 1305.070049][T28967] overlayfs: ...falling back to metacopy=off. [ 1305.091742][T28967] overlayfs: ...falling back to index=off. [ 1305.114143][T28968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1305.149203][T28967] overlayfs: ...falling back to uuid=null. [ 1305.161164][T28968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1305.193058][ T982] hid_parser_main: 5 callbacks suppressed [ 1305.193082][ T982] hid-generic C98F:0003:0000.006A: unknown main item tag 0x0 [ 1305.227505][T28967] netlink: 'syz.6.5988': attribute type 10 has an invalid length. [ 1305.252164][ T982] hid-generic C98F:0003:0000.006A: unknown main item tag 0x0 [ 1305.261175][T28967] netlink: 55 bytes leftover after parsing attributes in process `syz.6.5988'. [ 1305.284504][ T982] hid-generic C98F:0003:0000.006A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1305.712101][ T982] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1305.872241][ T982] usb 2-1: Using ep0 maxpacket: 32 [ 1305.880443][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805914dc00: rx timeout, send abort [ 1305.887829][ T982] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1305.889643][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805914dc00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 1305.916746][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.982122][ T982] usb 2-1: Product: syz [ 1305.986353][ T982] usb 2-1: Manufacturer: syz [ 1306.011465][ T982] usb 2-1: SerialNumber: syz [ 1306.033485][ T982] usb 2-1: config 0 descriptor?? [ 1306.664464][ T982] airspy 2-1:0.0: Board ID: 00 [ 1306.690440][ T982] airspy 2-1:0.0: Firmware version: [ 1307.266483][T28979] /dev/rnullb0: Can't open blockdev [ 1307.379923][T28992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.412667][T28992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.721423][ T982] airspy 2-1:0.0: usb_control_msg() failed -71 request 12 [ 1307.793517][ T982] airspy 2-1:0.0: Registered as swradio24 [ 1307.829678][ T982] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1307.944722][ T982] usb 2-1: USB disconnect, device number 17 [ 1308.706144][T28455] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 1308.713834][T28455] Bluetooth: Wrong link type (-22) [ 1308.720426][T28455] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 1308.728589][T28455] Bluetooth: Wrong link type (-22) [ 1308.734070][T28455] Bluetooth: hci1: link tx timeout [ 1308.739788][T28455] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1309.016645][ T982] IPVS: starting estimator thread 0... [ 1309.132119][T29035] IPVS: using max 27 ests per chain, 64800 per kthread [ 1309.534220][T29040] syzkaller1: entered promiscuous mode [ 1309.548585][T29040] syzkaller1: entered allmulticast mode [ 1309.612582][T20805] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1309.922455][T20805] usb 2-1: Using ep0 maxpacket: 8 [ 1309.939584][T20805] usb 2-1: config 3 has an invalid interface number: 45 but max is 0 [ 1309.973798][T20805] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 1309.992256][T20805] usb 2-1: config 3 has no interface number 0 [ 1309.998431][T20805] usb 2-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1310.052104][T20805] usb 2-1: config 3 interface 45 has no altsetting 0 [ 1310.075839][T20805] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 1310.085862][T20805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.116861][T20805] usb 2-1: Product: syz [ 1310.121213][T20805] usb 2-1: Manufacturer: syz [ 1310.136045][T20805] usb 2-1: SerialNumber: syz [ 1310.345548][T29066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.444825][T29066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.665309][T29049] XFS (rnullb0): Invalid superblock magic number [ 1310.794721][T28246] Bluetooth: hci1: command 0x0406 tx timeout [ 1310.822437][T20805] usb 2-1: USB disconnect, device number 18 [ 1310.887387][T28723] udevd[28723]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1311.542465][T29102] ptrace attach of "./syz-executor exec"[28456] was attempted by "./syz-executor exec"[29102] [ 1311.933043][T28646] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1312.102076][T28646] usb 2-1: Using ep0 maxpacket: 16 [ 1312.111305][T28646] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1312.132792][T28646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.165325][T28646] usb 2-1: Product: syz [ 1312.169548][T28646] usb 2-1: Manufacturer: syz [ 1312.183133][T28646] usb 2-1: SerialNumber: syz [ 1312.200417][T28646] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1312.218144][T28646] r8152-cfgselector 2-1: config 0 descriptor?? [ 1312.247522][T28646] hub 2-1:0.0: bad descriptor, ignoring hub [ 1312.261928][T28646] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1312.464765][T29131] gfs2: gfs2 mount does not exist [ 1312.763278][T28646] r8152-cfgselector 2-1: reset high-speed USB device number 19 using dummy_hcd [ 1312.898737][T29150] qnx4: no qnx4 filesystem (no root dir). [ 1313.279287][T29106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1313.288984][T29106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1313.725414][T29170] omfs: Invalid superblock (0) [ 1313.762433][T28646] r8152-cfgselector 2-1: USB disconnect, device number 19 [ 1314.433437][T29180] loop8: detected capacity change from 0 to 7 [ 1314.442389][T29180] Dev loop8: unable to read RDB block 7 [ 1314.459601][T29180] loop8: unable to read partition table [ 1314.501372][T29180] loop8: partition table beyond EOD, truncated [ 1314.541927][T29180] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 1314.622923][T28646] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1314.896303][T28646] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1314.922911][T28646] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1314.959179][T28646] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1315.032101][T28646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.129725][T28646] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1315.152954][T28646] usb 2-1: invalid MIDI out EP 0 [ 1315.361819][T28646] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1315.439081][T29200] netlink: 324 bytes leftover after parsing attributes in process `syz.1.6030'. [ 1316.385375][T29227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.411705][T29227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1317.272461][ T24] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1317.432425][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1317.459632][ T982] usb 2-1: USB disconnect, device number 20 [ 1317.474189][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1317.523326][ T24] usb 6-1: config 9 has an invalid interface number: 111 but max is 2 [ 1317.576478][ T24] usb 6-1: config 9 has an invalid interface number: 79 but max is 2 [ 1317.601067][ T24] usb 6-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.631712][ T24] usb 6-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 1317.672285][ T24] usb 6-1: config 9 has no interface number 0 [ 1317.696976][ T24] usb 6-1: config 9 has no interface number 1 [ 1317.721602][ T24] usb 6-1: config 9 interface 111 altsetting 16 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1317.769618][ T24] usb 6-1: config 9 interface 111 altsetting 16 endpoint 0x6 has invalid maxpacket 9887, setting to 1024 [ 1317.798784][ T24] usb 6-1: config 9 interface 111 altsetting 16 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1317.820429][ T24] usb 6-1: config 9 interface 111 altsetting 16 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1317.845772][ T24] usb 6-1: config 9 interface 111 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 1317.903151][ T24] usb 6-1: config 9 interface 79 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1317.934947][ T24] usb 6-1: config 9 interface 79 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1317.956200][ T24] usb 6-1: config 9 interface 79 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 1317.970506][ T24] usb 6-1: config 9 interface 79 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 1317.989543][ T24] usb 6-1: config 9 interface 79 altsetting 4 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1318.001192][ T24] usb 6-1: config 9 interface 79 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 1318.051244][ T24] usb 6-1: config 9 interface 79 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 1318.084304][ T24] usb 6-1: config 9 interface 79 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 1318.101974][ T24] usb 6-1: config 9 interface 79 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 1318.116617][ T24] usb 6-1: config 9 interface 79 altsetting 4 bulk endpoint 0x8C has invalid maxpacket 64 [ 1318.129993][ T24] usb 6-1: config 9 interface 79 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 1318.141085][ T24] usb 6-1: config 9 interface 79 altsetting 4 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1318.165024][ T24] usb 6-1: config 9 interface 79 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 1318.177364][ T24] usb 6-1: config 9 interface 79 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 1318.192217][ T24] usb 6-1: config 9 interface 79 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 1318.216777][T29279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1318.229621][ T24] usb 6-1: config 9 interface 79 altsetting 4 has 15 endpoint descriptors, different from the interface descriptor's value: 16 [ 1318.234744][T29280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1318.260166][ T24] usb 6-1: config 9 interface 111 has no altsetting 0 [ 1318.277551][ T24] usb 6-1: config 9 interface 79 has no altsetting 0 [ 1318.277602][T29279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1318.286083][T29280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1318.314225][ T24] usb 6-1: New USB device found, idVendor=0bb4, idProduct=0a6f, bcdDevice=7a.05 [ 1318.323843][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.331878][ T24] usb 6-1: Product: syz [ 1318.346412][ T24] usb 6-1: Manufacturer: syz [ 1318.350494][T29279] /dev/rnullb0: Can't open blockdev [ 1318.351059][ T24] usb 6-1: SerialNumber: syz [ 1318.372844][ T24] usb 6-1: Interface #111 referenced by multiple IADs [ 1318.392997][T29246] raw-gadget.6 gadget.5: fail, usb_ep_enable returned -22 [ 1318.688942][ T24] usb 6-1: USB disconnect, device number 67 [ 1319.150734][T29305] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 1319.175142][T29305] UDF-fs: Scanning with blocksize 4096 failed [ 1319.289451][T29311] Mount JFS Failure: -22 [ 1319.353369][T29316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.361140][T29319] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6050'. [ 1319.386102][T29316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.396218][T29319] program syz.1.6050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1319.496033][T29323] input: syz0 as /devices/virtual/input/input109 [ 1320.015039][T29343] /dev/rnullb0: Can't open blockdev [ 1320.062701][T29344] /dev/rnullb0: Can't open blockdev [ 1320.539819][T29355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.568210][T29356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.583233][T29355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.593708][T29356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.908040][T29367] /dev/rnullb0: Can't open blockdev [ 1321.302518][T29391] Mount JFS Failure: -22 [ 1321.750848][ T982] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1321.929335][ T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1321.972179][ T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1321.986626][ T982] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1322.007667][ T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.031415][T29421] netlink: 112 bytes leftover after parsing attributes in process `syz.6.6066'. [ 1322.052798][ T982] usb 6-1: config 0 descriptor?? [ 1322.807925][T29441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.841573][T29441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.893804][T29441] /dev/rnullb0: Can't open blockdev [ 1323.085491][ T982] uclogic 0003:256C:006D.006B: failed retrieving Huion firmware version: -71 [ 1323.129711][ T982] uclogic 0003:256C:006D.006B: failed probing parameters: -71 [ 1323.149753][ T982] uclogic 0003:256C:006D.006B: probe with driver uclogic failed with error -71 [ 1323.202248][ T982] usb 6-1: USB disconnect, device number 68 [ 1323.390974][T28455] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 1323.616084][T29466] netlink: 'syz.6.6075': attribute type 19 has an invalid length. [ 1323.812267][ T982] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1323.828159][T29477] /dev/rnullb0: Can't open blockdev [ 1323.867764][T29477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.915307][T29478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.916352][T29477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.934913][T29478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.963751][T29478] netlink: 'syz.6.6077': attribute type 2 has an invalid length. [ 1323.971668][T29481] qnx4: no qnx4 filesystem (no root dir). [ 1323.983160][ T982] usb 2-1: Using ep0 maxpacket: 32 [ 1323.993403][T29482] netlink: 'syz.6.6077': attribute type 2 has an invalid length. [ 1324.088720][T29485] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6079'. [ 1324.295265][T29462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.331438][T29462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.705698][T29505] /dev/rnullb0: Can't open blockdev [ 1324.733067][T28646] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1324.892541][T28646] usb 6-1: Using ep0 maxpacket: 8 [ 1324.915705][T28646] usb 6-1: config 6 has an invalid interface number: 2 but max is 0 [ 1324.933323][T28646] usb 6-1: config 6 has no interface number 0 [ 1324.952381][T28646] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1324.974738][T28646] usb 6-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xDD, changing to 0x8D [ 1324.994063][T28646] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1325.018410][T28646] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1325.027618][T28646] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.052067][T28646] usb 6-1: Product: syz [ 1325.056382][T28646] usb 6-1: Manufacturer: syz [ 1325.061004][T28646] usb 6-1: SerialNumber: syz [ 1325.087362][T28646] hso 6-1:6.2: Failed to find INT IN ep [ 1325.618034][ T5851] usb 6-1: USB disconnect, device number 69 [ 1326.320922][T29546] GUP no longer grows the stack in syz.5.6085 (29546): 200000004000-20000000a000 (200000002000) [ 1326.346191][T29546] CPU: 1 UID: 0 PID: 29546 Comm: syz.5.6085 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 1326.346230][T29546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1326.346245][T29546] Call Trace: [ 1326.346255][T29546] [ 1326.346265][T29546] dump_stack_lvl+0x189/0x250 [ 1326.346308][T29546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1326.346341][T29546] ? __pfx__printk+0x10/0x10 [ 1326.346371][T29546] ? find_vma+0xe7/0x160 [ 1326.346425][T29546] __get_user_pages+0x24d0/0x2ce0 [ 1326.346479][T29546] ? mtree_load+0x100/0x700 [ 1326.346513][T29546] get_user_pages_remote+0x2f1/0xad0 [ 1326.346542][T29546] ? __pfx_mtree_load+0x10/0x10 [ 1326.346570][T29546] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1326.346611][T29546] __access_remote_vm+0x215/0x5f0 [ 1326.346656][T29546] ? __pfx___access_remote_vm+0x10/0x10 [ 1326.346693][T29546] ? alloc_pages_noprof+0xbe/0x190 [ 1326.346750][T29546] proc_pid_cmdline_read+0x440/0x840 [ 1326.346778][T29546] ? __asan_memset+0x22/0x50 [ 1326.346816][T29546] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1326.346848][T29546] ? rw_verify_area+0x258/0x650 [ 1326.346887][T29546] vfs_readv+0x5a7/0x850 [ 1326.346916][T29546] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1326.346947][T29546] ? __pfx_vfs_readv+0x10/0x10 [ 1326.346991][T29546] ? __fget_files+0x2a/0x420 [ 1326.347022][T29546] ? __fget_files+0x3a0/0x420 [ 1326.347047][T29546] ? __fget_files+0x2a/0x420 [ 1326.347083][T29546] __x64_sys_preadv+0x197/0x2a0 [ 1326.347109][T29546] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1326.347132][T29546] ? rcu_is_watching+0x15/0xb0 [ 1326.347167][T29546] ? do_syscall_64+0xbe/0x3b0 [ 1326.347193][T29546] do_syscall_64+0xfa/0x3b0 [ 1326.347218][T29546] ? lockdep_hardirqs_on+0x9c/0x150 [ 1326.347242][T29546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.347266][T29546] ? clear_bhb_loop+0x60/0xb0 [ 1326.347295][T29546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.347318][T29546] RIP: 0033:0x7f5943b8e929 [ 1326.347340][T29546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1326.347361][T29546] RSP: 002b:00007f5944a96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1326.347386][T29546] RAX: ffffffffffffffda RBX: 00007f5943db5fa0 RCX: 00007f5943b8e929 [ 1326.347404][T29546] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000005 [ 1326.347430][T29546] RBP: 00007f5943c10b39 R08: 0000000021000008 R09: 0000000000000000 [ 1326.347447][T29546] R10: 0000000000000304 R11: 0000000000000246 R12: 0000000000000000 [ 1326.347461][T29546] R13: 0000000000000000 R14: 00007f5943db5fa0 R15: 00007fff142da818 [ 1326.347497][T29546] [ 1326.393759][T29459] orangefs_mount: mount request failed with -4 [ 1327.107586][ T982] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1327.130639][ T982] usb 2-1: too many configurations: 45, using maximum allowed: 8 [ 1327.153121][ T982] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1327.160938][ T982] usb 2-1: can't read configurations, error -71 [ 1327.436128][T28646] hid (null): unknown global tag 0xd [ 1327.445835][T28646] hid (null): invalid report_size 58706 [ 1327.464916][T28646] hid (null): bogus close delimiter [ 1327.476581][T28646] hid (null): unknown global tag 0x10 [ 1327.492928][T28646] hid (null): invalid report_count 21076 [ 1327.512789][T28646] hid (null): global environment stack underflow [ 1327.526723][T28646] hid (null): report_id 0 is invalid [ 1327.578753][T28646] hid (null): invalid report_size -1778090163 [ 1327.587211][T28646] hid (null): bogus close delimiter [ 1327.596074][T28646] hid (null): unknown global tag 0xc [ 1327.632323][T28646] hid (null): bogus close delimiter [ 1327.642645][T28646] hid (null): invalid report_size 25351 [ 1327.656338][T28646] hid (null): unknown global tag 0xc [ 1327.671461][T28646] hid (null): report_id 41908 is invalid [ 1327.705730][T28646] hid (null): unknown global tag 0xc [ 1327.725985][T28646] hid (null): invalid report_size 64147 [ 1327.763438][T28646] hid (null): invalid report_count 30380 [ 1327.789497][T28646] hid (null): unknown global tag 0xc [ 1327.852469][T28646] hid (null): unknown global tag 0xd [ 1327.864204][T28646] hid (null): invalid report_count -2108930150 [ 1327.899322][T28646] hid (null): unknown global tag 0xe [ 1327.920777][T28646] hid (null): global environment stack underflow [ 1327.939842][T28646] hid (null): unknown global tag 0xd [ 1327.947263][T28646] hid (null): unknown global tag 0xd [ 1327.959127][T28646] hid (null): unknown global tag 0xc [ 1327.967916][T28646] hid (null): unknown global tag 0xc [ 1327.973832][T28646] hid (null): unknown global tag 0xc [ 1327.979327][T28646] hid (null): global environment stack underflow [ 1327.998301][T28646] hid (null): report_id 0 is invalid [ 1328.012376][T28646] hid (null): report_id 0 is invalid [ 1328.024429][T28646] hid (null): unknown global tag 0x38 [ 1328.043489][T28646] hid (null): unknown global tag 0xd [ 1328.065202][T28646] hid (null): invalid report_size 1585227883 [ 1328.088229][T28646] hid (null): report_id 2255370930 is invalid [ 1328.111935][T28646] hid (null): invalid report_count 58437 [ 1328.128090][T28646] hid (null): unknown global tag 0xd [ 1328.141500][T28646] hid (null): report_id 25268 is invalid [ 1328.150124][T28646] hid (null): unknown global tag 0x72 [ 1328.174724][T28646] hid (null): unknown global tag 0x4d [ 1328.190456][T28646] hid (null): invalid report_count 1314559241 [ 1328.210698][T28646] hid (null): unknown global tag 0xd [ 1328.221100][T28646] hid (null): unknown global tag 0xc [ 1328.237130][T28646] hid (null): invalid report_count 25757 [ 1328.256722][T28646] hid (null): invalid report_size 34364 [ 1328.283216][T28646] hid (null): invalid report_size 29242 [ 1328.302204][T28646] hid (null): unknown global tag 0xa6 [ 1328.311231][T28646] hid (null): unknown global tag 0xe [ 1328.345900][T28646] hid (null): nested delimiters [ 1328.360620][T28646] hid (null): invalid report_size 37336 [ 1328.366667][T28646] hid (null): unknown global tag 0xc [ 1328.373364][T28646] hid (null): report_id 2932343804 is invalid [ 1328.379625][T28646] hid (null): unknown global tag 0x9e [ 1328.395117][T28646] hid-generic 0000:0005:070B.006C: reserved main item tag 0xe [ 1328.442357][T28646] hid-generic 0000:0005:070B.006C: unknown main item tag 0x1 [ 1328.454733][T28646] hid-generic 0000:0005:070B.006C: unknown main item tag 0x5 [ 1328.483317][T28646] hid-generic 0000:0005:070B.006C: unknown main item tag 0x5 [ 1328.491029][T28646] hid-generic 0000:0005:070B.006C: unknown main item tag 0x5 [ 1328.514903][T28646] hid-generic 0000:0005:070B.006C: unknown main item tag 0x0 [ 1328.540065][T28646] hid-generic 0000:0005:070B.006C: item 0 2 0 11 parsing failed [ 1328.568634][T28646] hid-generic 0000:0005:070B.006C: probe with driver hid-generic failed with error -22 [ 1328.817305][T29604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.826400][T29604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.849975][ T30] audit: type=1800 audit(1751941348.981:341): pid=29604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6096" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1329.328372][T29610] XFS (rnullb0): Invalid superblock magic number [ 1329.435550][T29623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1329.712403][T29632] fuseblk: Bad value for 'fd' [ 1330.027723][T29647] netlink: 'syz.5.6103': attribute type 10 has an invalid length. [ 1330.052268][T29647] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6103'. [ 1330.162184][T28646] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1330.353542][T28646] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1330.392192][T28646] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1330.497644][T28646] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1330.525970][T28646] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1330.579122][T28646] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1330.628380][T28646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.678343][T28646] usb 2-1: config 0 descriptor?? [ 1330.917578][T28646] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 1330.942337][T28646] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 1330.971718][T28646] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 1330.998306][T28646] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 1331.016134][T28646] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 1331.063112][T28646] plantronics 0003:047F:FFFF.006D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1331.174963][T28646] usb 2-1: USB disconnect, device number 23 [ 1331.334945][T29684] fido_id[29684]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1331.662469][T28646] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1331.770306][T15427] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.875211][T28646] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1331.911024][T28646] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1331.944136][T28646] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1331.996173][T28646] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.047801][T28646] usb 6-1: config 0 descriptor?? [ 1332.147359][T15427] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.390482][T15427] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.444346][T29721] /dev/rnullb0: Can't open blockdev [ 1332.650595][T15427] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.683557][T29726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.701627][ T30] audit: type=1400 audit(1751941352.831:342): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=29727 comm="syz.1.6123" [ 1332.750238][T29726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.754836][T29693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.788469][T29693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.005229][T29693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.043647][T29693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.189754][T15427] bridge_slave_1: left allmulticast mode [ 1333.207393][T15427] bridge_slave_1: left promiscuous mode [ 1333.214798][T15427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.372319][T15427] bridge_slave_0: left allmulticast mode [ 1333.378114][T15427] bridge_slave_0: left promiscuous mode [ 1333.392258][T15427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.500422][T29693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.546154][T29693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.701038][T29693] /dev/rnullb0: Can't open blockdev [ 1333.716046][T28646] uclogic 0003:256C:006D.006E: failed retrieving string descriptor #100: -71 [ 1333.755688][T28646] uclogic 0003:256C:006D.006E: failed retrieving pen parameters: -71 [ 1333.790909][T28646] uclogic 0003:256C:006D.006E: failed probing pen v1 parameters: -71 [ 1333.824794][T28646] uclogic 0003:256C:006D.006E: failed probing parameters: -71 [ 1333.842780][T28646] uclogic 0003:256C:006D.006E: probe with driver uclogic failed with error -71 [ 1333.901684][T28646] usb 6-1: USB disconnect, device number 70 [ 1333.987931][T20805] libceph: connect (1)[c::]:6789 error -101 [ 1333.998407][T20805] libceph: mon0 (1)[c::]:6789 connect error [ 1334.268427][T20805] libceph: connect (1)[c::]:6789 error -101 [ 1334.276627][T20805] libceph: mon0 (1)[c::]:6789 connect error [ 1334.503931][T29775] netlink: 'syz.5.6131': attribute type 1 has an invalid length. [ 1334.535767][T29775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1334.685088][T29759] ceph: No mds server is up or the cluster is laggy [ 1335.212369][T28646] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1335.263558][T29806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.298804][T29806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.358394][T28646] usb 2-1: device descriptor read/64, error -71 [ 1335.608629][T29817] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6138'. [ 1335.617921][T28646] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1335.621307][T29817] netlink: 'syz.5.6138': attribute type 5 has an invalid length. [ 1335.768201][T28646] usb 2-1: device descriptor read/64, error -71 [ 1335.907852][T28646] usb usb2-port1: attempt power cycle [ 1336.010336][T29829] /dev/rnullb0: Can't open blockdev [ 1336.032097][T29829] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1336.243726][T29837] /dev/rnullb0: Can't open blockdev [ 1336.249105][T29835] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1336.261449][T29838] /dev/rnullb0: Can't open blockdev [ 1336.266943][T28646] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1336.308113][T28646] usb 2-1: device descriptor read/8, error -71 [ 1336.320593][T15427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1336.372973][T15427] bond_slave_0: left promiscuous mode [ 1336.401552][T15427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1336.433635][T29844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1336.445147][T29844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.456016][T29844] /dev/rnullb0: Can't open blockdev [ 1336.464968][T15427] bond_slave_1: left promiscuous mode [ 1336.475123][T15427] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1336.538071][T15427] batadv0: left promiscuous mode [ 1336.547269][T15427] bond0 (unregistering): Released all slaves [ 1336.562315][T28646] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1336.594178][T28646] usb 2-1: device descriptor read/8, error -71 [ 1336.714294][T28646] usb usb2-port1: unable to enumerate USB device [ 1337.251804][ T30] audit: type=1326 audit(1751941357.381:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29861 comm="syz.6.6145" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4dfcf8e929 code=0x0 [ 1337.419929][T15427] hsr_slave_0: left promiscuous mode [ 1337.445518][T15427] hsr_slave_1: left promiscuous mode [ 1337.474945][T15427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1337.482799][T15427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1337.508785][T15427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1337.530628][T29872] efs: Unknown parameter '((%' [ 1337.537511][T15427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1337.537833][T29872] /dev/rnullb0: Can't open blockdev [ 1337.559753][T15427] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1337.580335][T15427] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1337.645350][T15427] veth1_macvtap: left promiscuous mode [ 1337.661530][T15427] veth0_macvtap: left promiscuous mode [ 1337.680318][T15427] veth1_vlan: left promiscuous mode [ 1337.690401][T15427] veth0_vlan: left promiscuous mode [ 1338.042079][ T982] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1338.077510][ T30] audit: type=1326 audit(1751941358.211:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29888 comm="syz.1.6149" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd2fc58e929 code=0x0 [ 1338.157706][T29891] /dev/sg0: Can't lookup blockdev [ 1338.223564][ T982] usb 6-1: Using ep0 maxpacket: 16 [ 1338.241758][ T982] usb 6-1: config index 0 descriptor too short (expected 59154, got 18) [ 1338.264036][ T982] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 1338.286089][ T982] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1338.301026][ T982] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1338.313460][ T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.321645][ T982] usb 6-1: Product: syz [ 1338.339302][ T982] usb 6-1: Manufacturer: syz [ 1338.362153][ T982] usb 6-1: SerialNumber: syz [ 1338.383866][ T982] usb 6-1: config 0 descriptor?? [ 1338.391798][T29897] /dev/rnullb0: Can't open blockdev [ 1338.418434][ T982] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1338.913696][ T982] ssu100 6-1:0.0: probe with driver ssu100 failed with error -110 [ 1340.526137][T29945] /dev/rnullb0: Can't open blockdev [ 1340.545839][T29946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1340.559986][T29946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1340.762135][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1340.778809][T15427] team0 (unregistering): Port device team_slave_1 removed [ 1341.017002][T15427] team0 (unregistering): Port device team_slave_0 removed [ 1343.741452][T29902] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1343.757861][T29925] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1343.857648][ T982] usb 6-1: USB disconnect, device number 71 [ 1344.087922][T29958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.106607][T29958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.167620][T29962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6163'. [ 1344.226292][T29964] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6163'. [ 1344.266100][T29962] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 1344.275172][T29962] UDF-fs: Scanning with blocksize 4096 failed [ 1344.284026][T29966] efs: device does not support 512 byte blocks [ 1344.295496][T29966] device does not support 512 byte blocks [ 1344.295496][T29966] [ 1344.968047][T29986] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1345.023506][T29989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1345.025503][T29986] /dev/rnullb0: Can't open blockdev [ 1345.072593][T29989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1345.111199][T29975] mkiss: ax0: crc mode is auto. [ 1345.828492][T30007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1345.858390][T30007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1345.907985][T30007] netlink: 'syz.6.6172': attribute type 10 has an invalid length. [ 1345.918657][T30007] team0: Device tunl0 is of different type [ 1346.090795][T30016] syz.1.6174: attempt to access beyond end of device [ 1346.090795][T30016] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1346.166214][T30016] syz.1.6174: attempt to access beyond end of device [ 1346.166214][T30016] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1346.210181][T30016] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1346.261294][T30016] syz.1.6174: attempt to access beyond end of device [ 1346.261294][T30016] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1346.304244][T30016] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1346.335285][T30016] syz.1.6174: attempt to access beyond end of device [ 1346.335285][T30016] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1346.365750][T30016] syz.1.6174: attempt to access beyond end of device [ 1346.365750][T30016] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1346.382358][T30016] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1346.401494][T30016] syz.1.6174: attempt to access beyond end of device [ 1346.401494][T30016] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1346.478561][T30016] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1346.522870][T30016] syz.1.6174: attempt to access beyond end of device [ 1346.522870][T30016] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1346.601423][T30028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.605644][T30016] syz.1.6174: attempt to access beyond end of device [ 1346.605644][T30016] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1346.618101][T30028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.666371][T30016] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1346.721640][T30016] syz.1.6174: attempt to access beyond end of device [ 1346.721640][T30016] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1346.772994][T30016] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1346.783624][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1346.793639][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1346.801186][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1346.819389][T30016] syz.1.6174: attempt to access beyond end of device [ 1346.819389][T30016] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1346.838355][T30016] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1346.841154][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1346.868535][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1346.872967][T30016] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1346.878236][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1346.892904][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1346.902858][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1346.907908][T30016] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 1346.910601][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1346.926582][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1346.938399][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1346.946987][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1346.957719][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1346.966009][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1346.974318][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1346.982406][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1346.994089][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1347.001700][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1347.017623][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1347.029968][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1347.039397][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1347.071084][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1347.075908][T30048] /dev/rnullb0: Can't open blockdev [ 1347.093143][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1347.100792][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1347.113195][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1347.120912][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1347.128743][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1347.136501][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1347.144226][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1347.166330][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1347.178631][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1347.189120][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1347.218567][T30037] NILFS (rnullb0): couldn't find nilfs on the device [ 1347.469880][T30060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1347.493516][T30060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1347.536443][T30063] binder: BINDER_SET_CONTEXT_MGR already set [ 1347.542871][T30063] binder: 30059:30063 ioctl 4018620d 200000000100 returned -16 [ 1347.551000][T30060] binder: BINDER_SET_CONTEXT_MGR already set [ 1347.557864][T30060] binder: 30059:30060 ioctl 4018620d 2000000001c0 returned -16 [ 1347.566217][T30060] binder: 30059:30060 ioctl c0306201 200000000640 returned -22 [ 1347.730595][T30067] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 1347.784817][T30068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1348.176028][T30079] netlink: 'syz.1.6186': attribute type 10 has an invalid length. [ 1348.247727][T30079] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6186'. [ 1348.279357][T30081] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6186'. [ 1348.358306][T30079] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1348.414598][T30079] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1348.463276][T30079] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1348.673859][T30093] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1348.681387][T30093] UDF-fs: Scanning with blocksize 512 failed [ 1348.712785][T30093] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1348.748585][T30093] UDF-fs: Scanning with blocksize 1024 failed [ 1348.769951][T30093] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1348.801185][T30093] UDF-fs: Scanning with blocksize 2048 failed [ 1348.812588][T30093] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1348.832070][T30093] UDF-fs: Scanning with blocksize 4096 failed [ 1349.092558][ T982] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1349.115224][T30110] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1349.222201][ T982] usb 2-1: device descriptor read/64, error -71 [ 1349.473619][ T982] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1349.634368][ T982] usb 2-1: device descriptor read/64, error -71 [ 1349.774407][ T982] usb usb2-port1: attempt power cycle [ 1349.919381][T30130] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1349.938528][T30130] Â: renamed from pim6reg1 [ 1350.146294][ T982] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1350.186261][ T982] usb 2-1: device descriptor read/8, error -71 [ 1350.248159][ T30] audit: type=1326 audit(1751941370.381:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30121 comm="syz.4.6195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd238e929 code=0x7fc00000 [ 1350.283052][T30146] /dev/rnullb0: Can't open blockdev [ 1350.305304][T30146] /dev/rnullb0: Can't open blockdev [ 1350.462068][ T982] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1350.527121][ T982] usb 2-1: device descriptor read/8, error -71 [ 1350.643600][ T982] usb usb2-port1: unable to enumerate USB device [ 1350.679998][T30160] gfs2: error -5 reading superblock [ 1351.551742][T30186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.603218][T30186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.668817][T30196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.678020][T30196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.981691][T30210] qnx4: no qnx4 filesystem (no root dir). [ 1352.251600][T30217] XFS (nullb0): Invalid superblock magic number [ 1352.442341][ T982] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 1352.614872][ T982] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1352.637343][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.659905][ T982] usb 2-1: config 0 descriptor?? [ 1352.693771][ T982] cp210x 2-1:0.0: cp210x converter detected [ 1353.101328][ T982] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -121 [ 1353.120863][ T982] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 1353.170145][ T982] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1353.557221][T30254] /dev/rnullb0: Can't open blockdev [ 1353.659948][T30259] /dev/rnullb0: Can't open blockdev [ 1353.702185][ T5909] usb 2-1: USB disconnect, device number 33 [ 1353.721632][ T5909] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1353.763836][ T5909] cp210x 2-1:0.0: device disconnected [ 1353.824009][T30263] /dev/rnullb0: Can't open blockdev [ 1354.026003][ T30] audit: type=1800 audit(1751941374.161:346): pid=30269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6217" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1354.105017][T30272] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6218'. [ 1354.763624][ T5909] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1354.945330][ T5909] usb 6-1: Using ep0 maxpacket: 32 [ 1354.960872][ T5909] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1354.973599][ T5909] usb 6-1: config 0 interface 0 has no altsetting 1 [ 1354.992509][ T5909] usb 6-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1355.001878][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1355.010426][ T5909] usb 6-1: SerialNumber: syz [ 1355.026796][ T5909] usb 6-1: config 0 descriptor?? [ 1355.038243][ T5909] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1355.066397][ T5909] usb-storage 6-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1355.225641][T20805] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 1355.244497][T30287] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6220'. [ 1355.283458][T30287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1355.325078][T30287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.417575][T20805] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1355.428519][ T982] usb 6-1: USB disconnect, device number 72 [ 1355.448726][T20805] usb 2-1: config 0 has no interface number 0 [ 1355.473878][T20805] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1355.491597][T20805] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1355.516914][T20805] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1355.536722][T20805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.566269][T20805] usb 2-1: config 0 descriptor?? [ 1355.605853][T20805] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1355.876790][T30334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1355.887959][T30334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.956801][T30337] ./cgroup: Can't lookup blockdev [ 1356.137640][ T10] usb 2-1: USB disconnect, device number 34 [ 1356.311368][T30349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1356.336851][T30349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1356.351573][T30348] /dev/rnullb0: Can't open blockdev [ 1356.363082][ T24] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 1356.525102][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1356.542018][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.559030][ T24] usb 6-1: config 0 has no interface number 0 [ 1356.568059][ T24] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1356.582652][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.590726][ T24] usb 6-1: Product: syz [ 1356.599676][ T24] usb 6-1: Manufacturer: syz [ 1356.604435][ T24] usb 6-1: SerialNumber: syz [ 1356.612455][ T24] usb 6-1: config 0 descriptor?? [ 1356.625548][ T24] cx231xx 6-1:0.1: New device syz syz @ 12 Mbps (0572:58a5) with 1 interfaces [ 1356.647416][ T24] cx231xx 6-1:0.1: Not found matching IAD interface [ 1356.766579][T30360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6231'. [ 1356.836578][ T24] usb 6-1: USB disconnect, device number 73 [ 1357.057922][T30342] IPVS: set_ctl: invalid protocol: 35 100.1.1.0:20001 [ 1357.195209][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1357.352138][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1357.360115][ T10] usb 2-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 1357.369951][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.398764][ T10] usb 2-1: config 0 descriptor?? [ 1357.677418][ T10] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 1357.712147][ T10] usb 2-1: USB disconnect, device number 35 [ 1357.796671][T30397] /dev/rnullb0: Can't open blockdev [ 1358.093552][ T982] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1358.302154][ T982] usb 6-1: Using ep0 maxpacket: 32 [ 1358.331560][ T982] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1358.347065][ T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.356916][T30423] /dev/rnullb0: Can't open blockdev [ 1358.366821][ T982] usb 6-1: Product: syz [ 1358.371075][ T982] usb 6-1: Manufacturer: syz [ 1358.380735][T30425] /dev/rnullb0: Can't open blockdev [ 1358.394910][ T982] usb 6-1: SerialNumber: syz [ 1358.419677][ T982] usb 6-1: config 0 descriptor?? [ 1358.453339][ T982] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1358.738453][T30437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6239'. [ 1358.800289][T30435] Invalid ELF header magic: != ELF [ 1360.143373][T17351] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.383022][T17351] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.564403][T17351] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.786559][T17351] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.857035][T28246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1360.872662][T28246] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1360.889862][T28246] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1360.901356][T28246] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1360.909455][T28246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1361.350176][T30505] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1361.372591][ T982] gspca_stk1135: reg_w 0x350 err -110 [ 1361.380120][ T982] gspca_stk1135: serial bus timeout: status=0x00 [ 1361.402201][ T982] gspca_stk1135: Sensor write failed [ 1361.407652][ T982] gspca_stk1135: serial bus timeout: status=0x00 [ 1361.441821][ T982] gspca_stk1135: Sensor write failed [ 1361.455092][T17351] bridge_slave_1: left allmulticast mode [ 1361.461422][ T982] gspca_stk1135: serial bus timeout: status=0x00 [ 1361.468938][T17351] bridge_slave_1: left promiscuous mode [ 1361.476988][ T982] gspca_stk1135: Sensor read failed [ 1361.482852][ T982] gspca_stk1135: serial bus timeout: status=0x00 [ 1361.489382][ T982] gspca_stk1135: Sensor read failed [ 1361.495570][T17351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.504646][ T982] gspca_stk1135: Detected sensor type unknown (0x0) [ 1361.511418][ T982] gspca_stk1135: serial bus timeout: status=0x00 [ 1361.518441][ T982] gspca_stk1135: Sensor read failed [ 1361.519460][T17351] bridge_slave_0: left allmulticast mode [ 1361.524873][ T982] gspca_stk1135: serial bus timeout: status=0x00 [ 1361.536357][ T982] gspca_stk1135: Sensor read failed [ 1361.543914][ T982] gspca_stk1135: serial bus timeout: status=0x00 [ 1361.545733][T17351] bridge_slave_0: left promiscuous mode [ 1361.556979][ T982] gspca_stk1135: Sensor write failed [ 1361.558340][T17351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.569625][ T982] gspca_stk1135: serial bus timeout: status=0x00 [ 1361.586639][ T982] gspca_stk1135: Sensor write failed [ 1361.602165][ T982] stk1135 6-1:0.0: probe with driver stk1135 failed with error -110 [ 1361.679133][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.690791][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.066849][ T5851] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 1362.117376][ T5853] usb 6-1: USB disconnect, device number 74 [ 1362.212574][ T5851] usb 2-1: device descriptor read/64, error -71 [ 1362.382737][T30529] XFS (rnullb0): Invalid superblock magic number [ 1362.492137][ T5851] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 1362.694671][ T5851] usb 2-1: device descriptor read/64, error -71 [ 1362.804762][ T5851] usb usb2-port1: attempt power cycle [ 1363.032272][T28246] Bluetooth: hci2: command tx timeout [ 1363.155159][ T5851] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 1363.186726][ T5851] usb 2-1: device descriptor read/8, error -71 [ 1363.452435][ T5851] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 1363.482871][ T5851] usb 2-1: device descriptor read/8, error -71 [ 1363.610363][ T5851] usb usb2-port1: unable to enumerate USB device [ 1363.875524][T17351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1363.913474][T17351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1363.968241][T17351] bond0 (unregistering): Released all slaves [ 1364.470709][T30498] chnl_net:caif_netlink_parms(): no params data found [ 1365.120958][T28246] Bluetooth: hci2: command tx timeout [ 1365.152200][T17351] hsr_slave_0: left promiscuous mode [ 1365.213036][T17351] hsr_slave_1: left promiscuous mode [ 1365.219363][T17351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1365.275602][T17351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1365.324242][T17351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1365.331720][T17351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1365.416099][T17351] veth1_macvtap: left promiscuous mode [ 1365.421877][T17351] veth0_macvtap: left promiscuous mode [ 1365.429827][T17351] veth1_vlan: left promiscuous mode [ 1365.436282][T17351] veth0_vlan: left promiscuous mode [ 1365.613552][ T5851] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1365.779336][ T5851] usb 2-1: device descriptor read/64, error -71 [ 1366.062236][ T5851] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1366.209344][ T5851] usb 2-1: device descriptor read/64, error -71 [ 1366.322632][ T5851] usb usb2-port1: attempt power cycle [ 1366.682288][ T5851] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1366.725928][ T5851] usb 2-1: device descriptor read/8, error -71 [ 1366.982870][ T5851] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1367.016158][ T5851] usb 2-1: device descriptor read/8, error -71 [ 1367.137090][ T5851] usb usb2-port1: unable to enumerate USB device [ 1367.192433][T28246] Bluetooth: hci2: command tx timeout [ 1367.551139][T17351] team0 (unregistering): Port device team_slave_1 removed [ 1367.776630][T17351] team0 (unregistering): Port device team_slave_0 removed [ 1368.497954][T30693] Mount JFS Failure: -22 [ 1368.954237][T30712] omfs: Invalid superblock (0) [ 1369.282046][T28246] Bluetooth: hci2: command tx timeout [ 1370.948653][T30767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6267'. [ 1370.958617][T30767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6267'. [ 1370.980954][T30498] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.002198][T30767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6267'. [ 1371.022239][T30498] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.052390][T30498] bridge_slave_0: entered allmulticast mode [ 1371.060980][T30498] bridge_slave_0: entered promiscuous mode [ 1371.074876][T30498] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.117652][T30498] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.155608][T30498] bridge_slave_1: entered allmulticast mode [ 1371.177431][T30498] bridge_slave_1: entered promiscuous mode [ 1371.502863][T30498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1371.536660][T30498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1371.567746][T30789] bio_check_eod: 3 callbacks suppressed [ 1371.567768][T30789] syz.5.6272: attempt to access beyond end of device [ 1371.567768][T30789] loop5: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1371.599895][T30789] XFS (loop5): SB validate failed with error -5. [ 1371.894616][T30804] hfs: can't find a HFS filesystem on dev rnullb0 [ 1371.991705][T30498] team0: Port device team_slave_0 added [ 1372.043020][T30498] team0: Port device team_slave_1 added [ 1372.418506][T30498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1372.432450][T30498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1372.435037][T17351] IPVS: stop unused estimator thread 0... [ 1372.510759][T30498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1372.564312][T30498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1372.581565][T30498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1372.622986][T30498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1372.638796][T30830] tmpfs: Unknown parameter 'usrquota_blocÐ_hardlim“O' [ 1372.729410][T30827] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.6277'. [ 1372.861252][T30498] hsr_slave_0: entered promiscuous mode [ 1372.887707][T30498] hsr_slave_1: entered promiscuous mode [ 1372.889072][T30837] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20000 [ 1373.213698][T30832] netlink: 'syz.5.6278': attribute type 10 has an invalid length. [ 1373.231216][T30832] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6278'. [ 1373.240654][ T5851] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1373.418759][ T5851] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1373.478789][ T5851] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1373.545266][ T5851] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1373.609718][ T5851] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1373.650375][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.683104][ T5851] usb 2-1: Product: Ñ‹ [ 1373.694707][ T5851] usb 2-1: Manufacturer: ж [ 1373.708314][ T5851] usb 2-1: SerialNumber: ä€ [ 1374.019219][T30837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.072800][T30837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.126528][ T5851] usb 2-1: 0:2 : does not exist [ 1374.217284][ T5851] usb 2-1: USB disconnect, device number 44 [ 1374.366878][T29952] udevd[29952]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1374.996250][T30885] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1375.057919][T30892] syz.4.6287: attempt to access beyond end of device [ 1375.057919][T30892] md0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1375.652059][T30861] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1375.684636][T30498] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1375.728422][T30498] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1375.758380][T30498] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1375.786452][T30498] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1375.852352][T30861] usb 2-1: Using ep0 maxpacket: 16 [ 1375.869678][T30861] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1375.888447][T30861] usb 2-1: config 0 has no interface number 0 [ 1375.896637][T30861] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1375.916909][T30861] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1375.946389][T30861] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1375.998665][T30861] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1376.021088][T30861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.054199][T30861] usb 2-1: Product: syz [ 1376.063400][T30861] usb 2-1: Manufacturer: syz [ 1376.068060][T30861] usb 2-1: SerialNumber: syz [ 1376.099688][T30861] usb 2-1: config 0 descriptor?? [ 1376.113882][T30906] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 1376.121329][T30906] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 1376.135129][T30498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1376.188217][T30498] 8021q: adding VLAN 0 to HW filter on device team0 [ 1376.211146][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.218410][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1376.246430][T15427] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.253786][T15427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1376.377216][T30901] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 1376.391835][T30901] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 1376.422157][ T5851] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1376.596337][ T5851] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1376.626521][ T5851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1376.647741][ T5851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1376.659265][ T5851] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1376.704722][ T5851] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1376.720175][T30498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1376.727133][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.773094][ T5851] usb 6-1: config 0 descriptor?? [ 1376.867428][T30498] veth0_vlan: entered promiscuous mode [ 1376.888030][T30498] veth1_vlan: entered promiscuous mode [ 1376.946153][T30498] veth0_macvtap: entered promiscuous mode [ 1376.975401][T30498] veth1_macvtap: entered promiscuous mode [ 1377.004148][T30498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1377.017876][T30861] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1377.049630][T30498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1377.100380][T15427] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.123781][T15427] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.151657][T15427] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.172177][T15427] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.204154][ T5851] plantronics 0003:047F:FFFF.006F: ignoring exceeding usage max [ 1377.250551][ T5851] plantronics 0003:047F:FFFF.006F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1377.389605][ T5851] usb 6-1: USB disconnect, device number 75 [ 1377.444872][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.488106][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1377.521484][T30950] fido_id[30950]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1377.601705][T17351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.628426][T17351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1378.295909][T30861] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1378.328971][T30861] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1378.351427][T30861] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 1378.398136][T30861] usb 2-1: USB disconnect, device number 45 [ 1378.976827][T30986] netlink: 'syz.2.6297': attribute type 21 has an invalid length. [ 1379.005831][T30986] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6297'. [ 1379.113672][T14902] Bluetooth: hci6: command 0x0406 tx timeout [ 1379.123787][T14902] Bluetooth: hci1: command 0x0406 tx timeout [ 1379.270227][T30992] qnx4: no qnx4 filesystem (no root dir). [ 1379.740945][T28455] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1380.023131][T31019] binder: binder_mmap: 31018 200000001000-20000000b000 bad vm_flags failed -1 [ 1380.508959][T31034] FAT-fs (rnullb0): bogus number of reserved sectors [ 1380.537756][T31034] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1381.104551][T31055] syz.1.6314: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1381.131718][T31055] CPU: 1 UID: 0 PID: 31055 Comm: syz.1.6314 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 1381.131753][T31055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1381.131768][T31055] Call Trace: [ 1381.131778][T31055] [ 1381.131788][T31055] dump_stack_lvl+0x189/0x250 [ 1381.131831][T31055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1381.131866][T31055] ? __pfx__printk+0x10/0x10 [ 1381.131900][T31055] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1381.131939][T31055] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1381.131972][T31055] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1381.132008][T31055] warn_alloc+0x214/0x310 [ 1381.132032][T31055] ? stack_depot_save_flags+0x40/0x900 [ 1381.132073][T31055] ? __pfx_warn_alloc+0x10/0x10 [ 1381.132099][T31055] ? kasan_save_track+0x4f/0x80 [ 1381.132132][T31055] ? xskq_create+0x56/0x170 [ 1381.132166][T31055] ? xsk_init_queue+0xb0/0x110 [ 1381.132193][T31055] ? xsk_setsockopt+0x43f/0x710 [ 1381.132212][T31055] ? do_sock_setsockopt+0x257/0x3e0 [ 1381.132257][T31055] ? __x64_sys_setsockopt+0x18b/0x220 [ 1381.132286][T31055] ? do_syscall_64+0xfa/0x3b0 [ 1381.132313][T31055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.132347][T31055] __vmalloc_node_range_noprof+0x125/0x12f0 [ 1381.132418][T31055] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1381.132464][T31055] ? __kasan_kmalloc+0x93/0xb0 [ 1381.132502][T31055] vmalloc_user_noprof+0xad/0xf0 [ 1381.132525][T31055] ? xskq_create+0xbf/0x170 [ 1381.132550][T31055] xskq_create+0xbf/0x170 [ 1381.132577][T31055] xsk_init_queue+0xb0/0x110 [ 1381.132604][T31055] xsk_setsockopt+0x43f/0x710 [ 1381.132629][T31055] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1381.132665][T31055] ? __lock_acquire+0xab9/0xd20 [ 1381.132696][T31055] ? aa_sock_opt_perm+0xff/0x1b0 [ 1381.132735][T31055] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1381.132762][T31055] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1381.132802][T31055] do_sock_setsockopt+0x257/0x3e0 [ 1381.132837][T31055] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1381.132874][T31055] ? __fget_files+0x2a/0x420 [ 1381.132909][T31055] __x64_sys_setsockopt+0x18b/0x220 [ 1381.132948][T31055] do_syscall_64+0xfa/0x3b0 [ 1381.132974][T31055] ? lockdep_hardirqs_on+0x9c/0x150 [ 1381.132999][T31055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.133022][T31055] ? clear_bhb_loop+0x60/0xb0 [ 1381.133051][T31055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.133074][T31055] RIP: 0033:0x7fd2fc58e929 [ 1381.133094][T31055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1381.133115][T31055] RSP: 002b:00007fd2fa3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1381.133142][T31055] RAX: ffffffffffffffda RBX: 00007fd2fc7b5fa0 RCX: 00007fd2fc58e929 [ 1381.133160][T31055] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1381.133183][T31055] RBP: 00007fd2fc610b39 R08: 0000000000000004 R09: 0000000000000000 [ 1381.133198][T31055] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1381.133214][T31055] R13: 0000000000000000 R14: 00007fd2fc7b5fa0 R15: 00007ffcd2c6cf88 [ 1381.133250][T31055] [ 1381.438611][ C1] vkms_vblank_simulate: vblank timer overrun [ 1381.480969][T31055] Mem-Info: [ 1381.488974][T31055] active_anon:7569 inactive_anon:49 isolated_anon:0 [ 1381.488974][T31055] active_file:14344 inactive_file:14775 isolated_file:0 [ 1381.488974][T31055] unevictable:3623 dirty:40 writeback:0 [ 1381.488974][T31055] slab_reclaimable:8070 slab_unreclaimable:104963 [ 1381.488974][T31055] mapped:30013 shmem:1409 pagetables:1754 [ 1381.488974][T31055] sec_pagetables:0 bounce:0 [ 1381.488974][T31055] kernel_misc_reclaimable:0 [ 1381.488974][T31055] free:1308312 free_pcp:19997 free_cma:0 [ 1381.534490][ C1] vkms_vblank_simulate: vblank timer overrun [ 1381.546446][T31055] Node 0 active_anon:30276kB inactive_anon:196kB active_file:57376kB inactive_file:58916kB unevictable:12956kB isolated(anon):0kB isolated(file):0kB mapped:120044kB dirty:160kB writeback:0kB shmem:4100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12844kB pagetables:6964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1381.573020][T31059] overlay: Unknown parameter 'measure' [ 1381.578564][ C1] vkms_vblank_simulate: vblank timer overrun [ 1381.592437][T31055] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:184kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1381.622316][ C1] vkms_vblank_simulate: vblank timer overrun [ 1381.628682][T31055] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1381.652379][T31062] tmpfs: Unknown parameter 'gr_sardxkmit«©-Dzì˜' [ 1381.662060][T31055] lowmem_reserve[]: 0 2496 2497 2497 2497 [ 1381.671645][T31055] Node 0 DMA32 free:1343224kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30364kB inactive_anon:196kB active_file:57268kB inactive_file:58040kB unevictable:12956kB writepending:160kB present:3129332kB managed:2556324kB mlocked:11420kB bounce:0kB free_pcp:54744kB local_pcp:23060kB free_cma:0kB [ 1381.704605][ C1] vkms_vblank_simulate: vblank timer overrun [ 1381.714186][T31055] lowmem_reserve[]: 0 0 1 1 1 [ 1381.719335][T31055] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:108kB inactive_file:876kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:8kB free_cma:0kB [ 1381.748726][ C1] vkms_vblank_simulate: vblank timer overrun [ 1381.755320][T31055] lowmem_reserve[]: 0 0 0 0 0 [ 1381.760195][T31055] Node 1 Normal free:3882152kB boost:0kB min:55672kB low:69588kB high:83504kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:184kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:26976kB local_pcp:19584kB free_cma:0kB [ 1381.791457][ C1] vkms_vblank_simulate: vblank timer overrun [ 1381.800402][T31055] lowmem_reserve[]: 0 0 0 0 0 [ 1381.805541][T31055] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1381.898597][T31055] Node 0 DMA32: 2925*4kB (UME) 2796*8kB (UME) 3108*16kB (UME) 2561*32kB (UME) 1081*64kB (UME) 607*128kB (UME) 278*256kB (UME) 118*512kB (UME) 39*1024kB (UME) 14*2048kB (UME) 206*4096kB (UM) = 1356596kB [ 1381.959120][T31068] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1381.968370][T31055] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1381.986574][T31068] VFS: Can't find a romfs filesystem on dev rnullb0. [ 1381.986574][T31068] [ 1381.999903][T31055] Node 1 Normal: 260*4kB (UME) 71*8kB (UME) 52*16kB (UME) 165*32kB (UME) 50*64kB (UME) 14*128kB (UME) 5*256kB (ME) 3*512kB (ME) 2*1024kB (M) 3*2048kB (UME) 942*4096kB (M) = 3882152kB [ 1382.024801][T31055] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1382.064015][T31055] Node 0 hugepages_total=6 hugepages_free=5 hugepages_surp=4 hugepages_size=2048kB [ 1382.092555][ T982] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 1382.110575][T31055] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1382.143960][T31055] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1382.169257][T31055] 30580 total pagecache pages [ 1382.192290][T31055] 49 pages in swap cache [ 1382.196678][T31055] Free swap = 124800kB [ 1382.200918][T31055] Total swap = 124996kB [ 1382.212096][T31055] 2097051 pages RAM [ 1382.216116][T31055] 0 pages HighMem/MovableOnly [ 1382.220818][T31055] 426056 pages reserved [ 1382.225153][T31055] 0 pages cma reserved [ 1382.322553][ T982] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1382.347200][ T982] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x3 has invalid maxpacket 15051, setting to 64 [ 1382.373014][ T982] usb 6-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1382.401610][ T982] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1382.412393][T31081] ubi0: attaching mtd0 [ 1382.416881][T31081] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 1382.447646][ T982] usb 6-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 1382.476409][ T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.513588][ T982] usb 6-1: config 0 descriptor?? [ 1382.522833][T31062] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 1382.547743][T31062] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 1382.770881][T31062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.823562][T31062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.843594][T31093] netlink: 'syz.1.6321': attribute type 10 has an invalid length. [ 1382.851521][T31093] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6321'. [ 1382.898373][T31100] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.6323'. [ 1382.908440][ T982] usbhid 6-1:0.0: can't add hid device: -71 [ 1382.917091][T31099] netlink: 'syz.1.6321': attribute type 10 has an invalid length. [ 1382.922122][ T982] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1382.964575][T31099] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6321'. [ 1382.985655][ T982] usb 6-1: USB disconnect, device number 76 [ 1383.422367][ T982] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1383.602208][ T982] usb 6-1: Using ep0 maxpacket: 32 [ 1383.615585][ T982] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x3 has invalid maxpacket 8907, setting to 1024 [ 1383.629509][ T982] usb 6-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1383.673212][ T982] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1383.680044][ T982] usb 6-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 1383.700752][ T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.723965][ T982] usb 6-1: config 0 descriptor?? [ 1383.765526][ T982] hub 6-1:0.0: bad descriptor, ignoring hub [ 1383.771601][ T982] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1384.136775][ T982] hid_parser_main: 10 callbacks suppressed [ 1384.136899][ T982] plantronics 0003:047F:C055.0070: unknown main item tag 0x0 [ 1384.170812][ T982] plantronics 0003:047F:C055.0070: unknown main item tag 0x0 [ 1384.198110][ T982] plantronics 0003:047F:C055.0070: unknown main item tag 0x0 [ 1384.232019][ T982] plantronics 0003:047F:C055.0070: unknown main item tag 0x0 [ 1384.239490][ T982] plantronics 0003:047F:C055.0070: unknown main item tag 0x0 [ 1384.241145][T28455] Bluetooth: hci8: command 0x0406 tx timeout [ 1384.286573][T31133] netlink: 'syz.2.6330': attribute type 10 has an invalid length. [ 1384.329561][ T982] plantronics 0003:047F:C055.0070: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:c055] on usb-dummy_hcd.5-1/input0 [ 1384.343028][T31062] No control pipe specified [ 1384.343698][T28646] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1384.372866][T31137] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1384.444122][T31136] Mount JFS Failure: -22 [ 1384.459043][ T982] usb 6-1: USB disconnect, device number 77 [ 1384.562913][T28646] usb 2-1: Using ep0 maxpacket: 16 [ 1384.584065][T28646] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 1384.609150][T28646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.622544][ T5909] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1384.636749][T28646] usb 2-1: Product: syz [ 1384.645106][T28646] usb 2-1: Manufacturer: syz [ 1384.657788][T28646] usb 2-1: SerialNumber: syz [ 1384.671203][T28646] usb 2-1: config 0 descriptor?? [ 1384.689675][T28646] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1384.768168][T28646] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1384.823605][ T5909] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1384.836771][ T5909] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1384.856251][ T5909] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1384.869714][ T5909] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1384.903778][T31128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.921269][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.931220][T31128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.991517][T29952] udevd[29952]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1385.034339][ T5909] usbtmc 3-1:16.0: bulk endpoints not found [ 1385.110870][T31155] dvmrp0: entered allmulticast mode [ 1385.371591][T28646] usb 2-1: USB disconnect, device number 46 [ 1385.694208][T28646] usb 3-1: USB disconnect, device number 27 [ 1386.193959][T31181] NILFS (rnullb0): couldn't find nilfs on the device [ 1386.499037][T31187] netlink: 'syz.2.6338': attribute type 10 has an invalid length. [ 1386.525824][T31187] openvswitch: netlink: Flow key attr not present in new flow. [ 1386.557037][T31187] /dev/rnullb0: Can't open blockdev [ 1386.586042][T28646] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1386.746680][T31199] /dev/rnullb0: Can't open blockdev [ 1386.754692][T28646] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 1386.767732][T28646] usb 2-1: config 150 has no interface number 0 [ 1386.796539][T28646] usb 2-1: config 150 interface 204 has no altsetting 0 [ 1386.812155][T28646] usb 2-1: config 150 interface 1 has no altsetting 0 [ 1386.830245][T28646] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1386.840202][T28646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.854330][T28646] usb 2-1: Product: syz [ 1386.872125][T28646] usb 2-1: Manufacturer: syz [ 1386.876784][T28646] usb 2-1: SerialNumber: syz [ 1387.438337][T31210] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1387.490945][T31218] NILFS (rnullb0): couldn't find nilfs on the device [ 1387.529504][T28646] xr_serial 2-1:150.204: xr_serial converter detected [ 1387.549304][T28646] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1387.573548][T28646] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1387.628780][T28646] usb 2-1: USB disconnect, device number 47 [ 1387.657304][T28646] xr_serial 2-1:150.204: device disconnected [ 1387.734694][ T982] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1387.882080][ T982] usb 6-1: device descriptor read/64, error -71 [ 1388.162232][ T982] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1388.302067][ T982] usb 6-1: device descriptor read/64, error -71 [ 1388.349104][T31246] /dev/rnullb0: Can't open blockdev [ 1388.433585][ T982] usb usb6-port1: attempt power cycle [ 1388.792185][ T982] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1388.826859][ T982] usb 6-1: device descriptor read/8, error -71 [ 1389.296060][ T982] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1389.358128][ T982] usb 6-1: device descriptor read/8, error -71 [ 1389.444710][T31270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6353'. [ 1389.482312][ T982] usb usb6-port1: unable to enumerate USB device [ 1389.673677][ T982] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1389.851730][ T982] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1389.872272][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.893399][ T982] usb 3-1: config 0 descriptor?? [ 1389.909660][ T982] cp210x 3-1:0.0: cp210x converter detected [ 1390.312916][ T982] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1390.331114][ T982] cp210x 3-1:0.0: GPIO initialisation failed: -524 [ 1390.372557][ T982] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1390.536490][ T982] usb 3-1: USB disconnect, device number 28 [ 1390.563704][ T982] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1390.589899][ T982] cp210x 3-1:0.0: device disconnected [ 1390.662255][T28646] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1390.850710][T28646] usb 2-1: Using ep0 maxpacket: 32 [ 1390.858873][T28646] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1390.886539][T28646] usb 2-1: config 0 has no interface number 0 [ 1390.892995][ T10] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1390.919339][T28646] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1390.932298][T28646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.940439][T28646] usb 2-1: Product: syz [ 1390.952744][T28646] usb 2-1: Manufacturer: syz [ 1390.957411][T28646] usb 2-1: SerialNumber: syz [ 1390.975006][T28646] usb 2-1: config 0 descriptor?? [ 1390.987443][T28646] smsc95xx v2.0.0 [ 1391.062412][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1391.089776][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1391.142076][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1391.172474][ T10] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1391.181776][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.219676][ T10] usb 6-1: config 0 descriptor?? [ 1391.251553][ T10] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input110 [ 1391.398443][T28646] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1391.444604][T28646] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1391.669466][T31302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.688953][T31302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.972066][ T979] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1392.144276][ T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1392.160526][ T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1392.173714][ T979] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1392.177821][ T982] usb 6-1: USB disconnect, device number 82 [ 1392.203994][ T979] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1392.222277][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.243117][ T979] usb 3-1: config 0 descriptor?? [ 1392.661704][ T979] plantronics 0003:047F:FFFF.0071: collection stack underflow [ 1392.669339][ T979] plantronics 0003:047F:FFFF.0071: item 0 4 0 12 parsing failed [ 1392.692894][ T979] plantronics 0003:047F:FFFF.0071: parse failed [ 1392.699335][ T979] plantronics 0003:047F:FFFF.0071: probe with driver plantronics failed with error -22 [ 1392.920472][ T24] usb 3-1: USB disconnect, device number 29 [ 1393.033483][T31355] XFS (rnullb0): Invalid superblock magic number [ 1393.054616][T31362] raw_sendmsg: syz.5.6362 forgot to set AF_INET. Fix it! [ 1393.558083][T28646] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -61 [ 1393.558393][T28646] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 1393.771915][T31302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1393.773921][T31302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1393.822158][T28646] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1393.980472][T28646] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.980505][T28646] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1393.986712][T28646] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1393.986748][T28646] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1393.986772][T28646] usb 6-1: SerialNumber: syz [ 1394.242135][T31386] qnx4: no qnx4 filesystem (no root dir). [ 1394.781743][T28646] usb 6-1: 0:2 : does not exist [ 1394.856095][T28646] usb 6-1: unit 5 not found! [ 1394.880487][T28571] usb 2-1: USB disconnect, device number 48 [ 1394.928006][T31401] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1394.935619][T28646] usb 6-1: USB disconnect, device number 83 [ 1394.993406][T31401] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1395.002413][T29952] udevd[29952]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1395.421543][T31417] kernel read not supported for file /!se÷ih.’¨ÎGÚx¸uxs× öã7¸ (pid: 31417 comm: syz.5.6371) [ 1395.441473][ T30] audit: type=1800 audit(1751941415.571:347): pid=31417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6371" name=217365F769682E92A8CE1047DA78B8757873040FD70BF6E337B807 dev="mqueue" ino=142073 res=0 errno=0 [ 1395.627497][T31424] overlayfs: failed to resolve './file0': -2 [ 1395.631620][T31417] netlink: 'syz.5.6371': attribute type 2 has an invalid length. [ 1395.952833][T28646] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1395.992160][ T979] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1396.125601][T28646] usb 3-1: Using ep0 maxpacket: 8 [ 1396.132881][T28646] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1396.146344][T28646] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.155663][T31436] /dev/rnullb0: Can't open blockdev [ 1396.162566][ T979] usb 6-1: Using ep0 maxpacket: 16 [ 1396.186776][T28246] Bluetooth: hci1: Malformed LE Event: 0x1b [ 1396.193565][ T979] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1396.220386][T28646] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1396.244990][ T979] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.272252][T28646] pvrusb2: ********** [ 1396.276302][T28646] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1396.332093][ T979] usb 6-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 1396.341206][ T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.380291][T28646] pvrusb2: Important functionality might not be entirely working. [ 1396.401862][T28646] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1396.414188][ T979] usb 6-1: Product: syz [ 1396.418402][ T979] usb 6-1: Manufacturer: syz [ 1396.433946][ T979] usb 6-1: SerialNumber: syz [ 1396.439015][T28646] pvrusb2: ********** [ 1396.472036][ T2347] pvrusb2: Invalid write control endpoint [ 1396.728406][ T2347] pvrusb2: Invalid write control endpoint [ 1396.750417][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1396.776147][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1396.788175][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1396.801682][ T2347] pvrusb2: Device being rendered inoperable [ 1396.837788][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1396.859119][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1396.900544][ T2347] pvrusb2: Attached sub-driver cx25840 [ 1396.921235][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1396.945728][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1397.146758][T31470] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 1397.160239][T31470] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 1397.396649][T31479] dlm: no locking on control device [ 1397.420293][T31479] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 1397.712364][T13567] usb 2-1: new low-speed USB device number 49 using dummy_hcd [ 1397.882022][T13567] usb 2-1: Invalid ep0 maxpacket: 16 [ 1398.017464][T13567] usb 2-1: new low-speed USB device number 50 using dummy_hcd [ 1398.182167][T13567] usb 2-1: Invalid ep0 maxpacket: 16 [ 1398.188073][T13567] usb usb2-port1: attempt power cycle [ 1398.542086][T13567] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 1398.602678][T13567] usb 2-1: Invalid ep0 maxpacket: 16 [ 1398.732095][T13567] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 1398.775017][T13567] usb 2-1: Invalid ep0 maxpacket: 16 [ 1398.796887][T13567] usb usb2-port1: unable to enumerate USB device [ 1398.803273][ T979] kobil_sct 6-1:3.0: required endpoints missing [ 1398.823673][ T979] usb 6-1: USB disconnect, device number 84 [ 1398.867246][T13567] usb 3-1: USB disconnect, device number 30 [ 1399.422615][T31529] input: syz0 as /devices/virtual/input/input111 [ 1399.862115][ T30] audit: type=1326 audit(1751941419.991:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31538 comm="syz.5.6390" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5943b8e929 code=0x0 [ 1400.712662][T13567] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1400.776445][T31575] netlink: 260 bytes leftover after parsing attributes in process `syz.5.6397'. [ 1400.895635][T13567] usb 3-1: Using ep0 maxpacket: 32 [ 1400.909945][T13567] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1400.932073][T13567] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1400.938754][T13567] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1400.952842][T31570] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1400.952906][T13567] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.970216][T31582] /dev/rnullb0: Can't open blockdev [ 1400.978907][T13567] usb 3-1: config 0 descriptor?? [ 1400.988240][T31570] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1401.006793][T31570] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1401.055792][T31570] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1401.073271][T31570] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1401.091386][T31570] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1401.114303][T31570] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1401.128855][T31570] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1401.401217][T13567] corsair-cpro 0003:1B1C:0C10.0072: unknown main item tag 0x1 [ 1401.421739][T13567] corsair-cpro 0003:1B1C:0C10.0072: item fetching failed at offset 4/5 [ 1401.440283][T13567] corsair-cpro 0003:1B1C:0C10.0072: probe with driver corsair-cpro failed with error -22 [ 1401.619971][ T24] usb 3-1: USB disconnect, device number 31 [ 1402.392673][T31615] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1402.671744][ T30] audit: type=1326 audit(1751941422.801:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31625 comm="syz.4.6407" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fd238e929 code=0x0 [ 1402.952118][T28246] Bluetooth: hci1: command 0x0406 tx timeout [ 1403.003753][T31638] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6410'. [ 1403.042019][T28246] Bluetooth: hci6: command 0x0406 tx timeout [ 1403.122105][T28246] Bluetooth: hci2: command 0x0c1a tx timeout [ 1403.128301][T28246] Bluetooth: hci8: command 0x0406 tx timeout [ 1403.183519][T31638] macvlan0: entered promiscuous mode [ 1403.441446][T31647] Malformed UNC in devname [ 1403.441446][T31647] [ 1403.454567][T31647] smb3_fs_context_parse_param: 55 callbacks suppressed [ 1403.454587][T31647] CIFS: VFS: Malformed UNC in devname [ 1403.596778][T31651] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1403.673555][T31656] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6414'. [ 1403.693819][T28246] Bluetooth: hci6: unexpected event for opcode 0x0419 [ 1403.748984][T31656] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6414'. [ 1404.027843][T31665] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6416'. [ 1404.229723][T31669] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1404.382096][ T5851] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1404.440552][T31677] netlink: 124 bytes leftover after parsing attributes in process `syz.1.6418'. [ 1404.461673][T31677] /dev/rnullb0: Can't open blockdev [ 1404.484281][T31677] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6418'. [ 1404.538331][ T5851] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1404.561880][ T5851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1404.598801][ T5851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1404.627605][ T5851] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1404.661026][ T5851] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1404.683194][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.701358][ T5851] usb 6-1: config 0 descriptor?? [ 1404.919109][T31665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1404.953119][T31665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1405.003148][T31692] /dev/rnullb0: Can't open blockdev [ 1405.186204][ T5851] plantronics 0003:047F:FFFF.0073: unknown main item tag 0x0 [ 1405.194900][T28246] Bluetooth: hci8: command 0x0406 tx timeout [ 1405.195414][T28455] Bluetooth: hci2: command 0x0c1a tx timeout [ 1405.211020][ T5851] plantronics 0003:047F:FFFF.0073: unknown main item tag 0x0 [ 1405.228443][ T5851] plantronics 0003:047F:FFFF.0073: unknown main item tag 0x0 [ 1405.237861][ T5851] plantronics 0003:047F:FFFF.0073: unknown main item tag 0x0 [ 1405.249269][ T5851] plantronics 0003:047F:FFFF.0073: unknown main item tag 0x0 [ 1405.257037][ T24] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1405.270309][ T5851] plantronics 0003:047F:FFFF.0073: unknown main item tag 0x0 [ 1405.289491][ T5851] plantronics 0003:047F:FFFF.0073: unknown main item tag 0x0 [ 1405.297620][ T5851] plantronics 0003:047F:FFFF.0073: unknown main item tag 0x0 [ 1405.309706][ T5851] plantronics 0003:047F:FFFF.0073: unknown main item tag 0x0 [ 1405.412039][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1405.426431][ T24] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 1405.474913][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1405.492649][ T5851] plantronics 0003:047F:FFFF.0073: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1405.528430][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1405.548016][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.570959][ T24] usb 2-1: Product: syz [ 1405.582304][ T24] usb 2-1: Manufacturer: syz [ 1405.586957][ T24] usb 2-1: SerialNumber: syz [ 1405.593902][ T5851] usb 6-1: USB disconnect, device number 85 [ 1405.740153][T31699] fido_id[31699]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1405.858966][T31703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1405.902884][T31703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1405.952306][ T24] usb 2-1: 0:2 : does not exist [ 1405.981027][ T24] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1406.007026][ T24] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1406.155623][ T24] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1406.171321][ T24] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 1406.285479][ T24] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1406.310488][ T24] usb 2-1: USB disconnect, device number 53 [ 1406.373986][T29952] udevd[29952]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such device [ 1406.502293][T13567] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 1406.595783][T31729] /dev/rnullb0: Can't open blockdev [ 1406.642478][T13567] usb 3-1: device descriptor read/64, error -71 [ 1406.702189][ T24] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1406.869936][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1406.886461][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1406.901034][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1406.917257][T13567] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1406.925240][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1406.943584][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1406.958351][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.970981][ T24] usb 2-1: config 0 descriptor?? [ 1406.979596][T31712] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1407.062173][T13567] usb 3-1: device descriptor read/64, error -71 [ 1407.182582][T13567] usb usb3-port1: attempt power cycle [ 1407.208040][ T24] hid_parser_main: 6 callbacks suppressed [ 1407.208066][ T24] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 1407.246456][ T24] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 1407.262063][ T24] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 1407.272210][T28455] Bluetooth: hci2: command 0x0c1a tx timeout [ 1407.280910][ T24] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 1407.323770][ T24] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 1407.362726][ T24] plantronics 0003:047F:FFFF.0074: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1407.424040][ T24] usb 2-1: USB disconnect, device number 54 [ 1407.457268][T31749] /dev/rnullb0: Can't open blockdev [ 1407.516561][T31752] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1407.542073][T13567] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1407.557413][T31750] fido_id[31750]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1407.617897][T31755] /dev/rnullb0: Can't open blockdev [ 1407.619767][T13567] usb 3-1: device descriptor read/8, error -71 [ 1407.756345][T28455] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1407.765435][T28455] Bluetooth: hci6: Injecting HCI hardware error event [ 1407.772769][T28646] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1407.785131][T28455] Bluetooth: hci6: hardware error 0x00 [ 1407.872031][T13567] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 1407.923062][T13567] usb 3-1: device descriptor read/8, error -71 [ 1407.952114][T28646] usb 6-1: Using ep0 maxpacket: 8 [ 1407.959092][T28646] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1407.968035][T28646] usb 6-1: config 179 has no interface number 0 [ 1407.974712][T28646] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1408.002067][T28646] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1408.026331][T28646] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1408.047773][T28646] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1408.059421][T13567] usb usb3-port1: unable to enumerate USB device [ 1408.080808][T28646] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1408.107714][T28646] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1408.132394][T28646] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.153643][T31752] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 1408.395074][T31752] tmpfs: Bad value for 'mpol' [ 1408.564985][T31779] /dev/rnullb0: Can't open blockdev [ 1408.627997][T13567] usb 6-1: USB disconnect, device number 86 [ 1408.628027][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1408.642392][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1408.651762][ C0] ================================================================== [ 1408.659871][ C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23d/0x290 [ 1408.667703][ C0] Read of size 4 at addr ffff88806b6d105c by task syz-executor/28441 [ 1408.675804][ C0] [ 1408.678161][ C0] CPU: 0 UID: 0 PID: 28441 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 1408.678193][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1408.678209][ C0] Call Trace: [ 1408.678226][ C0] [ 1408.678236][ C0] dump_stack_lvl+0x189/0x250 [ 1408.678276][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 1408.678313][ C0] ? rcu_is_watching+0x15/0xb0 [ 1408.678343][ C0] ? __kasan_check_byte+0x12/0x40 [ 1408.678380][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1408.678412][ C0] ? rcu_is_watching+0x15/0xb0 [ 1408.678442][ C0] ? lock_release+0x4b/0x3e0 [ 1408.678471][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 1408.678504][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 1408.678537][ C0] print_report+0xd2/0x2b0 [ 1408.678561][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 1408.678595][ C0] kasan_report+0x118/0x150 [ 1408.678643][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 1408.678680][ C0] do_raw_spin_lock+0x23d/0x290 [ 1408.678731][ C0] ? __wake_up_common_lock+0x2f/0x1f0 [ 1408.678753][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1408.678793][ C0] _raw_spin_lock_irqsave+0xb3/0xf0 [ 1408.678831][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1408.678872][ C0] ? kcov_remote_stop+0x78/0x6d0 [ 1408.678897][ C0] __wake_up_common_lock+0x2f/0x1f0 [ 1408.678925][ C0] __usb_hcd_giveback_urb+0x4d7/0x690 [ 1408.678958][ C0] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 1408.678991][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 1408.679027][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 1408.679059][ C0] dummy_timer+0x862/0x4550 [ 1408.679102][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1408.679153][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1408.679185][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1408.679214][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1408.679252][ C0] __hrtimer_run_queues+0x529/0xc60 [ 1408.679293][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1408.679321][ C0] ? read_tsc+0x9/0x20 [ 1408.679343][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1408.679375][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 1408.679407][ C0] handle_softirqs+0x283/0x870 [ 1408.679435][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1408.679465][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1408.679498][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1408.679524][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1408.679555][ C0] irq_exit_rcu+0x9/0x30 [ 1408.679580][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1408.679603][ C0] [ 1408.679611][ C0] [ 1408.679620][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1408.679646][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 1408.679671][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 5b 18 49 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 1408.679691][ C0] RSP: 0018:ffffc9000b877678 EFLAGS: 00000206 [ 1408.679713][ C0] RAX: 594bda9296d3a200 RBX: 0000000000000000 RCX: 594bda9296d3a200 [ 1408.679731][ C0] RDX: 0000000000000000 RSI: ffffffff8de74275 RDI: ffffffff8c04be80 [ 1408.679747][ C0] RBP: ffffffff8172ec65 R08: 0000000000000000 R09: ffffffff8172ec65 [ 1408.679764][ C0] R10: ffffc9000b877848 R11: fffff5200170ef15 R12: 0000000000000002 [ 1408.679781][ C0] R13: ffffffff8e53bf60 R14: 0000000000000000 R15: 0000000000000246 [ 1408.679798][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1408.679829][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1408.679868][ C0] ? __unwind_start+0xf8/0x760 [ 1408.679899][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1408.679929][ C0] unwind_next_frame+0xc2/0x2390 [ 1408.679959][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1408.679990][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1408.680017][ C0] ? get_stack_info_noinstr+0x1b/0x130 [ 1408.680055][ C0] __unwind_start+0x5b9/0x760 [ 1408.680088][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1408.680123][ C0] arch_stack_walk+0xe4/0x150 [ 1408.680156][ C0] ? __unwind_start+0xf8/0x760 [ 1408.680188][ C0] stack_trace_save+0x9c/0xe0 [ 1408.680230][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1408.680269][ C0] ? __lock_acquire+0xab9/0xd20 [ 1408.680295][ C0] kasan_save_track+0x3e/0x80 [ 1408.680353][ C0] kasan_save_free_info+0x46/0x50 [ 1408.680380][ C0] __kasan_slab_free+0x62/0x70 [ 1408.680414][ C0] ? security_inode_init_security+0x35e/0x3f0 [ 1408.680452][ C0] kfree+0x18e/0x440 [ 1408.680483][ C0] ? evm_inode_init_security+0x46/0x2b0 [ 1408.680510][ C0] security_inode_init_security+0x35e/0x3f0 [ 1408.680548][ C0] ? __pfx_shmem_initxattrs+0x10/0x10 [ 1408.680575][ C0] ? __pfx_security_inode_init_security+0x10/0x10 [ 1408.680614][ C0] ? set_cached_acl+0xd2/0x180 [ 1408.680646][ C0] ? simple_acl_create+0x184/0x1b0 [ 1408.680694][ C0] shmem_mknod+0x1f6/0x3e0 [ 1408.680722][ C0] shmem_mkdir+0x33/0x70 [ 1408.680745][ C0] vfs_mkdir+0x303/0x510 [ 1408.680780][ C0] do_mkdirat+0x247/0x590 [ 1408.680813][ C0] ? __pfx_do_mkdirat+0x10/0x10 [ 1408.680848][ C0] ? getname_flags+0x1e5/0x540 [ 1408.680877][ C0] __x64_sys_mkdirat+0x87/0xa0 [ 1408.680912][ C0] do_syscall_64+0xfa/0x3b0 [ 1408.680938][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1408.680962][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.680984][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1408.681011][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.681034][ C0] RIP: 0033:0x7fd2fc58d197 [ 1408.681055][ C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1408.681076][ C0] RSP: 002b:00007ffcd2c6d308 EFLAGS: 00000202 ORIG_RAX: 0000000000000102 [ 1408.681101][ C0] RAX: ffffffffffffffda RBX: 00007ffcd2c6d360 RCX: 00007fd2fc58d197 [ 1408.681119][ C0] RDX: 00000000000001ff RSI: 00007ffcd2c6d360 RDI: 00000000ffffff9c [ 1408.681136][ C0] RBP: 00007ffcd2c6d34c R08: 0000000000000005 R09: 00007ffcd2c6d0a5 [ 1408.681153][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000007a [ 1408.681168][ C0] R13: 00000000000927c0 R14: 0000000000157e22 R15: 00007ffcd2c6d3a0 [ 1408.681193][ C0] [ 1408.681202][ C0] [ 1409.267785][ C0] Allocated by task 28646: [ 1409.272219][ C0] kasan_save_track+0x3e/0x80 [ 1409.276928][ C0] __kasan_kmalloc+0x93/0xb0 [ 1409.281531][ C0] __kmalloc_cache_noprof+0x230/0x3d0 [ 1409.286918][ C0] xpad_probe+0x428/0x1fc0 [ 1409.291348][ C0] usb_probe_interface+0x634/0xbf0 [ 1409.296470][ C0] really_probe+0x26a/0x9a0 [ 1409.300979][ C0] __driver_probe_device+0x18c/0x2f0 [ 1409.306266][ C0] driver_probe_device+0x4f/0x430 [ 1409.311293][ C0] __device_attach_driver+0x2ce/0x530 [ 1409.316675][ C0] bus_for_each_drv+0x251/0x2e0 [ 1409.321539][ C0] __device_attach+0x2b8/0x400 [ 1409.326304][ C0] bus_probe_device+0x185/0x260 [ 1409.331165][ C0] device_add+0x7b6/0xb50 [ 1409.335492][ C0] usb_set_configuration+0x1a87/0x20e0 [ 1409.340954][ C0] usb_generic_driver_probe+0x8d/0x150 [ 1409.346413][ C0] usb_probe_device+0x1c4/0x390 [ 1409.351271][ C0] really_probe+0x26a/0x9a0 [ 1409.355780][ C0] __driver_probe_device+0x18c/0x2f0 [ 1409.361068][ C0] driver_probe_device+0x4f/0x430 [ 1409.366126][ C0] __device_attach_driver+0x2ce/0x530 [ 1409.371500][ C0] bus_for_each_drv+0x251/0x2e0 [ 1409.376359][ C0] __device_attach+0x2b8/0x400 [ 1409.381146][ C0] bus_probe_device+0x185/0x260 [ 1409.386001][ C0] device_add+0x7b6/0xb50 [ 1409.390329][ C0] usb_new_device+0xa39/0x16f0 [ 1409.395114][ C0] hub_event+0x2941/0x4a00 [ 1409.399532][ C0] process_scheduled_works+0xae1/0x17b0 [ 1409.405081][ C0] worker_thread+0x8a0/0xda0 [ 1409.409682][ C0] kthread+0x70e/0x8a0 [ 1409.413759][ C0] ret_from_fork+0x3fc/0x770 [ 1409.418359][ C0] ret_from_fork_asm+0x1a/0x30 [ 1409.423136][ C0] [ 1409.425460][ C0] Freed by task 13567: [ 1409.429524][ C0] kasan_save_track+0x3e/0x80 [ 1409.434210][ C0] kasan_save_free_info+0x46/0x50 [ 1409.439241][ C0] __kasan_slab_free+0x62/0x70 [ 1409.444015][ C0] kfree+0x18e/0x440 [ 1409.447915][ C0] xpad_disconnect+0x350/0x480 [ 1409.452679][ C0] usb_unbind_interface+0x26b/0x910 [ 1409.457881][ C0] device_release_driver_internal+0x4d6/0x7c0 [ 1409.463948][ C0] bus_remove_device+0x34d/0x410 [ 1409.468897][ C0] device_del+0x511/0x8e0 [ 1409.473228][ C0] usb_disable_device+0x3e9/0x8a0 [ 1409.478255][ C0] usb_disconnect+0x330/0x950 [ 1409.482940][ C0] hub_event+0x1cdb/0x4a00 [ 1409.487442][ C0] process_scheduled_works+0xae1/0x17b0 [ 1409.492991][ C0] worker_thread+0x8a0/0xda0 [ 1409.497593][ C0] kthread+0x70e/0x8a0 [ 1409.501674][ C0] ret_from_fork+0x3fc/0x770 [ 1409.506270][ C0] ret_from_fork_asm+0x1a/0x30 [ 1409.511038][ C0] [ 1409.513364][ C0] The buggy address belongs to the object at ffff88806b6d1000 [ 1409.513364][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 1409.527421][ C0] The buggy address is located 92 bytes inside of [ 1409.527421][ C0] freed 1024-byte region [ffff88806b6d1000, ffff88806b6d1400) [ 1409.541221][ C0] [ 1409.543547][ C0] The buggy address belongs to the physical page: [ 1409.549965][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6b6d0 [ 1409.558726][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1409.567230][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1409.574783][ C0] page_type: f5(slab) [ 1409.578770][ C0] raw: 00fff00000000040 ffff88801a841dc0 dead000000000100 dead000000000122 [ 1409.587365][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1409.595953][ C0] head: 00fff00000000040 ffff88801a841dc0 dead000000000100 dead000000000122 [ 1409.604626][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1409.613306][ C0] head: 00fff00000000003 ffffea0001adb401 00000000ffffffff 00000000ffffffff [ 1409.621987][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1409.630653][ C0] page dumped because: kasan: bad access detected [ 1409.637075][ C0] page_owner tracks the page as allocated [ 1409.642796][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 15427, tgid 15427 (kworker/u8:5), ts 605102283046, free_ts 603269093043 [ 1409.662426][ C0] post_alloc_hook+0x240/0x2a0 [ 1409.667211][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 1409.672764][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 1409.678590][ C0] alloc_pages_mpol+0x232/0x4a0 [ 1409.683453][ C0] allocate_slab+0x8a/0x370 [ 1409.687964][ C0] ___slab_alloc+0xbeb/0x1410 [ 1409.692656][ C0] __kmalloc_noprof+0x305/0x4f0 [ 1409.697519][ C0] ieee802_11_parse_elems_full+0x152/0x2b20 [ 1409.703417][ C0] ieee80211_inform_bss+0x10c/0x10a0 [ 1409.708713][ C0] cfg80211_inform_single_bss_data+0xd05/0x1ac0 [ 1409.714969][ C0] cfg80211_inform_bss_data+0x1fb/0x3b20 [ 1409.720612][ C0] cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 1409.726688][ C0] ieee80211_bss_info_update+0x746/0x9e0 [ 1409.732334][ C0] ieee80211_ibss_rx_queued_mgmt+0xa36/0x2ae0 [ 1409.738411][ C0] ieee80211_iface_work+0x806/0xfe0 [ 1409.743608][ C0] cfg80211_wiphy_work+0x2df/0x460 [ 1409.748722][ C0] page last free pid 5514 tgid 5514 stack trace: [ 1409.755045][ C0] __free_frozen_pages+0xb80/0xd80 [ 1409.760162][ C0] __slab_free+0x303/0x3c0 [ 1409.764598][ C0] qlist_free_all+0x97/0x140 [ 1409.769225][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1409.774713][ C0] __kasan_slab_alloc+0x22/0x80 [ 1409.779592][ C0] __kmalloc_node_track_caller_noprof+0x216/0x4e0 [ 1409.786035][ C0] kmalloc_reserve+0x136/0x290 [ 1409.790822][ C0] __alloc_skb+0x142/0x2d0 [ 1409.795253][ C0] alloc_skb_with_frags+0xca/0x890 [ 1409.800383][ C0] sock_alloc_send_pskb+0x857/0x990 [ 1409.805593][ C0] unix_dgram_sendmsg+0x4f6/0x1870 [ 1409.810712][ C0] __sock_sendmsg+0x219/0x270 [ 1409.815391][ C0] sock_write_iter+0x258/0x330 [ 1409.820169][ C0] do_iter_readv_writev+0x56b/0x7f0 [ 1409.825375][ C0] vfs_writev+0x31a/0x960 [ 1409.829710][ C0] do_writev+0x14d/0x2d0 [ 1409.833962][ C0] [ 1409.836288][ C0] Memory state around the buggy address: [ 1409.841919][ C0] ffff88806b6d0f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1409.849991][ C0] ffff88806b6d0f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1409.858064][ C0] >ffff88806b6d1000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1409.866130][ C0] ^ [ 1409.873065][ C0] ffff88806b6d1080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1409.881128][ C0] ffff88806b6d1100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1409.889194][ C0] ================================================================== [ 1409.897278][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1409.904476][ C0] CPU: 0 UID: 0 PID: 28441 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 1409.916199][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1409.926261][ C0] Call Trace: [ 1409.929548][ C0] [ 1409.932396][ C0] dump_stack_lvl+0x99/0x250 [ 1409.937001][ C0] ? __asan_memcpy+0x40/0x70 [ 1409.941600][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1409.946811][ C0] ? __pfx__printk+0x10/0x10 [ 1409.951424][ C0] panic+0x2db/0x790 [ 1409.955418][ C0] ? __pfx_panic+0x10/0x10 [ 1409.959846][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1409.965759][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1409.972087][ C0] ? print_memory_metadata+0x314/0x400 [ 1409.977568][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 1409.982608][ C0] check_panic_on_warn+0x89/0xb0 [ 1409.987553][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 1409.992591][ C0] end_report+0x78/0x160 [ 1409.996866][ C0] kasan_report+0x129/0x150 [ 1410.001384][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 1410.006426][ C0] do_raw_spin_lock+0x23d/0x290 [ 1410.011295][ C0] ? __wake_up_common_lock+0x2f/0x1f0 [ 1410.016673][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1410.022086][ C0] _raw_spin_lock_irqsave+0xb3/0xf0 [ 1410.027309][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1410.033237][ C0] ? kcov_remote_stop+0x78/0x6d0 [ 1410.038186][ C0] __wake_up_common_lock+0x2f/0x1f0 [ 1410.043392][ C0] __usb_hcd_giveback_urb+0x4d7/0x690 [ 1410.048779][ C0] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 1410.054616][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 1410.060522][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 1410.065907][ C0] dummy_timer+0x862/0x4550 [ 1410.070430][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1410.075828][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1410.080784][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1410.085733][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1410.090678][ C0] __hrtimer_run_queues+0x529/0xc60 [ 1410.095895][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1410.101621][ C0] ? read_tsc+0x9/0x20 [ 1410.105695][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1410.111517][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 1410.116642][ C0] handle_softirqs+0x283/0x870 [ 1410.121417][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1410.126195][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1410.131497][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1410.136102][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1410.141316][ C0] irq_exit_rcu+0x9/0x30 [ 1410.145574][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1410.151214][ C0] [ 1410.154151][ C0] [ 1410.157088][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1410.163082][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 1410.168376][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 5b 18 49 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 1410.187986][ C0] RSP: 0018:ffffc9000b877678 EFLAGS: 00000206 [ 1410.194087][ C0] RAX: 594bda9296d3a200 RBX: 0000000000000000 RCX: 594bda9296d3a200 [ 1410.202066][ C0] RDX: 0000000000000000 RSI: ffffffff8de74275 RDI: ffffffff8c04be80 [ 1410.210046][ C0] RBP: ffffffff8172ec65 R08: 0000000000000000 R09: ffffffff8172ec65 [ 1410.218022][ C0] R10: ffffc9000b877848 R11: fffff5200170ef15 R12: 0000000000000002 [ 1410.226000][ C0] R13: ffffffff8e53bf60 R14: 0000000000000000 R15: 0000000000000246 [ 1410.233984][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1410.239114][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1410.244258][ C0] ? __unwind_start+0xf8/0x760 [ 1410.249035][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1410.254155][ C0] unwind_next_frame+0xc2/0x2390 [ 1410.259109][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1410.264240][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1410.269449][ C0] ? get_stack_info_noinstr+0x1b/0x130 [ 1410.274933][ C0] __unwind_start+0x5b9/0x760 [ 1410.279638][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1410.285823][ C0] arch_stack_walk+0xe4/0x150 [ 1410.290531][ C0] ? __unwind_start+0xf8/0x760 [ 1410.295316][ C0] stack_trace_save+0x9c/0xe0 [ 1410.300015][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1410.305408][ C0] ? __lock_acquire+0xab9/0xd20 [ 1410.310270][ C0] kasan_save_track+0x3e/0x80 [ 1410.314985][ C0] kasan_save_free_info+0x46/0x50 [ 1410.320016][ C0] __kasan_slab_free+0x62/0x70 [ 1410.324796][ C0] ? security_inode_init_security+0x35e/0x3f0 [ 1410.330877][ C0] kfree+0x18e/0x440 [ 1410.334785][ C0] ? evm_inode_init_security+0x46/0x2b0 [ 1410.340340][ C0] security_inode_init_security+0x35e/0x3f0 [ 1410.346249][ C0] ? __pfx_shmem_initxattrs+0x10/0x10 [ 1410.351631][ C0] ? __pfx_security_inode_init_security+0x10/0x10 [ 1410.358058][ C0] ? set_cached_acl+0xd2/0x180 [ 1410.362836][ C0] ? simple_acl_create+0x184/0x1b0 [ 1410.367961][ C0] shmem_mknod+0x1f6/0x3e0 [ 1410.372388][ C0] shmem_mkdir+0x33/0x70 [ 1410.376638][ C0] vfs_mkdir+0x303/0x510 [ 1410.380916][ C0] do_mkdirat+0x247/0x590 [ 1410.385261][ C0] ? __pfx_do_mkdirat+0x10/0x10 [ 1410.390132][ C0] ? getname_flags+0x1e5/0x540 [ 1410.394910][ C0] __x64_sys_mkdirat+0x87/0xa0 [ 1410.399693][ C0] do_syscall_64+0xfa/0x3b0 [ 1410.404211][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1410.409432][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.415505][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1410.420194][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.426098][ C0] RIP: 0033:0x7fd2fc58d197 [ 1410.430520][ C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1410.450134][ C0] RSP: 002b:00007ffcd2c6d308 EFLAGS: 00000202 ORIG_RAX: 0000000000000102 [ 1410.458558][ C0] RAX: ffffffffffffffda RBX: 00007ffcd2c6d360 RCX: 00007fd2fc58d197 [ 1410.466539][ C0] RDX: 00000000000001ff RSI: 00007ffcd2c6d360 RDI: 00000000ffffff9c [ 1410.474516][ C0] RBP: 00007ffcd2c6d34c R08: 0000000000000005 R09: 00007ffcd2c6d0a5 [ 1410.482493][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000007a [ 1410.490468][ C0] R13: 00000000000927c0 R14: 0000000000157e22 R15: 00007ffcd2c6d3a0 [ 1410.498456][ C0] [ 1410.501820][ C0] Kernel Offset: disabled [ 1410.506164][ C0] Rebooting in 86400 seconds..